last executing test programs:

1m29.457628598s ago: executing program 1 (id=111):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6)
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0x7fff}}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000010c0)='~[\x1d\xe81\xc7 /)\x1d\x00\x9f\xf7\xc5\\R\xe6\x05/n\x1c\xf3B\x83\xf8p\xaa\xa9\x11P\xb1\xf9\xd4I\xc0\xf0\x15\xb0\xe7', 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r5)
sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x20, r6, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9163, 0x29}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0)
write$FUSE_INIT(r5, 0x0, 0x0)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000005}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x24}}, 0x40)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xcc, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/83, 0x53, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x100, 0x1}, @fd}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/229, 0xe5, 0x1, 0x2d}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/79, 0x4f, 0x2, 0x2a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r1}, @dead_binder_done], 0x0, 0x0, 0x0})
r7 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000002580)={0x200, 0x8, 0x10000, 0x0, 0xa, "e2cb542463de2f1c04b4505da3296845fe1369", 0x8001, 0xfffffffa})

1m29.457403898s ago: executing program 1 (id=112):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
read(r3, &(0x7f0000000200)=""/253, 0xfd)
bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f00004d2000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1m29.316672751s ago: executing program 1 (id=113):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0xfff7) (async)
inotify_init1(0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x4, 0x5, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) (async)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async)
sendfile(r1, r1, 0x0, 0x7ffff000)

1m29.307889451s ago: executing program 1 (id=114):
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r0, 0x8ee42000)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000080)={0x23, [0x0, 0x0, 0x0]})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
accept4$unix(r5, 0x0, 0x0, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x100)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
r11 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700005100a1ade011e276070f491217000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075e384cc5848ea"], 0x68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
sendmmsg$unix(r2, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000001c0)="7271419285ccf51ae5bc5263fe6cc8e066a938ec4c589102b66bddda2a61837a0aafae929317e94e3b12f4a565f9bb2c415744853d0fe1af0b07449624733b8c1cb9933f3214873d40c683c89f99cb10404b19a7a4c65669e1eba6333bedabfbe578864b04c109579490814d2f4a64c28b41ea8361a29cf2f7fc93b93e7aae14aed543922d8789c93198bcca852b46fc0707a4ff356088414b592f314267bd67adf1e4f21e7933081650e074b05b7de3b20524e8b22a1227149a388383f0", 0xbe}, {&(0x7f0000000280)="761df289f4b3d5e922c627aa56c2e8f263f27656807face2e43c00517fa6566feafa513ca784afbc8aaa09707649287352a60723b8b0ed1af2683d9a6eacc97de51a0ed5f348e4141872ddc746ffd93032522894ff54dd6f79b5d9f915941ccb2830f23fca2d11d0963a979d40aa010e7fe1aa1309d7867e181b179fc073af096da9eff277ac936984322337fe0fad6b7a9fe4c4730c61f797e05c0b2653fe452de47203f78c38886c7fc2814539c7ca13ab8017d76b3eafb693da419ac7c4d9db6e4db11d31fe01cad61f7950264418550c8a8895667e5a098863716d0e8d065e108b61e7915ccf277d262c331723b08411efd61dbd5107", 0xf8}, {&(0x7f0000000380)="e54a1541fd305cf85c8e620cec6d3e95fe0b5d5c97af80b1d95aeeb1abb817e7b2ce343afa33605ec45b7d2f8aed2887f5818d1e8575ede6a9556b6a4c174dacbb61af886675fbf7d8faa1afe74bf70d2b9dc8aa0bac542f53c505dc6e7c0493a6875c6edfdc3ac42a693fcc308e1a24fe9adbd7192a3246ea9b7ef2dbecd75c10935ee1f0bfd28cbb34478e9624b666cde0516e98f70c0a04a564c707c1c92ae9fdbc811fad", 0xa6}, {&(0x7f0000000440)="b98df21e4afbdec9d407b9a77e1931cb95fa43a46546aa2305c0437679a53e970025a651a35bf9d3fdc6091b1e61ac5d93cd3c064661fa92b5dd42feab943e9e10d2a644ded228fd3d7e4ed82006b452b8517348755ab813d82efc9b37d016b0df7551e2895907f14a0ca183e7b4be9af9815a097f267c0fac1f0c32db42ae386323204967829c12f8cb3b429e3396be4d9cc989ba1e6aefb3e83a0f6a680b5fdc5e82bb2d8cfe073844628d8a5dad21", 0xb0}, {&(0x7f0000001180)="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", 0x1000}], 0x5, &(0x7f00000006c0)=[@rights={{0x28, 0x1, 0x1, [r4, r3, r1, r5, r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r6, r2, r1, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r10, r2]}}, @rights={{0x24, 0x1, 0x1, [r11, r1, r12, r2, 0xffffffffffffffff]}}], 0xe8, 0x805}}], 0x1, 0x0)

1m29.254107062s ago: executing program 1 (id=115):
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f)

1m29.236591462s ago: executing program 1 (id=116):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
setpriority(0x1, 0x0, 0xb0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x2}], 0x50, 0x0, &(0x7f0000000040)="bc5e32fcd59b15b02cac2b8f1b02ff7cf494acd2c945f0a3021c8a83b4caae701b8ad0cef05b224cce2602c4976e855dc8b4e7b7652e4507ee331027fb54d8740129462474fcefdc6142431ea73cd6a1"})

1m29.195924173s ago: executing program 32 (id=116):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
setpriority(0x1, 0x0, 0xb0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502) (async)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x2}], 0x50, 0x0, &(0x7f0000000040)="bc5e32fcd59b15b02cac2b8f1b02ff7cf494acd2c945f0a3021c8a83b4caae701b8ad0cef05b224cce2602c4976e855dc8b4e7b7652e4507ee331027fb54d8740129462474fcefdc6142431ea73cd6a1"})

1m21.075666901s ago: executing program 2 (id=194):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000006c0)=0x7)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x3)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x4, 0x0, &(0x7f0000000380)="de547e22"})
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x48, 0x0, &(0x7f0000000780)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1m21.041182162s ago: executing program 2 (id=195):
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
gettid()
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080)) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) (async)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251beb"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

1m20.990133623s ago: executing program 2 (id=196):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x149000, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0)
ioctl$TCXONC(r1, 0x40045436, 0x2)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)

1m20.988201763s ago: executing program 2 (id=197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) (async)
r0 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, r4, 0x0) (async)
setresuid(r4, r4, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180), 0x44000, &(0x7f0000000340)={[{@inode64}, {@noswap}, {@huge_never}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_lt={'uid<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@flag='nomand'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, r4}}]})

1m20.986810763s ago: executing program 2 (id=198):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5)
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000003400"], 0x18}}], 0x1, 0x4c0c0)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000)

1m20.946361253s ago: executing program 2 (id=199):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
unshare(0x62040200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4e61c45e24049acf, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4e61c45e24049acf, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000040))
unshare(0x0) (async)
unshare(0x0)
unshare(0x28020200) (async)
unshare(0x28020200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
chdir(&(0x7f0000000000)='./file0\x00')
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
listen(r3, 0x1)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x5, &(0x7f0000000200)=[{0x0, 0x3, 0x9, 0x8001}, {0x8000, 0x9, 0x5, 0x6}, {0x0, 0x5, 0x4, 0x10}, {0x4, 0xd8, 0x8, 0x3}, {0xfff, 0x6, 0x6, 0xda}]}) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x5, &(0x7f0000000200)=[{0x0, 0x3, 0x9, 0x8001}, {0x8000, 0x9, 0x5, 0x6}, {0x0, 0x5, 0x4, 0x10}, {0x4, 0xd8, 0x8, 0x3}, {0xfff, 0x6, 0x6, 0xda}]})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:vhost_device_t:s0\x00', 0x24, 0x1)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x4, 0x0, 0x0, 0x0, 0x4}, {0x4}, {}, 0x0, 0x0, 0x2}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x40011}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000000000000, 0x0, 0x0, 0x6}, {}, 0x0, 0xffffffff, 0x2, 0x0, 0xfd}, 0x5, 0x5}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400}]}, 0x100}}, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
sendto$inet(r6, 0x0, 0x0, 0x8800, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0) (async)
recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)
getsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, &(0x7f00000000c0))
ioctl$TUNSETLINK(r1, 0x400454cc, 0x31b)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m20.906408074s ago: executing program 33 (id=199):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
unshare(0x62040200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4e61c45e24049acf, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4e61c45e24049acf, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000040))
unshare(0x0) (async)
unshare(0x0)
unshare(0x28020200) (async)
unshare(0x28020200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
chdir(&(0x7f0000000000)='./file0\x00')
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
listen(r3, 0x1)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x5, &(0x7f0000000200)=[{0x0, 0x3, 0x9, 0x8001}, {0x8000, 0x9, 0x5, 0x6}, {0x0, 0x5, 0x4, 0x10}, {0x4, 0xd8, 0x8, 0x3}, {0xfff, 0x6, 0x6, 0xda}]}) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x5, &(0x7f0000000200)=[{0x0, 0x3, 0x9, 0x8001}, {0x8000, 0x9, 0x5, 0x6}, {0x0, 0x5, 0x4, 0x10}, {0x4, 0xd8, 0x8, 0x3}, {0xfff, 0x6, 0x6, 0xda}]})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:vhost_device_t:s0\x00', 0x24, 0x1)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x4, 0x0, 0x0, 0x0, 0x4}, {0x4}, {}, 0x0, 0x0, 0x2}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x40011}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000000000000, 0x0, 0x0, 0x6}, {}, 0x0, 0xffffffff, 0x2, 0x0, 0xfd}, 0x5, 0x5}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400}]}, 0x100}}, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
sendto$inet(r6, 0x0, 0x0, 0x8800, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0) (async)
recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)
getsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, &(0x7f00000000c0))
ioctl$TUNSETLINK(r1, 0x400454cc, 0x31b)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m18.310189935s ago: executing program 4 (id=227):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002c00)={'ip6gre0\x00', &(0x7f0000002b80)={'syztnl2\x00', <r1=>0x0, 0x29, 0xa6, 0x6, 0x0, 0xc, @local, @loopback, 0x8, 0x40, 0x81, 0x3}}) (rerun: 64)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000000c0)="daa9109985dcad39553c78beb6893541a478e20ef7afbde18217972ca98810939f09448b455fed131cf5b2c888684435d140e9fe0a1eb4d644197a6b80fc3a980572ccd2b2a72f0a0ff7d3d1ada57312b73814ce", 0x54}, {&(0x7f0000000140)="86fbfb496a0f0cd251ae7a267d8cb7e3608d1447feb87c08b9ff875b2e494950e44732f28bbfa55d6dba91459f3127abd5157761edad2578075160a73f55edde2ef0c0f2d3f61f46458d6b05bcb7cd32c2b814b35a2183ad4936490c9452032ab5d83c864d", 0x65}, {&(0x7f00000006c0)="c3d620828e9915c7a26376409ceedf2d4d09dd6f9d62913bd10f4bcc2eb00ffb2c07a869f2a2d3621fbe57d2c7bf79ae7ad452778bcac55931f882273454013dd8d7bd51d252b5e3b2ea19ed435c04bf1004dcf4f525e779df8e55442230a691", 0x60}, {&(0x7f0000000740)="725ea3adcd020830c3fa3fa618f255d8b9b012d36255261bbd93b2ff09ee32ac34763cb5a298bdfcf130609e1933f2fef7c45628dcc659a3341d51a000ccedd3b4fd020ed165a243090bed6870bf5b5b978519c57d2fdac7797a24e6ebf77acc0821b2a0d7667244ec02a8c92b782a029c5eef6d261910f611cdbcf14d93b3cd6cf13b7527a118bf4441764db4c9b89f16", 0x91}, {&(0x7f0000000800)="6a4d2a7304d006c0de56ae9ee800b3042a737a53cf3610a2293ecd1ef8f5603f14a472eb9548997ef83f43ac78981a0371a95b42c233cefd1606385e544b92e3ad7962867553e62cbe010d8020f8f93e8ec08c4142cb57259f711eda261d5f0b8f9ed17edf4016535c383de5c8f40c515555e2f676e72f5ace3d2d296b2c58dfeff6b55f14902eccfe088b783d7dd622a19f614e858479593a35650563dc475dfd5ec852b9a85cd7f2f4dd02987da003623102d162eba786e1a545cfe1abadbfef537d3970b394fdfb0fc9a0e7dce506d899258d", 0xd4}, {&(0x7f0000000900)="681bbc3763cb134066771b7fecb06cfee26230eaf6d44f051f773610e4c8be722f0304cbc79cf2f4a1fb239c6129534d499e6343de1ca215b634f7617271bd4d0f7adddd0acd324a03e872a56cde8fdb6d0fe3d013be2a1d0c15291bd4d8436e12864aa0eaecce86f932626a4d15b8521543a3713d1a0c18c4a6668d15e197d79376f44b191472fc23f366fc128f7096b8e97592a069bf3327adf314111acd1f44a16616ac822b85472264a0af2526f62a87d5e6971b0effbaffad4d8726d409dc47d35a020407422f5399218883da85b63211f3b6d7b5922b10e878b59615ac1ce8", 0xe2}], 0x6, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="9036b82d84587bc1f8844133af59acf051e78250f9b0485bffb5e2204200ec564e686cda07c9e2ff3417711d100b1715552fe2bb2a78e1e5d1d94501195f73fcf0d87fc59e00c5069d66a66d17bbbd08fabfda64366892e60fbfdaec95a33807f4", 0x61}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)="71ae97432525202ca19534bba539170ddc2743ae9a4a22ae8f8c0507dffb42889beee08211d1d992e6e857b5ea2492341ac77627966eb9cc489f12bff7b7948a96caff47cb20dfa95ab44c1784e5138e449d2ef7f07da762e2f4240d31bf333be2adf2ad346134c3db0d00c7de", 0x6d}, {&(0x7f0000000c00)="fbfd46d0efe0db6354dbff252850ec19d436c121c9e26658f5ad69095525dc9ac6040fba6fc6e7fe2d23ed5f768eb9a1e486644871775898d1617c58b47bca2400271c51e7bd4e3a669a9b3a22bb53cc482265c641c787d1197ae8fd0cf357c7605c2dda13e8a23c30a9a0401841c0b92a725df01984d7d7590114", 0x7b}], 0x2, &(0x7f0000003140)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x89, 0xf, "5875f96ce5493de94767fe6d68"}, @lsrr={0x83, 0x7, 0x84, [@remote]}, @rr={0x7, 0x7, 0x22, [@rand_addr=0x64010102]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xbf, 0x3, 0x7, [{@loopback, 0x6}, {@broadcast, 0x3}, {@remote, 0xf1ad}, {@multicast2, 0x4}, {@multicast2, 0x5}]}, @noop]}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@noop, @generic={0x86, 0xa, "c45109a0ea5f8286"}, @lsrr={0x83, 0x1f, 0xa9, [@loopback, @rand_addr=0x64010101, @empty, @remote, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102]}, @lsrr={0x83, 0x3, 0x4}, @cipso={0x86, 0x55, 0x2, [{0x7, 0x11, "93e99bbbf156d9075e6e15ddf38126"}, {0x1, 0x5, "c54c4c"}, {0x5, 0xd, "4e74345c25d4b0e44063f6"}, {0x6, 0xe, "2c0f7dce2c425670eb0846d1"}, {0x2, 0x5, "2b82da"}, {0x6, 0x10, "c57711ca9b2f96cfc1e201d04efa"}, {0x7, 0x3, "c5"}, {0x0, 0x6, "54eba067"}]}, @ssrr={0x89, 0x1b, 0xba, [@multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x6a, [@local]}, @lsrr={0x83, 0xb, 0x6e, [@local, @private=0xa010101]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb9, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2]}, @rr={0x7, 0x3, 0xeb}, @generic={0x82, 0x5, 'ZI!'}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @rr={0x7, 0x3, 0x50}, @noop, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@cipso={0x86, 0x5f, 0x3, [{0x1, 0xb, "4d35732c76f082f916"}, {0x1, 0x3, 'W'}, {0x1, 0x9, "0881a39174c52b"}, {0x8, 0x10, "fc1758151271ca50cfebf6d1778b"}, {0x2, 0x11, "5cbabc2159908af0de73a3cc5e9740"}, {0x2, 0xd, "d3da5412bcb878568e1b53"}, {0x1, 0x11, "f455e28991ac062673df6107917168"}, {0x2, 0x3, "83"}]}, @ssrr={0x89, 0x17, 0x84, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100, @empty]}, @timestamp_prespec={0x44, 0x2c, 0x7f, 0x3, 0x9, [{@rand_addr=0x64010101, 0x7fffffff}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x26}}, {@multicast1, 0x9}]}]}}}], 0x250}}, {{&(0x7f0000000f40)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000f80)="8389146016084d536b83fb3bf7eec00f82ad7316fc468e9ac08256e294559e987b828e8b0ab2e22232b6df02f33da5363b41dd8e2de35e4687e87871ebac4a324331408640fdad341090084ec0b112f44c963986bc5c3f57c8303dd8a1c69ef64cbdbe81093156b6b65ea1c3b407c21e96c0a272abc63872fea10697682ca4819d5f2f3fa8fb64f2838daccfa359374b29240d397532fc6f37b9b4d9bf24da08cb1a5f6e97a45beffdd6909f26cfd94c1abf95eaca7d7e1d0524701c196b144f847f1b07ba34c1c0ea52306b17aa0119786731d73c0680c9787828280d833dc4af4f7b4831d580dccdd5803212c0bb8347712cc9", 0xf4}, {&(0x7f0000001080)="d1097de9e98c6e623144de1897fdf64a3a02268dfc76307e0ac3cda8c88b0a64d688a7854832f428512218fb949a685308cc6ca9f65bc6001ba2d6ccafc8f316d54ecbf3068076a8918a993f8ff7b87faca31019dd90a3553bea7f3b2730cc9ddd7a97b1", 0x64}, {&(0x7f0000001100)="40077b9accacb2324cc151df2d311bde766469a3be08b28966be4ebee0455429cceda0724c1014c8deb8fc776c79aaaf7d6aee380c4451221a9d22caeff0ccbab14d5e9bee5e096129cee7c30e4959a6fb8ba128d41c90f034e6e0dc4a346b85671a82b12c98f62dfd51f75a372cd491c2a36bd8d6481e974622ebdfa813f4a857073fec4692dfcd78e9f78cc13a387a20c1545c041dd3d2d8692ee90e3023c1156f937e8da53f39af9da1be05bcbdfb0524ba6fddf74b5f356aedaaee527f3b4e80c391843038eecef01a7b5b55a5a3286ccb20c10fecde466236fee89ad5a72f58e4ad0deb746f0055", 0xea}, {&(0x7f0000001200)="d544776c57c92e2a3613f40c4a5a67ff15a14997", 0x14}, {&(0x7f0000001240)="e0522f7e1f096076d3a8cf5ef9c2b5efb0c8f340cd0c44a7c1c186ba76f1e7f72fc8bb95ac98742dc1d382f95f082e7e007af4720e65a175e85826f5e1c09c2fbe4d41fe562a2d2a18b0a2deaefde39821abba48b8f2fe249baf0ff79d484960a9de4de6a7eb44829ffe3b2ea3fddb2523d85e2ea0fbf2fef1a05979135f039b187f44828acab098ae4b6c2cf3802b4c25bbc5dc3db0a2ab66805e1282ebdbb3ca9cc12ec2d63fbf883500fd0d2f2f29695822bd56b4c212da1e28d24b8aa3d576972b0c1f20bc1e1505fc8054c7e7f468c037b8b7476942a468d9e367d7bc4668f3e46dba1338b630fb5a902a77ca1177dfe9d94109d2128da143a6a9b1", 0xfe}, {&(0x7f0000001340)="272c5e2e0e70e76475461f545aa56dc76c5c9455a8b0e5bf059df8b01cdbb1834a3147499a78ed9e1d8887d518c8b3a6f8bcd16bfa636734414a2b8beaa16e0df832731eb276ba5278fb7b30cc40d756ef1adfdbd1c2de0cb69ae2e62a97b044d4dd060a09d12c56b78d865c07eb07695c67b4a4f5aa25c7f428071c4470273538a03de69c735f779c4fd6e301970fdf6aa15e20ac94a0887a051e79521c1aaa2e1defaa2573b0f4bf275a9e2414b0cf5a8df615a3b289f3f4bb67188fe05cc16085200f4d0f", 0xc6}, {&(0x7f0000001440)="afea75b6627a1e942e712e0aff64310aad548894b32d87488db0a2aed42a7cdce2f9a4bb33c1643cc6bdd6e9fd46e754bc7000bef658b6b7189877e2c7d7cf4b9c48ca632013d8118661c81cb85f3ae3b1959f18eb299eff5a2b846f240b3b65a8c5657b3c9dc1702877a97f98618873c4b7e0bac6d59f1b67bc27949e783c78b9b7825419cba421ec3fbd791a75d0f3c29354f5cb2029866d39e83c479587dc1494a59c1948793814ab124eb193ee", 0xaf}, {&(0x7f0000001500)="7843fe1b", 0x4}, {&(0x7f0000001540)="134c18226bf94aed88104bc270a129aaafa288125bb89e9130977f30565d2169f8894ed7ad502a59b31b5dea3ec56477d5e1a9490f5f04b7c4a2e884bd8e1d4034e2592552882f235f65f3b50434208f251c024b00999828c34978527bfa6317b93cdfa2aeaf9d37a1d5b4e0d9e94c25cb60445a3aabdbef65e5806efe5e256b899315a9867ce752ca9f2fe75fb0d8746e4d39f5a2f5f71ee7d26e3996ab041ea682853ace643664055c860c54ead5b81172eeb1c87414490f9c22c2a590a5dde38be236c95ce303ef2fabcb3eb589f5a9c5f9a72c19801f6268b936e0f3d07f1b4d2e617eeb161317edfa63928c851ac2e29922079b24d5c5b0804e9d92aa7f5d468b3b4fb07664471c40f7a5138cf65c0db07f56ad43757972b1b9d068d49cc961184264d4b31ac2fcd7578745770044c94b2de364eb0c40deb30d2e12a36b81dfb3d5a0c6ed8a13cb8ef0ed1af6d1e4298c7fec46b0373fa4d51bea3cd55d76c28f61c39de86e0cc4e18831e59bc23865d07f2b29b4bbb0f3f1ce8b08063ccff0d4f54efad2358e89f9303d59eb1c802c469f9d7a384e6a5a808ba9c036f984bc5c333351a5e1939e35e9582bda764db082e96bd9128aed9a0fb3949c77855ac047192ea5570eeecad0e426e15763b3cd89291d1e195304ad250381f5cd226c8b8dd17677b6c9eac589cc0ff27a324737068e9b629cabb22fd8230191e6b19f3106a55d6c43ea3a40ed1d0f0dbb2229dddfedc3c2752d4401e31697c17b481df1ac29bccf66faf8ce8c7d5ef155135a427b8e125897466eb7c7f7800db2b1e98111e1b4c07880b2dcf7fb8667264f7dcf9147c37d38f10357caa9c0120c091efd4cf879373438478a6745bc13e78400fed4ea19612e19058bf537e6524e934b863c7ecf558368d70edd2f94f07fdc1d783ae35553b296d8760db7bf5b9a20feda519927cc9e97b35e0f84c0c94f5b1586075dcccc7a682b0cf0b0e3bb4393b22c5330990910b360a17be99de1c143e59f1a82c40995bcf36e39cf424c4de0f7c9760fa50470e3f2339484b35a6a3c6fa68130c76d959e9c58ff2078131020b5cc71d5f2d1c7a208393c2d0dd64af8238de2cf1972b553875d0293aeb5ea9fae0b13a849a6c6645cefcd21cb20b6240e1798d8423deec863b1046c712f71706189a4fa79296bae34681a5a830627749382a3197cd9963d31322b948e31e68495080be0f839e1800e434f6fbd4c096917ce7da3a5bcacadabf94437ae91b0b0e5184039becd7cf015dce37c7c5e53935d97b320e2bb62c3478b1b0c41385b00bbd14edaa942dec6626666fbd2b52c7e4a8b593edfd804dd3b8979f9c19527c51ea4e8cbfab53a862d0d9422967f7d7cf883ab7e594ec5c1a6516f06f1a31d9133b995697c963f2345ed9e77282e69cd0c3e68138add53da3d72bf3d44e953eef9ccd9b4816d4f293cd142574c528a5dd137b6ddae055cb43c18edd0ca855ca4b96ba710757180a31e5741297505199e6c383430c763f9ca1182f34e17994223b09ce90e4ff906d88eec7e135eeb61b9a867173f5c16d41edd0d8c1ceb6ab7c6a69a280185c0c3d07e1e4f3aa24a54106174f5cfa36d672681f15ae6303995275ac3f73a720cb7a57b3777a22903a40af361a753925514eba8ddd463892f103d156e7868e05b3b14a03f87a2736887d9d04c181257e234e11d2c0f260ddebf4b7c9683d27513114b68a2cf350da81a27c3f38e012d29ce401222447b74e512c80234017bd3dcb79dcf848104f7707f3a0a6e9ceabc2e2d179a53a55ed2c24e67a75ed790e0287507384df77f07944569740129a681fcd67b352d82261290e53c89246750e7bfb8bd55b7018ab18cc94144d3ed6b1a0a2d741257268376c2e61067e247da353747ecfea606a6a981d6b2ca31ccb07ce597a2318e0df6276e0b17851a3c0a1123b8dd57193a9af23562db54896a41743b134a2e81b2fef08ce9031c751d3f766ad1c4154e132607e75da43ff39b3a7760d41b5780a3e8d19a740594975b207dfd034954c337576ab1a4a4c0b887f44276996c46cbd315d35aed1ce2db2d104b396242256d9bcd731747d619f939298f22c1bc45adda7dc6bd590040042d4dcfa91ae31df59fc1d9c878705fb655e33636a0fe28eb90c23c52703b0c5848462c9af58f7d014f7713ff4199f3019cb668e406b090b146b8152e59640d5ccc245bbb820388ca4f19a5900cdec035a3c19ead815f0ec5bef22dcf1dfcfbd93d6a02592e7362b0ce4fb2df8ff34ed0f6d2b88812855fbde34b90fd6fcf7fa3e64e1ecc0fd37473e55949b2ccdd4e3cf7eb0f6ed7f4f545ea04204eda1b46fb99dfb2f5df32a26fab2804092a553b50a5e4a36f35e346089d2abf4a0b0e402802eb337e396308d59402d333531c6dacd7b836511ce156e0df23c121784a3ee8ba0db40547178b96067660286b4f91d8aad07db35fe4337f54cc06083ea29a1133ac3547c73df4bc5003816bc84c61e757bfa3e494c2c1f15928f0e9058ddfd81e353e714a403db08d042bc32c4087246aa029617c12bc8d285d55d24abd2f76d312ca7a306e535fe753602f561c579c5ef94d29fc9426cc45c3feb8580f13c1b0779e564b51e38fc9b562ac0a276b98c3fa993071c8c7070ea111004737512560d6fa2d904ad2563debdfd666e4d0a84a674af4474500f799f8e92eee5602b68ddfabc82b2dacf6cf9b90e9901fef3467b4e9e06af189c9f321eaea1a9237832adb1bea5c33894daf47ab95fdd53f0dd97ed1ca216af115ccbc71df4ad936aab6e8dcef2f73fa907bd25924fcccd3a8292f49c85075993d94f702492b87c4ae17203a4f78753346a55bb463ad7d95364bab0d0a631fbd98a4219df5715ce4bd08d4bda72de885f949c3da958dc54666cc60acd8dd900b11c5615f18e00e1cb534b6d98ca3a180585a9b749da964b769a063348b37761c2dddae11b92f962085ea2ea3680d198ac58e1f8c7728b8c568a5e6ad3e55733c74520508d3e71680b3dff0958ec0efc9167e22a0529a3a38eedcc9bb00de20fc190e5219393a73419ccda523cdf7cf0f4f113f88f60daf8ba5772b8d2d273af26ae8fd6aaee68cf82d9e690d1754cca25818a5007ade68622e55e3632d6fbbf16d9940441b647c79265cf74be09e95ded76f156e3dbc99162d96c656b4e424b9e4949b21344043c86d88dc2428faf3e5446699002d9e67d76a93bb906f33bf7ed17164a6bf72eea597217f29466d6bf4529a7855f011de08bb763f26d98883c9651c0ae452e0ccae01748166f4ef692712872589ca6772e6c685b26a3970d720d52461a4b23f4375ea15d5abfcc82b326c305e19d906917e78448d12372acf0ae3ee7f0991050791e49ee458f77f9223ca797ec934146f3aea54095111a17c7cf173d4f5ea10c9b10c00a643eb6f3180e46c6f816f559210a0961bcf1f611d9c55130ff7e10520703b1d1682d87e0acabb204aaa75d55124bc27379a7fe01bd3b1fa2aa647b12f8ec2044f10f47841112e587916aa003425c38da7eb92259f8d78d059445d94be4fa30d418e82e1901a88802585b15330772f2172bd8e1a84bcd86551831ac0d6ea0245afa5eca3bd0d2d181cfaa394b1fc7f16f34a4ab15f81c10e0c57a0ca4789bfa4532e554d83144537762fe11eb475d830bd4ab76989a6bb098a6fb5512c20fee7c002e2aea41ec630d9c55130d479c19623df0f1b86c4d78dce538a35eb4e864d02354020b0c853a6c81497574c6e5e454abc36888ba4e92bd897aa4330246fa12e95f5b221d4d78de8719e4ec733517034327a618b5f5d927e29b1067618face3983dc38ece32b759f871f9aca891622ca55d74cba7f1dc1281e928b560504adbcc55a6ea93252d39a7d4081ea1d6a8bc050ee14755a208172b2511e42d1f269b174e26235ef9eb7584f510c1f63c6cf9a6eb5bcd4fa0285ebd36c3e4c5d16992f89115abcddd57e66cb618322043fe5a9dc15a8942aa76e5c385f1f0dd8587661d3e8e09037f1d67c4a1439e0751f85fb0712790668a9e058aa7025e721feb454e644aa4fcd0d550ab80d1c2996b4b9773035a22c758f2bd7983740d66b9b40bf6a4d7b10d85f4fe3bf64693ea7c5c574dbbec3ea16e55e8b1af564054ee2dfac3eac9faf9d2b0fb5a2fe1c29f7aa210b6706ccd3f6f938319ab0e2c4b249271b31fba694f790bbab572f4284ee5c88e171aeab43cfd1aa7f318c262bae27fb7ac2d46a7085f89b8b5d3201c5415a0dffcd67d6eb9ba526c9858d0a33f61d11cfabbf209459c79002e208e42ee2670d38d0d600ff8b02aeaf3a54727d5b80dd5172edc086901b4d2f60a9be6309844e34af692c2e6ed7ff24ad7d9111e5098ff69d5557bac383218506399344d166ff61f4f9886d09074a1bd9ded288838261137de9a3948fe9ce660afea09d17437071e300c86728335ed82578e4072bdb635f64d3f2b05a8dac257a2de93c55828e8b0a1badfcd1e66ba78389acf2fd4b18f4ca2841d72f4d5b8e6d39a9dadd7ea02963a835466ba6b67e6bf42a3d27de6a23ee15aaea9927d2fe83cb855c85486c072b4c826a6c855f0e368d1a910b3b5ebd21915f7496769abf1689d99489f472b7b04a5f0e59b0d13235a0622634e288a2f48089abc2288e9767d4553d846652444a0d4b80f2eb45b9b4e97efc28b1a0911509c2e42b00a235ced41efb937d4b3228bea73fa351436bc2ebffc367b741148e1d135f8042717c652f67ae7c71c9e0e4b2cab1db44f6d4d7257b65363a177344572e770cc160996ce5fe364f521dd0c839bd9d9615d5a2d2484bfdb3b173f9833dbda63ca6992a3aa89ae947118440740c681d57c9eae4849a3bc194cbe36274eaace5eea762b5bbbd6a211182462006442faa8110a606fe9221cad892d3876e0ef80353c0b06e8c871dc1f1e1559b5991421f7ac5ff6b35c3a1f0f7c608d655a65c5acabb681e739fcbc256d0b03a7be57b7559f401b5b47b8f277769a0b06450fafd3a6966743152c959d056edefa8c1537fa4fb5a29484a990887ab828340f0a24310ad979de9f66d6d59b192113fc14c91b5d67fd4c2f500cd238ef80d07922e2d373fdda19dc3b1401e74b60e7b6508ae04a70bf7096f625ecc8e4075a0054624796b47d8dcbc535dcc4472e8494556ba79ba709aeedf6259b72da390bd88c04db9e445364b91ab558201e52263b06c2b7d3bca47a8cbba7ff2d6072295cbc72ba1784ef01d18de0c27942dd75bfc58b5ec38c23c948e46eda47295c409a9d8be944f76b0049e30380e4804b68837752037b199d6e7718f499c5440b96f4c419cad26eb79981e00f673865112f202a32e413563eca81f91c90d6fc47a63bdbcabc2b4836fee5e556ca5189304599a9665a4f0e8d1685c8ff1383b7adc0453aceda777f9def4cda61e51f3b2add0c25b0ec86fbccd2a048879a9b86eb3a39f35e2085096965d9b8a89c29546a95866a088dd0971134100eae623a617ab8e0410cbd7933f73cb5fade6c41fd28b83eb85390fbf24fbc15bb87c0e6dd688f10b2982ba1cef3f6f0ddbf6d7035fcc4f65c8639ffc4f07224a54130cc315743f770fed6deeb72f76107a37f1bcb6ecd4607da270974d2516997d15463f07722e8a7364774dd22f2192c5963fc2435efec7476fd469f149f9509ce3ea814187f445ddb2c6d1dbd37e815ad65a2194b5c6d7699965970b6f14d4e094c256e8c6fc9ee791d5a4eb1faa1241a34b548fcbbe92683dbb68ba81020f292d", 0x1000}, {&(0x7f0000002540)="0112519de926555f7459861d81d28dd7d36d477226b2a7e22fa295be9ee559ca07532d1d26ca318e306cf6c6df4959f2e9981f148ed709054a11ecc202f36346aaf95263dbf2447da2650b5abb3c1195c06de284b5c731bc87bd6467349246a2127b252e96e6a75c0df22fc8122da07e16493d9ddf583af0b23470dbfe85d011665f7d9200a27d9dedcad38b7287c3d290d94825149479e6c19fd86e47c531", 0x9f}], 0xa, &(0x7f00000026c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}}, {{&(0x7f0000002740)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000002780)="e5cfa3a53760715aed9018839f39014cad62432a808d030a12b4882988f2e0", 0x1f}, {&(0x7f00000027c0)="2e44c25454d4ca98e080adf000e516e11899759651fc8d3219bf1f32483775032f27388872d59bbf2b46e5e8cfb9d51347461fafe3204d9d217b4da28c3124376cbc0af65b5e5c2d1e3650febfd34e0ed356a655cad6435a79f4a96659681a8667a0448fb807ccda15e5fff5fc92f6b6ed9a1319d02c2cc00fb0546483b92845f473d5d734f706a37487127aa872ca9b5422b57f20a52feed04e4dbffa9d94cc7969cd000670091490dfedb5baae199f6e6195ea13fda7d3ecb2204cbf326697bcb442775494b632b331859ae605b73041195de107ff090e2758ceea7bc47f22b0a166af22b5fda220c2872fb7b2e3fa", 0xf0}, {&(0x7f00000028c0)="464ddf49a5c08f931a70f208634f178bfe3074a25fda9ec206082646", 0x1c}, {&(0x7f0000002900)="cf35b9cb229dc80213728640a7593f1661bc0625667f7b1210bc1532b9b78b246d163a38a67793a9c840bf2adb6ac80e1e894849b7590d354f2d364e870dfd685bf2883103474cc84991a10b27deda92e90f93853ffedc7b04d29358", 0x5c}, {&(0x7f0000002980)="7af2e279de5d2b4f6f6b1c76cf20ce8a5be1864082d30eefb14513026912f34d47a0f2fefe2994d4e17ed859f2cbbd85ed41c90df8af3439e23b10c1ed00da7672bc31dbf8b486b7f5ea4870f6bfae5fdb43199fda2f635baa168881527908aa38da700e3b3b1340a6604ead13a636468a56fbc05f3afac15cc8a9e9019490890f1ff8afc5329b", 0x87}, {&(0x7f0000002a40)="13a23f75b58b1d2b425be2582f666068026135243aba41330ff53d2c1189bc08b95163df6e821ae21322d8b30a5ed787ffef4923fa5926d476bd593e06bc56b6b5dbfb025d5cc285df7128c9bffb33e2ca8c6c8c1e95499c22945afe408396282f355f3eb551bfbdb0c752cae4c8fab94977b7ec40774f293a0b21b758befbad4c09085c11e2c00264b8149e887235573bd64ce26714", 0x96}], 0x6, &(0x7f0000002c40)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4cd2f082}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0x76, [@local]}, @generic={0x88, 0xa, "13b00e9a41aa976d"}, @lsrr={0x83, 0x1b, 0xf7, [@private=0xa010101, @remote, @private=0xa010101, @remote, @remote, @loopback]}, @timestamp_addr={0x44, 0x24, 0x6c, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}}, {@empty, 0x4}, {@multicast2, 0x6}, {@local, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}], 0x148}}, {{&(0x7f0000002dc0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002f40)=[{&(0x7f0000002e00)="6bceb8c37fc2bfe7364fd73d9c5f8b31313a751665b1b7ab763332520f5de82e29d96b8a20cc349ee70b4ac62e54a1781015b6", 0x33}, {&(0x7f0000002e40)="86db31fc3bd691e04f2fa42db4dcec5b96fbe26d9e7b5396d22239d7d360b6fa3537082bf8369618da8bf059c31103549de4b51d720e0d91a9b391192a7bfb8c3534e79ac51770502587ed841fddaf47574380b688ea1e1d3e91b864c51046826a3ec05a39a61a6e6511eff8102e7aaed07819c96dc7c2e0c0b086a35d0401643fdaabdedbbd4a4d27a8362ad6aa045800f6e2bbb885bc5e558c4a5f5729aedd7481636cbb64b517ea34eab790ae88e1d08a1d6a303d0ac3484295e6ffee9436ea12bbf534184f2ff34d696eda5c8aad1a6b532b", 0xd4}], 0x2, &(0x7f0000002f80)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x86, 0x11, "1caabb2e4866651e866514040183f2"}]}}}], 0x28}}], 0x6, 0x4008000) (async)
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000240)={'syz1\x00', {0x3, 0x0, 0x1000, 0x7}, 0x4f, [0x0, 0x0, 0x7238, 0xa, 0x4, 0x4, 0x10000, 0x80, 0x101, 0x81, 0xb, 0x7, 0x7fffffff, 0x7, 0xf2, 0x2, 0x8000, 0xfffffffc, 0x1, 0x2d, 0x9, 0xffe0, 0xe04, 0x7f, 0x7, 0x1, 0x8, 0x6, 0xc7, 0xffffffff, 0x4, 0x2, 0x7ff, 0x7, 0xefb128de, 0x4, 0x0, 0x8, 0x3, 0xfffffff8, 0xfffffff9, 0x8, 0x7fff, 0x4, 0x4dd9, 0x0, 0x9, 0x8, 0x80, 0x7, 0x7e7, 0x3, 0x0, 0xae, 0x4c468b0e, 0x8, 0x1, 0x7, 0x8, 0xfffffffc, 0x3, 0x3, 0x1, 0x7fff], [0x0, 0x8, 0x8, 0x9, 0x4, 0x7fffffff, 0x0, 0x5, 0x6, 0x8, 0x400, 0xfffff572, 0xe, 0x13cfc301, 0x0, 0x7, 0x8, 0x76c, 0x6, 0x60, 0xffffffff, 0x4, 0x6, 0x400, 0x9, 0x7, 0xd21e, 0x5, 0x7, 0x5, 0x3011, 0x8, 0x100, 0x3, 0x10fe00, 0x7f, 0x1, 0x8, 0x9, 0x196, 0xfffffffa, 0x7ff, 0x7, 0x8001, 0x7, 0x40, 0x1, 0x467, 0x9, 0xce0, 0xdf, 0x9, 0x8, 0x6e, 0x4, 0x1, 0x4, 0x8, 0x8, 0x6, 0x4, 0x2, 0x9, 0x1], [0xfa5100, 0x5, 0x7, 0x2, 0x2, 0xfffffff8, 0x2, 0x2, 0x235ca298, 0x8, 0x7, 0x2, 0x86, 0x1, 0x9, 0x81, 0xffff, 0x3, 0x0, 0x8, 0x940c5b8, 0x221, 0x0, 0x6, 0x1, 0x2, 0x3ff, 0x4, 0xc, 0x5, 0x2, 0xfffffffb, 0xda, 0x9, 0x6, 0x8, 0x5, 0x791e, 0x3, 0x8, 0x3, 0x0, 0x2, 0x6, 0x9, 0x2, 0x9, 0x1ff, 0x1, 0x8, 0x5, 0x7fff, 0x430, 0xe, 0xfb, 0x6, 0x3ff, 0x9, 0x0, 0x7ff, 0x9, 0x1, 0x2], [0x6, 0x8, 0x6, 0x5, 0xffff, 0x0, 0x9261, 0x7, 0xe, 0x47ad1ee5, 0x8, 0x400, 0x7, 0xfffffff7, 0x4, 0x1ff, 0x3ff, 0x6, 0x8, 0x0, 0x6, 0x3289, 0xd, 0x8, 0x1, 0x200, 0x4f19, 0xc, 0x1, 0x4, 0x80, 0x4, 0xb, 0x5c81, 0x3ff, 0x3, 0x4, 0x10001, 0x7, 0x8001, 0x5, 0x3, 0x0, 0x2, 0x8, 0x9, 0x6, 0x1, 0x6, 0x101, 0x7, 0x4, 0x4, 0x7, 0xe000, 0x3, 0x5, 0x81, 0xe5c5, 0x8, 0xe, 0x2, 0x3, 0x6]}, 0x45c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m18.182026547s ago: executing program 4 (id=228):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f00002b1000/0x1000)=nil, 0x1000, 0x100000e, 0x2010, r0, 0x62b02000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x1, 0xfffffffe, &(0x7f0000000200)})
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x150, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x40, "00b45a9af75938f5795dc473f9ade9ee5248b03d"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ptrace$peekuser(0x3, r2, 0x7ff)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)

1m17.380243213s ago: executing program 4 (id=234):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x800455c9, 0x0)
syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240201002647ba0724010604021009058209000410070707"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r1 = socket(0x28, 0x5, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="00000001000000000a004e2400008001fe8000000000000000000000000000aa070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e2300000007fc02000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000a004e22000000fffe8800000000000000000000000000010a00000000000000000000000000000000000000000000000000000000c3000000000000000000000000000000000000000000000000000000000000000000000000000000cf059c871500000000000000000000000000000000000000000000000000000000000000000000000a004e230000000000000000000000000000000000000000de0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300001000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000002fe8000000000000000000000000000aa0a00000000000000000000009ebe6264a7430000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004969c6c06b7ece7b83f2df8f31a6453b31b716d840681e58c37f1cb54ee841d9e700"/828], 0x310)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvfrom$unix(r3, &(0x7f0000000140)=""/246, 0xf6, 0x42, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f0008"], 0x24}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x1ff, 0x81, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0x10001, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x4, 0x7, 0x1, 0x4, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0x25, 0x5, 0x7, 0x3, 0x10, 0x7, 0x9, 0x9, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0xc, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x0, 0x10, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0xff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1000001, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000002, 0x3ff, 0x3a8, 0x1, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0xfffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd5, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x6, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xd, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x40, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x7ff, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x3, 0xfffffff9, 0x7fff, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x9, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x80000001, 0x6, 0x7, 0x1, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0x9, 0x10000, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x9, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0xcf1, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x9, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b1000, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x400, 0x2, 0xea, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x4, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0xfffffffb, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x81, 0x8, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0x8, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x6, 0x4fa, 0x2, 0xb7, 0x100, 0x7fe, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x0, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0xa, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1, 0x8, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x9, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff775, 0x4, 0x7, 0xccc, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0x0, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0x240000, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000020, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x200, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0xc321, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0x7, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x403, 0x0, 0xffffffff, 0xe, 0x894, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x8000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x8, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x4, 0x6, 0x5, 0x3d91, 0xffffffff, 0x2dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0xfb65, 0x9, 0x2, 0xfff, 0x1, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x9, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="2200000000000000000000000200010000000000d2d2000008000000"])
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x5)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0xff, 0x8, 0x4, 0x4, "c4be55263cb75ca7a8b3e56381e78d865afa66ade4b2bb742ad1d162d4d364df"})
dup(r9)

1m15.99526924s ago: executing program 4 (id=242):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x40, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m15.982808621s ago: executing program 4 (id=243):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0)
syz_usb_connect$uac1(0x3, 0xd7, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x4, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xf}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x3, 0xff, 0x33, 0x8, 0x7}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x6, 0x9, "10c1c6009305"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x5, 0x1, "fa2b704ca9ba"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x6, 0x3e, 0xcb, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x3, 0x8, "a548623704de19"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0xf, 0x0, "5fbbb5a4da"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x65, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x81, 0x0, 0xe, {0x7, 0x25, 0x1, 0x80, 0x1, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0x8}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x7988f3d488d410b5, 0x1, 0x7, 0x85, {0x7, 0x25, 0x1, 0x2, 0x81, 0x7}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xe, 0xa, 0x59, 0x20, 0xa0}, 0x41, &(0x7f0000000100)={0x5, 0xf, 0x41, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x6, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4d, "8ae3dad13f1a6d4c96ab7e947d491835"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "6093a484e97ebb052e508bb949274c4b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0xa, 0xf}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0x39, &(0x7f0000000300)=@string={0x39, 0x3, "b1a3f2977a3dfd2821d91ac5c4f53e08d76a3c5e89c36eea5afadb78b54018371a2427230927d74414fff24c47fcf6f810425809c73c47"}}, {0xda, &(0x7f0000000480)=@string={0xda, 0x3, "0bdd0f888f454f403c0f7c763c84ae0effd01654ca19d19faa55178ec0595a51aa019644b205823e6ca276a323c518a975b39b2f06aea9a2e6c7e38e864880d7ef72eba91ee2573297b4c6042e6cda4817c0f600f1a600405898dff9f2e7d36efa37db8a93a6dec91bb94ed23c67c2e91e3f79a48c3da5e5460522b08ab75e8f49114541419f61e31e8ea9ba65df7e56e4f278cd7302323e547993fbefdd3bd623d276ffac5a8630e2eae02c1d3a489f9a5d6d817cd8601a1ee82520228370196b4b0af44414aacc649fbc6df01207e052bca0d062d86c98"}}, {0x1d, &(0x7f0000000580)=@string={0x1d, 0x3, "3a35de1506cf3d3083562fd05c945f89820f6dd871f6bc1107786f"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x446}}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r1 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001000080"])
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0xc0010141, 0x0, 0x8}]})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x0, 0x8)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x127082, 0x0)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000000)={0x0, 0x200})
fchdir(r5)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')
ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0)

1m15.889020772s ago: executing program 4 (id=244):
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$selinux_validatetrans(r0, &(0x7f0000000200)={'system_u:object_r:auditctl_exec_t:s0', 0x20, 'system_u:object_r:tmpfs_t:s0', 0x20, 0x6618, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x75)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800) (async)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10120) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYRES8=r5], 0xb0)
setfsgid(0xee00)
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r7)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
r8 = syz_open_dev$evdev(&(0x7f0000000140), 0x916e, 0x1)
ioctl$EVIOCGLED(r8, 0x80404519, 0x0)
ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000180)=0x7) (async)
r9 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0xee01) (async)
syz_open_procfs(r9, &(0x7f0000000100)='fd/3\x00') (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="34005b55e19a1ebe6173cbf4f3d9360e317b7cfad4f73ad85a7bfa4cf8fe975b8a2453a050b9030500e8c537b825675e2ff40e918503a016d30dfe7cc88aa1c439e655f0e9d56e53bed570d5f4c663bd141a5a2aeb7b72f7f3e9248dad164f31c8eb3ae2db00b49e1a5de3a1d7a386d499c4034131b67041fab89b25029018544ab5f82f6b99580a386ec2955ffc43d4ad6e87674292ba857d81762dd9d2a44cdfa7e5afa44f62a9ac8ee8df32976edf65dfe95de790b652e1ba0ad7bb34a996bc624a1331c8f891e58dc54d9a114635265a27ac93c8a0e45b6821e88987a76d041beef2a754fb9ed4a00921ec63b67bdcbc043e40d5c97b906b94f3cd"]) (async)
read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020)

1m15.870201812s ago: executing program 34 (id=244):
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$selinux_validatetrans(r0, &(0x7f0000000200)={'system_u:object_r:auditctl_exec_t:s0', 0x20, 'system_u:object_r:tmpfs_t:s0', 0x20, 0x6618, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x75)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800) (async)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10120) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYRES8=r5], 0xb0)
setfsgid(0xee00)
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r7)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
r8 = syz_open_dev$evdev(&(0x7f0000000140), 0x916e, 0x1)
ioctl$EVIOCGLED(r8, 0x80404519, 0x0)
ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000180)=0x7) (async)
r9 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0xee01) (async)
syz_open_procfs(r9, &(0x7f0000000100)='fd/3\x00') (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="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"]) (async)
read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020)

1m11.927780939s ago: executing program 3 (id=294):
syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x20c040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x24, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x408280, 0x0)
madvise(&(0x7f00000e5000/0x4000)=nil, 0x4000, 0x9)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x7e, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0b"})
socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = getpid()
prlimit64(r3, 0x0, &(0x7f0000000080)={0x2482, 0x5}, &(0x7f0000000100))
write(r1, &(0x7f0000000400)="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", 0x1f000)

1m11.790087362s ago: executing program 3 (id=296):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x3a)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r3, 0x5, {0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0xe, 0x16, 0x4, "1d58db871d93dbbf54c956e7091faa96aa4aa4074cdc42ccebe3ec91b0d1c5a17de3cc2610728d844b99009c5ca40a2aca5b19b3d2a18fbf51d3240940c3e458", "70053d1bb31bc5f508122598524ffce51cb61818c5cc8b7d21fbb1d4329e8c1d501d5ddecab527731831a5a2561b109855392068cbd0db02e3133a6a5d55673b", "e767e37bd241531eefda8f283ef0e489b1ab3a3fb1bc92698cd05add8b29766a", [0x3, 0x3ff8000]}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x5, 0x2, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/116, 0x74, 0x0, 0x24}, @fda={0x66646185, 0x0, 0x2, 0x22}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0})

1m11.789556972s ago: executing program 3 (id=297):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000280)=""/163, 0xa3)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r3, 0x107, 0xa, 0x0, &(0x7f00000000c0))
timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=<r4=>0x0)
timer_delete(r4)
timer_settime(r4, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000180))
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0xcdc2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

1m11.722788023s ago: executing program 3 (id=298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="cce0f5aed5731777eef4f793d5ea690995e78e4d59d573b44d8c6261c8fd426a703856f310ba4075db3d8b943e74187a2b074b05926d395e17d3e733fc54"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x24040014)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getpeername$unix(r5, 0x0, &(0x7f0000000300))
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020)
write$binfmt_script(r3, 0x0, 0x0)

1m11.581702736s ago: executing program 3 (id=301):
r0 = syz_io_uring_complete(0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="270040005200010003a040ddfffeff0000000000000000000000000087d999aba9fa0bd8a02e0e038cbd52ce55a9a8eefeeb0551c796b3c2f4de9d322ca6f468dca378c778fbdfdc348b976e780a6ba82d8901ad2338b00e672649c9d750920a020de5fcfc18f60e5d0e43491f0e1aa1e55e1f51f9e78f235a3398ba5050713daf38585689b69e692d0da11d1e98853ac0dc93efa0e49b5538c56e830583c9753e7b03d6830000"], 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x647c}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x20040884)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x800000000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r7, 0x0, 0xb, 0x0, &(0x7f0000000000))
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x7)
syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f0000000000), 0x4)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xb)
ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x402, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0xcc1, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x15)
close_range(r4, 0xffffffffffffffff, 0x0)

1m11.535472567s ago: executing program 3 (id=304):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
epoll_create1(0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
epoll_create1(0x0) (async)
write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) (async)
close(r1) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x0)
setresuid(0x0, 0x0, r2) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000004880)={0xa0, 0x0, r4, {{0x1, 0x3, 0x9, 0x5, 0x0, 0xda, {0x1, 0x6, 0x5, 0x9b, 0x9, 0x10, 0x5, 0x5, 0x1, 0x1000, 0x687c, r2, r3, 0x4, 0xfffffffd}}, {0x0, 0x10}}}, 0xa0) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
socket$netlink(0x10, 0x3, 0x7) (async)
read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0})

1m11.487360947s ago: executing program 35 (id=304):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
epoll_create1(0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
epoll_create1(0x0) (async)
write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) (async)
close(r1) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x0)
setresuid(0x0, 0x0, r2) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000004880)={0xa0, 0x0, r4, {{0x1, 0x3, 0x9, 0x5, 0x0, 0xda, {0x1, 0x6, 0x5, 0x9b, 0x9, 0x10, 0x5, 0x5, 0x1, 0x1000, 0x687c, r2, r3, 0x4, 0xfffffffd}}, {0x0, 0x10}}}, 0xa0) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
socket$netlink(0x10, 0x3, 0x7) (async)
read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0})

55.771437114s ago: executing program 0 (id=491):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0x6, "8d068ad2c2d1"}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r5 = epoll_create1(0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x2})
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0xc0, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000100))
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)

54.96091251s ago: executing program 0 (id=493):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) (async)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) (async)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', 0x0, 0x0)
r7 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) (async)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
r8 = fcntl$dupfd(r5, 0x0, r5)
ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) (async)
write(r4, &(0x7f0000000400)="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", 0x1f000)

54.842090582s ago: executing program 0 (id=494):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x8}, 0x1, 0x0, 0x0, 0x810}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getresuid(&(0x7f0000000800), &(0x7f0000000840)=<r3=>0x0, &(0x7f0000000880))
getresgid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=<r4=>0x0)
sendmmsg$unix(r2, &(0x7f00000009c0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)="29800db996aa96aa73f91a2fa918b06b5b5737631a243dddc19252c88f13a1ae668ec9d166d98a62a981bd2d2d6ca418920a29f46683fb80c83b3f5a84cba1ce5adbe4304e86bd4c8610910a3bdfc0578b6d86e6940ec2ce2bfd8dbd1b6cd520635e4d1c574122312115e9882ec86450be9a961d606a4c3d8b0650a4010bd70ef06fb9bf19de5a86188776828e5a7a404aabcf55beb39e47f20cd909fce23e4cd8b5deaef2dd1f484fa847b8282571015ee7f7898eb3d7e9442f6af647aa2c17b7a082c9fb1c", 0xc6}, {&(0x7f00000001c0)="a65daf8159cab2a9434f770d0b7bfd08", 0x10}, {&(0x7f0000000200)="7081bcab64c84107e9eb17cef21ee2fe04847dfc2e4c253e0c9059e83348ebc8e041c67c8edf6b1f41f96f0ce402691d97508b480f9967e32d031c35aa704fa27182c1362647193ecc758a735aea35d97c786a5f90f2057546983fd97e9c33ff2e09f3ad444c6143b1990133819de47db4b160f8f39a4c6d856708a614c9a28deb76fab877582fd22287e2a76efc", 0x8e}], 0x3, 0x0, 0x0, 0x2000c881}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000480)="abdc7482dc39893dc7f6ae236573e73ee0645adf6daeb077b930f199b2216d464abb0f49a5a97e68ef77a15bf3c21cf5df9d96af28b1cbf33e71b4f361114568f04f4d75003839fb81c6fb50c246a9187f7156adb504c434efae29bd908c565edaca86a207ae8f6692217d85f9476762c643280d2c5002af11df5ecd966e4cdf30a57e3a8507fb92507d4c26c6", 0x8d}, {&(0x7f0000000540)="ec64471d724f513bc86eebae3ed3082343cf201d8dbab6831b9b480b7d46fc9a82746697e6111d34233f6742c25706f1a28bfc29ed99284ea85001aa4f70fdad3e98536e58ac2fbd2e8a788a780054e3181b127c9f2ff94ca59ce15610aebb49f76065a339c1c45ce3b50425c680033bc758ce56cf446facd05798c8bf6cc78410a65c3cbd1c940d0869c408ff4aa435c49ebce1effeb9eb567a877d07380702540d8a3b47326799d5c49804b240df733702ceb7c51139fabca3c1738ef72fa5d23c8cd97b51dc3b0759d4ecbf7c05", 0xcf}, {&(0x7f0000000a40)="f76e342b87528f69ef746960e21411781278aee1b78c48d06d553bd7f5593fe68c78b573082ad582e0bdb58ef8db92078fc269effd433d7c9404c6485ff9eba21a58c4d0fed294922094f28e4a162ebfcc295658482605d747acd4be4ee6859a4359b6c91021b9a03b958ee8961282fc733071d962088f6ecd8f89bb903ea7ada53871c2cac60ebad28723e0e382e63451bcedefd16ace67d2079e29ec88bf81d3bf8e6e9b40d44e149517ccf649d406314df203449eb5c305dc1520b0791e12dadedaa29949bf6961b7a34bb8299ccd44d1aa928ba4615032", 0xd9}, {&(0x7f0000000340)="0a298937b4f93713027aef93fd4f37872facdfe45055fa4474ec7af3580546ac85da8147bf6912058fa431b57c3a5fa6bae63351b9651d", 0x37}, {&(0x7f0000000640)="828003a295d6a62dcf21c1b8222d4aa703ea24611857cdd5f7d695b42a8166479b8a7641cffaf7e82adf7c90fba3eb7f0a38cd574a7061df6a424fcf5d8804ee", 0x40}], 0x5, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}], 0x20, 0x8000}}], 0x2, 0x0)

54.841560402s ago: executing program 0 (id=495):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}})
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000480)='./file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f00000004c0)='./file0/../file0/../file0\x00', 0x100000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async)
chroot(&(0x7f0000000480)='./file0/../file0/../file0\x00') (async)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
truncate(&(0x7f00000004c0)='./file0/../file0/../file0\x00', 0x100000000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) (async)

54.835176242s ago: executing program 0 (id=496):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000080)={0x17, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

54.731098584s ago: executing program 0 (id=497):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
setgroups(0x1, &(0x7f0000000080)=[0x0])
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r5, 0xffffd000)

54.579193747s ago: executing program 36 (id=497):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
setgroups(0x1, &(0x7f0000000080)=[0x0])
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r5, 0xffffd000)

53.785285832s ago: executing program 8 (id=498):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0000023f3201"], 0x138)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f00000001c0)={0xc7, 0x0, 0x1})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0xff)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5412, &(0x7f0000000040)=0x12)
r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000100)=0xc)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000e00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}})
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_DEVICE_ATTR_vm(r10, 0x4018aee1, &(0x7f0000002580)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00'})

53.238125853s ago: executing program 7 (id=504):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)=@arm64) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32)

49.27407627s ago: executing program 8 (id=514):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000240)) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x42, 0x1, 0x5, 0x5, 0x85, 0x70a, 0x4, 0x1, 0x80000001, 0x20010000000000, 0x5, 0x7, 0xffffffffffffffea, 0xe6, 0x100000000000001], 0x3000, 0x2815c2})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000500)="640fc71bc4417f703c784464410f01c40f20e035000040000f22e0430f07c4c3857e99df1e0000f0460f01c266ba2100c4c27db6610e66efc421f911bd5b00000048b8e2150000000000000f23d80f21f835c00000f00f23f8", 0x59}], 0x1, 0x42, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r5, 0x4, 0x1c00) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r5, r6, 0x0, 0x7ffff004)
ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000180)) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000c80)='@\x81\\\x00', 0x0) (async)
r7 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x1, 0x0, @auto=[0x30]}, 0x9, 0xfffffffffffffffa)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') (async)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)="26f1354c4d14595547cb7e9486e79d6946e56ef9431f573775039ec37333d371161befc321c1fd3c134ff1ca10e12bd039c9e26b66f62dbc10d34e93a0b109e0c065ecd8a5779f2648b12d47bb28e12186c8830fb192409e59f21c19f397a7c3dee6197c27234319d3c31aae74cc63bcfc05cebd2fb9ca762b3642d7a2bc30b032af209b0c12c4bb8d068d34707697892ab8df74c037266e2b90a3f07dd302e2f7ba8403775798f479495c714bcc77b4e44c30616dc36b44d18a", 0xba, r8) (async)
keyctl$reject(0x13, r7, 0x9, 0xffffffff, r8) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)

49.267491641s ago: executing program 7 (id=515):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r2, 0x5)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000440)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

49.101679563s ago: executing program 7 (id=517):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x1})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4)
sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000002100)="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", 0x5c1}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @local}}}], 0x20}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80261, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000358000/0x4000)=nil, 0x4000}, 0x3})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000})
fstat(r0, &(0x7f0000000240))
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000000))
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x90024, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00000000000000000000003,\x00'])
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x80108907, 0x0)

48.983249296s ago: executing program 7 (id=518):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) (async)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x10000, 0x86, 0x1}, 0x18)
faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x543ebeed03b638c4)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x66) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000280)="00000000020001000003be8c5e687a8a", 0x10) (async)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)
unshare(0x28000600) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x14000)=nil, 0x14000}, 0x1})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x4, 0xb7, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xee9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x9c, 0x1}}]}}}]}}]}}, &(0x7f0000002880)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x5, 0x6, 0x3, 0x8, 0x5c}, 0x91, &(0x7f0000000300)={0x5, 0xf, 0x91, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "fb75fca81a33e3618cc4325c7568925d"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x5b9a, 0x0, 0xd, [0xff3f00, 0xc0]}, @generic={0x53, 0x10, 0x2, "fb30f944c0294ffaba595bb923671498cabf80e2e03de91d9c5d2bc76280afdd433129ca55a5858803351c9af4cf3e221a14fb5946937ec76ccf11da16cae500628f13554666536b53aa4795604fb23d"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x7, 0x3, 0xeef, 0x7}]}, 0x9, [{0xe, &(0x7f0000000280)=@string={0xe, 0x3, "c71bc5fc6d856cc12dfe0b5a"}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, 'e'}}, {0xa7, &(0x7f0000000400)=@string={0xa7, 0x3, "30a827490c33729fc4f97763589d9dd46b1bcb10dd0fd073acf13dc2a3128f368f9a2d2f4078d3708e14ba829dd58ab3b35057fb930b63a1a014adfc4cd9f2af056f907a42126a2e78293ee06e09ba51bba020cba7662bf554537c36250e2c4a6a78a473e93f445ed46293c68b4753338aa2b78602bfd47c6551ff9fc32353370415c99ab7113280705475e6546b56ff4fb3b6061b0bdeafd46ad82205ce8cad7b51516b86"}}, {0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x140a}}, {0xfd, &(0x7f00000026c0)=@string={0xfd, 0x3, "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"}}, {0xbd, &(0x7f0000002940)=ANY=[@ANYBLOB="bd0309c8b591f22ac9c33d9231d9742a5d1c1a734bad0ebe5eb4336aece3181647f73ad92f3df736ab99c9637a7e3f5d4cbe63a26c75e0dbcc7ef7a40d71290a2ae09aaf5e8ea9a4be37ab799af0b5bd103072a145f67d8824ddca009f57d10a0062af03c19cacaaeaf0e2a968fcae3f5fcf7ba1455ede7299d54242de42897521b6287fa2dbcaf7ba758655bd8c23b2ddada2a22c675d3abf9742b46b4188d85813ce48c7403db4778cdeb1f2ab8f05902f9a2232f0ac1384ea013c3916fc61aebe641b0aeda05eeaa85f0e991fe8384eb25573d03a62ba07560cd0f26856fce20167cb1e66ce789a206e87d50d2b27ba2236f169a82b77e44e9b758a6378bd2b44a3042dd6715e712592086ce8059662c0bea01b2b7f28e6fe074c0bb1"]}]}) (async)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
r8 = dup(r7)
write$P9_RLERRORu(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}})
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

47.462719616s ago: executing program 5 (id=533):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = signalfd4(r0, &(0x7f0000000080)={[0x1]}, 0x8, 0x80000)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/69, 0x45}], 0x3)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000100)={0x1, 0x100, 0xfffff001, 0xf3, 0xf, 0xed})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473", 0xa}], 0x1)
sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0x4b}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

47.308850859s ago: executing program 5 (id=535):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
lseek(r1, 0x7fffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
read(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000))
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x22, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

47.038099204s ago: executing program 5 (id=537):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x9})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})

46.974252665s ago: executing program 5 (id=538):
open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}])
io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})

46.843474658s ago: executing program 6 (id=539):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8084)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000480)=0x6, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x4000011)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffc000/0x2000)=nil)
syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1)
syz_genetlink_get_family_id$team(&(0x7f00000009c0), r1)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0), &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'xxhash64\x00'}}, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000240)='syz0\x00', 0x1ff)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0x6}, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001240)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a2ffcf589"], 0x78}], 0x1, 0x0, 0x0, 0x4020400}, 0x880)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'\x00', <r5=>0x0})
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, r5}, 0xc)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10012, r0, 0x0)
open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)

46.743699289s ago: executing program 6 (id=540):
r0 = userfaultfd(0x801)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x400000000000000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r2 = dup(0xffffffffffffffff)
chmod(0x0, 0x4)
creat(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440), 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r8 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0xa8, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x7, 0x0, 0x39}, @fda={0x66646185, 0x9, 0x1, 0x3d}, @fda={0x66646185, 0x8, 0x1, 0x21}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}, @decrefs, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0})

46.623131432s ago: executing program 6 (id=541):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x30, 0x1, &(0x7f0000000d40)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) (async)
r5 = syz_pidfd_open(r3, 0x0)
r6 = dup(r5)
fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0xffffffee, 0x1) (async)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r9, 0x0, 0x33, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r10=>0xffffffffffffffff}) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'batadv_slave_1\x00', @local})
ioctl$FICLONE(r10, 0x40049409, r0) (async)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async, rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64)

46.554415663s ago: executing program 6 (id=542):
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x6, 0x7ff, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101}}}})
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
tkill(r4, 0x1a)
pidfd_getfd(r5, 0xffffffffffffffff, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x8)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cache=m'])
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/mem_sleep', 0xea241, 0x0)
write$cgroup_int(r10, &(0x7f0000000180), 0x12)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000425bd7000fddbdf250c000000080001000200000008000100020000000804000000000000"], 0x2c}}, 0x4004000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0xa, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)}}, @exit_looper], 0x0, 0x0, 0x0})
write$P9_RMKDIR(r8, &(0x7f0000000280)={0x14, 0x49, 0x1, {0x1, 0x1, 0x5}}, 0x14)
r13 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000300)={'xfrm0\x00'})
ioctl$PIO_UNIMAP(r13, 0x4b67, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0xf, 0x1}, {0x1ff, 0x1000}, {}]})
pipe(&(0x7f00000002c0))

46.418145076s ago: executing program 6 (id=543):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xb, 0x20, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000100)='+\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0')
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000)

46.417444636s ago: executing program 6 (id=544):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet(0x2, 0x2, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018000080007564703a73797a32064c710b"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = gettid()
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
fcntl$getflags(r6, 0x401)
rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, <r7=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in6=@private2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty}, 0x8)

45.968741375s ago: executing program 7 (id=545):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

45.964931424s ago: executing program 5 (id=546):
creat(&(0x7f0000000180)='./file0\x00', 0x88)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
keyctl$update(0x2, 0x0, 0x0, 0x100000)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000140)={0x5, {0x10, 0x7, 0x101, 0xae6f}})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000004180)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="50000000446c22a5", @ANYRES64=r4, @ANYBLOB="06171000000000009cf3000000000000b18c60d90200000054000000080400090000000000060000000000000005000000060000002f2e252823000080000000000000005e84a34b1ccc65e80867387f95b5f31935dbb12fd5b283c94efd478125bf4a4ad4897a49464507a75a9172f7531e160c8fda67d7397eaa989bacadc24ea6a3085c4f005d4509b66a1b41948f0317a4f79629d156278578c34dedcd38c97f71fd0a577ff6fb13cd333bb3ba22e4b007b02c45501af0756aceaaed9ca449d85214ab71226b"], 0x50)
r5 = socket(0x1e, 0x1, 0x0)
connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0xd3015ecdf910ee12)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r6)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap'])
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r9, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e)
read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2100)

45.785967678s ago: executing program 7 (id=547):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x5, 0x0, 0x2000000}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x2, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040))
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0xe, 0x2, 0x0, 0x80}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0xe, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
close_range(r0, 0xffffffffffffffff, 0x0)

45.65397516s ago: executing program 5 (id=548):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000040)={0x2000, 0x2000})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x80000, 0x0, 0x48000000, 0x400000, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

30.540997375s ago: executing program 37 (id=514):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000240)) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x42, 0x1, 0x5, 0x5, 0x85, 0x70a, 0x4, 0x1, 0x80000001, 0x20010000000000, 0x5, 0x7, 0xffffffffffffffea, 0xe6, 0x100000000000001], 0x3000, 0x2815c2})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000500)="640fc71bc4417f703c784464410f01c40f20e035000040000f22e0430f07c4c3857e99df1e0000f0460f01c266ba2100c4c27db6610e66efc421f911bd5b00000048b8e2150000000000000f23d80f21f835c00000f00f23f8", 0x59}], 0x1, 0x42, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r5, 0x4, 0x1c00) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r5, r6, 0x0, 0x7ffff004)
ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000180)) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000c80)='@\x81\\\x00', 0x0) (async)
r7 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x1, 0x0, @auto=[0x30]}, 0x9, 0xfffffffffffffffa)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') (async)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)="26f1354c4d14595547cb7e9486e79d6946e56ef9431f573775039ec37333d371161befc321c1fd3c134ff1ca10e12bd039c9e26b66f62dbc10d34e93a0b109e0c065ecd8a5779f2648b12d47bb28e12186c8830fb192409e59f21c19f397a7c3dee6197c27234319d3c31aae74cc63bcfc05cebd2fb9ca762b3642d7a2bc30b032af209b0c12c4bb8d068d34707697892ab8df74c037266e2b90a3f07dd302e2f7ba8403775798f479495c714bcc77b4e44c30616dc36b44d18a", 0xba, r8) (async)
keyctl$reject(0x13, r7, 0x9, 0xffffffff, r8) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)

18.850114733s ago: executing program 38 (id=544):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet(0x2, 0x2, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018000080007564703a73797a32064c710b"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = gettid()
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
fcntl$getflags(r6, 0x401)
rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, <r7=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in6=@private2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty}, 0x8)

741.720636ms ago: executing program 39 (id=548):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000040)={0x2000, 0x2000})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x80000, 0x0, 0x48000000, 0x400000, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 40 (id=547):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x5, 0x0, 0x2000000}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x2, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040))
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0xe, 0x2, 0x0, 0x80}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0xe, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

67][  T702] rust_binder: Got transaction with invalid offset.
[   41.273003][  T702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.279806][  T702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[   41.304593][  T704] rust_binder: Error while translating object.
[   41.314265][  T704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.320444][  T704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7
[   41.447035][  T408] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   41.469281][  T408] usb 1-1: USB disconnect, device number 9
[   41.475974][  T408] usblp0: removed
[   41.572565][  T329] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   41.646017][  T461] usb 3-1: USB disconnect, device number 7
[   41.742597][  T329] usb 5-1: Using ep0 maxpacket: 16
[   41.749067][  T329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.759284][  T329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.769685][  T329] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   41.779032][  T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.787208][  T329] usb 5-1: Product: syz
[   41.791394][  T329] usb 5-1: Manufacturer: syz
[   41.796081][  T329] usb 5-1: SerialNumber: syz
[   41.837863][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   41.837890][   T36] audit: type=1400 audit(1757179347.200:249): avc:  denied  { ioctl } for  pid=713 comm="syz.2.123" path="socket:[7209]" dev="sockfs" ino=7209 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   41.868478][   T36] audit: type=1400 audit(1757179347.200:250): avc:  denied  { setopt } for  pid=713 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   41.888131][   T36] audit: type=1400 audit(1757179347.200:251): avc:  denied  { setattr } for  pid=713 comm="syz.2.123" name="RAW" dev="sockfs" ino=7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   41.910634][   T36] audit: type=1400 audit(1757179347.220:252): avc:  denied  { bind } for  pid=715 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.933681][   T36] audit: type=1400 audit(1757179347.300:253): avc:  denied  { connect } for  pid=717 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.933903][  T718] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.003571][  T706] netlink: 'syz.4.120': attribute type 32 has an invalid length.
[   42.007707][  T718] rust_binder: validate_parent_fixup: new_min_offset=4611686018427387922, sg_entry.length=239
[   42.011040][  T706] rust_binder: Error while translating object.
[   42.018103][  T718] rust_binder: Error while translating object.
[   42.028744][  T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   42.034956][  T718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.041358][  T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:9
[   42.050672][  T718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[   42.069103][  T722] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   42.086155][  T722] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   42.093474][  T722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[   42.093912][  T329] usb 5-1: 0:2 : does not exist
[   42.102577][   T49] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   42.105444][  T329] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   42.126711][  T329] usb 5-1: USB disconnect, device number 2
[   42.134670][  T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.212590][   T65] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[   42.252571][   T49] usb 3-1: Using ep0 maxpacket: 32
[   42.258795][   T49] usb 3-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config
[   42.270645][   T49] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a
[   42.279750][   T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.287992][   T49] usb 3-1: Product: syz
[   42.292614][   T49] usb 3-1: Manufacturer: syz
[   42.297236][   T49] usb 3-1: SerialNumber: syz
[   42.352600][   T65] usb 1-1: device descriptor read/64, error -71
[   42.508764][  T716] tipc: Started in network mode
[   42.513754][  T716] tipc: Node identity b6a514139cc, cluster identity 4711
[   42.520847][  T716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.539387][  T716] syzkaller0: entered promiscuous mode
[   42.545148][  T716] syzkaller0: entered allmulticast mode
[   42.551042][  T716] tipc: Resetting bearer <eth:syzkaller0>
[   42.558678][  T716] tipc: Resetting bearer <eth:syzkaller0>
[   42.571193][  T716] tipc: Disabling bearer <eth:syzkaller0>
[   42.592594][   T65] usb 1-1: device descriptor read/64, error -71
[   42.624656][   T49] usb 3-1: USB disconnect, device number 8
[   42.766355][   T36] audit: type=1400 audit(1757179348.130:254): avc:  denied  { read } for  pid=726 comm="syz.4.129" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   42.793007][   T36] audit: type=1400 audit(1757179348.130:255): avc:  denied  { open } for  pid=726 comm="syz.4.129" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   42.823437][  T730] syzkaller0: entered promiscuous mode
[   42.829037][  T730] syzkaller0: entered allmulticast mode
[   42.834884][   T65] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[   42.934784][  T732] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false
[   42.934810][  T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   42.943710][  T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:66
[   42.972730][   T65] usb 1-1: device descriptor read/64, error -71
[   42.990381][   T36] audit: type=1400 audit(1757179348.360:256): avc:  denied  { unlink } for  pid=736 comm="syz.3.133" name="#3" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   42.991792][  T736] mmap: syz.3.133 (736): VmData 29208576 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data.
[   43.032563][   T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   43.143388][  T745] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.143420][  T745] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.149878][  T745] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.149893][  T745] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.169306][  T745] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.169330][  T745] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.176155][  T747] rust_binder: Error in use_page_slow: ESRCH
[   43.182646][   T31] usb 5-1: Using ep0 maxpacket: 16
[   43.182701][  T747] rust_binder: use_range failure ESRCH
[   43.194257][  T745] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.199860][  T747] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   43.206450][  T747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   43.206546][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.214666][  T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91
[   43.226517][   T65] usb 1-1: device descriptor read/64, error -71
[   43.254519][   T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   43.270314][  T761] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.271202][   T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   43.286187][  T760] rust_binder: Error while translating object.
[   43.286741][  T760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   43.286822][  T761] rust_binder: Error while translating object.
[   43.293245][  T760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:84
[   43.302222][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.309006][  T761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   43.317469][   T31] usb 5-1: Product: syz
[   43.327944][  T761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:84
[   43.335264][   T31] usb 5-1: Manufacturer: syz
[   43.352664][   T31] usb 5-1: SerialNumber: syz
[   43.365237][   T36] audit: type=1400 audit(1757179348.730:257): avc:  denied  { map } for  pid=763 comm="syz.3.141" path="socket:[6655]" dev="sockfs" ino=6655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   43.389137][   T36] audit: type=1400 audit(1757179348.730:258): avc:  denied  { read } for  pid=763 comm="syz.3.141" path="socket:[6655]" dev="sockfs" ino=6655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   43.412680][   T65] usb usb1-port1: attempt power cycle
[   43.522595][   T49] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   43.622587][  T329] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   43.652601][   T49] usb 3-1: device descriptor read/64, error -71
[   43.762672][   T65] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[   43.772555][  T329] usb 4-1: Using ep0 maxpacket: 16
[   43.778926][  T329] usb 4-1: config 8 has an invalid interface number: 150 but max is 2
[   43.783589][   T65] usb 1-1: device descriptor read/8, error -71
[   43.787214][  T329] usb 4-1: config 8 has an invalid interface number: 175 but max is 2
[   43.801560][  T329] usb 4-1: config 8 has an invalid interface number: 93 but max is 2
[   43.809762][  T329] usb 4-1: config 8 has no interface number 0
[   43.815992][  T329] usb 4-1: config 8 has no interface number 1
[   43.822224][  T329] usb 4-1: config 8 has no interface number 2
[   43.828333][  T329] usb 4-1: config 8 interface 150 altsetting 249 endpoint 0xD has invalid maxpacket 512, setting to 64
[   43.839410][  T329] usb 4-1: config 8 interface 150 altsetting 249 endpoint 0x5 has invalid maxpacket 512, setting to 64
[   43.850497][  T329] usb 4-1: config 8 interface 175 altsetting 1 has an endpoint descriptor with address 0xE4, changing to 0x84
[   43.862171][  T329] usb 4-1: config 8 interface 175 altsetting 1 endpoint 0x84 has an invalid bInterval 84, changing to 7
[   43.873335][  T329] usb 4-1: config 8 interface 175 altsetting 1 endpoint 0x84 has invalid maxpacket 8273, setting to 1024
[   43.884616][  T329] usb 4-1: config 8 interface 175 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   43.897820][  T329] usb 4-1: config 8 interface 93 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64
[   43.902536][   T49] usb 3-1: device descriptor read/64, error -71
[   43.908885][  T329] usb 4-1: config 8 interface 93 altsetting 2 has an endpoint descriptor with address 0xA6, changing to 0x86
[   43.926664][  T329] usb 4-1: config 8 interface 93 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[   43.937314][  T329] usb 4-1: config 8 interface 93 altsetting 2 endpoint 0xC has invalid maxpacket 35752, setting to 64
[   43.943640][   T65] usb 1-1: device descriptor read/8, error -71
[   43.948282][  T329] usb 4-1: config 8 interface 93 altsetting 2 endpoint 0xB has an invalid bInterval 0, changing to 7
[   43.948312][  T329] usb 4-1: config 8 interface 93 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[   43.976125][  T329] usb 4-1: config 8 interface 93 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[   43.986947][  T329] usb 4-1: config 8 interface 93 altsetting 2 has a duplicate endpoint with address 0x1, skipping
[   43.997568][  T329] usb 4-1: config 8 interface 93 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[   44.008178][  T329] usb 4-1: config 8 interface 150 has no altsetting 0
[   44.015073][  T329] usb 4-1: config 8 interface 175 has no altsetting 0
[   44.021850][  T329] usb 4-1: config 8 interface 93 has no altsetting 0
[   44.028973][  T329] usb 4-1: string descriptor 0 read error: -22
[   44.035331][  T329] usb 4-1: Dual-Role OTG device on HNP port
[   44.041449][  T329] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=f8.01
[   44.050696][  T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.162550][   T49] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   44.192557][   T65] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[   44.213601][   T65] usb 1-1: device descriptor read/8, error -71
[   44.268963][  T766] 9pnet_fd: Insufficient options for proto=fd
[   44.292555][   T49] usb 3-1: device descriptor read/64, error -71
[   44.343763][  T329] usb 4-1: USB disconnect, device number 6
[   44.346434][   T65] usb 1-1: device descriptor read/8, error -71
[   44.462653][   T65] usb usb1-port1: unable to enumerate USB device
[   44.532549][   T49] usb 3-1: device descriptor read/64, error -71
[   44.642632][   T49] usb usb3-port1: attempt power cycle
[   44.982583][   T49] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   45.023813][   T49] usb 3-1: device descriptor read/8, error -71
[   45.097628][  T797] rust_binder: Error while translating object.
[   45.097699][  T797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.104290][  T797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94
[   45.108254][  T798] tmpfs: Bad value for 'nr_blocks'
[   45.164086][   T49] usb 3-1: device descriptor read/8, error -71
[   45.412567][   T49] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   45.421277][  T809] incfs: mount failed -22
[   45.443617][   T49] usb 3-1: device descriptor read/8, error -71
[   45.484790][  T821] SELinux:  Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[   45.584401][   T49] usb 3-1: device descriptor read/8, error -71
[   45.692709][   T49] usb usb3-port1: unable to enumerate USB device
[   45.720550][   T31] usb 5-1: 0:2 : does not exist
[   45.742172][   T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   45.770892][   T31] usb 5-1: USB disconnect, device number 3
[   46.142585][   T31] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   46.293808][   T31] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   46.304891][   T31] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   46.319262][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   46.328368][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   46.336633][   T31] usb 5-1: SerialNumber: syz
[   46.496109][  T850] Unsupported ieee802154 address type: 0
[   46.599512][   T31] usb 5-1: USB disconnect, device number 4
[   46.665877][  T865] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[   46.700837][  T871] netlink: 'syz.0.173': attribute type 4 has an invalid length.
[   46.785200][  T887] rust_binder: Error while translating object.
[   46.785234][  T887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   46.791987][  T887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:100
[   46.818371][  T696] Bluetooth: hci0: Frame reassembly failed (-84)
[   46.992649][  T329] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[   47.052606][   T65] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[   47.143720][  T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   47.154845][  T329] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[   47.163983][  T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.172805][  T329] usb 4-1: config 0 descriptor??
[   47.178095][  T885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   47.192671][   T65] usb 1-1: device descriptor read/64, error -71
[   47.399987][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   47.400006][   T36] audit: type=1400 audit(1757179352.760:277): avc:  denied  { write } for  pid=904 comm="syz.4.184" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   47.401786][  T905] rust_binder: Error while translating object.
[   47.430832][  T905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.437123][  T905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33
[   47.442581][   T65] usb 1-1: device descriptor read/64, error -71
[   47.468366][   T36] audit: type=1400 audit(1757179352.830:278): avc:  denied  { read } for  pid=907 comm="syz.4.185" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   47.493003][   T36] audit: type=1400 audit(1757179352.830:279): avc:  denied  { open } for  pid=907 comm="syz.4.185" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   47.518384][   T36] audit: type=1400 audit(1757179352.830:280): avc:  denied  { ioctl } for  pid=907 comm="syz.4.185" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   47.589760][  T329] ntrig 0003:1B96:0003.0002: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.3-1/input0
[   47.692664][   T65] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[   47.791081][  T329] usb 4-1: USB disconnect, device number 7
[   47.832589][   T65] usb 1-1: device descriptor read/64, error -71
[   47.962576][  T461] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   48.072593][   T65] usb 1-1: device descriptor read/64, error -71
[   48.133577][  T461] usb 5-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config
[   48.152536][  T461] usb 5-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   48.165862][  T461] usb 5-1: config 1 interface 0 has no altsetting 0
[   48.176403][  T461] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   48.192604][   T65] usb usb1-port1: attempt power cycle
[   48.192600][  T461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   48.192623][  T461] usb 5-1: SerialNumber: syz
[   48.215556][  T461] usb 5-1: bad CDC descriptors
[   48.319864][  T928] binder: Unknown parameter 'defcontext01777777777777777777777'
[   48.319867][   T36] audit: type=1400 audit(1757179353.680:281): avc:  denied  { remount } for  pid=927 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   48.340414][  T930] random: crng reseeded on system resumption
[   48.374090][   T45] Bluetooth: hci1: Frame reassembly failed (-84)
[   48.376169][  T932] 9pnet_fd: Insufficient options for proto=fd
[   48.386759][  T933] 9pnet_fd: Insufficient options for proto=fd
[   48.428927][  T926] /dev/sg0: Can't lookup blockdev
[   48.450275][   T36] audit: type=1400 audit(1757179353.810:282): avc:  denied  { create } for  pid=925 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   48.503553][  T461] usb 5-1: USB disconnect, device number 5
[   48.542590][   T65] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[   48.563741][   T65] usb 1-1: device descriptor read/8, error -71
[   48.693694][   T65] usb 1-1: device descriptor read/8, error -71
[   48.842656][  T935] Bluetooth: hci0: command 0x1003 tx timeout
[   48.842650][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   48.862103][   T36] audit: type=1400 audit(1757179354.220:283): avc:  denied  { setattr } for  pid=936 comm="syz.2.194" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   48.862406][  T937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107
[   48.942632][   T65] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[   48.973660][   T65] usb 1-1: device descriptor read/8, error -71
[   48.985902][   T45] bridge_slave_1: left allmulticast mode
[   48.992143][   T45] bridge_slave_1: left promiscuous mode
[   48.998121][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.006113][   T45] bridge_slave_0: left allmulticast mode
[   49.011784][   T45] bridge_slave_0: left promiscuous mode
[   49.022619][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.104039][   T65] usb 1-1: device descriptor read/8, error -71
[   49.151653][  T960] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.158781][  T960] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.166116][  T960] bridge_slave_0: entered allmulticast mode
[   49.172568][  T960] bridge_slave_0: entered promiscuous mode
[   49.179131][  T960] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.186269][  T960] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.193444][  T960] bridge_slave_1: entered allmulticast mode
[   49.199579][  T960] bridge_slave_1: entered promiscuous mode
[   49.205735][   T45] tipc: Left network mode
[   49.211038][   T45] veth1_macvtap: left promiscuous mode
[   49.216656][   T65] usb usb1-port1: unable to enumerate USB device
[   49.216903][   T45] veth0_vlan: left promiscuous mode
[   49.320059][  T960] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.327148][  T960] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.334460][  T960] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.334940][   T36] audit: type=1400 audit(1757179354.690:284): avc:  denied  { getopt } for  pid=974 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   49.341491][  T960] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.383475][  T960] veth0_vlan: entered promiscuous mode
[   49.394110][  T960] veth1_macvtap: entered promiscuous mode
[   49.412044][   T36] audit: type=1400 audit(1757179354.770:285): avc:  denied  { mounton } for  pid=960 comm="syz-executor" path="/root/syzkaller.aRor3m/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   49.458697][   T36] audit: type=1326 audit(1757179354.820:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=983 comm="syz.5.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ee38ebe9 code=0x0
[   49.684173][  T992] rust_binder: 991 RLIMIT_NICE not set
[   49.687081][  T768] rust_binder: 990: removing orphan mapping 0:4224
[   49.933007][  T329] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   50.083619][  T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   50.094695][  T329] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   50.104142][  T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.112903][  T329] usb 5-1: config 0 descriptor??
[   50.118238][  T994] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   50.162628][  T461] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   50.312545][  T461] usb 1-1: Using ep0 maxpacket: 32
[   50.318948][  T461] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   50.327441][  T461] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   50.336410][  T461] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   50.345879][  T461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   50.355589][  T461] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   50.365759][  T461] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   50.378896][  T461] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   50.388052][  T461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.396774][  T461] usb 1-1: config 0 descriptor??
[   50.442593][   T53] Bluetooth: hci1: command 0x1003 tx timeout
[   50.442616][  T374] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   50.472007][ T1005] rust_binder: Write failure EFAULT in pid:127
[   50.528943][  T329] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[   50.542690][  T329] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[   50.550121][  T329] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[   50.557620][  T329] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[   50.565063][  T329] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[   50.573355][  T329] hid-generic 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[   50.603227][  T461] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   50.621384][  T461] usb 1-1: USB disconnect, device number 18
[   50.628472][  T461] usblp0: removed
[   50.729816][  T768] usb 5-1: USB disconnect, device number 6
[   50.872593][   T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   51.002869][   T31] usb 4-1: device descriptor read/64, error -71
[   51.062586][   T65] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   51.188554][ T1017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   51.188586][ T1017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9
[   51.212598][   T65] usb 1-1: Using ep0 maxpacket: 32
[   51.227998][   T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   51.236586][   T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   51.247665][   T31] usb 4-1: device descriptor read/64, error -71
[   51.257598][   T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   51.266996][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   51.276745][   T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   51.288422][   T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   51.301550][   T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   51.310675][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.320537][   T65] usb 1-1: config 0 descriptor??
[   51.381401][ T1027] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.392912][ T1029] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.432623][  T461] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   51.492565][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   51.526982][   T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   51.594192][  T461] usb 6-1: unable to get BOS descriptor or descriptor too short
[   51.602684][  T461] usb 6-1: not running at top speed; connect to a high speed hub
[   51.611213][  T461] usb 6-1: config 5 has an invalid interface number: 29 but max is 0
[   51.622004][  T461] usb 6-1: config 5 has no interface number 0
[   51.628472][  T461] usb 6-1: config 5 interface 29 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[   51.632561][   T31] usb 4-1: device descriptor read/64, error -71
[   51.645804][  T461] usb 6-1: config 5 interface 29 has no altsetting 0
[   51.656377][  T461] usb 6-1: New USB device found, idVendor=05a9, idProduct=2643, bcdDevice=49.45
[   51.665625][  T461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.674313][  T461] usb 6-1: Product: syz
[   51.678656][  T461] usb 6-1: Manufacturer: syz
[   51.683329][  T461] usb 6-1: SerialNumber: syz
[   51.689475][ T1017] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[   51.892690][   T31] usb 4-1: device descriptor read/64, error -71
[   52.002645][   T31] usb usb4-port1: attempt power cycle
[   52.144748][  T461] usb 6-1: Found UVC 0.00 device syz (05a9:2643)
[   52.151158][  T461] usb 6-1: No valid video chain found.
[   52.157773][  T461] usb 6-1: USB disconnect, device number 2
[   52.231110][   T49] usb 1-1: USB disconnect, device number 19
[   52.238784][   T49] usblp0: removed
[   52.352595][   T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   52.362714][ T1063] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   52.373541][   T31] usb 4-1: device descriptor read/8, error -71
[   52.523794][   T31] usb 4-1: device descriptor read/8, error -71
[   52.619801][ T1070] 2N: renamed from vcan0 (while UP)
[   52.725077][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   52.725098][   T36] audit: type=1400 audit(1757179358.090:293): avc:  denied  { create } for  pid=1081 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   52.762559][   T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   52.783593][   T31] usb 4-1: device descriptor read/8, error -71
[   52.802566][  T472] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   52.902564][   T65] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   52.913662][   T31] usb 4-1: device descriptor read/8, error -71
[   52.952571][  T472] usb 5-1: Using ep0 maxpacket: 32
[   52.958786][  T472] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   52.967826][  T472] usb 5-1: config 1 has no interface number 1
[   52.975293][  T472] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   52.984451][  T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.992438][  T472] usb 5-1: Product: syz
[   52.996612][  T472] usb 5-1: Manufacturer: syz
[   53.001200][  T472] usb 5-1: SerialNumber: syz
[   53.022673][   T31] usb usb4-port1: unable to enumerate USB device
[   53.055114][   T65] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   53.064326][   T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.072436][   T65] usb 6-1: Product: syz
[   53.076622][   T65] usb 6-1: Manufacturer: syz
[   53.081214][   T65] usb 6-1: SerialNumber: syz
[   53.207640][   T36] audit: type=1400 audit(1757179358.570:294): avc:  denied  { setopt } for  pid=1072 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.227284][   T36] audit: type=1400 audit(1757179358.570:295): avc:  denied  { bind } for  pid=1072 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.247980][   T36] audit: type=1400 audit(1757179358.570:296): avc:  denied  { listen } for  pid=1072 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.267070][ T1073] kvm: kvm [1072]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   53.267683][   T36] audit: type=1400 audit(1757179358.570:297): avc:  denied  { connect } for  pid=1072 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.276489][ T1073] kvm: kvm [1072]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   53.296034][   T36] audit: type=1400 audit(1757179358.570:298): avc:  denied  { accept } for  pid=1072 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.325675][   T36] audit: type=1400 audit(1757179358.570:299): avc:  denied  { read } for  pid=1072 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.415706][  T472] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[   53.423701][  T472] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   53.432128][  T472] usb 5-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes
[   53.441911][  T472] usb 5-1: USB disconnect, device number 7
[   53.449735][  T767] udevd[767]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   53.519384][   T36] audit: type=1400 audit(1757179358.880:300): avc:  denied  { sqpoll } for  pid=1086 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   53.525828][ T1080] rust_binder: Got transaction with invalid offset.
[   53.538744][ T1080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.545411][ T1080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11
[   53.576566][   T65] rtl8150 6-1:1.0: couldn't reset the device
[   53.591773][   T65] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[   53.600986][   T65] usb 6-1: USB disconnect, device number 3
[   53.655332][ T1090] rust_binder: Error in use_page_slow: ESRCH
[   53.655350][ T1090] rust_binder: use_range failure ESRCH
[   53.661369][ T1090] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   53.666896][ T1090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   53.674961][ T1090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138
[   53.700525][   T36] audit: type=1400 audit(1757179359.060:301): avc:  denied  { append } for  pid=1091 comm="syz.3.240" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   53.700912][ T1092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140
[   53.742878][ T1095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142
[   53.995473][  T292] bridge_slave_1: left allmulticast mode
[   54.010483][  T292] bridge_slave_1: left promiscuous mode
[   54.016248][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.024026][  T292] bridge_slave_0: left allmulticast mode
[   54.029768][  T292] bridge_slave_0: left promiscuous mode
[   54.035613][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.073747][ T1101] rust_binder: 13: no such ref 0
[   54.079018][ T1101] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=1101 comm=syz.5.245
[   54.107443][ T1101] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   54.114823][ T1101] rust_binder: 13: no such ref 0
[   54.147170][  T292] veth1_macvtap: left promiscuous mode
[   54.152832][  T292] veth0_vlan: left promiscuous mode
[   54.196943][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.204253][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.211364][ T1102] bridge_slave_0: entered allmulticast mode
[   54.217657][ T1102] bridge_slave_0: entered promiscuous mode
[   54.223995][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.231020][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.238151][ T1102] bridge_slave_1: entered allmulticast mode
[   54.244371][ T1102] bridge_slave_1: entered promiscuous mode
[   54.290401][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.297490][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.304810][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.311924][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.331735][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.339290][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.353172][  T696] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.360245][  T696] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.390198][  T696] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.390526][ T1115] rust_binder: Error while translating object.
[   54.397306][  T696] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.414675][ T1115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.414709][ T1115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202
[   54.436998][ T1117] FAT-fs (rnullb0): bogus number of reserved sectors
[   54.454205][ T1117] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   54.457058][ T1102] veth0_vlan: entered promiscuous mode
[   54.497308][ T1102] veth1_macvtap: entered promiscuous mode
[   54.875232][   T36] audit: type=1400 audit(1757179360.240:302): avc:  denied  { execute } for  pid=1144 comm="syz.5.258" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[   55.142581][  T461] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   55.292583][  T461] usb 6-1: Using ep0 maxpacket: 32
[   55.299364][  T461] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[   55.307915][  T461] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   55.316539][  T461] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[   55.329082][  T472] rust_binder: 0: removing orphan mapping 0:4232
[   55.335644][  T461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   55.345727][  T461] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   55.355439][  T461] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   55.368593][  T461] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   55.378139][  T461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.386993][  T461] usb 6-1: config 0 descriptor??
[   55.388904][ T1162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23
[   55.392394][ T1162] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   55.401597][ T1162] rust_binder: Read failure Err(EFAULT) in pid:23
[   55.538234][ T1166] tipc: Started in network mode
[   55.549722][ T1166] tipc: Node identity ac14142f, cluster identity 4711
[   55.556620][ T1166] tipc: New replicast peer: 2.0.0.0
[   55.562012][ T1166] tipc: Enabled bearer <udp:syz2>, priority 10
[   55.584147][ T1168] rust_binder: Failed to allocate buffer. len:224, is_oneway:false
[   55.595054][  T461] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   55.615441][  T461] usb 6-1: USB disconnect, device number 4
[   55.621948][  T461] usblp0: removed
[   55.719966][ T1172] syzkaller0: entered promiscuous mode
[   55.725578][ T1172] syzkaller0: entered allmulticast mode
[   55.773586][ T1175] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 160, size: 226)
[   55.773611][ T1175] rust_binder: Error while translating object.
[   55.784674][ T1175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   55.790893][ T1175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222
[   55.802562][   T65] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   55.963608][   T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.974611][   T65] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   55.986017][   T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   55.995140][   T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.003174][   T65] usb 7-1: Product: syz
[   56.007591][   T65] usb 7-1: Manufacturer: syz
[   56.012176][   T65] usb 7-1: SerialNumber: syz
[   56.018813][   T65] cdc_mbim 7-1:1.0: skipping garbage
[   56.032707][  T461] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   56.182533][  T461] usb 6-1: Using ep0 maxpacket: 32
[   56.188795][  T461] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[   56.197375][  T461] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   56.206182][  T461] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[   56.215251][  T461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   56.224935][  T461] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   56.225298][ T1166] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   56.234749][  T461] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   56.254816][  T461] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   56.263893][  T461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.272590][  T461] usb 6-1: config 0 descriptor??
[   56.672612][  T408] tipc: Node number set to 2886997039
[   56.679738][  T461] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   56.692062][  T461] usb 6-1: USB disconnect, device number 5
[   56.698766][  T461] usblp0: removed
[   56.742107][ T1186] fuse: Bad value for 'user_id'
[   56.747305][ T1186] fuse: Bad value for 'user_id'
[   56.846478][ T1166] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   56.854033][   T65] cdc_mbim 7-1:1.0: setting tx_max = 56
[   56.860395][   T65] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[   56.868024][   T65] wwan wwan0: port wwan0mbim0 attached
[   56.875511][   T65] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 5e:a2:d3:f6:6b:53
[   56.909144][ T1190] devpts: called with bogus options
[   57.008946][  T148] 8021q: adding VLAN 0 to HW filter on device wwan0
[   57.019139][ T1207] bridge0: port 3(veth0_to_bridge) entered blocking state
[   57.026430][ T1207] bridge0: port 3(veth0_to_bridge) entered disabled state
[   57.034792][ T1207] veth0_to_bridge: entered allmulticast mode
[   57.041244][ T1207] veth0_to_bridge: entered promiscuous mode
[   57.047330][ T1207] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.059693][ T1207] bridge0: port 3(veth0_to_bridge) entered blocking state
[   57.063246][ T1166] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   57.066863][ T1207] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   57.081949][ T1166] rust_binder: 28: no such ref 1
[   57.091680][   T65] usb 7-1: USB disconnect, device number 2
[   57.098597][   T65] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[   57.139390][  T696] Bluetooth: hci0: Frame reassembly failed (-84)
[   57.185106][   T65] wwan wwan0: port wwan0mbim0 disconnected
[   57.263939][ T1224] incfs: Options parsing error. -22
[   57.281554][ T1224] incfs: mount failed -22
[   57.671167][ T1266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15890 sclass=netlink_route_socket pid=1266 comm=syz.6.285
[   57.712604][ T1249] sit0: entered promiscuous mode
[   57.718594][ T1249] netlink: 1 bytes leftover after parsing attributes in process `syz.5.281'.
[   57.740719][   T49] rust_binder: 1257: removing orphan mapping 0:96
[   57.747475][   T49] rust_binder: 0: removing orphan mapping 96:24
[   57.780095][ T1284] overlayfs: failed to resolve './file1': -2
[   57.802940][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.815026][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.827413][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.839636][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.851758][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.863778][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.875868][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.887913][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.900027][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.912075][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   58.118467][ T1304] rust_binder: Failed to allocate buffer. len:216, is_oneway:false
[   58.152572][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   58.152592][   T36] audit: type=1400 audit(1757179363.510:317): avc:  denied  { map } for  pid=1305 comm="syz.3.297" path="/60" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   58.243226][   T36] audit: type=1400 audit(1757179363.590:318): avc:  denied  { mount } for  pid=1307 comm="syz.3.298" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   58.299133][  T329] rust_binder: 1309: removing orphan mapping 0:24
[   58.312714][   T36] audit: type=1400 audit(1757179363.670:319): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   58.362542][  T461] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   58.453955][  T696] bridge_slave_1: left allmulticast mode
[   58.459722][  T696] bridge_slave_1: left promiscuous mode
[   58.473414][  T696] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.506857][  T696] bridge_slave_0: left allmulticast mode
[   58.513965][ T1325] __vm_enough_memory: pid: 1325, comm: syz.6.305, bytes: 18014402804453376 not enough memory for the allocation
[   58.522558][  T696] bridge_slave_0: left promiscuous mode
[   58.533877][  T696] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.541239][  T461] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   58.562621][  T461] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64
[   58.582697][  T461] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   58.644061][  T461] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   58.658632][  T461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   58.667220][  T461] usb 6-1: SerialNumber: syz
[   58.675669][ T1300] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   58.685722][  T461] hub 6-1:1.0: bad descriptor, ignoring hub
[   58.691646][  T461] hub 6-1:1.0: probe with driver hub failed with error -5
[   58.752249][  T696] veth1_macvtap: left promiscuous mode
[   58.758137][  T696] veth0_vlan: left promiscuous mode
[   58.847828][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.855144][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.862276][ T1328] bridge_slave_0: entered allmulticast mode
[   58.878511][ T1328] bridge_slave_0: entered promiscuous mode
[   58.884416][  T329] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   58.893142][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.901069][ T1300] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   58.909026][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.918028][ T1328] bridge_slave_1: entered allmulticast mode
[   58.925012][ T1328] bridge_slave_1: entered promiscuous mode
[   59.017849][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.024956][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.032250][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.039292][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.046634][  T329] usb 7-1: device descriptor read/64, error -71
[   59.078498][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.087019][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.109831][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.116935][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.125478][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.132537][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.162835][  T374] Bluetooth: hci0: command 0x1003 tx timeout
[   59.169082][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   59.191058][ T1328] veth0_vlan: entered promiscuous mode
[   59.213641][ T1328] veth1_macvtap: entered promiscuous mode
[   59.312601][  T329] usb 7-1: device descriptor read/64, error -71
[   59.327060][  T461] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[   59.340442][ T1344] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   59.406359][    T9] rust_binder: 1341: removing orphan mapping 0:104
[   59.426516][    T9] rust_binder: 0: removing orphan mapping 104:24
[   59.473637][   T10] rust_binder: 0: removing orphan mapping 0:96
[   59.500168][   T10] rust_binder: 0: removing orphan mapping 96:24
[   59.597509][ T1365] fuseblk: Bad value for 'rootmode'
[   59.603071][  T329] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   59.627982][ T1365] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   59.652729][ T1359] usb 6-1: USB disconnect, device number 6
[   59.663219][ T1359] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[   59.742552][  T329] usb 7-1: device descriptor read/64, error -71
[   59.895967][ T1392] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   59.915616][   T36] audit: type=1400 audit(1757179365.280:320): avc:  denied  { unmount } for  pid=1328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   59.959744][   T36] audit: type=1400 audit(1757179365.320:321): avc:  denied  { map } for  pid=1393 comm="syz.7.316" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   60.002609][  T329] usb 7-1: device descriptor read/64, error -71
[   60.022204][   T36] audit: type=1400 audit(1757179365.380:322): avc:  denied  { shutdown } for  pid=1399 comm="syz.7.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   60.056582][ T1401] overlayfs: failed to resolve './file0': -2
[   60.112646][  T329] usb usb7-port1: attempt power cycle
[   60.291824][   T36] audit: type=1400 audit(1757179365.650:323): avc:  denied  { map } for  pid=1414 comm="syz.5.322" path="socket:[12437]" dev="sockfs" ino=12437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   60.323234][ T1415] overlay: Unknown parameter 'dont_appraise'
[   60.339862][   T36] audit: type=1400 audit(1757179365.680:324): avc:  denied  { read accept } for  pid=1414 comm="syz.5.322" path="socket:[12437]" dev="sockfs" ino=12437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   60.462534][  T329] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   60.494879][  T329] usb 7-1: device descriptor read/8, error -71
[   60.509043][ T1417] netlink: 68 bytes leftover after parsing attributes in process `syz.5.323'.
[   60.633547][  T329] usb 7-1: device descriptor read/8, error -71
[   60.842657][ T1431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1431 comm=syz.7.326
[   60.867160][ T1431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6400 sclass=netlink_route_socket pid=1431 comm=syz.7.326
[   60.881348][  T329] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   60.916309][  T329] usb 7-1: device descriptor read/8, error -71
[   61.065440][  T329] usb 7-1: device descriptor read/8, error -71
[   61.074867][   T36] audit: type=1400 audit(1757179366.440:325): avc:  denied  { create } for  pid=1430 comm="syz.7.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.212779][  T329] usb usb7-port1: unable to enumerate USB device
[   61.657648][ T1447] fuseblk: Bad value for 'fd'
[   61.667320][ T1447] fuseblk: Bad value for 'fd'
[   61.676675][ T1447] fuseblk: Bad value for 'fd'
[   61.693893][ T1447] fuseblk: Bad value for 'fd'
[   61.704006][ T1447] fuseblk: Bad value for 'fd'
[   61.713227][ T1447] fuseblk: Bad value for 'fd'
[   61.722819][ T1447] fuseblk: Bad value for 'fd'
[   61.730963][ T1447] fuseblk: Bad value for 'fd'
[   61.740307][ T1447] fuseblk: Bad value for 'fd'
[   61.748987][ T1447] fuseblk: Bad value for 'fd'
[   61.758290][ T1447] fuseblk: Bad value for 'fd'
[   61.774796][ T1447] fuseblk: Bad value for 'fd'
[   61.797542][ T1447] fuseblk: Bad value for 'fd'
[   61.815166][ T1447] fuseblk: Bad value for 'fd'
[   61.842114][ T1447] fuseblk: Bad value for 'fd'
[   61.850002][ T1450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   61.861098][ T1447] fuseblk: Bad value for 'fd'
[   61.875976][ T1447] fuseblk: Bad value for 'fd'
[   61.904574][ T1447] fuseblk: Bad value for 'fd'
[   61.916478][ T1447] fuseblk: Bad value for 'fd'
[   61.925162][ T1447] fuseblk: Bad value for 'fd'
[   61.930036][ T1457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280
[   61.931792][ T1447] fuseblk: Bad value for 'fd'
[   61.985546][ T1447] fuseblk: Bad value for 'fd'
[   61.996376][ T1447] fuseblk: Bad value for 'fd'
[   62.006474][ T1447] fuseblk: Bad value for 'fd'
[   62.016152][ T1447] fuseblk: Bad value for 'fd'
[   62.023259][ T1447] fuseblk: Bad value for 'fd'
[   62.028995][ T1447] fuseblk: Bad value for 'fd'
[   62.034122][ T1447] fuseblk: Bad value for 'fd'
[   62.039043][ T1447] fuseblk: Bad value for 'fd'
[   62.044378][ T1447] fuseblk: Bad value for 'fd'
[   62.049348][ T1447] fuseblk: Bad value for 'fd'
[   62.054450][ T1447] fuseblk: Bad value for 'fd'
[   62.059333][ T1447] fuseblk: Bad value for 'fd'
[   62.066630][ T1447] fuseblk: Bad value for 'fd'
[   62.071819][ T1447] fuseblk: Bad value for 'fd'
[   62.077310][ T1447] fuseblk: Bad value for 'fd'
[   62.082453][ T1447] fuseblk: Bad value for 'fd'
[   62.087647][ T1447] fuseblk: Bad value for 'fd'
[   62.093232][ T1447] fuseblk: Bad value for 'fd'
[   62.109251][ T1447] fuseblk: Bad value for 'fd'
[   62.112852][ T1463] netlink: 2 bytes leftover after parsing attributes in process `syz.7.335'.
[   62.116887][   T36] audit: type=1400 audit(1757179367.480:326): avc:  denied  { nlmsg_read } for  pid=1459 comm="syz.7.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   62.147062][ T1447] fuseblk: Bad value for 'fd'
[   62.155179][ T1447] fuseblk: Bad value for 'fd'
[   62.160284][ T1447] fuseblk: Bad value for 'fd'
[   62.165229][ T1447] fuseblk: Bad value for 'fd'
[   62.170115][ T1447] fuseblk: Bad value for 'fd'
[   62.175097][ T1447] fuseblk: Bad value for 'fd'
[   62.179852][ T1447] fuseblk: Bad value for 'fd'
[   62.197883][ T1447] fuseblk: Bad value for 'fd'
[   62.202875][ T1447] fuseblk: Bad value for 'fd'
[   62.202939][ T1447] fuseblk: Bad value for 'fd'
[   62.202997][ T1447] fuseblk: Bad value for 'fd'
[   62.203053][ T1447] fuseblk: Bad value for 'fd'
[   62.203108][ T1447] fuseblk: Bad value for 'fd'
[   62.203164][ T1447] fuseblk: Bad value for 'fd'
[   62.203221][ T1447] fuseblk: Bad value for 'fd'
[   62.203277][ T1447] fuseblk: Bad value for 'fd'
[   62.203338][ T1447] fuseblk: Bad value for 'fd'
[   62.203395][ T1447] fuseblk: Bad value for 'fd'
[   62.203451][ T1447] fuseblk: Bad value for 'fd'
[   62.203515][ T1447] fuseblk: Bad value for 'fd'
[   62.203570][ T1447] fuseblk: Bad value for 'fd'
[   62.203626][ T1447] fuseblk: Bad value for 'fd'
[   62.203683][ T1447] fuseblk: Bad value for 'fd'
[   62.203737][ T1447] fuseblk: Bad value for 'fd'
[   62.203792][ T1447] fuseblk: Bad value for 'fd'
[   62.306669][ T1359] rust_binder: 1459: removing orphan mapping 0:4232
[   62.462536][  T329] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   62.504629][ T1484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'.
[   62.582733][ T1486] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   62.590874][ T1486] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   62.600069][ T1486] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   62.608574][ T1486] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   62.632562][  T329] usb 7-1: Using ep0 maxpacket: 8
[   62.638855][  T329] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   62.647858][  T329] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.658711][  T329] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   62.667920][  T329] usb 7-1: config 1 has no interface number 1
[   62.674278][  T329] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   62.693053][  T329] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   62.713436][  T329] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   62.723053][  T329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.732874][  T329] usb 7-1: Product: syz
[   62.737356][  T329] usb 7-1: Manufacturer: syz
[   62.741952][  T329] usb 7-1: SerialNumber: syz
[   62.752602][ T1359] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   62.812581][    C1] net_ratelimit: 78271 callbacks suppressed
[   62.812600][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.830626][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.842805][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.855000][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.867216][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.868720][ T1493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48
[   62.879338][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.900561][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.901478][ T1495] capability: warning: `syz.7.348' uses 32-bit capabilities (legacy support in use)
[   62.912848][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.922633][ T1359] usb 1-1: Using ep0 maxpacket: 16
[   62.934821][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.951483][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.974515][  T329] usb 7-1: USB disconnect, device number 7
[   62.986183][ T1359] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.009005][ T1359] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   63.053536][ T1359] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   63.067527][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.7.348
[   63.086102][ T1359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.095682][ T1359] usb 1-1: Product: syz
[   63.099862][ T1359] usb 1-1: Manufacturer: syz
[   63.107593][ T1359] usb 1-1: SerialNumber: syz
[   63.115985][ T1497] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   63.231734][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   63.231753][   T36] audit: type=1400 audit(1757179368.590:331): avc:  denied  { execute } for  pid=1502 comm="syz.5.351" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   63.289829][   T36] audit: type=1400 audit(1757179368.600:332): avc:  denied  { mount } for  pid=1499 comm="syz.7.350" name="/" dev="ramfs" ino=11466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   63.338255][ T1484] binder: Unknown parameter '„j|/ttyS3'
[   63.348332][ T1359] usb 1-1: 0:2 : does not exist
[   63.358880][ T1359] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   63.386338][ T1359] usb 1-1: USB disconnect, device number 20
[   63.412557][   T36] audit: type=1400 audit(1757179368.770:333): avc:  denied  { map } for  pid=1512 comm="syz.5.353" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   63.555294][ T1526] rust_binder: Write failure EFAULT in pid:83
[   63.703075][ T1535] netlink: 'syz.7.360': attribute type 46 has an invalid length.
[   63.733974][   T36] audit: type=1400 audit(1757179369.090:334): avc:  denied  { map } for  pid=1534 comm="syz.7.360" path="socket:[13556]" dev="sockfs" ino=13556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   63.778708][   T36] audit: type=1400 audit(1757179369.090:335): avc:  denied  { accept } for  pid=1534 comm="syz.7.360" path="socket:[13556]" dev="sockfs" ino=13556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   63.973795][  T768] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   64.246493][  T768] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   64.263695][  T768] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[   64.319558][  T768] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   64.350279][ T1553] syzkaller0: entered promiscuous mode
[   64.352937][  T768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.356325][ T1553] syzkaller0: entered allmulticast mode
[   64.381172][   T36] audit: type=1400 audit(1757179369.740:336): avc:  denied  { wake_alarm } for  pid=1552 comm="syz.7.366" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   64.402792][  T768] usb 6-1: Product: Т
[   64.406904][  T768] usb 6-1: Manufacturer: 뚕줹͚�壷�眰ꔽ⢅�詟쓎䥛筯铞�䘊฾션狰熢ඒ僻詅푉Ⲻ�촺銴�翱솬드夻羥�亟帷傌Ö躲ꚭࣰ︧렽䔗��텈꫱䑜㲆得鹽쵾싣耳魗茭ꊓ哟厕ﯽ棚ᖦ挞췠頾も줲�䱱连ߓ�ꢾἸ◘肵힢ﲧૃꡠ擄ἱ뗙¸�
[   64.493297][  T768] usb 6-1: SerialNumber: 쟮礞�ꈋ�둾꙾襊贚硕�া圣㽯贫�뉾騙���Ԯ褵삺䎊図᳆䠱伶꘿�ᅂ艻�ꂯ旮┪�໗竾嫜ꅴ沠フ�貃⺢ꘑ빭鴣넎씂撂찀旭⊞೪䀮붿悾핹䈉挪ﺟﻕ柴氙ᵨ㈻噌Ꞙ
[   64.541020][ T1562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'.
[   64.581987][ T1566] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   64.597170][   T36] audit: type=1400 audit(1757179369.960:337): avc:  denied  { write } for  pid=1567 comm="syz.7.371" name="ip6_mr_vif" dev="proc" ino=4026532852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   64.702548][  T329] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   64.840668][ T1571] __vm_enough_memory: pid: 1571, comm: syz.0.372, bytes: 18014402804453376 not enough memory for the allocation
[   64.863482][  T329] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   64.873449][  T329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.886745][ T1576] can: request_module (can-proto-0) failed.
[   64.893065][  T329] usb 7-1: config 0 descriptor??
[   64.979423][ T1579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   64.987096][ T1537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.995656][ T1579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   65.004289][ T1537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.142679][ T1584] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607)
[   65.142706][ T1584] rust_binder: Error while translating object.
[   65.155808][ T1584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   65.162005][ T1584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320
[   65.214944][ T1578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.239847][ T1578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.249538][ T1579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.259663][ T1579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.282407][  T768] cdc_ncm 6-1:1.0: bind() failure
[   65.293043][  T768] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[   65.323805][  T768] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[   65.353554][  T329] usb 7-1: Cannot set autoneg
[   65.358428][  T329] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   65.377297][  T768] usb 6-1: USB disconnect, device number 7
[   65.399033][  T329] usb 7-1: USB disconnect, device number 8
[   65.452914][   T36] audit: type=1400 audit(1757179370.820:338): avc:  denied  { ioctl } for  pid=1615 comm="syz.7.384" path="socket:[14073]" dev="sockfs" ino=14073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   65.533660][   T36] audit: type=1400 audit(1757179370.840:339): avc:  denied  { create } for  pid=1615 comm="syz.7.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   65.558442][ T1618] ªªªªªª<_¥m]€LÏÂ: renamed from lo
[   65.567057][   T36] audit: type=1400 audit(1757179370.840:340): avc:  denied  { sys_admin } for  pid=1615 comm="syz.7.384" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   65.975886][ T1639] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1639 comm=syz.7.392
[   65.992322][ T1639] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1639 comm=syz.7.392
[   66.005159][ T1639] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1639 comm=syz.7.392
[   66.020110][ T1639] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1639 comm=syz.7.392
[   66.242568][ T1641] rust_binder: Write failure EFAULT in pid:90
[   66.648801][ T1654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102
[   66.667442][  T329] rust_binder: 1652: removing orphan mapping 0:24
[   66.696719][ T1658] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   66.736072][ T1661] rust_binder: 107: no such ref 3
[   66.741295][ T1661] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   66.741315][ T1661] rust_binder: Read failure Err(EFAULT) in pid:107
[   66.938782][ T1669] rust_binder: Write failure EINVAL in pid:103
[   67.543355][ T1680] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   67.581911][ T1680] rust_binder: Write failure EINVAL in pid:105
[   67.822529][    C1] net_ratelimit: 60795 callbacks suppressed
[   67.822551][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.846858][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.852569][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   67.859152][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.878669][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.890777][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.902866][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.914957][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.927236][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.939532][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.951702][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.992669][   T10] usb 6-1: device descriptor read/64, error -71
[   68.043472][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.411'.
[   68.166977][ T1700] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   68.245132][   T10] usb 6-1: device descriptor read/64, error -71
[   68.378540][ T1712] netlink: 'syz.6.417': attribute type 16 has an invalid length.
[   68.492592][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   68.632538][   T10] usb 6-1: device descriptor read/64, error -71
[   68.873632][   T10] usb 6-1: device descriptor read/64, error -71
[   68.958696][ T1717] binder: Bad value for 'max'
[   68.996226][   T10] usb usb6-port1: attempt power cycle
[   69.231320][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   69.231337][   T36] audit: type=1400 audit(1757179374.590:344): avc:  denied  { execute } for  pid=1731 comm="syz.0.423" path="/newroot/sys/power/pm_async" dev="sysfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1
[   69.269606][ T1735] overlayfs: failed to resolve './file0redirect_dir=follow': -2
[   69.352535][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   69.372672][ T1741] rust_binder: Failed to allocate buffer. len:8, is_oneway:false
[   69.399398][   T10] usb 6-1: device descriptor read/8, error -71
[   69.483120][ T1743] 9pnet_fd: Insufficient options for proto=fd
[   69.544916][   T10] usb 6-1: device descriptor read/8, error -71
[   69.782564][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   69.814558][   T10] usb 6-1: device descriptor read/8, error -71
[   69.945803][   T10] usb 6-1: device descriptor read/8, error -71
[   70.062617][   T10] usb usb6-port1: unable to enumerate USB device
[   70.164315][ T1764] netlink: 40 bytes leftover after parsing attributes in process `syz.6.432'.
[   70.178989][ T1764] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   70.187873][ T1764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.187902][ T1764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171
[   70.212795][ T1765] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   70.229450][ T1765] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[   70.237162][ T1765] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   70.244431][ T1765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372
[   71.002104][ T1776] Zero length message leads to an empty skb
[   71.034312][ T1778] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[   71.053308][ T1778] overlayfs: missing 'lowerdir'
[   71.072525][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   71.149835][   T36] audit: type=1400 audit(1757179376.510:345): avc:  denied  { read } for  pid=1794 comm="syz.5.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.198472][   T36] audit: type=1400 audit(1757179376.560:346): avc:  denied  { block_suspend } for  pid=1791 comm="syz.6.440" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   71.237760][ T1796] binder: Unknown parameter 'ÿg>kSF~Þ²	Òz@ê¦'
[   71.345244][  T329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=329 comm=kworker/0:2
[   71.385169][  T329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=329 comm=kworker/0:2
[   71.402156][ T1816] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   71.416195][   T36] audit: type=1400 audit(1757179376.780:347): avc:  denied  { bind } for  pid=1815 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   71.610764][   T36] audit: type=1400 audit(1757179376.970:348): avc:  denied  { remount } for  pid=1826 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   72.156011][ T1849] 9pnet_fd: Insufficient options for proto=fd
[   72.304245][ T1858] netlink: 44 bytes leftover after parsing attributes in process `syz.7.462'.
[   72.322611][ T1858] netlink: 'syz.7.462': attribute type 6 has an invalid length.
[   72.338307][ T1858] netlink: 'syz.7.462': attribute type 5 has an invalid length.
[   72.346002][ T1858] netlink: 'syz.7.462': attribute type 4 has an invalid length.
[   72.354034][ T1860] netlink: 44 bytes leftover after parsing attributes in process `syz.7.462'.
[   72.384611][ T1860] netlink: 'syz.7.462': attribute type 6 has an invalid length.
[   72.392428][ T1860] netlink: 'syz.7.462': attribute type 5 has an invalid length.
[   72.401709][ T1860] netlink: 'syz.7.462': attribute type 4 has an invalid length.
[   72.526737][ T1874] rust_binder: 142: no such ref 3
[   72.563367][   T36] audit: type=1400 audit(1757184805.932:349): avc:  denied  { create } for  pid=1855 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   72.621947][   T36] audit: type=1400 audit(1757184805.982:350): avc:  denied  { connect } for  pid=1878 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   72.659444][   T36] audit: type=1400 audit(1757184806.012:351): avc:  denied  { write } for  pid=1878 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   72.735491][   T36] audit: type=1400 audit(1757184806.102:352): avc:  denied  { read } for  pid=1883 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   72.768189][ T1891] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   72.776455][ T1891] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   72.795297][ T1894] rust_binder: Write failure EFAULT in pid:424
[   72.795498][ T1894] rust_binder: Write failure EFAULT in pid:424
[   72.802983][   T36] audit: type=1400 audit(1757184806.102:353): avc:  denied  { write } for  pid=1883 comm="syz.0.471" path="socket:[16063]" dev="sockfs" ino=16063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   72.832518][    C1] net_ratelimit: 61119 callbacks suppressed
[   72.832536][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.838379][ T1891] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   72.838534][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.866594][ T1891] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   72.870487][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.890636][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.902870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.914956][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.927088][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.939143][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.951288][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.963340][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   73.049836][ T1900] 9pnet_fd: Insufficient options for proto=fd
[   73.474234][ T1922] netlink: 'syz.5.484': attribute type 1 has an invalid length.
[   73.482069][ T1922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.484'.
[   73.552822][ T1932] binder: Unknown parameter 'mLXè¦m´{•Iò{ÅŸÈ¿¬@¦‡’ƒ3iœÆ{‘q^¦'Kº¿³±Ñ&*–'
[   73.803303][   T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[   73.895945][ T1934] pim6reg1: entered promiscuous mode
[   73.901602][ T1934] pim6reg1: entered allmulticast mode
[   73.952569][   T10] usb 6-1: device descriptor read/64, error -71
[   74.212604][   T10] usb 6-1: device descriptor read/64, error -71
[   74.366864][    C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[   74.462582][   T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[   74.512531][  T472] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   74.602529][   T10] usb 6-1: device descriptor read/64, error -71
[   74.674872][  T472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.686051][  T472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.696166][  T472] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   74.706840][  T472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.716287][  T472] usb 7-1: config 0 descriptor??
[   74.842527][   T10] usb 6-1: device descriptor read/64, error -71
[   74.932552][  T472] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[   74.941840][  T472] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[   74.956688][   T10] usb usb6-port1: attempt power cycle
[   74.993523][   T36] audit: type=1400 audit(1757184808.362:354): avc:  denied  { load_policy } for  pid=1950 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   75.017496][ T1951] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[   75.031704][ T1951] SELinux: failed to load policy
[   75.064646][   T36] audit: type=1400 audit(1757184808.432:355): avc:  denied  { mount } for  pid=1957 comm="syz.0.495" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   75.095546][   T36] audit: type=1400 audit(1757184808.462:356): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   75.188284][  T329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   75.212655][  T329] hid-generic 0000:0000:0000.0005: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   75.312555][   T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[   75.361505][   T10] usb 6-1: device descriptor read/8, error -71
[   75.422424][  T472] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device
[   75.450189][  T472] arvo 0003:1E7D:30D4.0004: couldn't install keyboard
[   75.470955][  T472] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -71
[   75.496920][   T10] usb 6-1: device descriptor read/8, error -71
[   75.514199][  T472] usb 7-1: USB disconnect, device number 9
[   75.613836][  T329] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   75.621442][   T36] audit: type=1400 audit(1757184808.972:357): avc:  denied  { create } for  pid=1969 comm="syz.6.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   75.683428][  T329] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   75.755520][ T1968] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.772522][ T1968] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.782561][   T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[   75.791724][ T1968] bridge_slave_0: entered allmulticast mode
[   75.808231][ T1968] bridge_slave_0: entered promiscuous mode
[   75.815238][   T10] usb 6-1: device descriptor read/8, error -71
[   75.835340][ T1968] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.842763][ T1968] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.849948][ T1968] bridge_slave_1: entered allmulticast mode
[   75.856823][ T1968] bridge_slave_1: entered promiscuous mode
[   75.943559][   T10] usb 6-1: device descriptor read/8, error -71
[   75.956160][ T1968] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.963253][ T1968] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.970543][ T1968] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.978049][ T1968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.007093][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.017771][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.035230][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.042335][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.051292][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.058358][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.066917][   T10] usb usb6-port1: unable to enumerate USB device
[   76.096524][ T1968] veth0_vlan: entered promiscuous mode
[   76.110661][ T1968] veth1_macvtap: entered promiscuous mode
[   76.442289][   T36] audit: type=1400 audit(1757184809.802:358): avc:  denied  { watch } for  pid=1984 comm="syz.6.501" path="/67/file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   76.576325][   T36] audit: type=1400 audit(1757184809.932:359): avc:  denied  { getopt } for  pid=1986 comm="syz.7.502" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   76.599501][ T1987] rust_binder: Failed copying into alloc: EFAULT
[   76.599526][ T1987] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   76.613271][ T1989] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   76.621706][ T1987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   76.632940][ T1987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134
[   76.962535][   T10] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[   77.132521][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[   77.262561][   T10] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[   77.412515][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[   77.418125][   T10] usb usb6-port1: attempt power cycle
[   77.762537][   T10] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[   77.782892][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[   77.842511][    C1] net_ratelimit: 66019 callbacks suppressed
[   77.842527][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.860717][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.872891][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.885184][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.897234][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.909378][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.921549][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.922609][   T10] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[   77.933710][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.953163][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.963004][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[   77.965498][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.970892][   T10] usb usb6-port1: unable to enumerate USB device
[   79.652979][   T36] audit: type=1400 audit(1757184813.022:360): avc:  denied  { unmount } for  pid=960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   79.687098][ T1999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162
[   79.687676][ T1999] rust_binder: Read failure Err(EFAULT) in pid:162
[   79.743301][ T2007] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   80.452785][ T2018] rust_binder: Write failure EFAULT in pid:180
[   80.502496][    C1] sched: DL replenish lagged too much
[   80.617318][   T36] audit: type=1400 audit(1757184813.982:361): avc:  denied  { setattr } for  pid=1968 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.806150][   T36] audit: type=1400 audit(1757184814.172:362): avc:  denied  { mount } for  pid=2025 comm="syz.7.517" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   80.885769][ T2028] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   80.971713][ T2031] x_tables: unsorted underflow at hook 4
[   81.222548][ T2038] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   81.240596][ T2038] rust_binder: Write failure EINVAL in pid:227
[   81.994864][ T2059] rust_binder: Write failure EFAULT in pid:234
[   82.057028][ T2062] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   82.231780][   T36] audit: type=1400 audit(1757184815.592:363): avc:  denied  { read } for  pid=2063 comm="syz.5.530" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   82.317732][   T36] audit: type=1400 audit(1757184815.682:364): avc:  denied  { ioctl } for  pid=2063 comm="syz.5.530" path="socket:[17739]" dev="sockfs" ino=17739 ioctlcmd=0xaed4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   82.377461][ T2066] rust_binder: Error while translating object.
[   82.377517][ T2066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   82.384778][ T2066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203
[   82.484114][ T2070] rust_binder: Failed copying remainder into alloc: EFAULT
[   82.502251][ T2070] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   82.532178][ T2072] rust_binder: Error while translating object.
[   82.546283][ T2070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   82.565455][ T2070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:207
[   82.575265][ T2072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   82.593680][ T2072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:239
[   82.709798][ T2076] syzkaller0: entered promiscuous mode
[   82.743212][ T2076] syzkaller0: entered allmulticast mode
[   82.852654][    C1] net_ratelimit: 67107 callbacks suppressed
[   82.852673][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.865564][ T2079] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.870880][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.880355][ T2079] rust_binder: Error while translating object.
[   82.889572][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.902378][ T2079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   82.907962][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.914491][ T2079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:211
[   82.917543][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.950420][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.962645][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.974863][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.987146][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.999268][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   83.103973][   T36] audit: type=1400 audit(1757184816.472:365): avc:  denied  { setopt } for  pid=2082 comm="syz.6.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   83.166778][   T36] audit: type=1400 audit(1757184816.532:366): avc:  denied  { listen } for  pid=2084 comm="syz.6.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   83.207402][   T36] audit: type=1400 audit(1757184816.562:367): avc:  denied  { accept } for  pid=2084 comm="syz.6.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   83.396148][ T2097] syz.6.542 (2097): attempted to duplicate a private mapping with mremap.  This is not supported.
[   83.849395][   T36] audit: type=1400 audit(1757184817.212:368): avc:  denied  { getopt } for  pid=2103 comm="syz.6.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   84.001896][ T2109] rust_binder: Failed to allocate buffer. len:8, is_oneway:false
[   84.006886][   T36] audit: type=1400 audit(1757184817.372:369): avc:  denied  { getopt } for  pid=2106 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.862513][    C0] net_ratelimit: 131314 callbacks suppressed
[   87.862534][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   87.862667][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.868629][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   87.880932][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.892972][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   87.905059][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.917132][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   87.929088][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.941076][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   87.953434][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.872515][    C0] net_ratelimit: 175373 callbacks suppressed
[   92.872535][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   92.872557][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.878647][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.890616][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.902525][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   92.914390][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.926321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.938441][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.950302][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   92.962160][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.882514][    C1] net_ratelimit: 163904 callbacks suppressed
[   97.882536][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.882557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.888591][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.900767][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   97.912630][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.924507][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.936734][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.948463][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[   97.960402][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.972364][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.892505][    C0] net_ratelimit: 159620 callbacks suppressed
[  102.892526][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.892760][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.898725][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  102.910710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.922717][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.934775][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.946937][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  102.958810][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.970648][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.982977][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.902515][    C0] net_ratelimit: 157652 callbacks suppressed
[  107.902541][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.902638][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.908618][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  107.920696][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.932657][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.944667][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.956951][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  107.968756][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.980924][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.993187][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.912496][    C0] net_ratelimit: 153990 callbacks suppressed
[  112.912522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  112.912546][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.918609][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  112.930798][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.942533][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  112.954499][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.966526][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  112.978363][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.990321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  113.002368][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.922516][    C0] net_ratelimit: 152385 callbacks suppressed
[  117.922542][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  117.922596][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.928624][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  117.940617][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.952684][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  117.964571][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.976449][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  117.988666][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  118.000705][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  118.012868][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.932520][    C0] net_ratelimit: 156915 callbacks suppressed
[  122.932554][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.932791][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.938683][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  122.950567][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.962604][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.974585][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.986460][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  122.998380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  123.010387][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  123.022986][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.942553][    C0] net_ratelimit: 160890 callbacks suppressed
[  127.942580][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  127.942633][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.948647][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.960687][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.972659][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  127.984545][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.996703][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  128.009032][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  128.020971][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  128.033237][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.952493][    C0] net_ratelimit: 146415 callbacks suppressed
[  132.952520][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  132.952650][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.958605][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  132.970528][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.982522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  132.994684][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  133.006752][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  133.018890][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  133.030883][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  133.043280][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.962507][    C0] net_ratelimit: 158484 callbacks suppressed
[  137.962534][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  137.962566][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.968688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.980929][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.992669][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  138.004625][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  138.016644][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  138.028608][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  138.040509][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  138.052572][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.972485][    C1] net_ratelimit: 146710 callbacks suppressed
[  142.972512][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.972527][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  142.972578][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  142.978583][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.990637][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  143.002637][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.014621][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  143.026559][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.038381][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  143.050661][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.982517][    C0] net_ratelimit: 154507 callbacks suppressed
[  147.982552][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  147.982703][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.988765][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  148.001067][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.013172][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  148.025347][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.037542][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  148.049360][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.061267][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  148.073496][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.992494][    C0] net_ratelimit: 142894 callbacks suppressed
[  152.992518][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  152.992555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.998857][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  153.010870][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.023069][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  153.035038][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.046896][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  153.058880][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.070877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  153.082898][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.002510][    C0] net_ratelimit: 160039 callbacks suppressed
[  158.002535][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  158.002692][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.008729][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  158.020808][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.033016][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  158.045050][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.056908][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  158.068777][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.080770][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  158.092614][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.012522][    C0] net_ratelimit: 160589 callbacks suppressed
[  163.012549][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  163.012604][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.018654][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  163.030618][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.042889][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  163.054941][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.067135][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  163.079003][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.091075][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  163.103072][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.022502][    C0] net_ratelimit: 163699 callbacks suppressed
[  168.022528][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.022535][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.022574][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.028644][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.040556][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.052800][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  168.064683][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.076568][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  168.088560][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.100666][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.032479][    C0] net_ratelimit: 159909 callbacks suppressed
[  173.032505][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  173.032546][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.038578][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  173.050574][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.062575][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.074561][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.086694][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.098676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.110756][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  173.122646][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.042493][    C0] net_ratelimit: 161948 callbacks suppressed
[  178.042517][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  178.042649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.048804][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  178.060882][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.072901][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  178.084814][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.096685][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  178.108529][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.120516][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  178.132556][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.052465][    C0] net_ratelimit: 155618 callbacks suppressed
[  183.052491][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.052822][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.058599][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.070472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.082478][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  183.094372][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.106333][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  183.118727][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.130712][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.142697][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.062478][    C0] net_ratelimit: 163684 callbacks suppressed
[  188.062505][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  188.062765][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.068704][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  188.080695][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.092655][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  188.104737][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.117084][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  188.129061][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.141059][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  188.153009][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.072493][    C0] net_ratelimit: 155328 callbacks suppressed
[  193.072519][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.072599][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.078764][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.090714][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.102810][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  193.114890][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.126855][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  193.138806][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.150882][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.162939][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.082485][    C0] net_ratelimit: 136189 callbacks suppressed
[  198.082511][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.082788][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.088823][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  198.100733][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.113185][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  198.125275][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.137229][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.149161][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.161276][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.173207][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.092636][    C0] net_ratelimit: 149887 callbacks suppressed
[  203.092661][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  203.092728][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.098827][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  203.110932][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.123248][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.135199][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.147376][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.159349][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.171475][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  203.183377][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.102489][    C0] net_ratelimit: 152262 callbacks suppressed
[  208.102514][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  208.102733][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.108603][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  208.120617][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.132565][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.144911][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.156776][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.168626][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.180806][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  208.192664][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.673184][   T37] INFO: task syz.7.547:2111 blocked for more than 123 seconds.
[  210.680791][   T37]       Not tainted syzkaller #0
[  210.873019][   T36] audit: type=1400 audit(1757184944.232:370): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[2383]" dev="pipefs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  213.112448][    C0] net_ratelimit: 153916 callbacks suppressed
[  213.112472][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  213.112786][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.118552][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.130535][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.142611][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.154538][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.166410][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  213.178282][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.190283][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  213.202270][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.264495][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  216.632722][   T37] task:syz.7.547       state:D stack:0     pid:2111  tgid:2110  ppid:1328   flags:0x00004004
[  216.678156][   T37] Call Trace:
[  216.681482][   T37]  <TASK>
[  216.704571][   T37]  __schedule+0x1322/0x1df0
[  216.709143][   T37]  ? __sched_text_start+0x10/0x10
[  216.748884][   T37]  ? __kasan_record_aux_stack+0xb2/0xd0
[  216.782980][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  216.788344][   T37]  ? __kasan_check_write+0x18/0x20
[  216.820852][   T37]  ? trace_contention_begin+0xc0/0xc0
[  216.846671][   T37]  schedule+0xc6/0x240
[  216.850795][   T37]  schedule_preempt_disabled+0x14/0x30
[  216.881528][   T37]  __mutex_lock+0x81e/0x1b50
[  216.916158][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  216.979974][   T37]  ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10
[  217.144873][   T37]  ? __call_rcu_common+0x41f/0x700
[  217.150052][   T37]  __mutex_lock_slowpath+0xe/0x20
[  217.155114][   T37]  mutex_lock+0x102/0x1c0
[  217.159522][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  217.164369][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  217.170860][   T37]  rcu_barrier+0x4d/0x530
[  217.175237][   T37]  ? __kasan_check_write+0x18/0x20
[  217.180343][   T37]  ? kvm_destroy_vcpus+0x1c0/0x250
[  217.185457][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  217.190817][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  217.195621][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  217.200724][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  217.206374][   T37]  ? __kasan_check_write+0x18/0x20
[  217.211827][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  217.217463][   T37]  kvm_put_kvm+0xb04/0x12b0
[  217.222218][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  217.227421][   T37]  ? percpu_counter_add_batch+0xfc/0x1b0
[  217.233118][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  217.238669][   T37]  kvm_vm_release+0x47/0x70
[  217.243229][   T37]  __fput+0x1fe/0xa00
[  217.247315][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  217.252883][   T37]  ____fput+0x20/0x30
[  217.256863][   T37]  task_work_run+0x1e3/0x250
[  217.261445][   T37]  ? __cfi_task_work_run+0x10/0x10
[  217.266570][   T37]  ? __kasan_check_write+0x18/0x20
[  217.271696][   T37]  resume_user_mode_work+0x36/0x50
[  217.276826][   T37]  syscall_exit_to_user_mode+0x64/0xb0
[  217.282310][   T37]  do_syscall_64+0x64/0xf0
[  217.286835][   T37]  ? clear_bhb_loop+0x50/0xa0
[  217.291560][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  217.297577][   T37] RIP: 0033:0x7ffb8bf8ebe9
[  217.302017][   T37] RSP: 002b:00007ffb8cdbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  217.310443][   T37] RAX: 0000000000000000 RBX: 00007ffb8c1c5fa0 RCX: 00007ffb8bf8ebe9
[  217.318428][   T37] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  217.326589][   T37] RBP: 00007ffb8c011e19 R08: 0000000000000000 R09: 0000000000000000
[  217.334572][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.342560][   T37] R13: 00007ffb8c1c6038 R14: 00007ffb8c1c5fa0 R15: 00007ffe9d12a8b8
[  217.350588][   T37]  </TASK>
[  217.533919][   T37] NMI backtrace for cpu 1
[  217.533949][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5
[  217.533979][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  217.533991][   T37] Call Trace:
[  217.533997][   T37]  <TASK>
[  217.534005][   T37]  __dump_stack+0x21/0x30
[  217.534037][   T37]  dump_stack_lvl+0x10c/0x190
[  217.534058][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  217.534082][   T37]  dump_stack+0x19/0x20
[  217.534102][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  217.534126][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  217.534147][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  217.534170][   T37]  ? sched_show_task+0x379/0x560
[  217.534192][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  217.534211][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  217.534233][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  217.534253][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  217.534277][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  217.534298][   T37]  watchdog+0xd8f/0xed0
[  217.534321][   T37]  ? __cfi_watchdog+0x10/0x10
[  217.534342][   T37]  ? __kasan_check_read+0x15/0x20
[  217.534365][   T37]  ? __kthread_parkme+0x138/0x180
[  217.534381][   T37]  ? schedule+0xc6/0x240
[  217.534398][   T37]  kthread+0x2c7/0x370
[  217.534415][   T37]  ? __cfi_watchdog+0x10/0x10
[  217.534436][   T37]  ? __cfi_kthread+0x10/0x10
[  217.534454][   T37]  ret_from_fork+0x64/0xa0
[  217.534475][   T37]  ? __cfi_kthread+0x10/0x10
[  217.534493][   T37]  ret_from_fork_asm+0x1a/0x30
[  217.534517][   T37]  </TASK>
[  217.534524][   T37] Sending NMI from CPU 1 to CPUs 0:
[  217.726000][    C0] NMI backtrace for cpu 0
[  217.726017][    C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5
[  217.726037][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  217.726046][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70
[  217.726073][    C0] Code: de e8 00 29 52 00 5b 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc b8 19 29 4a c4 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 48 8b 45 08 65 48 8b 0c 25 40 eb 04 00 65 8b 15 1c 07
[  217.726084][    C0] RSP: 0018:ffffc90000006eb8 EFLAGS: 00000a02
[  217.726099][    C0] RAX: f3f3f304f1f1f1f1 RBX: 0000000000152820 RCX: 1ffff92000000de0
[  217.726110][    C0] RDX: 0000000000152820 RSI: 0000000000000000 RDI: ffffea0005377f80
[  217.726120][    C0] RBP: ffffc90000006f90 R08: ffffea0005377fb7 R09: 0000000000000000
[  217.726130][    C0] R10: ffffed1029bbfc00 R11: fffff94000a6eff7 R12: 0000000000000000
[  217.726140][    C0] R13: dffffc0000000000 R14: ffffea0005377f80 R15: 0000000000000000
[  217.726150][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  217.726163][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.726173][    C0] CR2: 000055cd147d5b98 CR3: 000000010975e000 CR4: 00000000003526b0
[  217.726186][    C0] Call Trace:
[  217.726191][    C0]  <IRQ>
[  217.726197][    C0]  ? __set_page_owner+0x7b/0x5d0
[  217.726218][    C0]  ? __cfi___set_page_owner+0x10/0x10
[  217.726232][    C0]  ? kasan_unpoison+0x4a/0x70
[  217.726251][    C0]  post_alloc_hook+0x3b9/0x3f0
[  217.726267][    C0]  ? __cfi_post_alloc_hook+0x10/0x10
[  217.726281][    C0]  ? gfp_to_alloc_flags_cma+0x1c0/0x1c0
[  217.726299][    C0]  ? _raw_spin_trylock+0xaf/0x130
[  217.726318][    C0]  ? __cfi__raw_spin_trylock+0x10/0x10
[  217.726336][    C0]  prep_new_page+0x1c/0x120
[  217.726350][    C0]  get_page_from_freelist+0x48ce/0x4960
[  217.726371][    C0]  ? __alloc_pages_noprof+0x7b0/0x7b0
[  217.726386][    C0]  ? static_key_count+0x45/0x70
[  217.726403][    C0]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  217.726420][    C0]  ? lruvec_init+0x231/0x280
[  217.726435][    C0]  __alloc_pages_noprof+0x31f/0x7b0
[  217.726450][    C0]  ? kasan_save_track+0x3e/0x80
[  217.726462][    C0]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  217.726478][    C0]  ? br_handle_frame+0x5a6/0xba0
[  217.726492][    C0]  ? process_backlog+0x3e5/0xae0
[  217.726505][    C0]  ? net_rx_action+0x584/0xce0
[  217.726516][    C0]  ? handle_softirqs+0x1ab/0x630
[  217.726535][    C0]  ? __do_softirq+0xf/0x16
[  217.726548][    C0]  ? __local_bh_enable_ip+0x74/0x80
[  217.726565][    C0]  ? rcu_nocb_cb_kthread+0x4dc/0xac0
[  217.726586][    C0]  alloc_slab_page+0x6b/0x1f0
[  217.726602][    C0]  allocate_slab+0x69/0x440
[  217.726615][    C0]  ___slab_alloc+0x59a/0x8b0
[  217.726628][    C0]  ? skb_clone+0x229/0x460
[  217.726642][    C0]  ? br_dev_queue_push_xmit+0x553/0x6d0
[  217.726660][    C0]  ? __copy_skb_header+0x453/0x5e0
[  217.726673][    C0]  kmem_cache_alloc_noprof+0x202/0x3a0
[  217.726691][    C0]  ? skb_clone+0x229/0x460
[  217.726704][    C0]  skb_clone+0x229/0x460
[  217.726736][    C0]  br_flood+0x661/0x730
[  217.726748][    C0]  br_handle_frame_finish+0x12bb/0x1720
[  217.726763][    C0]  ? __cfi_br_handle_frame_finish+0x10/0x10
[  217.726778][    C0]  br_handle_frame+0x5a6/0xba0
[  217.726792][    C0]  ? __cfi_br_handle_frame+0x10/0x10
[  217.726805][    C0]  __netif_receive_skb_core+0xf4b/0x3940
[  217.726823][    C0]  ? ip6_mc_input+0x4f3/0x670
[  217.726841][    C0]  ? ip6_mc_input+0x4f3/0x670
[  217.726857][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  217.726872][    C0]  ? kvm_sched_clock_read+0x15/0x30
[  217.726888][    C0]  ? qdisc_run_end+0x120/0x120
[  217.726905][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  217.726921][    C0]  ? ip6_rcv_finish+0x344/0x3c0
[  217.726936][    C0]  ? ipv6_rcv+0xed/0x220
[  217.726951][    C0]  ? __cfi_ipv6_rcv+0x10/0x10
[  217.726966][    C0]  ? __cfi_ip6_rcv_finish+0x10/0x10
[  217.726981][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  217.726998][    C0]  ? __kasan_check_read+0x15/0x20
[  217.727015][    C0]  process_backlog+0x3e5/0xae0
[  217.727027][    C0]  ? run_posix_cpu_timers+0x2c5/0x620
[  217.727044][    C0]  __napi_poll+0xd3/0x610
[  217.727060][    C0]  net_rx_action+0x584/0xce0
[  217.727074][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  217.727085][    C0]  ? sched_clock+0x44/0x60
[  217.727103][    C0]  ? __cfi_sched_clock_cpu+0x10/0x10
[  217.727120][    C0]  ? try_to_wake_up+0xdfb/0x1b00
[  217.727134][    C0]  ? irqtime_account_irq+0x51/0x1c0
[  217.727151][    C0]  handle_softirqs+0x1ab/0x630
[  217.727169][    C0]  __do_softirq+0xf/0x16
[  217.727181][    C0]  do_softirq+0xa6/0x100
[  217.727198][    C0]  </IRQ>
[  217.727202][    C0]  <TASK>
[  217.727207][    C0]  ? __cfi_do_softirq+0x10/0x10
[  217.727224][    C0]  ? dst_destroy+0x37d/0x460
[  217.727238][    C0]  ? __cfi_dst_destroy_rcu+0x10/0x10
[  217.727253][    C0]  __local_bh_enable_ip+0x74/0x80
[  217.727269][    C0]  rcu_do_batch+0x5c6/0xd20
[  217.727287][    C0]  ? rcu_core+0xd20/0xd20
[  217.727302][    C0]  ? _raw_spin_trylock+0xaf/0x130
[  217.727320][    C0]  ? __kasan_check_read+0x15/0x20
[  217.727336][    C0]  ? rcu_nocb_cb_kthread+0x4c7/0xac0
[  217.727352][    C0]  rcu_nocb_cb_kthread+0x4dc/0xac0
[  217.727370][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  217.727387][    C0]  ? __kasan_check_write+0x18/0x20
[  217.727403][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  217.727420][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  217.727437][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  217.727454][    C0]  ? set_cpus_allowed_ptr+0x93/0xe0
[  217.727467][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  217.727480][    C0]  ? __kasan_check_read+0x15/0x20
[  217.727496][    C0]  ? __kthread_parkme+0x138/0x180
[  217.727508][    C0]  ? schedule+0xc6/0x240
[  217.727520][    C0]  kthread+0x2c7/0x370
[  217.727533][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  217.727550][    C0]  ? __cfi_kthread+0x10/0x10
[  217.727562][    C0]  ret_from_fork+0x64/0xa0
[  217.727578][    C0]  ? __cfi_kthread+0x10/0x10
[  217.727603][    C0]  ret_from_fork_asm+0x1a/0x30
[  217.727624][    C0]  </TASK>
[  218.122632][    C1] net_ratelimit: 141080 callbacks suppressed
[  218.122655][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.124596][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  218.128865][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.133484][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)
[  218.138603][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.142989][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.148242][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.153200][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.158385][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.163155][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:2f:5e:d9:9d:dd, vlan:0)