last executing test programs:

2m21.122016138s ago: executing program 1 (id=17):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 64)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) (async, rerun: 64)
r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1)
fsmount(r2, 0x0, 0xf1)
ppoll(&(0x7f0000000040)=[{r1, 0x2}, {r1, 0xe260}], 0x2, 0x0, 0x0, 0x0) (async)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x9) (async, rerun: 64)
r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
sendmmsg$sock(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffd000) (async)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))

2m21.081218459s ago: executing program 1 (id=18):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x5f, 0x0, 0x0, 0x8c0}, 0x20008841)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/15, 0xf}, 0x9}], 0x1, 0x1000400000de, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000100))

2m21.03128963s ago: executing program 1 (id=19):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x240)
r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0x0, 0x140)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x7, 0x1}, 0xdc, 0x0, &(0x7f0000000080)="a465a2dc66e7a46721a77c92baa53a856d501ca59e4f6d87bdb04168685bcf76f7832e389473bcacd4ac1015b5074d1d03fd0172edc0e73b800e5ddda40857a8de2da852cf54a56cd92b2dfa3038dd37b2c4716872c594a34daf404773fbea5fed46ab7ecf5110f899916c0758bb9c6ba5f0fddb6475143b752da363b8de3e832ffc6eed2b6ea434ea5467f84f6aba450fc42691dd7f356e81cef7ee9b27c718529cde8b7060", 0xa6, 0xfff, 0x6, 0x5, 0x9, 0x2, &(0x7f0000000140)="d3bc04286d05be7f2692af000703f4759bb69f95717889b2b55df95fc1e454d4b5174abe3cc66d70cb0901996f209140cfe41d8ead098330eb0f27e7b06a6c987a5ca527fbecd1fdc0ece9d3d6310d09254191bae5f552c35ce884e1154756132b4acf5ad22cd13588e5ad17a668c92ebc25da906878d2c023aec53daa77835210ad802b"})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x3, 0x0, 0x5, '\x00', 0x2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$TIOCSCTTY(r6, 0x540e, 0x6)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESOCT=r7])
statx(r2, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x4, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000280)={0x1, 0x1})
clock_gettime(0x6, &(0x7f0000000040))

2m20.735300216s ago: executing program 1 (id=23):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa)
getdents64(r1, 0x0, 0x0)
r2 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00')
pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x12, 0x42, 0x601, 0x0, 0x25dfdbff, "", [@typed={0x4, 0x200}]}, 0x14}], 0x1}, 0x800)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}, 0x3a}], [], 0x2f})
dup3(r5, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000040)=[@decrefs], 0x0, 0x0, 0x0})

2m20.735117186s ago: executing program 1 (id=24):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m20.648951938s ago: executing program 1 (id=25):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f00000000c0)=@ng={0x4, 0x16, "f0548b0baaa9124c594791"}, 0xd, 0x5)

2m20.610194879s ago: executing program 32 (id=25):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f00000000c0)=@ng={0x4, 0x16, "f0548b0baaa9124c594791"}, 0xd, 0x5)

2m19.865276114s ago: executing program 3 (id=36):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r0, 0x8ee42000)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC], 0x50}}, 0x24000004) (async)
r2 = openat2(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x400080, 0x102, 0x8}, 0x18)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x2, 0x1}, 0x2, 0x2, &(0x7f0000000240)="9cfbc84b316ce97775e3b27bbb3f0df302961816980819e7dc5d4cb2d9ace3979a38123555ed4ea6ca5bf64c12b63371894bf82da47b20d74fbf0ade6848692e142d2b3d2783546248bcd0791ed4bf7423da8b6094d7ce167d238941903caa6357698c0551067a7d6ed17ab7b98483798f39d78e2a0e1f849f40f185a9d037e9868ba2f4408e804348a135580583fd8b463e4f80cc1989935c2409cf5ffd18f65ccea491e63a0824145f0210fa63fa0f703c321fb8a8be", 0xb7, 0x0, 0x1, 0x3c8356cf, 0x10, 0x7, &(0x7f0000000300)="f152c2214d90f310e8f63922328b3985e4e2764b0bff439878e1731058106c697d2b54b22d4e4503615f9d3e4691ad"}) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x400042, 0x26)
ioctl$KVM_CAP_STEAL_TIME(r3, 0x4068aea3, &(0x7f0000000100)) (async)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xbf0e, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000340))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
close_range(r5, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x41, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
madvise(&(0x7f0000a7b000/0x4000)=nil, 0x4000, 0x4)

2m19.002555082s ago: executing program 3 (id=46):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_create1(0x0) (async)
setresuid(0x0, 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = fsmount(r3, 0x0, 0x86)
fchdir(r4)
mkdir(&(0x7f0000000140)='./control\x00', 0x191)
rmdir(&(0x7f0000000100)='./control\x00')
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffffca) (async, rerun: 64)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0})

2m18.901922504s ago: executing program 3 (id=49):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x3b, [0x0, 0x0, 0x0, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x4000003, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080000, 0x0, 0x0, 0x0, 0xffffffff, 0x4], [0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x7ffffff, 0x2, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x40f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x2000001, 0xfffffffd, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xfffffff8], [0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20000000, 0x4, 0x0, 0x0, 0x1ed, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000000)={{0x1}})
ioctl$UI_DEV_CREATE(r3, 0x5501)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
write$snapshot(r3, &(0x7f0000000800)="c76f7659a5bb858f99b87d8a226ebd945c9b792658317ea2", 0x18)
getdents(r2, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6fd523b, 0x0, 0x1, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2c1fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0xfffffffffffffffe, 0xa]}})
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x354, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x442}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf72a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2a}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x5b, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2ee364af, @remote, 0x7fffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9982, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x6, @private2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbf}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x48, @empty, 0xfff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb5d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0})

2m18.879992304s ago: executing program 3 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2900000004000000000000010000000005000000000000007a0400a9fd000001010000000000000000"], 0x29)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000200)={0x0, "758eba9d39507f3f0754859e2b1ffd9266b145603d026c40580fb9f61a1739979d122cae99d2553ba640d17ee2dbb9b70daffd96a053f8e7c050456be58dea6d1eb062a0c4f276f41723361a3483e67e34740de7fdff54a0742464d50e296a87114c2f24cff455ca3caa19185b91afe39f5d1650b722983b31f8f650f8564a2a844afe4af846070e04fe4e69464b8a568df9e6fa71cd503a6857ab74e1702b38f62fe2a2f27b4b54359dd022efe2dbe38938ea08d2a9956943c538486ffbca07c413d2ecd8b24d829f6b0d9b2381d0e9569c55f180b1caedcdda065838e8da4a6888e96e5e3cf91c2943da8f1397a1c0f9212b7ae1338fc0510df22a67daa34a"})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
clock_gettime(0xfffffffffffffffe, 0x0)
mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendfile(r2, r3, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

2m18.867712325s ago: executing program 3 (id=52):
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync()
sync() (async)
sync()
sync() (async)
sync() (async)
sync()
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync() (async)
sync()
r0 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x1, 0x0, 0x4) (async)
sync()
sync() (async)
sync()
sync()
sync()

2m18.779070506s ago: executing program 3 (id=54):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_usb_connect(0x0, 0x77c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12011001228d5d4021040805efb40102030109026a07040110000d09041740030202ff050d240202050007004034195d9c0c2402010601820092bdf3cb1224020205000700068cb37e3c9ea732fa67090503001000800d01072501807f0b0007250180060600090505022000050003a724ad62e945e198842b6d4a1b7b57325db1b28b7b7c174491472668ed5df86daee2863eb195e8660e52ea70aed7f666f6cc2b8be93a3d9770a706c43101aa13b50ae20821ce779733af03f91f40fec08ff60a28b20b37cfcfdff132c274054a16491215259fba019b3c17ea1c62b98a12ffbfef015f6f82269555847217a8921112dc5a549c0faccbf0443f398c70da27a017ec81d475baecf9de175d8ff94660b432a9e235f209050f0010001005f7ce06b8bcf9782faac515442cef30beff7b87ed7057a7bf57d93de4"], 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
io_setup(0x2, 0x0)
close(0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x2001, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x1000000, [{0x3, 0x400}]}, 0xc, 0x1)

2m18.737808127s ago: executing program 33 (id=54):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_usb_connect(0x0, 0x77c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12011001228d5d4021040805efb40102030109026a07040110000d09041740030202ff050d240202050007004034195d9c0c2402010601820092bdf3cb1224020205000700068cb37e3c9ea732fa67090503001000800d01072501807f0b0007250180060600090505022000050003a724ad62e945e198842b6d4a1b7b57325db1b28b7b7c174491472668ed5df86daee2863eb195e8660e52ea70aed7f666f6cc2b8be93a3d9770a706c43101aa13b50ae20821ce779733af03f91f40fec08ff60a28b20b37cfcfdff132c274054a16491215259fba019b3c17ea1c62b98a12ffbfef015f6f82269555847217a8921112dc5a549c0faccbf0443f398c70da27a017ec81d475baecf9de175d8ff94660b432a9e235f209050f0010001005f7ce06b8bcf9782faac515442cef30beff7b87ed7057a7bf57d93de4"], 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
io_setup(0x2, 0x0)
close(0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x2001, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x1000000, [{0x3, 0x400}]}, 0xc, 0x1)

1m20.353185799s ago: executing program 4 (id=849):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x80)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000082505a1a440000f020b0109025c0002017f400f09040007010202000005241a"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
move_mount(r2, &(0x7f0000000180)='./file0\x00', r2, 0xfffffffffffffffc, 0x40)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

1m18.997883146s ago: executing program 4 (id=878):
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"])

1m18.943360208s ago: executing program 4 (id=879):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m18.943081278s ago: executing program 4 (id=880):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
getsockname(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000380)=0x80)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
unshare(0x22020600)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) (async)
wait4(0x0, 0x0, 0x2, 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

1m18.942914388s ago: executing program 4 (id=881):
r0 = syz_io_uring_setup(0x244d0, &(0x7f0000000500)={0x0, 0x1ff5f, 0x800, 0x0, 0x28d}, 0x0, 0x0)
syz_io_uring_setup(0x15bc, &(0x7f0000000100)={0x0, 0xf9c6, 0x2000, 0x3, 0x19d, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000080))
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
syz_io_uring_setup(0x1c4d, &(0x7f0000000180)={0x0, 0xfb61, 0x8, 0x2, 0xbe, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$ASHMEM_GET_NAME(r2, 0x40087708, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="0fbc5411660f3880540564660f38824a0a0f01d166b8080000000f23d00f21f86635300000000f23f80f20d86635200000000f22d836652e0f01c966b9c70a00000f320f20e06635100000000f22e0baf80c66b8449fb38866efbafc0cb8f900ef", 0x61}], 0x1, 0x0, &(0x7f0000000340), 0x0)

1m18.942298708s ago: executing program 4 (id=882):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) (async)
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt(r1, 0x1ff, 0x3, 0x0, 0x0) (async)
memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xab0f0f6a04ae5ee2}, 0x22000010) (async)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_misc(r3, &(0x7f0000000c80)="0912d540e319ba58fd070016c3452bff07d49615b0de25edd9090a8dcf84e8ccb8c2122799ea3e6dcc644672f6032959cabbb1289fba9b721402074df384597e51736059dd1a629c9e359a90d7e3e0445cca676572a4020284c5645a5b9029dd655124215622ed69031d4ad13a1babdb7303b112a8d86ac271aa35b92f389c492c192854995153625d4a2cd283bff4a16856f9957cec5b76bf8d2cea369127abcf115716c4aac8f8156aef7a677284eb1c8642f75691bdc371855e7d937fd03e3a7e9f7acb3e1fcb0df9a3aa290a000000000000cb1870f13419ce57d272c76c0c732f", 0xe3)
close(r3) (async)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m18.938119198s ago: executing program 34 (id=882):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) (async)
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt(r1, 0x1ff, 0x3, 0x0, 0x0) (async)
memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xab0f0f6a04ae5ee2}, 0x22000010) (async)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_misc(r3, &(0x7f0000000c80)="0912d540e319ba58fd070016c3452bff07d49615b0de25edd9090a8dcf84e8ccb8c2122799ea3e6dcc644672f6032959cabbb1289fba9b721402074df384597e51736059dd1a629c9e359a90d7e3e0445cca676572a4020284c5645a5b9029dd655124215622ed69031d4ad13a1babdb7303b112a8d86ac271aa35b92f389c492c192854995153625d4a2cd283bff4a16856f9957cec5b76bf8d2cea369127abcf115716c4aac8f8156aef7a677284eb1c8642f75691bdc371855e7d937fd03e3a7e9f7acb3e1fcb0df9a3aa290a000000000000cb1870f13419ce57d272c76c0c732f", 0xe3)
close(r3) (async)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m5.863562104s ago: executing program 6 (id=1125):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={<r5=>0x0, <r6=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="5b3d93a9b9", 0x5}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[], 0x78) (async)
write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[], 0x78)
recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0)
r7 = eventfd2(0x6, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x4, r7})
dup(0xffffffffffffffff)
mkdir(0x0, 0x21) (async)
mkdir(0x0, 0x21)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x100, r7})
close_range(r0, 0xffffffffffffffff, 0x0)

1m5.694550819s ago: executing program 6 (id=1130):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6) (async)
ptrace$poke(0x1, r6, &(0x7f00000004c0), 0x7fff) (async)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) (async)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100019482f6b7f89478d8ae3f2322fd2d00000000c9f29eb302", @ANYRES32, @ANYRESDEC], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x8000)
dup(r7) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x1042, &(0x7f0000000080)=ANY=[@ANYRES8=r7]) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)

1m5.359968375s ago: executing program 6 (id=1137):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)

1m2.321102637s ago: executing program 6 (id=1163):
unshare(0x64000400)
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

1m2.186067s ago: executing program 6 (id=1164):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000380)={0x10, @long={0x3, 0x3}}, 0x14)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
rt_sigpending(0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000e051a6fbcc95e835615d05df0f9e72965a9224d622b55a1fa85a0dc5653c0ac84004a9210bbb76439f07ed5e835f966ff08a6d59d52a3dc765ca75c5b9d69b761b9179ff38c344a70d2a34720283ff9eb03207bbf745a393a2bc4a69abc7e7140a1ca7620fee375e4b3bd1aacd41149f7d590d597b22f5a576b0598aeed5af63fcb3", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25010000000000000001410000001800170000001d000000037564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000001000/0x2000)=nil)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0x4b}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
connect$802154_dgram(r0, &(0x7f0000000380)={0x10, @long={0x3, 0x3}}, 0x14) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (async)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async)
rt_sigpending(0x0, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000e051a6fbcc95e835615d05df0f9e72965a9224d622b55a1fa85a0dc5653c0ac84004a9210bbb76439f07ed5e835f966ff08a6d59d52a3dc765ca75c5b9d69b761b9179ff38c344a70d2a34720283ff9eb03207bbf745a393a2bc4a69abc7e7140a1ca7620fee375e4b3bd1aacd41149f7d590d597b22f5a576b0598aeed5af63fcb3", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25010000000000000001410000001800170000001d000000037564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000001000/0x2000)=nil) (async)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0x4b}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async)

1m2.029507683s ago: executing program 6 (id=1167):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x7, 0x2581)
socket(0x11, 0x3, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000040, 0xb96b, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xff], 0x0, 0x200})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r6)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r6, 0x40085507, &(0x7f0000000080)=0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x2, 0xfffc, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r8 = fcntl$getown(r0, 0x9)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7ff, 0x4, 0x7, 0x3, 0x0, r8})

1m0.603201042s ago: executing program 5 (id=1174):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/404], 0x1ec}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) (async)
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) (async)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5a000a00bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a68", 0x59) (async)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x6, 0x9, 0x7, 0x7, 0x8, "677e0fc8199800d7"}) (async)
write(r4, &(0x7f0000001600)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073fe724fcd4d36b632f0bf6fb83756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171fa3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01efe150f0ffd163d3064d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d7609819a02fd202762975b2bf49910e57aea28e3632353f29711d460d5e85c5881f265e2372722654532bfb30b7ee54d40cafe09c96e2730304a570ea8069fa0649f1bd6cbe5b2d8e42fa0ab835b4eae46e983df2fefa0b5e5bec1594ba024b6acef03fc561a86959e3b928c552b39845621b549746ea4157b0d00000000000000", 0x7) (async)
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) (async)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
chroot(&(0x7f0000000000)='./file0\x00') (async)
getcwd(0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x3, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0xfb, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x18, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
fcntl$dupfd(r1, 0x0, r1)

1m0.602233922s ago: executing program 5 (id=1175):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$unix(0x1, 0x1, 0x0)
getpriority(0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f00000000c0)=0x564, 0x4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe38, {0x100000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb036000000aff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x718]}, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000028000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000006c0)={0xb, {0x200, 0x80000000, 0xfffffffa, 0x1, 0x24000000, 0x2}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r5, 0x0, 0x5, 0x0, &(0x7f0000000100))
preadv2(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/217, 0xd9}], 0x6, 0xfe000000, 0x8, 0x1)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r6, 0x0, 0x32, 0x0, &(0x7f0000004840))
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
rt_sigpending(0x0, 0xfffffffffffffe03)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000740)=ANY=[@ANYRES8=r6], 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

58.299122809s ago: executing program 0 (id=1190):
ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000100)=""/230)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = eventfd(0x1008c69)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) (async)
sendmsg$can_raw(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r0}, "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"}) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x4, r2, 0x19}) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x35, 0x0, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x3, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r7=>0xffffffffffffffff}) (async)
r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000d2c610a808e0797d2174b8010000000100"])
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100"})
close_range(r0, 0xffffffffffffffff, 0x0)

58.284458269s ago: executing program 0 (id=1191):
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c41"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ocfs2_dlmfs\x00', 0x8044ad, 0x0)

58.231377041s ago: executing program 0 (id=1192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(0x0, 0x5)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
fchdir(r3)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x48, 0x3d, 0x2c, 0x20, 0x403, 0xf850, 0x22cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x1, 0x20, 0x5, [{{0x9, 0x4, 0x78, 0x2, 0x0, 0x55, 0x31, 0x29, 0x8}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "3a2ab59930a79579"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc2ca2b5352ae001d}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000097838e585eb567804a8dca1637263dc7bcca9ffbe796b472bbfdfd9911a5ccb5bf5e62822c9393de725c6f96dbd0148d25bfdcd58d8a72529e4e69cc922606efa50ada35d12ca133be28dc9a2e949ba4f063e055c481900aeb0dcfea1e7fd0dd0ea2955f16d338a527f24df81259c03a0889028d0f13daf8da6c4f3c35c563c0d2a68604c32bc4b8d276cc9dcad219fc8d00d350f675af1b5cf08f9a3c25aa9fa6a5a7113ce97f896846e42cba2f098cde79f36ffe22e7c26713dfd6cae4", @ANYRES16=r4, @ANYBLOB="00042bbd7000ffdbdf255300000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r6, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

58.035216495s ago: executing program 5 (id=1193):
mount$9p_virtio(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40004, &(0x7f0000000340)={'trans=virtio,', {[{@posixacl}], [{@measure}, {@flag='async'}]}})
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
symlink(0x0, 0x0)
r2 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
lseek(r4, 0x2, 0x3)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x5}, @fda={0x66646185, 0x4, 0x1, 0x80000c}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

58.014529625s ago: executing program 5 (id=1194):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x10001, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32)
accept4(0xffffffffffffffff, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000380)=0x80, 0x0) (rerun: 32)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

57.959280666s ago: executing program 5 (id=1195):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r0 = timerfd_create(0x1, 0x800)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{r1, r2+60000000}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005a000101000000000000000004000080080002"], 0x1c}], 0x1}, 0x0)
read(r0, &(0x7f0000000180)=""/153, 0x99)
readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000400)=""/70, 0x46}], 0x5)

57.958876846s ago: executing program 5 (id=1196):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
io_setup(0x82, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='./file1\x00', &(0x7f00000005c0), 0x24, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x305000, 0x25)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x743982, 0x111)
r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40046721, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000240))

57.875077378s ago: executing program 2 (id=1198):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0}) (async)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async)
r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$can_raw(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x15, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48005}, 0x80) (async)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000340)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9e}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008044}, 0x40040000) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="3303000000040000080402"], 0x14}}, 0x40) (async)
r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000200)={r4, 0x1, 0x6, @broadcast}, 0x10) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffd000)

57.819304219s ago: executing program 2 (id=1199):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"])
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0xa}, 0x0, 0x0}})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) (async)
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="000000f70200000000442f00fe80000000000000000000000000004300000000000000000014bb0421881300000002050008000cfc86dd080088be00000003151ed309010000000000f88a080022eb00000004270729e302000000000001000003190708006558000000015a55858cc6871795807c746d0e00feaed223ca2f2a53f8e4a108d249a35d098b87a6ce31f9b5d9f26818158f57a6131965c53f96c6287ba0cdfc34d982b96c697a6c48314f6e5589dde1f0afbabb217734d81820e1310e9fa21755313823f1cbc3dde87a5b248dcc2efeb9640fde71130f46fb323d1d1ae881815f"], 0x7a)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000540)={{0xdddd0000, 0x5000, 0xe, 0xee, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x2, 0x7, 0x6}, {0x5000, 0xeeee0000, 0xd, 0x9, 0x8, 0x13, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xdddd0000, 0xe6e50002, 0x9, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x7, 0x6, 0x5}, {0xeeef0000, 0x8080000, 0x9, 0xf, 0x3, 0x46, 0x2, 0xd, 0x3, 0x3, 0xfc, 0x1}, {0x4, 0x100000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x8}, {0x2, 0x10000, 0x4, 0x7, 0x4, 0x6e, 0x1, 0xff, 0x8, 0x80, 0x0, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0xd6, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x3, 0x5, 0x3, 0x3, 0xa, 0x49, 0x54, 0x6, 0x2, 0x8}, {0x80a0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x1, 0x0, 0xeeee0000, [0x2, 0x401, 0x7, 0x4]})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0)

57.75916904s ago: executing program 0 (id=1200):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r0, 0x1e67b000) (async)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd}) (async)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000004fcff", 0x58}], 0x1)
r3 = socket(0xa, 0x1, 0x0)
unshare(0x44040200) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0xc7f, 0x0, 0xb, 0x8, 0x1]}, &(0x7f0000000bc0)=0x54)
futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) (async)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000012c0)={0x7, {{0xa, 0x4e20, 0x1, @mcast1, 0x7}}, {{0xa, 0x4e24, 0x14, @rand_addr=' \x01\x00', 0x7}}}, 0x108) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r5, &(0x7f0000000480)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
ioctl$TIOCSETD(r7, 0x541b, &(0x7f0000000ec0)) (async)
r8 = socket(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

57.747375041s ago: executing program 0 (id=1201):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff})
r1 = socket(0x2, 0x3, 0xfe)
sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001140)="281effe935fdce249bd774480a584b135c556eabe1a3f2724200a50e8002a6e5", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000054c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaa, 0x0, 0xf, [0x5f0f, 0x400]}, @ra={0x94, 0x4, 0x1}]}}}], 0x48}}], 0x2, 0x4800)
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r2}, @enter_looper], 0x54, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1"})
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
tkill(r3, 0x12)
waitid(0x0, r3, 0x0, 0x8, &(0x7f0000000240))
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000200)={r3, 0x1, 0x5})
r4 = syz_clone(0xee1f2fd3aeb117f3, &(0x7f0000000300)="c2bf2e294527fab770bc3b11d50978ba30699a038d2271b784ae466ed8654bfb79c545d5a7eea24b243d476373479496ef4658c53dbed163d655423c0c2395a8052a4781c64cbcf71bb716edce913b49d566439e06b247d97a056bad0a776d6393eea4330649861a2038ec81f3cdaf0e03803cefd3425a2e5f707b76741a228d66cb3aeb", 0x84, &(0x7f00000003c0), &(0x7f0000000480), &(0x7f0000000580)="2f567590d015bcd9ab7f200b818cb74b5062422a11cfa5c949fc10229dd3a6d810fab1af1c4a4b737435a62dedc5d839f2738dcadde983d19c525776b49af62c2c8ebcfce426623faf205440ab7ff18b39afdf6f37e6c5952da51f1a4b056a7c38da6e8972a2ca8ce7ea7630cbbc5a11fcfa7aa3")
kcmp(r3, r4, 0x5, r0, r0)
r5 = socket(0xa, 0x803, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'ip6erspan0\x00', {0x2, 0x4e20, @private=0xa010102}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

57.505731525s ago: executing program 0 (id=1202):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@mcast2}, {@in=@multicast1, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x200000000000}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x11, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r3)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
unshare(0x62040200)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@mcast2}, {@in=@multicast1, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x200000000000}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_mreqsrc(r1, 0x11, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r3) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
unshare(0x62040200) (async)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x1000) (async)

57.155397413s ago: executing program 2 (id=1203):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffeb9, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffeb9, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

55.914357188s ago: executing program 2 (id=1204):
r0 = getpid()
socket(0x1e, 0x4, 0x0) (async)
r1 = socket(0x1e, 0x4, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
r2 = getpid()
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
fcntl$dupfd(r3, 0x0, r3) (async)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x2, 0x1, 0x4}}, 0xe8)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0) (async)
close_range(r6, 0xffffffffffffffff, 0x0)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f00000015c0))
syz_pidfd_open(r2, 0x0)
syz_open_procfs$userns(r2, &(0x7f0000000100)) (async)
r7 = syz_open_procfs$userns(r2, &(0x7f0000000100))
timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, 0x0)
ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000000))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, 0x0) (async)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
syz_pidfd_open(r0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x76})
r11 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
write$rfkill(r11, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xfd}, 0x8)

48.747875424s ago: executing program 2 (id=1205):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x2})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

35.932491826s ago: executing program 35 (id=1167):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x7, 0x2581)
socket(0x11, 0x3, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000040, 0xb96b, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xff], 0x0, 0x200})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r6)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r6, 0x40085507, &(0x7f0000000080)=0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x2, 0xfffc, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r8 = fcntl$getown(r0, 0x9)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7ff, 0x4, 0x7, 0x3, 0x0, r8})

22.269335175s ago: executing program 2 (id=1207):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x18)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x31c}, 0x8)
bind$bt_sco(r2, &(0x7f0000000100), 0x8) (async)
listen(r2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
listen(r0, 0x0)

21.966780611s ago: executing program 36 (id=1202):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@mcast2}, {@in=@multicast1, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x200000000000}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x11, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r3)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
unshare(0x62040200)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@mcast2}, {@in=@multicast1, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x200000000000}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_mreqsrc(r1, 0x11, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r3) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
unshare(0x62040200) (async)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x1000) (async)

10.926420987s ago: executing program 37 (id=1196):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
io_setup(0x82, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='./file1\x00', &(0x7f00000005c0), 0x24, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x305000, 0x25)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x743982, 0x111)
r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40046721, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000240))

0s ago: executing program 38 (id=1207):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x18)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x31c}, 0x8)
bind$bt_sco(r2, &(0x7f0000000100), 0x8) (async)
listen(r2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
listen(r0, 0x0)

kernel console output (not intermixed with test programs):

ink: 8 bytes leftover after parsing attributes in process `syz.5.335'.
[   47.128983][ T1350] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[   47.225155][ T1363] syz.5.340 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   47.251234][  T330] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   47.262913][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   47.273968][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   47.283731][  T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   47.296657][  T330] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   47.305720][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.314355][  T330] usb 3-1: config 0 descriptor??
[   47.470261][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   47.510586][ T1366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.510613][ T1366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159
[   47.520443][ T1366] rust_binder: 159: no such ref 1
[   47.524001][  T330] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max
[   47.529742][ T1366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:159
[   47.537641][  T330] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   47.570561][  T330] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   47.600317][  T330] usb 3-1: USB disconnect, device number 11
[   47.610966][ T1376] syzkaller0: entered promiscuous mode
[   47.616509][ T1376] syzkaller0: entered allmulticast mode
[   47.623999][    T9] usb 6-1: config 0 has an invalid interface number: 72 but max is 0
[   47.636781][    T9] usb 6-1: config 0 has no interface number 0
[   47.643051][    T9] usb 6-1: too many endpoints for config 0 interface 72 altsetting 199: 192, using maximum allowed: 30
[   47.655101][    T9] usb 6-1: config 0 interface 72 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 192
[   47.670240][    T9] usb 6-1: config 0 interface 72 has no altsetting 0
[   47.677605][    T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   47.687955][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.701235][    T9] usb 6-1: config 0 descriptor??
[   47.723290][ T1383] 8021q: VLANs not supported on ip6gre0
[   47.747141][ T1387] netlink: 'syz.2.345': attribute type 4 has an invalid length.
[   47.758960][ T1387] netlink: 'syz.2.345': attribute type 17 has an invalid length.
[   47.769688][ T1387] capability: warning: `syz.2.345' uses 32-bit capabilities (legacy support in use)
[   47.779812][ T1387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238
[   47.824335][ T1392] kvm: user requested TSC rate below hardware speed
[   48.290248][  T330] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   48.466949][ T1363] rust_binder: Failed to vm_insert_page(35184372101120): vma_addr:35184372097024 i:1 err:EFAULT
[   48.466987][ T1363] rust_binder: Error in use_page_slow: EFAULT
[   48.477600][ T1363] rust_binder: use_range failure EFAULT
[   48.483813][ T1363] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[   48.489783][ T1363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   48.497965][ T1363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:148
[   48.498037][  T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   48.526954][  T330] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[   48.575080][  T330] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   48.584506][  T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.604395][    T9] usb 6-1: Cannot read MAC address
[   48.609590][    T9] MOSCHIP usb-ethernet driver 6-1:0.72: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   48.624700][  T330] usb 5-1: config 0 descriptor??
[   48.641479][    T9] usb 6-1: USB disconnect, device number 9
[   48.642519][  T330] hub 5-1:0.0: bad descriptor, ignoring hub
[   48.653916][  T330] hub 5-1:0.0: probe with driver hub failed with error -5
[   48.911210][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   48.911226][   T36] audit: type=1326 audit(1757231043.460:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="syz.5.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46fe98ebe9 code=0x0
[   48.959274][ T1453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251
[   48.990018][ T1455] 9pnet_fd: Insufficient options for proto=fd
[   49.006431][ T1455] 9pnet_fd: Insufficient options for proto=fd
[   49.032937][   T36] audit: type=1404 audit(1757231043.580:339): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   49.059234][   T36] audit: type=1404 audit(1757231043.580:340): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   49.090275][   T36] audit: type=1400 audit(1757231043.600:341): avc:  denied  { read write } for  pid=1459 comm="syz.2.369" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   49.113315][   T63] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[   49.122745][   T36] audit: type=1400 audit(1757231043.600:342): avc:  denied  { open } for  pid=1459 comm="syz.2.369" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   49.149256][   T36] audit: type=1400 audit(1757231043.600:343): avc:  denied  { create } for  pid=1440 comm="syz.5.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   49.168654][   T36] audit: type=1400 audit(1757231043.600:344): avc:  denied  { ioctl } for  pid=1459 comm="syz.2.369" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   49.194409][   T36] audit: type=1400 audit(1757231043.630:345): avc:  denied  { write } for  pid=1440 comm="syz.5.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   49.215133][   T36] audit: type=1400 audit(1757231043.670:346): avc:  denied  { ioctl } for  pid=1409 comm="syz.4.354" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   49.251334][   T36] audit: type=1400 audit(1757231043.700:347): avc:  denied  { read write } for  pid=1440 comm="syz.5.364" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   49.500275][ T1411] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   49.600571][   T31] usb 5-1: USB disconnect, device number 7
[   50.026003][ T1507] netlink: 'syz.0.382': attribute type 2 has an invalid length.
[   50.052965][ T1512] fuse: Unknown parameter 'rnotmo0000±000åíéfB800000000000000000000'
[   50.340252][   T63] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   50.491642][   T63] usb 5-1: not running at top speed; connect to a high speed hub
[   50.500261][   T63] usb 5-1: config 7 has an invalid interface number: 85 but max is 0
[   50.520228][   T63] usb 5-1: config 7 has no interface number 0
[   50.526336][   T63] usb 5-1: config 7 interface 85 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[   50.537495][   T63] usb 5-1: config 7 interface 85 has no altsetting 0
[   50.546372][   T63] usb 5-1: string descriptor 0 read error: -22
[   50.552640][   T63] usb 5-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00
[   50.561697][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.578549][   T63] usb-storage 5-1:7.85: USB Mass Storage device detected
[   51.040248][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   51.170238][    T9] usb 3-1: device descriptor read/64, error -71
[   51.410483][    T9] usb 3-1: device descriptor read/64, error -71
[   51.488640][ T1525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186
[   51.494383][ T1191] usb 5-1: USB disconnect, device number 8
[   51.510772][   T31] rust_binder: 1509: removing orphan mapping 0:24
[   51.527721][ T1528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191
[   51.528895][ T1528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.387'.
[   51.547028][ T1528] netlink: 43 bytes leftover after parsing attributes in process `syz.4.387'.
[   51.556218][ T1528] netlink: 'syz.4.387': attribute type 5 has an invalid length.
[   51.564084][ T1528] netlink: 43 bytes leftover after parsing attributes in process `syz.4.387'.
[   51.650245][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   51.780305][    T9] usb 3-1: device descriptor read/64, error -71
[   51.851973][ T1539] rust_binder: 1538 RLIMIT_NICE not set
[   51.855101][   T63] rust_binder: 1537: removing orphan mapping 0:4248
[   51.930261][ T1191] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   52.020344][    T9] usb 3-1: device descriptor read/64, error -71
[   52.080260][ T1191] usb 5-1: Using ep0 maxpacket: 8
[   52.086339][ T1191] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.097389][ T1191] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.107239][ T1191] usb 5-1: config 0 interface 0 has no altsetting 0
[   52.113967][ T1191] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[   52.123017][ T1191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.131509][    T9] usb usb3-port1: attempt power cycle
[   52.137147][ T1191] usb 5-1: config 0 descriptor??
[   52.180363][   T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   52.331330][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.342284][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.352196][   T31] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[   52.361266][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.369950][   T31] usb 6-1: config 0 descriptor??
[   52.480291][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   52.501316][    T9] usb 3-1: device descriptor read/8, error -71
[   52.554476][ T1191] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0
[   52.562798][ T1191] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0
[   52.569682][ T1191] ntrig 0003:1B96:0004.0006: item fetching failed at offset 2/5
[   52.577579][ T1191] ntrig 0003:1B96:0004.0006: parse failed
[   52.583367][ T1191] ntrig 0003:1B96:0004.0006: probe with driver ntrig failed with error -22
[   52.631498][    T9] usb 3-1: device descriptor read/8, error -71
[   52.756864][ T1534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   52.756896][ T1534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:197
[   52.767124][ T1191] usb 5-1: USB disconnect, device number 9
[   52.778241][   T31] hid-led 0003:04D8:F372.0007: unknown main item tag 0x0
[   52.790226][   T31] hid-led 0003:04D8:F372.0007: unknown main item tag 0x0
[   52.797289][   T31] hid-led 0003:04D8:F372.0007: unknown main item tag 0x0
[   52.805288][   T31] hid-led 0003:04D8:F372.0007: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.5-1/input0
[   52.829609][   T31] hid-led 0003:04D8:F372.0007: Greynut Luxafor initialized
[   52.870263][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   52.891313][    T9] usb 3-1: device descriptor read/8, error -71
[   52.983789][   T31] usb 6-1: USB disconnect, device number 11
[   52.990580][  T330] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[   52.999110][  T330] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[   53.007598][  T330] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[   53.015773][  T330] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[   53.024159][  T330] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[   53.031308][    T9] usb 3-1: device descriptor read/8, error -71
[   53.032594][  T330] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[   53.046616][  T330] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[   53.054959][  T330] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[   53.064113][  T330] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[   53.073128][  T330] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[   53.081937][  T330] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[   53.091771][  T330] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[   53.091834][ T1555] fuse: Unknown parameter 'JZê)²¢Å8ÄÈöž.group_id'
[   53.106819][  T330] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[   53.115888][  T330] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[   53.124862][  T330] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[   53.133878][  T330] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[   53.142230][  T330] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[   53.150414][    T9] usb usb3-port1: unable to enumerate USB device
[   53.150643][  T330] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[   53.521805][  T330] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   53.572375][ T1596] netlink: 'syz.5.409': attribute type 4 has an invalid length.
[   53.580384][ T1596] netlink: 17 bytes leftover after parsing attributes in process `syz.5.409'.
[   53.680297][  T330] usb 5-1: Using ep0 maxpacket: 16
[   53.686526][  T330] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[   53.694681][  T330] usb 5-1: config 0 has no interface number 0
[   53.700798][  T330] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   53.710686][  T330] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   53.720681][  T330] usb 5-1: config 0 interface 41 has no altsetting 0
[   53.728571][  T330] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   53.738515][  T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.746583][  T330] usb 5-1: Product: syz
[   53.750963][  T330] usb 5-1: Manufacturer: syz
[   53.756176][  T330] usb 5-1: SerialNumber: syz
[   53.769251][  T330] usb 5-1: config 0 descriptor??
[   53.774592][ T1577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   53.781855][ T1577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   53.789871][ T1606] binder: Bad value for 'defcontext'
[   53.806842][ T1608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.414'.
[   53.992790][ T1577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   54.000034][ T1577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   54.120235][   T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[   54.182783][   T36] kauditd_printk_skb: 81 callbacks suppressed
[   54.182800][   T36] audit: type=1400 audit(1757231048.730:429): avc:  denied  { getopt } for  pid=1617 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   54.251998][   T36] audit: type=1400 audit(1757231048.800:430): avc:  denied  { write } for  pid=1628 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   54.271652][   T36] audit: type=1400 audit(1757231048.820:431): avc:  denied  { connect } for  pid=1628 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   54.291546][   T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2043, setting to 64
[   54.305468][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   54.308519][   T36] audit: type=1400 audit(1757231048.860:432): avc:  denied  { remount } for  pid=1630 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   54.314635][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.342369][   T31] usb 3-1: Product: syz
[   54.347213][   T31] usb 3-1: Manufacturer: syz
[   54.351886][   T31] usb 3-1: SerialNumber: syz
[   54.357287][ T1616] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   54.565496][ T1616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.574048][ T1616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.584892][   T36] audit: type=1400 audit(1757231049.140:433): avc:  denied  { map } for  pid=1615 comm="syz.2.417" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   54.593194][   T31] cdc_ncm 3-1:1.0: bind() failure
[   54.613565][   T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   54.620389][   T31] cdc_ncm 3-1:1.1: bind() failure
[   54.627965][   T31] usb 3-1: USB disconnect, device number 16
[   54.642288][  T330] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   55.068807][ T1648] cgroup: Invalid name
[   55.109119][ T1654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1654 comm=syz.2.431
[   55.122430][   T36] audit: type=1400 audit(1757231049.670:434): avc:  denied  { create } for  pid=1653 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   55.124088][ T1654] exFAT-fs (rnullb0): invalid boot record signature
[   55.142410][   T36] audit: type=1400 audit(1757231049.670:435): avc:  denied  { bind } for  pid=1653 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   55.148642][ T1654] exFAT-fs (rnullb0): failed to read boot sector
[   55.167751][   T36] audit: type=1400 audit(1757231049.670:436): avc:  denied  { connect } for  pid=1653 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   55.174364][ T1654] exFAT-fs (rnullb0): failed to recognize exfat type
[   55.193646][   T36] audit: type=1400 audit(1757231049.670:437): avc:  denied  { read write } for  pid=1653 comm="syz.2.431" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   55.223216][   T36] audit: type=1400 audit(1757231049.670:438): avc:  denied  { open } for  pid=1653 comm="syz.2.431" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   55.603351][ T1686] 9pnet_fd: Insufficient options for proto=fd
[   55.611196][ T1686] 9pnet_fd: Insufficient options for proto=fd
[   55.628641][ T1692] fuse: Unknown parameter '	'
[   55.647884][ T1694] incfs: Options parsing error. -22
[   55.653281][ T1694] incfs: mount failed -22
[   55.750273][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   55.901382][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   55.911300][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   55.926563][  T330] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   55.937707][    T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   55.941869][  T330] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[   55.950759][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.956323][  T330] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[   55.965878][    T9] usb 3-1: Product: syz
[   55.976832][  T330] usb 5-1: USB disconnect, device number 10
[   55.977502][    T9] usb 3-1: Manufacturer: syz
[   55.987875][    T9] usb 3-1: SerialNumber: syz
[   55.993960][    T9] usb 3-1: config 0 descriptor??
[   55.999357][ T1684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   56.006580][ T1684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   56.078569][ T1718] fuse: Unknown parameter '18446744073709551615|†»‰nâåkñâ#�­w—°Ñ-z½Ëé¾ò!ô)§'òÏ:…Oü”lãÈÚÙ`
è#FúÜ	'
[   56.216840][ T1682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   56.226225][ T1682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   56.251273][ T1756] GUP no longer grows the stack in syz.0.461 (1756): 200000001000-200000c01000 (200000000000)
[   56.261667][ T1756] CPU: 0 UID: 0 PID: 1756 Comm: syz.0.461 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5
[   56.261686][ T1756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   56.261695][ T1756] Call Trace:
[   56.261699][ T1756]  <TASK>
[   56.261704][ T1756]  __dump_stack+0x21/0x30
[   56.261731][ T1756]  dump_stack_lvl+0x10c/0x190
[   56.261744][ T1756]  ? __cfi_dump_stack_lvl+0x10/0x10
[   56.261756][ T1756]  ? find_vma+0xcd/0x110
[   56.261765][ T1756]  ? save_stack+0x11c/0x1f0
[   56.261777][ T1756]  dump_stack+0x19/0x20
[   56.261788][ T1756]  __get_user_pages+0x1e34/0x22d0
[   56.261800][ T1756]  ? futex_lock_pi+0x77a/0xa10
[   56.261812][ T1756]  ? do_futex+0x2de/0x500
[   56.261821][ T1756]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.261834][ T1756]  ? __kasan_check_write+0x18/0x20
[   56.261849][ T1756]  ? free_unref_page_commit+0x5a4/0xea0
[   56.261861][ T1756]  ? down_read_killable+0x79/0xf0
[   56.261874][ T1756]  ? populate_vma_page_range+0x230/0x230
[   56.261884][ T1756]  ? free_unref_page+0x556/0xee0
[   56.261896][ T1756]  __gup_longterm_locked+0xcb1/0x1580
[   56.261908][ T1756]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   56.261922][ T1756]  ? __free_pages+0x6b/0x3b0
[   56.261934][ T1756]  ? free_pages+0x86/0x90
[   56.261946][ T1756]  gup_fast_fallback+0x12ae/0x14a0
[   56.261958][ T1756]  ? kasan_save_track+0x4f/0x80
[   56.261967][ T1756]  ? kasan_save_track+0x3e/0x80
[   56.261976][ T1756]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.261988][ T1756]  ? get_user_pages_fast_only+0xc0/0xc0
[   56.262000][ T1756]  get_user_pages_fast+0x73/0xb0
[   56.262011][ T1756]  get_futex_key+0x24d/0x930
[   56.262020][ T1756]  ? __cfi_get_futex_key+0x10/0x10
[   56.262029][ T1756]  ? futex_setup_timer+0xb4/0xd0
[   56.262038][ T1756]  futex_lock_pi+0x1c0/0xa10
[   56.262048][ T1756]  ? futex_unqueue+0x136/0x160
[   56.262057][ T1756]  ? __cfi_futex_lock_pi+0x10/0x10
[   56.262068][ T1756]  ? __cfi_futex_wake_mark+0x10/0x10
[   56.262080][ T1756]  ? futex_setup_timer+0xb4/0xd0
[   56.262089][ T1756]  ? __cfi_futex_wake_mark+0x10/0x10
[   56.262100][ T1756]  ? __se_sys_mremap+0x8d6/0x1010
[   56.262112][ T1756]  do_futex+0x2de/0x500
[   56.262122][ T1756]  ? __cfi_do_futex+0x10/0x10
[   56.262131][ T1756]  __se_sys_futex+0x28f/0x300
[   56.262141][ T1756]  ? __x64_sys_futex+0x110/0x110
[   56.262151][ T1756]  ? __kasan_check_write+0x18/0x20
[   56.262164][ T1756]  __x64_sys_futex+0xe9/0x110
[   56.262174][ T1756]  x64_sys_call+0x227f/0x2ee0
[   56.262187][ T1756]  do_syscall_64+0x58/0xf0
[   56.262208][ T1756]  ? clear_bhb_loop+0x50/0xa0
[   56.262220][ T1756]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.262231][ T1756] RIP: 0033:0x7f285638ebe9
[   56.262245][ T1756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.262253][ T1756] RSP: 002b:00007f285720c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   56.262268][ T1756] RAX: ffffffffffffffda RBX: 00007f28565c6090 RCX: 00007f285638ebe9
[   56.262276][ T1756] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000200000000b00
[   56.262283][ T1756] RBP: 00007f2856411e19 R08: 0000000000000000 R09: 0000000000000002
[   56.262290][ T1756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.262296][ T1756] R13: 00007f28565c6128 R14: 00007f28565c6090 R15: 00007fffc3b5bc98
[   56.262304][ T1756]  </TASK>
[   56.603200][    T9] Error reading MAC address
[   56.605609][ T1762] netlink: 'syz.2.462': attribute type 4 has an invalid length.
[   56.609583][    T9] usb 3-1: USB disconnect, device number 17
[   56.619079][ T1762] netlink: 17 bytes leftover after parsing attributes in process `syz.2.462'.
[   56.636374][ T1762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'.
[   56.950261][    T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[   56.970275][ T1191] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   57.101354][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   57.112323][    T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   57.121439][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.130786][ T1191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.141906][    T9] usb 3-1: config 0 descriptor??
[   57.146909][ T1191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.157024][ T1764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   57.157668][ T1191] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   57.173915][ T1191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.182549][ T1191] usb 5-1: config 0 descriptor??
[   57.575044][    T9] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0
[   57.583114][    T9] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0
[   57.592444][ T1191] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[   57.603539][    T9] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0
[   57.611043][    T9] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0
[   57.618463][    T9] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0
[   57.626565][    T9] hid-generic 0003:04F3:0755.0008: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[   57.778902][ T1764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.788223][ T1764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.798267][ T1191] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device
[   57.807898][ T1191] pyra 0003:1E7D:2CF6.0009: couldn't install mouse
[   57.831864][ T1806] overlayfs: failed to clone lowerpath
[   57.838444][ T1806] netlink: 'syz.5.477': attribute type 6 has an invalid length.
[   57.846485][ T1806] IPv6: NLM_F_CREATE should be specified when creating new route
[   57.853183][  T330] usb 3-1: USB disconnect, device number 18
[   57.860911][ T1191] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71
[   57.873676][ T1191] usb 5-1: USB disconnect, device number 11
[   58.435694][ T1817] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   58.436082][ T1817] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.587200][ T1836] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   58.860255][  T330] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   59.010252][  T330] usb 5-1: Using ep0 maxpacket: 32
[   59.026845][  T330] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   59.035866][  T330] usb 5-1: config 1 has an invalid descriptor of length 16, skipping remainder of the config
[   59.046344][  T330] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.055415][  T330] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   59.070282][  T330] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   59.080141][  T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.083629][ T1857] No source specified
[   59.088487][  T330] usb 5-1: Product: à°‡
[   59.097455][  T330] usb 5-1: Manufacturer: �筶ꇼ鮊뮸狔葛�⽃嶣᢫⸤巅袨魿羀텺楋�佒뼴໩䂬쭸㲳趺∂薯綿줜롪㶱콙罢跃㥹谊ᬎ秈ꋡ�鉹麻୓ଧ
[   59.114167][  T330] usb 5-1: SerialNumber: â°‰
[   59.119982][ T1839] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   59.223914][   T36] kauditd_printk_skb: 38 callbacks suppressed
[   59.223931][   T36] audit: type=1400 audit(1757231053.770:477): avc:  denied  { create } for  pid=1858 comm="syz.5.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   59.251067][   T36] audit: type=1400 audit(1757231053.770:478): avc:  denied  { sys_admin } for  pid=1858 comm="syz.5.494" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   59.272338][   T36] audit: type=1400 audit(1757231053.800:479): avc:  denied  { associate } for  pid=1858 comm="syz.5.494" name="rnullb0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   59.562440][  T330] usb 5-1: 0:2 : does not exist
[   59.569311][  T330] usb 5-1: USB disconnect, device number 12
[   59.647297][   T36] audit: type=1400 audit(1757231054.190:480): avc:  denied  { ioctl } for  pid=1863 comm="syz.2.495" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   59.920278][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   60.070261][    T9] usb 3-1: Using ep0 maxpacket: 16
[   60.082221][ T1873] tipc: Started in network mode
[   60.087195][ T1873] tipc: Node identity ac14142f, cluster identity 4711
[   60.087709][    T9] usb 3-1: config 8 has an invalid interface number: 53 but max is 3
[   60.094463][ T1873] tipc: New replicast peer: 2.0.0.0
[   60.102175][    T9] usb 3-1: config 8 has an invalid interface number: 254 but max is 3
[   60.107622][ T1873] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.115578][    T9] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[   60.127544][ T1873] netlink: 'syz.5.499': attribute type 1 has an invalid length.
[   60.133640][   T36] audit: type=1400 audit(1757231054.680:481): avc:  denied  { getopt } for  pid=1874 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   60.158792][    T9] usb 3-1: config 8 has an invalid interface number: 141 but max is 3
[   60.167121][    T9] usb 3-1: config 8 has an invalid interface number: 44 but max is 3
[   60.175325][   T36] audit: type=1400 audit(1757231054.720:482): avc:  denied  { nlmsg_read } for  pid=1881 comm="syz.5.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   60.195791][    T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   60.205887][    T9] usb 3-1: config 8 has no interface number 0
[   60.211983][    T9] usb 3-1: config 8 has no interface number 1
[   60.218040][    T9] usb 3-1: config 8 has no interface number 2
[   60.224225][    T9] usb 3-1: config 8 has no interface number 3
[   60.230335][    T9] usb 3-1: config 8 interface 53 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64
[   60.241129][    T9] usb 3-1: config 8 interface 53 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[   60.251734][    T9] usb 3-1: config 8 interface 53 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[   60.262344][    T9] usb 3-1: config 8 interface 53 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64
[   60.272157][    T9] usb 3-1: config 8 interface 53 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[   60.283023][    T9] usb 3-1: config 8 interface 53 altsetting 3 endpoint 0xD has an invalid bInterval 96, changing to 7
[   60.293966][    T9] usb 3-1: config 8 interface 53 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[   60.304575][    T9] usb 3-1: config 8 interface 254 altsetting 52 bulk endpoint 0xF has invalid maxpacket 32
[   60.314579][    T9] usb 3-1: config 8 interface 254 altsetting 52 has an invalid descriptor for endpoint zero, skipping
[   60.325529][    T9] usb 3-1: config 8 interface 254 altsetting 52 endpoint 0x2 has an invalid bInterval 64, changing to 7
[   60.336684][    T9] usb 3-1: config 8 interface 254 altsetting 52 endpoint 0x4 has an invalid bInterval 0, changing to 7
[   60.347724][    T9] usb 3-1: config 8 interface 254 altsetting 52 has a duplicate endpoint with address 0x1, skipping
[   60.358499][    T9] usb 3-1: config 8 interface 254 altsetting 52 bulk endpoint 0x8F has invalid maxpacket 64
[   60.368586][    T9] usb 3-1: config 8 interface 254 altsetting 52 has a duplicate endpoint with address 0x6, skipping
[   60.379390][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[   60.390089][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[   60.400817][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[   60.411511][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[   60.422212][    T9] usb 3-1: config 8 interface 141 altsetting 9 endpoint 0x5 has invalid maxpacket 39053, setting to 64
[   60.433271][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[   60.443965][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[   60.454684][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[   60.465379][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[   60.476064][    T9] usb 3-1: config 8 interface 141 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   60.486923][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[   60.497618][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[   60.508304][    T9] usb 3-1: config 8 interface 141 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[   60.519015][    T9] usb 3-1: config 8 interface 141 altsetting 9 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[   60.532242][    T9] usb 3-1: config 8 interface 44 altsetting 129 has a duplicate endpoint with address 0x4, skipping
[   60.543023][    T9] usb 3-1: config 8 interface 53 has no altsetting 0
[   60.549689][    T9] usb 3-1: config 8 interface 254 has no altsetting 0
[   60.556469][    T9] usb 3-1: config 8 interface 141 has no altsetting 0
[   60.563245][    T9] usb 3-1: config 8 interface 44 has no altsetting 0
[   60.571216][    T9] usb 3-1: New USB device found, idVendor=1bc7, idProduct=10a4, bcdDevice=ba.88
[   60.580291][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.588259][    T9] usb 3-1: Product: 䀊
[   60.592428][    T9] usb 3-1: Manufacturer: à ’
[   60.597009][    T9] usb 3-1: SerialNumber: à ‹
[   60.602159][    T9] usb 3-1: rejected 1 configuration due to insufficient available bus power
[   60.611140][    T9] usb 3-1: no configuration chosen from 1 choice
[   61.230254][  T330] tipc: Node number set to 2886997039
[   62.687346][    T9] usb 3-1: USB disconnect, device number 19
[   66.777916][   T36] audit: type=1400 audit(1757231061.320:483): avc:  denied  { create } for  pid=1883 comm="syz.4.505" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   66.819600][ T1898] 2N: renamed from vcan0
[   66.826081][   T36] audit: type=1400 audit(1757231061.360:484): avc:  denied  { unlink } for  pid=417 comm="syz-executor" name="file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   66.832622][ T1902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:235
[   66.906294][   T36] audit: type=1400 audit(1757231061.450:485): avc:  denied  { mount } for  pid=1911 comm="syz.0.514" name="/" dev="configfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   66.953611][   T36] audit: type=1400 audit(1757231061.500:486): avc:  denied  { mount } for  pid=1927 comm="syz.0.518" name="/" dev="ramfs" ino=12075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   67.029438][ T1932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.506'.
[   67.030224][   T36] audit: type=1400 audit(1757231061.570:487): avc:  denied  { create } for  pid=1887 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   67.646723][   T36] audit: type=1400 audit(1757231062.190:488): avc:  denied  { read } for  pid=1937 comm="syz.2.520" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   67.675391][   T36] audit: type=1400 audit(1757231062.190:489): avc:  denied  { open } for  pid=1937 comm="syz.2.520" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   67.709472][ T1947] ptm ptm11: ldisc open failed (-12), clearing slot 11
[   67.806271][   T36] audit: type=1400 audit(1757231062.350:490): avc:  denied  { setopt } for  pid=1959 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   67.891648][   T36] audit: type=1400 audit(1757231062.440:491): avc:  denied  { bpf } for  pid=1962 comm="syz.2.529" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   67.906847][ T1963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1539 sclass=netlink_tcpdiag_socket pid=1963 comm=syz.2.529
[   67.926206][ T1963] rust_binder: Write failure EFAULT in pid:352
[   67.984762][   T36] audit: type=1400 audit(1757231062.530:492): avc:  denied  { write } for  pid=1975 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   68.087361][ T1982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:259
[   68.220273][ T1191] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   68.320240][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   68.380233][ T1191] usb 3-1: Using ep0 maxpacket: 32
[   68.386354][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.397551][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.407309][ T1191] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   68.416359][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.424914][ T1191] usb 3-1: config 0 descriptor??
[   68.470233][    T9] usb 5-1: Using ep0 maxpacket: 32
[   68.476451][    T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   68.484862][    T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   68.493494][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   68.502524][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   68.512588][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   68.522276][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   68.535288][    T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   68.544382][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.553173][    T9] usb 5-1: config 0 descriptor??
[   68.762775][    T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   68.782078][    T9] usb 5-1: USB disconnect, device number 13
[   68.789967][    T9] usblp0: removed
[   68.836764][ T1191] savu 0003:1E7D:2D5A.000A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   69.093196][   T31] usb 3-1: USB disconnect, device number 20
[   69.210256][  T330] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[   69.361404][  T330] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   69.369767][  T330] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   69.378609][  T330] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   69.387804][  T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   69.397510][  T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   69.408336][  T330] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   69.421506][  T330] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   69.430763][  T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.439807][  T330] usb 5-1: config 0 descriptor??
[   69.445113][ T1982] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   69.654623][  T330] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   69.697356][ T2022] tc_dump_action: action bad kind
[   69.846369][ T2030] fuse: Unknown parameter '±yH­òÜ» '
[   69.852181][ T2030] /dev/loop5: Can't lookup blockdev
[   69.935739][ T2044] syzkaller0: entered promiscuous mode
[   69.941289][ T2044] syzkaller0: entered allmulticast mode
[   70.005117][    C1] usblp0: nonzero read bulk status received: -71
[   70.011592][ T2054] usblp0: error -71 reading from printer
[   70.017419][    C0] usblp0: nonzero read bulk status received: -71
[   70.224474][ T2054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.232973][ T2054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.350244][  T330] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   70.501201][  T330] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[   70.512083][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.521834][  T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[   70.534826][  T330] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[   70.543875][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.552473][  T330] usb 3-1: config 0 descriptor??
[   70.671782][ T2091] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   71.033715][  T330] usbhid 3-1:0.0: can't add hid device: -71
[   71.039765][  T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   71.048456][  T330] usb 3-1: USB disconnect, device number 21
[   71.262758][  T330] usb 5-1: USB disconnect, device number 14
[   71.271607][ T2131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'.
[   71.272386][  T330] usblp0: removed
[   71.298486][ T2131] kvm: kvm [2130]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0
[   71.589686][ T2157] overlay: ./file0 is not a directory
[   71.608228][ T2161] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   71.626676][ T2165] rust_binder: Error while translating object.
[   71.626712][ T2165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   71.632946][ T2165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:379
[   71.657050][ T2170] FAT-fs (rnullb0): bogus number of reserved sectors
[   71.672998][ T2170] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   71.724998][ T2186] rust_binder: Error while translating object.
[   71.725027][ T2186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   71.731324][ T2186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391
[   71.740769][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   71.778804][ T2190] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2190 comm=syz.2.607
[   71.900113][    T9] usb 5-1: Using ep0 maxpacket: 32
[   71.906862][    T9] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 251, changing to 11
[   71.917981][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[   71.926006][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.40
[   71.937288][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.945340][    T9] usb 5-1: Product: syz
[   71.952385][    T9] usb 5-1: Manufacturer: syz
[   71.956999][    T9] usb 5-1: SerialNumber: syz
[   71.959221][   T36] kauditd_printk_skb: 32 callbacks suppressed
[   71.959235][   T36] audit: type=1400 audit(1757493470.507:525): avc:  denied  { ioctl } for  pid=2198 comm="syz.2.610" path="socket:[14888]" dev="sockfs" ino=14888 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.965341][    T9] usb 5-1: rejected 1 configuration due to insufficient available bus power
[   72.001343][    T9] usb 5-1: no configuration chosen from 1 choice
[   72.085401][   T36] audit: type=1400 audit(1757493470.637:526): avc:  denied  { shutdown } for  pid=2203 comm="syz.5.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.199613][ T2216] netlink: 2 bytes leftover after parsing attributes in process `syz.5.617'.
[   72.199611][   T36] audit: type=1400 audit(1757493470.747:527): avc:  denied  { nlmsg_read } for  pid=2215 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   72.432719][   T36] audit: type=1400 audit(1757493470.987:528): avc:  denied  { getopt } for  pid=2219 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   72.459986][ T2222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2222 comm=syz.0.620
[   72.494238][ T2228] fuse: Bad value for 'fd'
[   72.506032][ T2230] netlink: 'syz.0.624': attribute type 3 has an invalid length.
[   72.526584][ T2238] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2238 comm=syz.0.626
[   72.539760][ T2238] bridge0: entered allmulticast mode
[   72.545768][   T36] audit: type=1400 audit(1757493471.097:529): avc:  denied  { write } for  pid=2237 comm="syz.0.626" name="file2" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   72.546779][ T2238] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2238 comm=syz.0.626
[   72.568259][   T36] audit: type=1400 audit(1757493471.097:530): avc:  denied  { open } for  pid=2237 comm="syz.0.626" path="/236/file2" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   72.603151][   T36] audit: type=1400 audit(1757493471.097:531): avc:  denied  { ioctl } for  pid=2237 comm="syz.0.626" path="/236/file2" dev="tmpfs" ino=1307 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   72.795412][ T2245] overlayfs: failed to clone upperpath
[   72.802880][   T36] audit: type=1400 audit(1757493471.357:532): avc:  denied  { read write } for  pid=2246 comm="syz.2.630" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   72.829772][   T36] audit: type=1400 audit(1757493471.357:533): avc:  denied  { open } for  pid=2246 comm="syz.2.630" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   72.856249][   T36] audit: type=1400 audit(1757493471.357:534): avc:  denied  { ioctl } for  pid=2246 comm="syz.2.630" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   72.901518][ T2259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:410
[   72.901635][ T2259] rust_binder: 410: no such ref 0
[   72.916217][ T2259] rust_binder: 410: no such ref 0
[   73.136941][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.136969][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.143516][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.150084][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.156557][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.163082][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.169514][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.169604][ T2278] rust_binder: Failed copying remainder into alloc: EFAULT
[   73.176019][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.182656][ T2278] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   73.189637][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.196250][ T2278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   73.204307][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.210788][ T2278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:416
[   73.220073][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.235546][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.241985][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.248454][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.254922][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.261371][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.267815][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.274370][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.280822][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.287232][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.293683][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.300123][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.306526][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.312970][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.319384][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.325842][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.332277][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.338683][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.345113][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.351552][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.357970][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.364422][ T2277] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.480206][ T2296] netlink: 'syz.5.645': attribute type 4 has an invalid length.
[   73.494282][ T2296] netlink: 'syz.5.645': attribute type 5 has an invalid length.
[   73.501947][ T2296] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.645'.
[   73.574038][ T2312] /dev/loop0: Can't lookup blockdev
[   73.675893][ T2329] ./file0: Can't lookup blockdev
[   74.504580][ T1191] usb 5-1: USB disconnect, device number 15
[   74.510769][    T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[   74.542060][ T2363] rust_binder: Failed copying remainder into alloc: EFAULT
[   74.542078][ T2363] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   74.549373][ T2363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   74.557726][ T2363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:278
[   74.649721][    T9] usb 3-1: device descriptor read/64, error -71
[   74.899703][    T9] usb 3-1: device descriptor read/64, error -71
[   74.949611][ T2376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2376 comm=syz.5.674
[   75.139720][    T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[   75.269680][    T9] usb 3-1: device descriptor read/64, error -71
[   75.302637][ T2387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285
[   75.308669][ T2390] netlink: 'syz.4.679': attribute type 7 has an invalid length.
[   75.509691][    T9] usb 3-1: device descriptor read/64, error -71
[   75.619721][    T9] usb usb3-port1: attempt power cycle
[   75.959573][    T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[   75.980554][    T9] usb 3-1: device descriptor read/8, error -71
[   76.054928][ T2438] incfs: Options parsing error. -22
[   76.060277][ T2438] incfs: mount failed -22
[   76.095336][ T2444] 9pnet_fd: Insufficient options for proto=fd
[   76.110674][    T9] usb 3-1: device descriptor read/8, error -71
[   76.171929][ T1191] rust_binder: 2401: removing orphan mapping 0:8
[   76.231086][ T2453] rust_binder: Error while translating object.
[   76.231110][ T2453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   76.237365][ T2453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:304
[   76.266550][ T2459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.284122][ T2459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.350080][    T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[   76.370957][    T9] usb 3-1: device descriptor read/8, error -71
[   76.499539][ T1191] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   76.507947][    T9] usb 3-1: device descriptor read/8, error -71
[   76.619607][    T9] usb usb3-port1: unable to enumerate USB device
[   76.640241][ T1191] usb 5-1: device descriptor read/64, error -71
[   76.889459][ T1191] usb 5-1: device descriptor read/64, error -71
[   76.920209][ T2515] overlayfs: failed to clone upperpath
[   77.129479][ T1191] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   77.259406][ T1191] usb 5-1: device descriptor read/64, error -71
[   77.289144][ T2525] binder: Unknown parameter '18446744073709551615'
[   77.289148][   T36] kauditd_printk_skb: 91 callbacks suppressed
[   77.289163][   T36] audit: type=1400 audit(1757493475.838:626): avc:  denied  { remount } for  pid=2524 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   77.445744][   T36] audit: type=1326 audit(1757493475.998:627): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2530 comm="syz.0.728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285638ebe9 code=0x0
[   77.499384][ T1191] usb 5-1: device descriptor read/64, error -71
[   77.609430][ T1191] usb usb5-port1: attempt power cycle
[   77.689361][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   77.819338][    T9] usb 3-1: device descriptor read/64, error -71
[   77.949840][ T1191] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   77.970279][ T1191] usb 5-1: device descriptor read/8, error -71
[   78.059332][    T9] usb 3-1: device descriptor read/64, error -71
[   78.082263][ T2547] overlayfs: failed to clone upperpath
[   78.100229][ T1191] usb 5-1: device descriptor read/8, error -71
[   78.299281][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   78.339299][ T1191] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[   78.360322][ T1191] usb 5-1: device descriptor read/8, error -71
[   78.381504][   T36] audit: type=1400 audit(1757493476.938:628): avc:  denied  { listen } for  pid=2557 comm="syz.0.736" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   78.403125][   T36] audit: type=1400 audit(1757493476.958:629): avc:  denied  { setattr } for  pid=2557 comm="syz.0.736" name="RAWv6" dev="sockfs" ino=16704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   78.439276][    T9] usb 3-1: device descriptor read/64, error -71
[   78.490298][ T1191] usb 5-1: device descriptor read/8, error -71
[   78.599371][ T1191] usb usb5-port1: unable to enumerate USB device
[   78.664423][   T36] audit: type=1400 audit(1757493477.218:630): avc:  denied  { accept } for  pid=2559 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   78.679260][    T9] usb 3-1: device descriptor read/64, error -71
[   78.683983][   T36] audit: type=1400 audit(1757493477.218:631): avc:  denied  { read } for  pid=2559 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   78.799298][    T9] usb usb3-port1: attempt power cycle
[   78.965945][   T36] audit: type=1400 audit(1757493477.518:632): avc:  denied  { bind } for  pid=2579 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   79.139213][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   79.160246][    T9] usb 3-1: device descriptor read/8, error -71
[   79.290388][    T9] usb 3-1: device descriptor read/8, error -71
[   79.316340][   T36] audit: type=1400 audit(1757493477.868:633): avc:  denied  { setopt } for  pid=2588 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.336230][   T36] audit: type=1400 audit(1757493477.868:634): avc:  denied  { write } for  pid=2588 comm="syz.4.746" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.360092][   T36] audit: type=1400 audit(1757493477.868:635): avc:  denied  { remove_name } for  pid=2588 comm="syz.4.746" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.539129][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   79.560101][    T9] usb 3-1: device descriptor read/8, error -71
[   79.564681][ T2602] cgroup: fork rejected by pids controller in /syz5
[   79.690270][    T9] usb 3-1: device descriptor read/8, error -71
[   79.749383][ T2644] overlayfs: failed to clone upperpath
[   79.756639][ T2646] overlayfs: failed to clone upperpath
[   79.802098][    T9] usb usb3-port1: unable to enumerate USB device
[   81.191654][ T2745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2745 comm=syz.2.787
[   81.417631][ T2766] netlink: 32 bytes leftover after parsing attributes in process `syz.5.795'.
[   82.068189][ T2832] netlink: 'syz.2.817': attribute type 4 has an invalid length.
[   82.076673][ T2832] netlink: 'syz.2.817': attribute type 4 has an invalid length.
[   82.134669][ T2837] overlay: Unknown parameter 'audit'
[   82.413485][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   82.413500][   T36] audit: type=1400 audit(1757493480.969:649): avc:  denied  { create } for  pid=2853 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   82.452861][ T2864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.825'.
[   82.500683][ T2867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27477 sclass=netlink_route_socket pid=2867 comm=syz.0.826
[   82.619755][   T36] audit: type=1400 audit(1757493481.179:650): avc:  denied  { create } for  pid=2870 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   83.019085][ T2897] netlink: 104 bytes leftover after parsing attributes in process `syz.5.836'.
[   83.152372][   T36] audit: type=1400 audit(1757493481.709:651): avc:  denied  { listen } for  pid=2905 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   83.235222][   T36] audit: type=1400 audit(1757493481.789:652): avc:  denied  { create } for  pid=2918 comm="syz.5.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[   83.564202][   T36] audit: type=1400 audit(1757493482.109:653): avc:  denied  { unmount } for  pid=417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   83.569265][  T330] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[   83.598670][   T36] audit: type=1400 audit(1757493482.119:654): avc:  denied  { read write } for  pid=2923 comm="syz.4.845" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   83.604807][  T330] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   83.636044][   T36] audit: type=1400 audit(1757493482.119:655): avc:  denied  { open } for  pid=2923 comm="syz.4.845" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   83.929027][   T13] syzkaller0: tun_net_xmit 76
[   83.930656][ T2940] syzkaller0: create flow: hash 3230596454 index 1
[   83.934121][   T13] syzkaller0: tun_net_xmit 48
[   83.968703][ T1191] syzkaller0: tun_net_xmit 76
[   84.108670][  T330] syzkaller0: tun_net_xmit 76
[   84.168474][ T2975] 9pnet_fd: Insufficient options for proto=fd
[   84.183099][   T36] audit: type=1326 audit(1757493482.739:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2976 comm="syz.5.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46fe98ebe9 code=0x0
[   84.206331][    T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[   84.214057][ T1191] syzkaller0: tun_net_xmit 76
[   84.370049][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[   84.378140][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[   84.386628][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.396822][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   84.405722][    T9] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   84.418687][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[   84.427223][    T9] usb 5-1: string descriptor 0 read error: -22
[   84.433513][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   84.442574][    T9] usb 5-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11
[   84.654126][  T330] usb 5-1: USB disconnect, device number 20
[   84.663449][ T2939] syzkaller0: delete flow: hash 3230596454 index 1
[   85.077589][ T2998] netlink: 104 bytes leftover after parsing attributes in process `syz.5.867'.
[   85.216913][ T3027] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[   85.330379][   T36] audit: type=1400 audit(1757493483.889:657): avc:  denied  { mounton } for  pid=3035 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   85.353686][  T337] bridge_slave_1: left allmulticast mode
[   85.359424][  T337] bridge_slave_1: left promiscuous mode
[   85.365259][  T337] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.373176][  T337] bridge_slave_0: left allmulticast mode
[   85.379065][  T337] bridge_slave_0: left promiscuous mode
[   85.384740][  T337] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.472417][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.479542][ T3035] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.486593][ T3035] bridge_slave_0: entered allmulticast mode
[   85.493017][ T3035] bridge_slave_0: entered promiscuous mode
[   85.502011][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.509123][ T3035] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.516260][ T3035] bridge_slave_1: entered allmulticast mode
[   85.522541][ T3035] bridge_slave_1: entered promiscuous mode
[   85.529294][  T337] veth1_macvtap: left promiscuous mode
[   85.534814][  T337] veth0_vlan: left promiscuous mode
[   85.645189][ T3067] netlink: 999 bytes leftover after parsing attributes in process `syz.2.892'.
[   85.672013][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.679073][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.686359][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.693398][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.700647][   T36] audit: type=1326 audit(1757493484.249:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3070 comm="syz.2.893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff81738ebe9 code=0x0
[   85.735150][ T3035] veth0_vlan: entered promiscuous mode
[   85.745654][ T3035] veth1_macvtap: entered promiscuous mode
[   85.800563][ T3090] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   85.869534][ T3090] rust_binder: Failed to allocate buffer. len:192, is_oneway:false
[   85.869556][ T3090] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[   85.877618][ T3090] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[   85.893151][ T1191] rust_binder: 3089: removing orphan mapping 0:96
[   86.148354][ T1191] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   86.309556][ T1191] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   86.321287][ T1191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.333679][ T1191] usb 7-1: config 0 descriptor??
[   87.547551][ T1191] usb 7-1: Cannot set autoneg
[   87.554304][ T1191] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   87.568679][ T1191] usb 7-1: USB disconnect, device number 2
[   88.017718][ T3171] tmpfs: Unknown parameter ';2¨SHrã�œkðùæ¹þQ:Û˜M7o+YÆ;W`åŠzÿæCû.¿�qUªòä"“Iî]À4sU•™Br?­I´S´ÏY'
[   88.184349][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   88.184372][   T36] audit: type=1400 audit(1757493486.729:668): avc:  denied  { wake_alarm } for  pid=3188 comm="syz.0.931" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   88.238573][ T3193] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[   88.738466][   T36] audit: type=1400 audit(1757493487.289:669): avc:  denied  { create } for  pid=3227 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   88.796980][ T3230] overlayfs: failed to clone upperpath
[   89.066230][ T3254] netlink: 'syz.0.954': attribute type 4 has an invalid length.
[   89.079917][ T3254] netlink: 'syz.0.954': attribute type 4 has an invalid length.
[   89.111043][ T3254] bridge0: port 3(veth0_to_bridge) entered blocking state
[   89.133522][ T3254] bridge0: port 3(veth0_to_bridge) entered disabled state
[   89.140784][ T3254] veth0_to_bridge: entered allmulticast mode
[   89.147277][ T3254] veth0_to_bridge: entered promiscuous mode
[   89.157847][ T3254] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   89.178271][ T3254] bridge0: port 3(veth0_to_bridge) entered blocking state
[   89.185438][ T3254] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   89.237280][   T36] audit: type=1400 audit(1757493487.779:670): avc:  denied  { lock } for  pid=3263 comm="syz.0.956" path="socket:[17884]" dev="sockfs" ino=17884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   89.268539][   T36] audit: type=1400 audit(1757493487.809:671): avc:  denied  { accept } for  pid=3263 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   89.359369][   T36] audit: type=1107 audit(1757493487.910:672): pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='p*G¶xžÈI…³RG3f¶«*-{ªá�.:¿—[¿nÏHêÜ`�ž±©,[p‚ÈÞ½<æá矞òécÿfÙ±oyóªàƒøR:ÍWsî6í”m(S±sÌ
[   89.359369][   T36] eHJ%E”ØC¦%ˆœ×k)N9ÐP´ó{Jæ¯Ùh:Žæá`îˆ}�ðGØÅ›)‹ÁoH·qqo;�Ðî5µ²8R]O£±MI¿µz¤Wžéz�塳:Èæú²æQи B4¸Û˜®ÍCˆ?Þ–½®¢¿øtŽø§ë•6±o[„aÇ”“^ÑWÐhÉHó3νQv¿72¦'
[   89.468832][ T3281] /dev/loop0: Can't lookup blockdev
[   89.481019][ T3286] netlink: 'syz.5.964': attribute type 4 has an invalid length.
[   89.488751][ T3286] netlink: 992 bytes leftover after parsing attributes in process `syz.5.964'.
[   89.542327][   T36] audit: type=1400 audit(1757493488.090:673): avc:  denied  { read } for  pid=3289 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   89.941038][ T3325] overlayfs: failed to clone upperpath
[   90.213808][   T36] audit: type=1400 audit(1757493488.760:674): avc:  denied  { mounton } for  pid=3339 comm="syz.6.986" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   90.213855][ T3340] 9pnet_fd: Insufficient options for proto=fd
[   90.245808][   T36] audit: type=1400 audit(1757493488.790:675): avc:  denied  { read } for  pid=3339 comm="syz.6.986" name="file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   90.421730][ T3353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38
[   90.498789][ T3359] netlink: 1327 bytes leftover after parsing attributes in process `syz.0.993'.
[   91.152465][   T36] audit: type=1400 audit(1757493489.700:676): avc:  denied  { listen } for  pid=3390 comm="syz.0.1004" path=2F3336332FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   91.386506][ T3404] rust_binder: Failed to vm_insert_page(35184372101120): vma_addr:35184372097024 i:1 err:EFAULT
[   91.386530][ T3404] rust_binder: Error in use_page_slow: EFAULT
[   91.397132][ T3404] rust_binder: use_range failure EFAULT
[   91.403314][ T3404] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[   91.409018][ T3404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   91.417011][ T3404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:49
[   91.455437][ T3413] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.1011'.
[   91.468415][ T3416] 9p: Unknown uid 00000000004294967295
[   91.474608][ T3413] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1011'.
[   91.512555][   T36] audit: type=1400 audit(1757493490.060:677): avc:  denied  { mount } for  pid=3415 comm="syz.0.1012" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   91.554923][ T3420] 9pnet_fd: Insufficient options for proto=fd
[   91.575106][ T3432] 9pnet_fd: p9_fd_create_tcp (3432): problem binding to privport
[   92.492151][ T3454] fuse: Bad value for 'fd'
[   92.537844][   T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   92.739642][   T31] usb 7-1: unable to get BOS descriptor or descriptor too short
[   92.746222][ T3471] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1031'.
[   92.754707][   T31] usb 7-1: unable to read config index 0 descriptor/start: -71
[   92.756709][ T3472] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1031'.
[   92.764487][   T31] usb 7-1: can't read configurations, error -71
[   93.595211][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   93.595228][   T36] audit: type=1400 audit(1757493492.140:680): avc:  denied  { setattr } for  pid=3485 comm="syz.6.1035" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   93.690928][   T36] audit: type=1400 audit(1757493492.240:681): avc:  denied  { append } for  pid=3495 comm="syz.6.1037" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.728803][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.728831][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.736549][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.743299][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.749990][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.756511][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.763258][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.769924][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.776462][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.783299][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.790115][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.796639][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.803386][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.810054][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.816602][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.823348][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.830030][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.836549][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.843312][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.849980][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.856527][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.863251][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.869932][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.876473][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.883265][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.889925][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.896482][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.903226][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.909901][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.916409][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.923171][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.929828][ T3500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.146701][ T3520] netlink: 'syz.0.1042': attribute type 4 has an invalid length.
[   94.162651][ T3520] 9pnet_fd: p9_fd_create_tcp (3520): problem connecting socket to 127.0.0.1
[   94.590122][ T3530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'.
[   94.677881][ T3535] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.722469][ T3541] 9pnet_fd: Insufficient options for proto=fd
[   94.738029][ T3542] random: crng reseeded on system resumption
[   94.747852][   T36] audit: type=1400 audit(1757493493.290:682): avc:  denied  { write } for  pid=3539 comm="syz.6.1048" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   94.796800][ T3542] tipc: Started in network mode
[   94.803077][ T3542] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711
[   94.827866][ T3542] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   94.838108][   T36] audit: type=1400 audit(1757493493.390:683): avc:  denied  { getopt } for  pid=3545 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   95.378399][ T3568] overlayfs: failed to clone upperpath
[   95.396180][ T3568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3568 comm=syz.0.1058
[   95.436446][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'.
[   95.457107][ T3586] overlayfs: failed to clone upperpath
[   95.472077][   T36] audit: type=1400 audit(1757493494.020:684): avc:  denied  { bind } for  pid=3589 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   95.516391][ T3594] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   95.535446][ T3600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.579297][ T3610] rust_binder: 100: no such ref 2
[   95.584562][ T3610] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   95.590319][   T36] audit: type=1400 audit(1757493494.140:685): avc:  denied  { listen } for  pid=3613 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   95.615919][   T36] audit: type=1400 audit(1757493494.160:686): avc:  denied  { setopt } for  pid=3607 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   95.687892][ T3626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106
[   95.704063][   T36] audit: type=1326 audit(1757493494.240:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.6.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330158ebe9 code=0x7ffc0000
[   95.737570][   T36] audit: type=1326 audit(1757493494.240:688): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.6.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330158ebe9 code=0x7ffc0000
[   95.769980][   T36] audit: type=1326 audit(1757493494.240:689): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.6.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330158ebe9 code=0x7ffc0000
[   95.827634][ T3645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.838159][ T3645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.067886][   T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[   96.218891][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   96.229854][   T10] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   96.238901][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.247434][   T10] usb 7-1: config 0 descriptor??
[   96.252685][ T3646] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   96.382561][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.394631][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.406794][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.418877][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.430976][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.443031][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.455164][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.467276][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.479414][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.491492][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.722943][   T10] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0
[   96.748799][   T10] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0
[   96.756204][   T10] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0
[   96.788827][   T10] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0
[   96.796225][   T10] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0
[   96.868611][   T10] hid-generic 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0
[   96.925856][    C1] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96
[   96.949225][   T10] usb 7-1: USB disconnect, device number 5
[   97.276447][ T3708] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.324992][ T3714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1108'.
[   97.337090][ T3714] tipc: Invalid UDP bearer configuration
[   97.337115][ T3714] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   97.731901][ T3734] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   97.924999][ T3740] input: syz1 as /devices/virtual/input/input9
[   98.253043][ T3754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135
[   98.673761][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   98.673782][   T36] audit: type=1400 audit(1757493497.190:699): avc:  denied  { map } for  pid=3782 comm="syz.0.1132" path="socket:[19993]" dev="sockfs" ino=19993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   98.800316][ T3791] devpts: called with bogus options
[   99.014443][ T3825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3825 comm=syz.2.1147
[   99.029068][ T3825] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1147'.
[   99.117871][  T330] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   99.279863][  T330] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   99.289170][  T330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.304007][  T330] usb 7-1: config 0 descriptor??
[   99.558958][   T36] audit: type=1400 audit(1757493498.110:700): avc:  denied  { ioctl } for  pid=3829 comm="syz.5.1149" path="socket:[19238]" dev="sockfs" ino=19238 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   99.612489][   T36] audit: type=1400 audit(1757493498.130:701): avc:  denied  { setattr } for  pid=3829 comm="syz.5.1149" path="socket:[19238]" dev="sockfs" ino=19238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   99.792078][   T36] audit: type=1326 audit(1757493498.340:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.5.1150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46fe98ebe9 code=0x0
[   99.855582][ T3842] overlayfs: failed to clone upperpath
[  100.468375][ T3846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'.
[  100.504964][ T3849] netlink: 'syz.0.1154': attribute type 4 has an invalid length.
[  100.516479][ T3849] netlink: 'syz.0.1154': attribute type 21 has an invalid length.
[  100.529234][ T3849] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1154'.
[  101.387869][    C0] net_ratelimit: 76311 callbacks suppressed
[  101.387889][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.405965][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.418006][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.430107][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.442185][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.454299][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.464570][ T3862] syz.0.1159 (3862): attempted to duplicate a private mapping with mremap.  This is not supported.
[  101.466352][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.489007][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.501166][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.513280][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.881996][  T330] usb 7-1: Cannot set autoneg
[  101.898739][  T330] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  101.926393][  T330] usb 7-1: USB disconnect, device number 6
[  102.050081][   T36] audit: type=1400 audit(1757493500.600:703): avc:  denied  { connect } for  pid=3878 comm="syz.6.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  102.071756][ T3879] rust_binder: Failed copying remainder into alloc: EFAULT
[  102.071779][ T3879] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  102.090063][ T3879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  102.112101][ T3879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:158
[  102.142443][   T36] audit: type=1400 audit(1757493500.690:704): avc:  denied  { mount } for  pid=3882 comm="syz.2.1166" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  102.282184][ T3891] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  102.485392][   T36] audit: type=1400 audit(1757493501.030:705): avc:  denied  { setopt } for  pid=3897 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  105.609647][ T3916] fuseblk: Unknown parameter 'vootmode'
[  105.616217][ T3917] fuseblk: Unknown parameter 'vootmode'
[  106.397830][    C0] net_ratelimit: 81131 callbacks suppressed
[  106.397847][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.415843][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.427918][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.439952][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.452048][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.464147][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.472178][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.476239][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.488150][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.500063][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.017792][    C0] sched: DL replenish lagged too much
[  111.407800][    C1] net_ratelimit: 113665 callbacks suppressed
[  111.407822][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.407898][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.413942][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.425795][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.437802][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.449786][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.461638][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.473484][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.485482][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.497463][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.417829][    C1] net_ratelimit: 115239 callbacks suppressed
[  116.417851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.417877][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.417938][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.423962][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.435978][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.447906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.459773][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.471751][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.483748][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.495642][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.427833][    C1] net_ratelimit: 118088 callbacks suppressed
[  121.427855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.427900][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.433970][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.445868][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.457723][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.469665][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.481628][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.493644][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.505502][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.517353][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.437840][    C1] net_ratelimit: 118241 callbacks suppressed
[  126.437861][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.437939][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.443962][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.455893][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.467892][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.479764][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.491600][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.503580][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.515569][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.527440][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.447782][    C1] net_ratelimit: 116421 callbacks suppressed
[  131.447806][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.447815][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.447914][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.453927][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.465794][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.477663][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.489662][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.501634][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.513471][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.525369][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.457804][    C1] net_ratelimit: 117622 callbacks suppressed
[  136.457826][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.457892][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.463948][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.475859][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.487924][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.499795][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.511656][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.523588][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.535597][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.547475][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.467781][    C1] net_ratelimit: 114446 callbacks suppressed
[  141.467803][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.467874][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.473898][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.485880][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.497881][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.510042][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.521926][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.534118][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.546075][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.558067][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.477812][    C0] net_ratelimit: 107822 callbacks suppressed
[  146.477833][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.477853][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.483889][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.495885][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.507797][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.519640][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.531484][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.543497][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.555383][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.567222][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  151.487855][    C1] net_ratelimit: 144279 callbacks suppressed
[  151.487877][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.487893][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.493950][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.505932][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.517980][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.530060][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.541936][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.553773][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  151.565750][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.577666][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.497818][    C1] net_ratelimit: 147738 callbacks suppressed
[  156.497838][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.497868][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.503936][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.515801][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.527815][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.541448][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.553257][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.565309][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  156.577267][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.589147][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.507781][    C0] net_ratelimit: 148415 callbacks suppressed
[  161.507802][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.507837][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.513855][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.525843][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.537992][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.549694][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.561562][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.573530][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.585419][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.597297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.517790][    C1] net_ratelimit: 140985 callbacks suppressed
[  166.517811][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.517829][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.523881][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.535805][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.547796][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.559877][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.571535][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.583403][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.595386][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  166.607385][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.527769][    C1] net_ratelimit: 144707 callbacks suppressed
[  171.527790][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.527836][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.533881][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.545740][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.557708][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  171.569696][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.581553][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.593479][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  171.605455][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.617455][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.537767][    C0] net_ratelimit: 145042 callbacks suppressed
[  176.537788][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.537807][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.544057][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.555767][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.567634][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.579644][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.591518][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.603353][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  176.615360][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  176.627299][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.547789][    C0] net_ratelimit: 145353 callbacks suppressed
[  181.547810][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.547841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.553862][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.565863][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.577964][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.589649][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.601486][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.613498][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.625414][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.637273][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  186.557845][    C1] net_ratelimit: 144211 callbacks suppressed
[  186.557865][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.557868][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.557916][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.563962][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.575920][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.587920][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.599778][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  186.611638][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  186.623656][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.635653][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.567788][    C0] net_ratelimit: 146204 callbacks suppressed
[  191.567810][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.567828][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.574334][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  191.586388][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.598278][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.610133][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.622161][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.634007][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.645961][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.657940][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.577803][    C1] net_ratelimit: 143957 callbacks suppressed
[  196.577824][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.577834][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.577880][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.583931][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.595844][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.607808][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.619711][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  196.631591][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  196.643539][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.655534][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.587797][    C1] net_ratelimit: 147831 callbacks suppressed
[  201.587819][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.587821][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.587872][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.593886][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.605927][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.617893][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.629766][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.641670][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.653637][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.665568][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.597785][    C0] net_ratelimit: 146472 callbacks suppressed
[  206.597807][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  206.597838][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  206.603877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.615796][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.627859][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.639664][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.651635][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.663648][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.675713][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.687364][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.607755][    C0] net_ratelimit: 143910 callbacks suppressed
[  211.607776][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.607808][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.613865][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.625736][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.637624][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  211.649577][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.661471][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.673345][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.685250][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.697085][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  216.617769][    C1] net_ratelimit: 145525 callbacks suppressed
[  216.617792][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.617861][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.623865][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.635837][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.647857][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.659716][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.671594][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.683518][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  216.695488][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.707480][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.627781][    C1] net_ratelimit: 144943 callbacks suppressed
[  221.627802][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.627816][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.627890][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.633880][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.645756][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.657666][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.669609][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.681482][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  221.693401][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.705413][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.637747][    C1] net_ratelimit: 140667 callbacks suppressed
[  226.637766][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.637941][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.643834][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.655811][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.667850][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.679716][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.691584][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.703516][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  226.715475][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.727523][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.647772][    C1] net_ratelimit: 146916 callbacks suppressed
[  231.647792][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.657818][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.665873][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.677798][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.689672][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.701610][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.713465][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.725411][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  231.737385][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  231.749252][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.657751][    C1] net_ratelimit: 138279 callbacks suppressed
[  236.657774][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.657786][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.657838][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.663835][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  236.676025][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.687804][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.699666][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.711628][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.723639][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.735578][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.667752][    C0] net_ratelimit: 142784 callbacks suppressed
[  241.667773][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.667801][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  241.673822][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.685839][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.697823][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.709644][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.721605][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  241.733600][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.745491][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.757333][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.677725][    C0] net_ratelimit: 145108 callbacks suppressed
[  246.677746][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.677770][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.683793][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  246.695793][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.707680][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.719543][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.731455][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.743315][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.755140][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  246.767120][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)
[  251.210405][   T37] INFO: task syz.5.1196:3985 blocked for more than 122 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  251.458957][   T36] audit: type=1400 audit(1757493649.930:706): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[2955]" dev="pipefs" ino=2955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  251.687741][    C1] net_ratelimit: 148726 callbacks suppressed
[  251.687762][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.687770][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.687836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.693875][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.705795][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.717728][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.729584][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  251.741517][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.753553][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.765507][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.779481][   T37]       Not tainted syzkaller #0
[  252.037197][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.045935][   T37] task:syz.5.1196      state:D stack:0     pid:3985  tgid:3985  ppid:510    flags:0x00004000
[  252.056165][   T37] Call Trace:
[  252.059490][   T37]  <TASK>
[  252.062426][   T37]  __schedule+0x1322/0x1df0
[  252.066941][   T37]  ? __sched_text_start+0x10/0x10
[  252.072007][   T37]  ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10
[  252.078718][   T37]  ? __call_rcu_common+0x41f/0x700
[  252.083853][   T37]  schedule+0xc6/0x240
[  252.087956][   T37]  schedule_timeout+0xb2/0x3a0
[  252.092730][   T37]  ? __cfi_schedule_timeout+0x10/0x10
[  252.098132][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  252.103693][   T37]  ? __percpu_ref_switch_mode+0x345/0x5f0
[  252.109436][   T37]  wait_for_common+0x359/0x630
[  252.114209][   T37]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  252.120180][   T37]  ? wait_for_completion+0x40/0x40
[  252.125304][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  252.131148][   T37]  ? percpu_ref_kill_and_confirm+0xf4/0x220
[  252.137057][   T37]  ? kill_ioctx+0x2b0/0x3d0
[  252.141593][   T37]  wait_for_completion+0x1c/0x40
[  252.146539][   T37]  exit_aio+0x2df/0x3b0
[  252.150730][   T37]  ? __cfi_exit_aio+0x10/0x10
[  252.155438][   T37]  ? uprobe_clear_state+0x2cd/0x340
[  252.160663][   T37]  __mmput+0x30/0x320
[  252.164655][   T37]  ? mmput+0x4d/0x170
[  252.168657][   T37]  mmput+0x55/0x170
[  252.172472][   T37]  do_exit+0x918/0x2630
[  252.176635][   T37]  ? percpu_counter_add_batch+0xfc/0x1b0
[  252.182304][   T37]  ? preempt_schedule_common+0x2d/0x60
[  252.187796][   T37]  ? __cfi_do_exit+0x10/0x10
[  252.192393][   T37]  ? preempt_schedule+0xb0/0xd0
[  252.197247][   T37]  ? __cfi_preempt_schedule+0x10/0x10
[  252.202649][   T37]  do_group_exit+0x22a/0x300
[  252.207258][   T37]  __x64_sys_exit_group+0x43/0x50
[  252.212310][   T37]  x64_sys_call+0x2ed2/0x2ee0
[  252.217004][   T37]  do_syscall_64+0x58/0xf0
[  252.221450][   T37]  ? clear_bhb_loop+0x50/0xa0
[  252.226141][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  252.232069][   T37] RIP: 0033:0x7f46fe98ebe9
[  252.236489][   T37] RSP: 002b:00007ffc6b9e9a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  252.244948][   T37] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f46fe98ebe9
[  252.252959][   T37] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  252.260960][   T37] RBP: 00007ffc6b9e9aac R08: 0000000d6b9e9b3f R09: 00000000000927c0
[  252.268968][   T37] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000129
[  252.276950][   T37] R13: 00000000000927c0 R14: 0000000000019ed7 R15: 00007ffc6b9e9b00
[  252.284959][   T37]  </TASK>
[  252.308063][   T37] NMI backtrace for cpu 1
[  252.308082][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5
[  252.308112][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  252.308123][   T37] Call Trace:
[  252.308129][   T37]  <TASK>
[  252.308137][   T37]  __dump_stack+0x21/0x30
[  252.308166][   T37]  dump_stack_lvl+0x10c/0x190
[  252.308187][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  252.308210][   T37]  dump_stack+0x19/0x20
[  252.308230][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  252.308254][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  252.308275][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  252.308297][   T37]  ? sched_show_task+0x379/0x560
[  252.308319][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  252.308339][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  252.308360][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  252.308381][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  252.308405][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  252.308426][   T37]  watchdog+0xd8f/0xed0
[  252.308449][   T37]  ? __cfi_watchdog+0x10/0x10
[  252.308470][   T37]  ? __kasan_check_read+0x15/0x20
[  252.308493][   T37]  ? __kthread_parkme+0x138/0x180
[  252.308509][   T37]  ? schedule+0xc6/0x240
[  252.308526][   T37]  kthread+0x2c7/0x370
[  252.308544][   T37]  ? __cfi_watchdog+0x10/0x10
[  252.308565][   T37]  ? __cfi_kthread+0x10/0x10
[  252.308583][   T37]  ret_from_fork+0x64/0xa0
[  252.308605][   T37]  ? __cfi_kthread+0x10/0x10
[  252.308623][   T37]  ret_from_fork_asm+0x1a/0x30
[  252.308648][   T37]  </TASK>
[  252.308655][   T37] Sending NMI from CPU 1 to CPUs 0:
[  252.503476][    C0] NMI backtrace for cpu 0
[  252.503490][    C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5
[  252.503509][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  252.503517][    C0] RIP: 0010:unwind_get_return_address+0x5a/0x90
[  252.503541][    C0] Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 87 fc 97 00 48 8b 3b e8 1f 13 13 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 6c fc 97 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f
[  252.503552][    C0] RSP: 0018:ffffc90000007020 EFLAGS: 00000246
[  252.503565][    C0] RAX: 0000000000000001 RBX: ffffc90000007090 RCX: 0000000000007000
[  252.503575][    C0] RDX: ffffc90000227e01 RSI: 1ffff92000000e0a RDI: ffffffff8157da27
[  252.503586][    C0] RBP: ffffc90000007038 R08: ffffc90000007110 R09: ffffc90000007108
[  252.503596][    C0] R10: 0000000000000016 R11: ffffffff81744330 R12: ffff88810367df00
[  252.503606][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000000e12
[  252.503616][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  252.503629][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  252.503639][    C0] CR2: 00007fcb63bf84c0 CR3: 00000001a3be4000 CR4: 00000000003526b0
[  252.503651][    C0] Call Trace:
[  252.503656][    C0]  <IRQ>
[  252.503663][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  252.503684][    C0]  arch_stack_walk+0x10b/0x170
[  252.503697][    C0]  ? kthread+0x2c7/0x370
[  252.503711][    C0]  stack_trace_save+0x9d/0xe0
[  252.503728][    C0]  ? __cfi_stack_trace_save+0x10/0x10
[  252.503746][    C0]  ? kmem_cache_free+0x1c1/0x510
[  252.503765][    C0]  ? netlink_broadcast_filtered+0x10e1/0x11f0
[  252.503778][    C0]  ? nlmsg_notify+0xf1/0x1b0
[  252.503791][    C0]  ? rtnl_notify+0x9e/0xd0
[  252.503804][    C0]  ? fdb_notify+0xce/0x150
[  252.503821][    C0]  ? br_fdb_update+0x4b7/0x680
[  252.503838][    C0]  ? br_handle_frame_finish+0x39c/0x1720
[  252.503851][    C0]  ? br_handle_frame+0x5a6/0xba0
[  252.503864][    C0]  ? __netif_receive_skb_core+0xf4b/0x3940
[  252.503882][    C0]  kasan_save_track+0x3e/0x80
[  252.503895][    C0]  ? kasan_save_track+0x3e/0x80
[  252.503907][    C0]  ? kasan_save_free_info+0x4a/0x60
[  252.503923][    C0]  ? __kasan_slab_free+0x5f/0x80
[  252.503936][    C0]  ? kmem_cache_free+0x1c1/0x510
[  252.503953][    C0]  ? __kfree_skb+0x18f/0x210
[  252.503972][    C0]  ? consume_skb+0x65/0x1a0
[  252.503990][    C0]  ? netlink_broadcast_filtered+0x10e1/0x11f0
[  252.504002][    C0]  ? nlmsg_notify+0xf1/0x1b0
[  252.504014][    C0]  ? rtnl_notify+0x9e/0xd0
[  252.504027][    C0]  ? fdb_notify+0xce/0x150
[  252.504043][    C0]  ? br_fdb_update+0x4b7/0x680
[  252.504059][    C0]  ? br_handle_frame_finish+0x39c/0x1720
[  252.504072][    C0]  ? br_handle_frame+0x5a6/0xba0
[  252.504085][    C0]  ? __netif_receive_skb_core+0xf4b/0x3940
[  252.504102][    C0]  ? process_backlog+0x3e5/0xae0
[  252.504114][    C0]  ? __napi_poll+0xd3/0x610
[  252.504130][    C0]  ? net_rx_action+0x584/0xce0
[  252.504142][    C0]  ? handle_softirqs+0x1ab/0x630
[  252.504160][    C0]  ? __do_softirq+0xf/0x16
[  252.504173][    C0]  ? do_softirq+0xa6/0x100
[  252.504190][    C0]  ? __local_bh_enable_ip+0x74/0x80
[  252.504207][    C0]  ? rcu_do_batch+0x5c6/0xd20
[  252.504224][    C0]  ? rcu_nocb_cb_kthread+0x4dc/0xac0
[  252.504245][    C0]  kasan_save_free_info+0x4a/0x60
[  252.504261][    C0]  __kasan_slab_free+0x5f/0x80
[  252.504274][    C0]  kmem_cache_free+0x1c1/0x510
[  252.504291][    C0]  ? __kfree_skb+0x18f/0x210
[  252.504303][    C0]  __kfree_skb+0x18f/0x210
[  252.504314][    C0]  ? netlink_broadcast_filtered+0x10e1/0x11f0
[  252.504327][    C0]  consume_skb+0x65/0x1a0
[  252.504344][    C0]  netlink_broadcast_filtered+0x10e1/0x11f0
[  252.504357][    C0]  ? fdb_fill_info+0x9f1/0xe90
[  252.504375][    C0]  nlmsg_notify+0xf1/0x1b0
[  252.504388][    C0]  rtnl_notify+0x9e/0xd0
[  252.504401][    C0]  fdb_notify+0xce/0x150
[  252.504417][    C0]  br_fdb_update+0x4b7/0x680
[  252.504434][    C0]  ? __cfi_br_fdb_update+0x10/0x10
[  252.504451][    C0]  ? ip6_rcv_finish+0x344/0x3c0
[  252.504466][    C0]  ? process_backlog+0x44b/0xae0
[  252.504478][    C0]  ? __napi_poll+0xd3/0x610
[  252.504494][    C0]  ? net_rx_action+0x584/0xce0
[  252.504505][    C0]  ? __do_softirq+0xf/0x16
[  252.504518][    C0]  ? do_softirq+0xa6/0x100
[  252.504535][    C0]  ? __local_bh_enable_ip+0x74/0x80
[  252.504552][    C0]  ? rcu_do_batch+0x5c6/0xd20
[  252.504568][    C0]  br_handle_frame_finish+0x39c/0x1720
[  252.504583][    C0]  ? __cfi_br_handle_frame_finish+0x10/0x10
[  252.504599][    C0]  br_handle_frame+0x5a6/0xba0
[  252.504612][    C0]  ? __cfi_br_handle_frame+0x10/0x10
[  252.504625][    C0]  __netif_receive_skb_core+0xf4b/0x3940
[  252.504643][    C0]  ? ip6_mc_input+0x4f3/0x670
[  252.504659][    C0]  ? ip6_mc_input+0x4f3/0x670
[  252.504675][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  252.504691][    C0]  ? qdisc_run_end+0x120/0x120
[  252.504708][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  252.504725][    C0]  ? ip6_rcv_finish+0x344/0x3c0
[  252.504740][    C0]  ? ipv6_rcv+0xed/0x220
[  252.504755][    C0]  ? __cfi_arp_process+0x10/0x10
[  252.504771][    C0]  ? __cfi_ipv6_rcv+0x10/0x10
[  252.504786][    C0]  ? __cfi_ip6_rcv_finish+0x10/0x10
[  252.504803][    C0]  process_backlog+0x3e5/0xae0
[  252.504817][    C0]  __napi_poll+0xd3/0x610
[  252.504834][    C0]  net_rx_action+0x584/0xce0
[  252.504847][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  252.504859][    C0]  ? sched_clock+0x44/0x60
[  252.504875][    C0]  ? __cfi_sched_clock_cpu+0x10/0x10
[  252.504891][    C0]  ? try_to_wake_up+0xdfb/0x1b00
[  252.504907][    C0]  ? irqtime_account_irq+0x51/0x1c0
[  252.504923][    C0]  handle_softirqs+0x1ab/0x630
[  252.504942][    C0]  __do_softirq+0xf/0x16
[  252.504955][    C0]  do_softirq+0xa6/0x100
[  252.504976][    C0]  </IRQ>
[  252.504980][    C0]  <TASK>
[  252.504985][    C0]  ? __cfi_do_softirq+0x10/0x10
[  252.505002][    C0]  ? dst_destroy+0x37d/0x460
[  252.505017][    C0]  ? __cfi_dst_destroy_rcu+0x10/0x10
[  252.505031][    C0]  __local_bh_enable_ip+0x74/0x80
[  252.505049][    C0]  rcu_do_batch+0x5c6/0xd20
[  252.505066][    C0]  ? rcu_core+0xd20/0xd20
[  252.505082][    C0]  ? __kasan_check_write+0x18/0x20
[  252.505099][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  252.505118][    C0]  ? __kasan_check_read+0x15/0x20
[  252.505134][    C0]  ? rcu_nocb_cb_kthread+0x4c7/0xac0
[  252.505151][    C0]  rcu_nocb_cb_kthread+0x4dc/0xac0
[  252.505170][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  252.505187][    C0]  ? __kasan_check_write+0x18/0x20
[  252.505204][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  252.505221][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  252.505239][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  252.505256][    C0]  ? set_cpus_allowed_ptr+0x93/0xe0
[  252.505269][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  252.505282][    C0]  ? __kasan_check_read+0x15/0x20
[  252.505299][    C0]  ? __kthread_parkme+0x138/0x180
[  252.505311][    C0]  ? schedule+0xc6/0x240
[  252.505323][    C0]  kthread+0x2c7/0x370
[  252.505335][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  252.505353][    C0]  ? __cfi_kthread+0x10/0x10
[  252.505366][    C0]  ret_from_fork+0x64/0xa0
[  252.505381][    C0]  ? __cfi_kthread+0x10/0x10
[  252.505394][    C0]  ret_from_fork_asm+0x1a/0x30
[  252.505414][    C0]  </TASK>
[  256.697721][    C0] net_ratelimit: 130720 callbacks suppressed
[  256.697742][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.697762][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.703815][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  256.715797][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.727770][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.739656][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.751512][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.763385][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.775219][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  256.787190][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0)