last executing test programs:

45.040282816s ago: executing program 2 (id=235):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x802, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
r5 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x5800b, &(0x7f0000000640)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r4, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r2])
read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000240)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x8000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
fcntl$lock(r8, 0x5, &(0x7f0000000200)={0x1})
ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000484f"])
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000002c0)=0x1)
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "d7c594e891a5f615", "1106e806387431e3c2ecd5744c93c329", "28c185c6", "ea466149db760191"}, 0x28)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba00000000650f32660fc775022e0fba600c980f320f3566b857000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000000"])
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
setuid(0xee01)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000040), 0x4)

45.030488016s ago: executing program 2 (id=236):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x268f03, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x22, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x1, 0x3}, {0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0xd1, 0x2}, {0x5, 0x7}], "3dd6b779ec92ada4"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8, 0x7}, {0x5, 0x2}, {0x10, 0x3}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0x6}, {0x8, 0x1}, {0x8, 0x6}, {0x0, 0x2}, {0xa, 0x3}, {0x1}, {0x4, 0x4}, {0x7, 0x4}, {0xa5, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {0xcc}, {0x5, 0x5}, {0x4b, 0x3}, {0x80, 0x2}], "6764eb8c29f42ac5"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x0, 0x4}, {}, {0x2f, 0x5}, {0x5, 0x7}, {0xbb, 0x2}, {0xc, 0x2}, {0xfb, 0x1}, {0x6, 0x6}], "d8d3b532be708f91"}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x21, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
readv(r5, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
utime(0x0, &(0x7f0000001840)={0x40, 0x2})
syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0x1, 0x12000, 0x0, 0xfffffffa, 0x4}, 0x142, [0xffffffef, 0x80000001, 0x7f, 0xffffffc0, 0x6, 0x8, 0x53, 0x5, 0x4, 0x2, 0x8, 0x4, 0x6, 0x9, 0xfffffffd, 0x0, 0x1a, 0x2, 0x6, 0x91d5, 0x2, 0x3ff, 0x9, 0x0, 0x4, 0x5, 0x684, 0x401, 0x6, 0x6, 0x0, 0x9, 0x2, 0x5, 0x6, 0x9000, 0x2, 0xbb, 0x2, 0x80, 0x7, 0x5, 0x4, 0x9, 0x8, 0xb, 0x4, 0x6f, 0x9, 0x3, 0x10001, 0x3ff, 0xff, 0x80000001, 0xc, 0x5, 0x0, 0x6, 0xffffffff, 0x7ff, 0x3, 0x5, 0x0, 0x5, 0x4, 0x0, 0xfffffffe, 0x1, 0x1, 0xffffff01, 0xecce, 0x5, 0x0, 0x4, 0x1, 0x2, 0x5, 0x40, 0x5, 0x8, 0x6, 0x101, 0x5, 0x5, 0x7, 0x8001, 0x9, 0x1000, 0xf, 0x1, 0x9, 0x4, 0x100, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x3, 0x8000, 0x10, 0xe, 0x800, 0x2000000, 0x2, 0x5, 0x9, 0xa, 0xffffff81, 0x4, 0x2, 0x80000000, 0x6423, 0x8000, 0x0, 0x5, 0x5, 0x2, 0x7, 0x8, 0x80000001, 0x5, 0x80000000, 0x1, 0x6, 0x6, 0x7, 0x7, 0x7, 0x7, 0x6, 0x0, 0x80, 0x5, 0x2, 0x6, 0x7, 0x2, 0x8, 0x45, 0x4, 0xc15c, 0x1, 0x8901, 0x5, 0xc, 0x7ff, 0x6, 0x101, 0x9, 0x6, 0x7, 0x100, 0x6, 0x5b37, 0x8, 0x3ff, 0x7, 0xc, 0x11, 0xe, 0xa9, 0x4a08, 0x10, 0x80000001, 0x6, 0x3ff, 0x8001, 0x10001, 0x0, 0x52, 0x800, 0x1, 0x1, 0x5, 0x200, 0x6, 0x8, 0x8, 0xd8, 0x103e, 0x160, 0xff, 0x7, 0x7907, 0x1, 0xfffffffd, 0x7, 0x7fffffff, 0x7, 0xfffffffe, 0xd, 0x3, 0x5, 0x80000000, 0x6, 0x6, 0x9, 0x9, 0x10, 0x4, 0x5, 0x6fe, 0x40, 0x400, 0xfffffffb, 0xb, 0x0, 0x1, 0x3, 0x7fff, 0xe, 0x2, 0x1ff, 0x1, 0x55, 0x4, 0x1, 0x2, 0x5, 0x800, 0xe, 0x1, 0x8, 0x2, 0x2, 0x9, 0x6, 0xffb, 0x3, 0xe, 0x8000, 0x4, 0x0, 0xfe, 0x5, 0x1ff, 0x7, 0xfffffffb, 0x4, 0x200, 0x2, 0x2, 0x7, 0x0, 0x80000000, 0xfffffeff, 0x1, 0x7, 0x2, 0x4, 0x1, 0x7f1, 0xfb25, 0xfffffffb, 0xa1, 0x8, 0x8, 0x6, 0xffff315d, 0x5, 0xffff8001, 0x2, 0x7, 0x9bb7, 0x1, 0xb80, 0x1497, 0x5, 0x7, 0x3, 0x401, 0x9, 0x10000, 0x1ff, 0x1000, 0x6, 0x3, 0x3ff, 0xf22, 0x9b, 0x2, 0x5, 0x5, 0x2, 0x3, 0xa, 0x200, 0x7fff, 0x967b, 0x7ff, 0xa7d3, 0xa8c2, 0x4d, 0xc34, 0x9, 0x6, 0xfffffffb, 0xffff, 0x4, 0x9, 0x6, 0x7ff, 0xff, 0x101, 0x306c4e2c, 0x8, 0x5, 0x5, 0x8, 0x6, 0x26, 0x6, 0x200, 0xa, 0x80000001, 0xffff, 0x6, 0x9, 0x513, 0x2, 0x4, 0x5, 0xe6, 0x1, 0x0, 0x9, 0xfffffffc, 0x5, 0x6, 0x7, 0x81, 0x10, 0xff30, 0x8, 0x8, 0x0, 0x9a, 0x99, 0x2, 0x8, 0xffffffff, 0xfffffff8, 0x8, 0x2, 0xa10a, 0x8, 0x800, 0x8, 0x100, 0x266d, 0xfffffffa, 0x96e7, 0x6, 0x6, 0x5, 0x800, 0x10, 0x0, 0x9, 0x3059, 0xfffffff7, 0x8, 0xec, 0x5, 0x7, 0x8, 0x3, 0xfffffff9, 0xffffffff, 0x7, 0x2, 0xebb, 0x3, 0x5, 0x5, 0xd581, 0x198, 0x8, 0xfffffc01, 0xe3de, 0x6, 0x57284783, 0x9f, 0x0, 0x69d5, 0x5, 0x3, 0x100, 0x7, 0x3, 0xfffffff7, 0x7fff, 0x0, 0x4bbb, 0x6, 0x8, 0xffff, 0xf4f, 0x5, 0x8000000, 0x7, 0xfffffff8, 0x7fffffff, 0x6, 0x200, 0x4, 0x5, 0xd, 0x3, 0xfffffffd, 0x10000, 0x6, 0x7, 0x8, 0x2, 0x11168f61, 0x57, 0x4, 0x4, 0x1d, 0x7, 0x2, 0x7fffffff, 0x3f1f6f4f, 0x6ea, 0x3, 0x7f, 0x1, 0x7f, 0x0, 0x0, 0x1000, 0x80, 0x7fffffff, 0x8000, 0x6, 0x8459, 0x0, 0x5, 0x6, 0x6, 0x1ba, 0x1, 0x9, 0x6, 0x6, 0xb687, 0x8001, 0x9, 0x9, 0x66b, 0x7, 0xe, 0x7fff, 0x6, 0x7fffffff, 0xfffffcba, 0xffffff49, 0xc, 0x1e246e09, 0x6, 0x6, 0x3, 0xd47, 0x0, 0x0, 0x3, 0x8e3, 0x200, 0x0, 0x2ece, 0x5, 0x28c4, 0x8, 0x2, 0x157, 0x6, 0x3, 0x8, 0xdc2d, 0x9, 0x7fffffff, 0xc, 0xc, 0x80000000, 0xe1a, 0x9, 0xfffffffe, 0xf, 0xe000, 0x1, 0x1, 0xf19, 0x90cf, 0x0, 0x100000, 0xf, 0xfffff000, 0x8, 0x1ff, 0x0, 0x8, 0x100, 0x8, 0xfffffffd, 0x80, 0xffffffff, 0x5, 0xc, 0x9, 0x9, 0x3, 0x200, 0x1, 0xff, 0x0, 0x5, 0x1, 0xffff0000, 0x8, 0x111, 0x8, 0x81, 0x5, 0x8, 0x3d02, 0x6, 0x7, 0x2, 0x9, 0x81, 0xea000000, 0x80, 0x7fff, 0xffffed04, 0xffffffff, 0x7, 0x5, 0x50c023f, 0x4, 0x3, 0x3, 0x9, 0x800, 0x8, 0x7, 0x86f0bcc, 0x8, 0x0, 0xf7e6, 0x2, 0xbd9, 0x1, 0x400, 0x2, 0x6, 0x5, 0x0, 0x7f, 0x8001, 0x0, 0x401, 0x88b4, 0xffff, 0x101, 0x1ff, 0x6, 0x3, 0x3, 0xc8, 0x1000, 0x3, 0xfffffffa, 0x80, 0x3, 0xffff, 0x3ff, 0x401, 0xffffffff, 0x1, 0x8000, 0xa, 0xe7e, 0x5, 0x1, 0x3, 0x5, 0x48d2, 0x7fffffff, 0xea, 0x8001, 0x7ff, 0xffffffff, 0x7, 0xfffffffb, 0x8, 0x6, 0x0, 0x1000, 0x27, 0x39d, 0x8, 0x2, 0x352a, 0x0, 0x39, 0x8, 0x401, 0x8, 0x5, 0x8, 0x0, 0x10000, 0x7c, 0x9, 0x5, 0x48b, 0x4, 0x4, 0xe95, 0x200, 0x4, 0x4, 0x6, 0x0, 0x7fff, 0x7ff, 0x4, 0xff, 0xffffa948, 0xd417, 0x6, 0xdb, 0x8, 0x10, 0x418, 0x8, 0x401, 0x3, 0x101, 0xfffffffa, 0x9, 0x7f, 0x5c48, 0xc, 0xffffffff, 0x4, 0x9, 0x2, 0x43, 0x7, 0x2, 0x9, 0x4, 0x7, 0x98, 0x6, 0xc0000000, 0x6, 0x8, 0x1, 0x4, 0xca, 0x1, 0x2, 0x5, 0x8, 0x5, 0xde9, 0x9, 0x4, 0x92e1, 0x6, 0xfff, 0x401, 0x4ad, 0x9, 0x7fff, 0x1, 0xfffffff7, 0x4103, 0x9, 0x7, 0x3, 0xfffffff5, 0x9, 0xb, 0xfffffffc, 0x80000001, 0xfffffffe, 0x8, 0xf, 0x9, 0x2, 0x6d7a, 0x4, 0x7ff, 0xfc, 0xff, 0x81, 0x5, 0xfff, 0xfff, 0x4, 0x0, 0x3ff, 0x2, 0xcf, 0x5, 0x1, 0x0, 0x7, 0x7f, 0x0, 0x1a3, 0x4, 0xfffffffd, 0x6, 0x2, 0x7ff, 0x10, 0x85ed, 0xffff8000, 0x2, 0x80, 0x390c, 0x777aae8d, 0x40, 0xfffffffb, 0x2, 0x600c, 0x3, 0x0, 0x2, 0x8000, 0x401, 0x1, 0xcc6, 0x5, 0x4, 0x2, 0x5, 0x5, 0x0, 0x7, 0x2, 0x9, 0x8, 0x401, 0xffffffb9, 0x7, 0xa, 0xf, 0x5, 0x8, 0xc, 0x9, 0x4, 0x7ff, 0x4, 0x4, 0x0, 0x438, 0x2, 0xfff, 0xfffffc01, 0x1ff, 0xffffffff, 0x0, 0x2f1, 0x8, 0xffffffff, 0xb7, 0x5, 0x0, 0x1, 0x6, 0x6, 0xfffffffa, 0x8, 0x7, 0x10000, 0xffffff47, 0x1, 0x7fff, 0x4, 0x1, 0xffffffa6, 0x3, 0x8, 0x3, 0x9, 0x4, 0x0, 0x2, 0x8, 0xffffffff, 0x241, 0x10000, 0x6, 0x400, 0x400, 0x7ff, 0x4, 0xfffffffc, 0x1, 0x81, 0x7fffffff, 0x0, 0x80, 0xc5a, 0x10, 0x3, 0x0, 0x2, 0x9, 0xfffffff1, 0x6, 0x8, 0x10, 0x1, 0x3, 0x51b1fea8, 0x5, 0x4, 0x1ff, 0x8000, 0x7, 0x3, 0x6, 0x4, 0x3c0000, 0x8, 0x80000000, 0x40, 0xfffffff7, 0x80, 0x10, 0x7, 0x2d, 0x5255, 0x6, 0x9, 0x0, 0xb, 0x0, 0x6, 0xb, 0x2, 0x6, 0xcf, 0x9, 0xfffffffb, 0x2, 0x2, 0x9, 0x4, 0xa2bc, 0x7, 0x3, 0xd59f, 0x6, 0x8, 0xfffffffd, 0xffff, 0x3cd, 0x7fffffff, 0x9, 0x5, 0x8, 0x52b, 0xc9aa, 0x4, 0x5, 0x200, 0x7, 0x0, 0x7fffffff, 0x0, 0x6, 0x4, 0x6, 0x5, 0x7, 0xf23, 0x0, 0x0, 0x7, 0xff, 0x80000000, 0x7, 0xe7e0, 0xb, 0x9, 0x668, 0x982d, 0x80, 0x6, 0x5, 0x6, 0x3, 0xc, 0x3, 0x7c, 0x7fff, 0x6a6da77, 0x3, 0x3ff, 0x4, 0xa, 0x1, 0x1, 0x80000000, 0x7, 0xff, 0x9, 0x7fffffff, 0x2d4, 0x9, 0x98a49690, 0x0, 0x2, 0x9, 0x1, 0x5, 0xc6d1, 0x5, 0x1, 0x4, 0x9, 0x2, 0x4, 0x2, 0x8, 0xc, 0x7, 0x1, 0x3, 0x5, 0x3b, 0x4c78, 0x9, 0x7, 0x7, 0xc, 0x6, 0x912, 0x1, 0x2, 0xa, 0x2, 0x5, 0x7, 0x1, 0x1, 0x6, 0x7, 0xd6e, 0x2, 0x200000, 0x5, 0x8, 0x4, 0xa, 0xcfa3, 0x9, 0xf, 0x5, 0xffff0001, 0xd, 0xc, 0x8, 0x1000, 0xffffffff, 0x8, 0x9, 0x1bda, 0x9, 0xe2, 0x1, 0x7, 0xfffffff8, 0x80000000, 0x6, 0x0, 0x5, 0x7459ea6d, 0x6, 0x7, 0x55e3, 0x5, 0xfffffffd, 0x7, 0x40, 0xa, 0xfffffffd, 0x1, 0xebf, 0x2, 0x2ef67bb0, 0xd1, 0x5, 0xdac000, 0x6, 0x2, 0x2217038e, 0x8, 0x5, 0x4, 0x8001, 0x5, 0x7fff, 0xca, 0x2cbb, 0xa3, 0xe, 0x0, 0xa, 0x4, 0x8, 0x0, 0xffffffff, 0x3]})
write$char_usb(r10, &(0x7f0000000040)="e2", 0x2250)
ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000fd044d564b"])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)

44.141993223s ago: executing program 2 (id=243):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x476003)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x832b)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x3)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x208c1)
ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000100)=0x2)
r2 = accept$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x60)
close_range(r1, r2, 0x2)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200)=0x6)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syncfs(r3)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000280)=0x9)
r4 = dup(r3)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000002c0)={'team0\x00', 0x48})
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x2)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000380)=0x4)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f00000003c0)={{0xfffffffffffffffc, 0x7}, {0xb1d, 0xa8}, 0x2, 0x1})
r5 = open(&(0x7f0000000400)='./file0\x00', 0x6a0041, 0x8)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000440)={{r5}, "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"})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001440), 0x4000, 0x0)
getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000001480)={@remote, @loopback, <r7=>0x0}, &(0x7f00000014c0)=0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000001500)={0x2c, 0xc, r7, 0x19, r5}, 0x10)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f0000001580)=@attr_other={0x0, 0x6, 0xc000000, &(0x7f0000001540)=0x4})
syz_usb_connect(0x3, 0x3d9, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xe8, 0x2, 0xc4, 0xff, 0x1896, 0x1092, 0xe450, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c7, 0x2, 0x2, 0xf6, 0x10, 0x9, [{{0x9, 0x4, 0x2d, 0x5, 0x2, 0xef, 0x1, 0x1, 0xff, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b18a60"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x577f, 0x81, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x22}, [@network_terminal={0x7, 0x24, 0xa, 0xb, 0x7, 0x7f, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x7, 0x4, [0xfff9, 0x8, 0x8c3d]}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x10, 0xff, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x7f}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0xc, 0x6}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x0, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf4}]}}]}}, {{0x9, 0x4, 0xa, 0x1, 0xd, 0x84, 0xb, 0xfc, 0x5, [@hid_hid={0x9, 0x21, 0xfff8, 0x7, 0x1, {0x22, 0xbf4}}], [{{0x9, 0x5, 0x82, 0x0, 0x200, 0x9, 0x6b, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfb, 0xfe}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0xd0, 0x7, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xee, 0x7f, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xc, 0x5, 0x1, [@generic={0x102, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x10}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0xfe, 0x58, 0x0, [@generic={0x32, 0x4, "f05f4f30cfff4bbf8ce37ad42aea50de4e42dbc8852af293f9a721ce7c60af039da0fda846bf5082238a708dbd0709d9"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x7, 0x7, 0xa9, [@generic={0x1a, 0x4, "cbf40cf3ac2f092c60b7497d16b873fee7143d323c8b68f9"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x3, 0x40, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xed, 0x7}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x38, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x9, 0x8, [@generic={0x7f, 0x24, "f43f5a95bbc5eb1ae77b90e9d1e36aac1a8318ccd3d3ae605203e57c02b8e36742712481f1da729e8a113e70bb4f0cba54e31194ab362c0f6934c96e80d1483de43dbb01d22c5b5a342b503bef2c4b48c7ddc92e451ddacb9a0f67699848c9c626d512d1078f5d58938a1cf438cc30ed71f092407cda232131dee4dc71"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x401}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x7}]}}, {{0x9, 0x5, 0xd, 0x18, 0x400, 0x9, 0x10, 0x17, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe}, @generic={0xa4, 0x4, "746f6a487896ec9023882a43c4c365bc5a390a509d18b0644ecdb3f973b0a7cbe9d5543a1a6814c954e09a2108b1bfb426d3b144706396454261c47a3677cef5174443abbc991b328097c958574eed2ed3710a6c8dfa4b657dc6d68bdd2a4ebd9ad8f7554fd3a0a249157a65ba44c2bcd34358686c0948f18ee525a93d1c9c394f330c9d63ebab51e9137f2667ac5532046b0319ec072d339350ed80565e2ba86ca1"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x2, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x10, 0x1, 0x7}}]}}]}}]}}, &(0x7f0000001c40)={0xa, &(0x7f00000019c0)={0xa, 0x6, 0x110, 0x0, 0x1, 0x68, 0x0, 0x2}, 0xc7, &(0x7f0000001a00)={0x5, 0xf, 0xc7, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "b5962b1eebb0640e7f54b6b21923992c"}, @generic={0xae, 0x10, 0x2, "1537ad49e3d0e8d268b7f971d38d97b43ceb5a7cc9a1d9c03408254df07c87b0d875c83c5cb5723ec97e17a4557518a77e6331519a85ec2f2e343a9c90dabc9244c5243befec034456002c8f926422c0ec5a853a1b51b8a75066a8cf0555da48286652bc40db809cd7a56df4984f61b4e4f762d86ec74cf16d931204e9e9ea4837458e2955211e1f803ab5a5d9804fe8bfa73b67c27fd94efd986ea93eddc950d11c7298db63fc7b3e5112"}]}, 0x3, [{0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x2011}}, {0x9f, &(0x7f0000001b80)=@string={0x9f, 0x3, "6afdac5d435482af6c421ba9c28e53f3bca2dde650418e48abbfc7a6e57bf97f5c41d7f896d636131e95676eb4c2fc2f144a276591eb6c11d15c26a3c23a74900a9981e3b6650841f473de4a0b9e18b6982ff9278cce31a94abf8738ed221cc0934523d07dcba977909568127341fbfef2802079d8fb24b722f5f38dc90bcc31e54a0e3693fb17098ed6aa43d15c98a5bf5cf79ec3f87cd3ddd403c7b8"}}]})
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000001cc0)=0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000001d00)=0x4)
ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000001d40)="75a2bb2ff2bf430f52ad43bd16d2083a4c4666cc74453e3eb127bdce62a1b0ae10e1d9156f3188a27a03c190ffceb9eabebd793b4f74befb99e27919960965efcf31af8a6355bfdcd2b16a126d19a107519883a46ae320f306f1771786e4be4d3a5523775537e9ee3ad43f8c4cf17d18e90244b124245f4861511f716f5e0dec0825ce4af4a46b9d2f836d9a73f90c37b16cbeb19ab4cdb32e6e2642a3d35a010d1dc17f4b08e43b3faf79ec334a1e6d580809e2888f45ca077bf2eea76b6bb704a460ac85eb8d12")
sendmsg$AUDIT_SET(r5, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, 0x3e9, 0x8, 0x70bd26, 0x25dfdbfc, {0x30, 0x1, 0x0, 0x0, 0xbfab, 0x3, 0x6, 0x4, 0x0, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x8010)

41.086763083s ago: executing program 2 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1b0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = geteuid()
mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3ce002, &(0x7f0000000780)={[{@uid={'uid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xee00}}, {@euid_eq={'euid', 0x3d, r2}}]}) (async)
mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3ce002, &(0x7f0000000780)={[{@uid={'uid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xee00}}, {@euid_eq={'euid', 0x3d, r2}}]})
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e22, @multicast2}, 0x280, 0x0, 0x0, 0x0, 0x9d9, &(0x7f0000000100)='veth0_to_bond\x00', 0xffff, 0x9, 0x8}) (async)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e22, @multicast2}, 0x280, 0x0, 0x0, 0x0, 0x9d9, &(0x7f0000000100)='veth0_to_bond\x00', 0xffff, 0x9, 0x8})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])

41.086046833s ago: executing program 2 (id=269):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x40}}], 0x1, 0x14)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004091}, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = fcntl$dupfd(r5, 0x0, r5)
ioctl$UFFDIO_CONTINUE(r7, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
socket(0x1d, 0x4, 0x2)
write(r0, &(0x7f0000000400)="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", 0x1f000)

41.027879674s ago: executing program 2 (id=270):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
socket$unix(0x1, 0x1, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000040)={0x4, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close_range(r0, 0xffffffffffffffff, 0x0)

40.971981855s ago: executing program 32 (id=270):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
socket$unix(0x1, 0x1, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000040)={0x4, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close_range(r0, 0xffffffffffffffff, 0x0)

40.573369503s ago: executing program 4 (id=271):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"})
ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f00000002c0))
mmap(&(0x7f0000458000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x45809000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000300)={{r5}, 0xf, 0x1, 0xff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
r8 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0xf3a28011cf35b97c)
sendmmsg$inet(r8, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0xfffffffffffffcdc, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010102, @multicast2}}}], 0x20}}], 0x1, 0x4008000)
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$incfs(r9, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r10=>0x0})
bind$can_raw(r9, &(0x7f00000001c0)={0x1d, r10}, 0x10)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

40.305619738s ago: executing program 4 (id=275):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x138dd000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0)
write$vga_arbiter(r0, 0x0, 0xff35)
socket$inet6(0xa, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

39.611560011s ago: executing program 0 (id=280):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
dup(r0) (async)
r1 = dup(r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = open(0x0, 0x0, 0x718bb647156ec3b7)
ppoll(&(0x7f0000000440)=[{r2, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r0, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8) (async)
ppoll(&(0x7f0000000440)=[{r2, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r0, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x8, "28ea0ca7c72dc9e3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4a}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4f512762bdaf78b2, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x20, 0x20}}, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, "cc79"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xc}, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000000200)={0x14, &(0x7f0000000600)={0x20, 0xc, 0x8c, {0x8c, 0x7, "c38bb40d77a367a519cc18658e25adae1dc987ad3de6952d3fde5121acf0e4c9041cf852641be3d0d33dfd57f94df795b61939e167e957c007009f0ffc86b236f707f94e8c4e6aec38f9ebb2add8719f9bb85b0febad1aae9f9c71a4b4fd064149db0e63f82520247e492fab1eec82e7ab3afd4ed43859161dd4cce7b286feeb660e7ddd2222adc62a4a"}}, &(0x7f0000000080)={0x0, 0x3, 0x8, @string={0x8, 0x3, "4d1b3ebd00c9"}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x20, 0xf, 0xf1, "baeeadb62422bbf93d6d49e8cd730873ebe69c9e583084061a5e67ebc66371d44df1211fab69a52ff8b16eb53c673affbc4589ad1c4fa0fe84c3b07b0c5d14662194dc5b55186ae3cff0fd9e94654b4f99087a477d40582b251dcc02c01927acc67d31f28ea3c3a0f49b160d3c3314a6d077dccd3f081638e66ddb5a4960ac90777440586812371967e6a6c35005afda5fc80c79fec0c1ed051d5d33c71a353cd5dbcf21ab151848d496314c0e3260bf9f3c56eecf5ebe012d660d459c5e54bbac8ede8de9169e11fbc2eaaaa3f8e3ad9d1d4b603b5c847fdf6c4a87d84afd8a1681a6830da1604bde159d689a09644399"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x28}, &(0x7f00000007c0)={0x20, 0x0, 0x9e, {0x9c, "13867042bcaa3bfcbaf4dac8225801e0a940cd0a40866e98319bdada8b3a932009ed41d7aee797ca020b24db684ea40856e4151aa71b0df04b1b42f05711b690f5c57e3316ea270a1dbd0db322caa13ff209266c246fd4ea25198fcd459e72cb0f8ee7251d4a423cf50f4cccddbcd0d48d339cc2803914c3629f2638ddf15361eaf295edb88572f5826d19f78a0b0650d9c48dff066a8987d761bd09"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x49}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xc}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

39.611161271s ago: executing program 0 (id=281):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
close(r0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x10)
mknodat(r2, &(0x7f0000000140)='./file0/file0\x00', 0x4, 0x2000005)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000100))
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r5 = dup(r0)
write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r5, &(0x7f00000004c0)={0x18}, 0x18)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

39.610168711s ago: executing program 0 (id=282):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
fsopen(0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xf0080, 0x0)
mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000001c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffffffffffff8698}}, {@rlog_pages={'rlog_pages', 0x3d, 0x3}}, {@no_bf_readahead}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x6}}], [{@obj_type={'obj_type', 0x3d, '/dev/net/tun\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@hash}, {@dont_measure}, {@fsname}]})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
ftruncate(r4, 0xc17a)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r6, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @multicast1}, 0xc)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10082, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

39.607883461s ago: executing program 0 (id=284):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r3 = socket(0x11, 0x2, 0x0)
setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"})
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "7cc06a79a47c6e5c57abdb7a1ce66a01"})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
socket(0x11, 0x2, 0x0) (async)
setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) (async)
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "7cc06a79a47c6e5c57abdb7a1ce66a01"}) (async)

39.487291433s ago: executing program 0 (id=294):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200200, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000180)=0x5) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', 0x3}, 0x18)
r5 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100faff020020f003176c40000000000109022472510000000009040000120701030009020002"], 0x0)
r6 = getpid()
syz_pidfd_open(r6, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x8995, &(0x7f0000000080)={'sit0\x00', 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"])
syz_usb_disconnect(r5) (async, rerun: 64)
r11 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) (rerun: 64)
syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async, rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64)

39.451391674s ago: executing program 4 (id=295):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800938033"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
unshare(0x62040200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x141a41, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'wg2\x00', 0x2})
r2 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000002080)={0x2c, &(0x7f0000001ec0)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x40, 0x14, 0x6, "f79c5e1e7e4a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7a}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x42}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\n#'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4134}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000300)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f00000001c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0})
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r3, &(0x7f0000000240)='keyring\x00', &(0x7f0000002380)={'syz', 0x2}, r3)
futex(&(0x7f0000000040)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x28, 0x3, 0x5, 0x1}, 0x8)
r6 = dup(r4)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @empty, 0x0, 0x0, 0x0, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x8000, 0x0, 0x0, 0x300}})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

37.518833462s ago: executing program 3 (id=320):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x4c, 0x1d, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x38, 0x1, [@m_ipt={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
madvise(&(0x7f000099f000/0x2000)=nil, 0x2000, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x19, 0x9c, 0x4f, 0x20, 0x7c9, 0xe, 0x5d4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x50002, 0x0)
sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x12, 0x5, 0x0, 0x4, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0x20}}, 0x811)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20048800) (async)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20048800)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0x0, 0x4f, "a84f70ecba4cb059eb2bc37ae2b2517656ac71d42fcf991ffe774a06c8d3fd55f3bb0d328a46279a6b67fe61dd2bf22d4de9c9de41256ea640503cdcf7f5bf7f768ee27f26f9ecbe3300d600eb1b65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect$cdc_ecm(0x5, 0x66, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x8, 0xd0, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "c347946b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x200, 0x2, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0xfff, 0x4, 0xec, 0x0, 0x8000, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x6, 0xa0}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x33, 0xf, 0x9}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0x0, 0x4, 0x2, 0x8, 0x9}, 0xc, &(0x7f0000000a00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x3e, 0x4, 0x0, 0x6cfd}]}, 0x7, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x409}}, {0x101, &(0x7f0000000b00)=@string={0x101, 0x3, "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"}}, {0xb3, &(0x7f0000000c40)=@string={0xb3, 0x3, "e2e81df13d10d01f9684c5c33edcfce6f221b3fa619c05b8690c1cb35f794ec084cbada7fcffb2aa5b588507341868794470e495371835d4624eea5cf9b5b752857f4c15ae5393b3296df0affae59ca7b7f7ae9254358c588300b613377d2fe08423e32eb7b04547a1da86e63783f37a0040ef4d4a14184180fe0616c1e1201523b8073090b95229ad32d81d63e8441670ccd60bf8ac887a14251a4cd5e256a5cea78cbfdc1c45079c0bf8f392e8e74395"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x9d, &(0x7f0000000d40)=@string={0x9d, 0x3, "1d279888b0026d17f58cedbd9930757eb513fd0df60d874c7031bb8b169bfd5f570a82e3a94e9aebfa6c5c6dce13f01de9196e133a8d0d642b9d3bc13c57a9832e38ca22b07bdba9d8181a72805594a3cfbf0f599a61ec064fc0561c57d0f027652b6d13aea38ca8fffd031ccb223d2b33304fcc742dc03bbfdc9f9f9f713243adc09bbf5fbdc0fc76ba96a9013a3ab832c2baa5f8bcb358139773"}}]})
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000740)={0x2, &(0x7f0000000680)={0x40, 0xe}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000740)={0x2, &(0x7f0000000680)={0x40, 0xe}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, 0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000440)={0x14, &(0x7f00000006c0)={0x0, 0x6, 0x46, {0x46, 0x7, "4429268569bf7e2b90b8c22a6f8098b352e7424e9712284b3011c95462483768d3e3605f9db31dd8adf2ec61d01bbe8d5d1f0669d47619015611eb7275d4e6a144972bd4"}}, &(0x7f0000000780)={0x0, 0x3, 0x70, @string={0x70, 0x3, "e69df6a8984c4e387ab2d00289969e20baec9f8124d59ca2167fe452d028f5005c36acfdf215223f4787846e6b5b22c57b90e7d63d7bedd806024aa08ba78b29593bd5fb9e759cce965b8364bd62d9ab9430d59375337cf5c9c113ac40d2775214394593aa9b1d4c7ff7a6fa4ae5"}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0xd, 0x4b, "21e85425a88dcc8d275f9841b2066c350ced9214f3a184e2fdb0aa8e92d5a1ff9b2a19ad0e7583df51354a1226c551b6ecd87d6707cd86b13336d1fe545533b3a2ee97757cf27521d64181"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0xc0, 0x5, 0x5, "a3a2d1c74d"}, &(0x7f00000008c0)={0x40, 0x5, 0x2, "0180"}})

36.478535752s ago: executing program 0 (id=321):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000140), 0x0, 0x9, 0x0, 0x2}])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0})

34.831626254s ago: executing program 4 (id=322):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x2)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB="2c726f6f02006f64653d30303030303030a956303030303030303030303432307f302c757365725f69243dc53b8046b64ecf2bf43f4c76eee1d7570f541488b3df9e874175f961262dd08a4b9cc94c430ac0330a6bf900c29189798167ad0d9abb2825f7ac4fba915f", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESOCT=r0])
chmod(&(0x7f0000000340)='./file0\x00', 0x129)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609})
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x2400c85d}, 0x20000004)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x400002)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$cdc_ecm(0x2, 0x7e, &(0x7f0000002080)=ANY=[@ANYBLOB="120100000237292c34f6b351790000102505a1a440000000010109026c2094e2e6af0209040000ff020200000b24060000a35c5b81c49d05240000000d240f01000000000000a501001324120300a317a88b045e4f01a607c0ffcb7e392a052401020808241c050002000009058103200400000009058202ff0300000009"], 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
dup(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x420c1, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffc, @empty}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xf5}], 0x1, 0x22, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
write(r2, &(0x7f0000000300)="d76bd7c6c3f97fe3", 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x4f, 0x0, &(0x7f0000000580)="de541062780b29a27e22bade76f1b73b79e954ee20bc43f7fe47ff5500e55e0000090000000000222f9220c4d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70000000000000000000"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

34.787012945s ago: executing program 3 (id=323):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = socket$inet(0x2, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xc004)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be7fe01477df17cede1d86888516e1b14299f716b74b1d65a922e13f8bce125009baf93221c5f41f11d1857ca48bf5c81f74a64be5b9de7c64d738d375", 0x57}, {&(0x7f0000001040)="7f37c2baff0de55ce257091de4c8892e4e2d3615845085eae2e0699584e968c7141722f4305e686bb965fd42e6d1e565ac9a4c61a54bedbb3ed6d56b12c88dfd97cca4043efd9cc56ed65429e609e6df87544cd6486c2c74e84799c1fbc811fe1fbf14c3d474c2baa1e7c86427d235110101", 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000014c0)="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", 0x28e}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

34.783528085s ago: executing program 1 (id=324):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882)
ioctl$EVIOCSABS20(r1, 0x40044591, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

34.782916295s ago: executing program 1 (id=325):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
prlimit64(0x0, 0xd, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000), 0xe)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$tipc(0x1e, 0x5, 0x0)
connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xa)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
mount$fuseblk(0x0, 0x0, &(0x7f0000000300), 0x80001, 0x0)
ioctl$sock_netdev_private(r3, 0x89fc, &(0x7f00000002c0)="92e8f1b7edce85c79f9b2707c4e225dec95a66676ac83a7a39")
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)
r4 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
write$binfmt_misc(r6, &(0x7f0000000b00), 0x91)
splice(r5, 0x0, r4, &(0x7f0000000140)=0x8008, 0x4, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r8, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0})
mkdirat(r6, &(0x7f0000000340)='./file0\x00', 0x140)

34.781205265s ago: executing program 3 (id=326):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0)
epoll_create1(0x0)
setresuid(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x800)
ioctl$TCXONC(r2, 0x540a, 0x2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x85b83000)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0})

34.764805125s ago: executing program 1 (id=327):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r0, 0x44da2000)
syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80)
futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x0)

34.752617126s ago: executing program 1 (id=328):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
close_range(r0, 0xffffffffffffffff, 0x0)

32.814226713s ago: executing program 1 (id=329):
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async)
socket$packet(0x11, 0x2, 0x300) (async)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32)
execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) (async, rerun: 32)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000080000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600065a2d41be00060005"], 0xe4}}, 0x4000005)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008040)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setreuid(0xee00, r3)
r4 = getuid()
setreuid(0x0, r4) (async)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) (async)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x9)
r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x40106726, &(0x7f00000000c0)) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @fda={0x66646185, 0x4, 0x1, 0x80000c}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

32.714581205s ago: executing program 3 (id=330):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="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", 0x2a)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x0, 0x2, 0x5}}, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="660f38804f3cc7820c0000280f20e06635000002000f22e082fb006626660f3882ac0000ba4200b0b5eef2ad0f20d86635200000000f22d80f017ec4b845000f00d8", 0x42}], 0x1, 0x49, 0x0, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x3ffffd, 0x0, {0x26, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x36, 0x3, "03ff0000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4dfb, @private=0xa010100}, 0x10)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080))

31.854557482s ago: executing program 3 (id=331):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x1}, 0xff7f})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x0, 0x4, 0xfffffffd}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xb0000005})
epoll_pwait(r5, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
close(0x3)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140))
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x6, 0x5}]})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000180)={{&(0x7f00009a9000/0x4000)=nil, 0x4000}, 0x1})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8940, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

31.673241075s ago: executing program 4 (id=332):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x48040)
socket$unix(0x1, 0x1, 0x0)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f00000002c0)=""/135)
write$cgroup_devices(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="c42183439328e5f6e2741e66a78650dec45caa5c70a1dcf69551b3fccc7619a58efe7ed1e2aa3641e8c31b53072c60f376ad6a1efc16405751a1f3c1970908f0a196441ed2a6", @ANYRES32=r1, @ANYRESHEX=r2, @ANYBLOB="4581bf00aeddacf9392b81e82de213394bed451082dfa44f1b0b8848bf20f6d5fd3eb6797f0f561e18b3b1d9bcfe896127bb453a69b5f89c29376636ad6c8d11bd1af53d73cf42eba53977ff1d4999617e8806fef57232c1e825269a4a1926c9f8c07cab00e2810ccb28024a032dcb26a2222cfff83c46e747d7dfcdc51560bf7bde5cd5710fb6452f17b8ae3400b446eea131b0089d60c41b1cbc9555e84bdedc05ce92de217e9388aa3a72224d4d38786bcbc3f11c586be6e83c02", @ANYRES16=r2, @ANYRESDEC=r2], 0xffdd)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4048881)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=mmap'])
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2100)
close_range(r0, 0xffffffffffffffff, 0x0)

27.093025284s ago: executing program 1 (id=333):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x1001406, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
listen(r0, 0x9)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x48e0, &(0x7f0000000140)='./binderfs\x00') (async, rerun: 32)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x9, 0x0, 0x7, 0x7}]}) (rerun: 32)

26.713059892s ago: executing program 3 (id=334):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000005c0)=[@wr_crn={0x46, 0x20, {0x8, 0x8000}}, @uexit={0x0, 0x18, 0x8000000000000000}, @code={0xa, 0x51, {"66440f72d658f20f09c4017971f4a5662e65410f001266660fc73066400f7528660f6e08420f01c2b9af080000b80e000000ba008000000f3066b8ec000f00d8"}}, @wr_crn={0x46, 0x20, {0x3, 0x2544}}, @uexit={0x0, 0x18, 0xaeb5}, @rdmsr={0x32, 0x18, {0xc000096a}}, @wrmsr={0x1e, 0x20, {0xc0010140, 0x3}}, @wr_crn={0x46, 0x20, {0x0, 0x5}}, @cpuid={0x14, 0x18, {0xc, 0x5}}, @wr_crn={0x46, 0x20, {0x2, 0x2}}, @rdmsr={0x32, 0x18, {0x268}}, @uexit={0x0, 0x18, 0x100000001}, @wr_crn={0x46, 0x20, {0x4, 0x1000}}, @wrmsr={0x1e, 0x20, {0xb8f, 0x6}}, @wr_crn={0x46, 0x20, {0x2, 0xf6}}, @cpuid={0x14, 0x18, {0x3, 0x7}}, @cpuid={0x14, 0x18, {0xfffffffd, 0x5}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x2}, @wrmsr={0x1e, 0x20, {0xcbc, 0x7}}, @uexit={0x0, 0x18, 0x80000000}, @rdmsr={0x32, 0x18, {0x9bb}}, @wr_crn={0x46, 0x20, {0x0, 0x7353}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @rdmsr={0x32, 0x18, {0xad8}}, @wrmsr={0x1e, 0x20, {0xb6c, 0x8}}], 0x309})
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000900)={"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"})
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0') (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000)

21.239447108s ago: executing program 33 (id=321):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000140), 0x0, 0x9, 0x0, 0x2}])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0})

0s ago: executing program 34 (id=333):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x1001406, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
listen(r0, 0x9)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x48e0, &(0x7f0000000140)='./binderfs\x00') (async, rerun: 32)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x9, 0x0, 0x7, 0x7}]}) (rerun: 32)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts.
[   20.473284][   T36] audit: type=1400 audit(1757136801.940:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.474319][  T281] cgroup: Unknown subsys name 'net'
[   20.495951][   T36] audit: type=1400 audit(1757136801.940:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.523741][   T36] audit: type=1400 audit(1757136801.990:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.523861][  T281] cgroup: Unknown subsys name 'devices'
[   20.703259][  T281] cgroup: Unknown subsys name 'hugetlb'
[   20.708893][  T281] cgroup: Unknown subsys name 'rlimit'
[   20.861864][   T36] audit: type=1400 audit(1757136802.330:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.885059][   T36] audit: type=1400 audit(1757136802.330:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   20.901150][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   20.909936][   T36] audit: type=1400 audit(1757136802.330:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   20.928625][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   20.941393][   T36] audit: type=1400 audit(1757136802.380:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.975715][   T36] audit: type=1400 audit(1757136802.380:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.001575][   T36] audit: type=1400 audit(1757136802.390:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.027254][   T36] audit: type=1400 audit(1757136802.390:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.261947][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.269019][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.276159][  T288] bridge_slave_0: entered allmulticast mode
[   22.282412][  T288] bridge_slave_0: entered promiscuous mode
[   22.299499][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.306621][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.313794][  T288] bridge_slave_1: entered allmulticast mode
[   22.319938][  T288] bridge_slave_1: entered promiscuous mode
[   22.348681][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.355811][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.362942][  T290] bridge_slave_0: entered allmulticast mode
[   22.369076][  T290] bridge_slave_0: entered promiscuous mode
[   22.385320][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.392430][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.399464][  T289] bridge_slave_0: entered allmulticast mode
[   22.405751][  T289] bridge_slave_0: entered promiscuous mode
[   22.411872][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.418901][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.426021][  T290] bridge_slave_1: entered allmulticast mode
[   22.432275][  T290] bridge_slave_1: entered promiscuous mode
[   22.444719][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.451777][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.458821][  T289] bridge_slave_1: entered allmulticast mode
[   22.465106][  T289] bridge_slave_1: entered promiscuous mode
[   22.532920][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.539975][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.547090][  T291] bridge_slave_0: entered allmulticast mode
[   22.553455][  T291] bridge_slave_0: entered promiscuous mode
[   22.568311][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.575377][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.582473][  T291] bridge_slave_1: entered allmulticast mode
[   22.588607][  T291] bridge_slave_1: entered promiscuous mode
[   22.672660][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.679715][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.687016][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.694073][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.712551][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.719622][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.726952][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.734030][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.748310][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.755379][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.762664][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.769684][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.797361][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.804427][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.811718][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.818734][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.836678][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.844496][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.852056][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.859214][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.866876][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.874162][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.881593][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.888781][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.913330][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.920367][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.928107][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.935191][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.952605][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.959664][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.972469][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.979539][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.988110][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.995173][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.007210][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.014285][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.024575][  T289] veth0_vlan: entered promiscuous mode
[   23.056205][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.063265][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.073293][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.080330][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.098662][  T288] veth0_vlan: entered promiscuous mode
[   23.105907][  T290] veth0_vlan: entered promiscuous mode
[   23.113221][  T289] veth1_macvtap: entered promiscuous mode
[   23.131186][  T290] veth1_macvtap: entered promiscuous mode
[   23.153616][  T288] veth1_macvtap: entered promiscuous mode
[   23.183509][  T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.213308][  T291] veth0_vlan: entered promiscuous mode
[   23.241112][  T291] veth1_macvtap: entered promiscuous mode
[   23.247806][  T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.272362][  T336] rust_binder: 2: no such ref 2
[   23.287296][  T336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2
[   23.287795][  T336] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   23.316726][  T336] rust_binder: Read failure Err(EAGAIN) in pid:2
[   23.328603][  T342] exFAT-fs (rnullb0): invalid boot record signature
[   23.346094][  T342] exFAT-fs (rnullb0): failed to read boot sector
[   23.353242][  T342] exFAT-fs (rnullb0): failed to recognize exfat type
[   23.362749][  T342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   23.385541][  T347] FAT-fs (rnullb0): bogus number of reserved sectors
[   23.398825][  T347] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   23.418540][  T349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=349 comm=syz.2.7
[   23.465609][  T349] process 'syz.2.7' launched './file1' with NULL argv: empty string added
[   23.466412][  T353] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.9' sets config #8
[   23.563568][  T356] raw_sendmsg: syz.0.10 forgot to set AF_INET. Fix it!
[   23.564712][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   23.589781][  T349] binder: Bad value for 'stats'
[   23.736963][  T359] syzkaller0: entered promiscuous mode
[   23.741398][    T9] usb 2-1: Using ep0 maxpacket: 16
[   23.742634][  T359] syzkaller0: entered allmulticast mode
[   23.748700][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[   23.766198][    T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[   23.777888][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   23.789184][    T9] usb 2-1: Product: syz
[   23.793606][    T9] usb 2-1: Manufacturer: syz
[   23.798246][    T9] usb 2-1: SerialNumber: syz
[   23.804925][    T9] usb 2-1: config 0 descriptor??
[   23.813828][    T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   23.823536][    T9] usb 2-1: Detected FT232B
[   23.925315][  T371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   23.934822][  T371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   24.011392][   T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   24.020378][  T332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'.
[   24.030405][  T332] rust_binder: Write failure EFAULT in pid:2
[   24.030861][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   24.046811][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   24.065012][    T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   24.074868][    T9] usb 2-1: USB disconnect, device number 2
[   24.081551][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   24.091881][    T9] ftdi_sio 2-1:0.0: device disconnected
[   24.162508][   T45] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.173551][   T45] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 244, changing to 11
[   24.184755][   T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.195445][   T45] usb 1-1: config 0 interface 0 has no altsetting 0
[   24.203072][   T45] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[   24.212430][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.221280][   T45] usb 1-1: config 0 descriptor??
[   24.396371][  T388] rust_binder: Failed to allocate buffer. len:8, is_oneway:false
[   24.492920][  T394] binder: Unknown parameter 'defcontext01777777777777777777777'
[   24.596492][  T402] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[   24.596521][  T402] rust_binder: Error while translating object.
[   24.606259][  T402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.612581][  T402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   24.635505][   T45] waltop 0003:172F:0034.0001: hidraw0: USB HID v4.f9 Device [HID 172f:0034] on usb-dummy_hcd.0-1/input0
[   24.637688][  T404] /dev/rnullb0: Can't open blockdev
[   24.719527][  T412] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   24.748931][  T420] rust_binder: Write failure EFAULT in pid:12
[   24.832657][   T45] usb 1-1: USB disconnect, device number 2
[   24.900116][  T432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=432 comm=syz.1.37
[   24.914849][  T434] rust_binder: 11: no such ref 5
[   24.919833][  T434] rust_binder: Write failure EINVAL in pid:11
[   24.940263][  T439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14
[   24.957648][  T439] rust_binder: Read failure Err(EFAULT) in pid:14
[   24.978274][  T445] random: crng reseeded on system resumption
[   25.144545][  T453] kvm: kvm [452]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   25.153152][  T453] kvm: kvm [452]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   25.401557][   T64] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   25.465523][  T456] __vm_enough_memory: pid: 456, comm: syz.0.45, bytes: 18014402804453376 not enough memory for the allocation
[   25.553101][   T64] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[   25.561537][   T64] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[   25.569616][   T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[   25.578591][   T64] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   25.589496][   T64] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   25.601032][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   25.612254][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   25.623147][   T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   25.638250][   T64] usb 3-1: string descriptor 0 read error: -22
[   25.644949][   T64] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   25.654003][   T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.662692][   T64] usb 3-1: config 0 descriptor??
[   25.668095][  T430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   25.676080][   T64] hub 3-1:0.0: bad descriptor, ignoring hub
[   25.682222][   T64] hub 3-1:0.0: probe with driver hub failed with error -5
[   25.689942][   T64] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[   25.702889][   T36] kauditd_printk_skb: 113 callbacks suppressed
[   25.702903][   T36] audit: type=1400 audit(1757136807.170:187): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.731366][   T36] audit: type=1400 audit(1757136807.170:188): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.757505][  T338] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   25.765359][   T36] audit: type=1400 audit(1757136807.170:189): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=445 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.790100][   T36] audit: type=1400 audit(1757136807.230:190): avc:  denied  { mounton } for  pid=463 comm="syz.3.48" path="/proc/24/net/dev_snmp6" dev="proc" ino=4026532608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[   25.791845][  T464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.48'.
[   25.814329][   T36] audit: type=1400 audit(1757136807.230:191): avc:  denied  { unmount } for  pid=463 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   25.855297][   T36] audit: type=1400 audit(1757136807.320:192): avc:  denied  { getattr } for  pid=467 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   25.874671][   T36] audit: type=1400 audit(1757136807.320:193): avc:  denied  { create } for  pid=467 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   25.894339][   T36] audit: type=1400 audit(1757136807.320:194): avc:  denied  { setopt } for  pid=467 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   25.900681][  T339] usb 3-1: USB disconnect, device number 3
[   25.943197][   T36] audit: type=1400 audit(1757136807.410:195): avc:  denied  { create } for  pid=470 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   25.963891][   T36] audit: type=1400 audit(1757136807.430:196): avc:  denied  { write } for  pid=467 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   25.979634][  T472] Zero length message leads to an empty skb
[   25.986009][  T338] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   26.000700][  T338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   26.011997][  T338] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   26.025094][  T338] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   26.034273][  T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.043135][  T338] usb 1-1: config 0 descriptor??
[   26.116014][  T476] syzkaller0: entered promiscuous mode
[   26.121850][  T476] syzkaller0: entered allmulticast mode
[   26.205062][  T478] kvm: kvm [477]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   26.213548][  T478] kvm: kvm [477]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   26.251399][  T339] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   26.401415][  T339] usb 3-1: Using ep0 maxpacket: 8
[   26.407559][  T339] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[   26.416004][  T339] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[   26.424108][  T339] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[   26.432986][  T339] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   26.443796][  T339] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   26.455445][  T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   26.466384][  T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   26.477562][  T339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   26.492537][  T339] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   26.501807][  T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.509824][  T462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   26.517594][  T339] usb 3-1: Product: syz
[   26.521981][  T339] usb 3-1: Manufacturer: syz
[   26.526685][  T339] usb 3-1: SerialNumber: syz
[   26.532023][  T339] usb 3-1: config 0 descriptor??
[   26.537260][  T430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   26.545368][  T339] hub 3-1:0.0: bad descriptor, ignoring hub
[   26.551492][  T339] hub 3-1:0.0: probe with driver hub failed with error -5
[   26.559516][  T339] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6
[   26.582028][  T462] kvm: pic: level sensitive irq not supported
[   26.582139][  T462] kvm: pic: non byte read
[   26.751417][  T430] overlay: ./file0 is not a directory
[   26.758857][   T64] usb 3-1: USB disconnect, device number 4
[   26.813310][  T489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38
[   26.835618][  T338] usbhid 1-1:0.0: can't add hid device: -71
[   26.851150][  T338] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   26.860034][  T338] usb 1-1: USB disconnect, device number 3
[   27.121453][   T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   27.211408][  T481] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.275942][   T45] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[   27.284410][   T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   27.294529][   T45] usb 2-1: config 0 has no interface number 0
[   27.300614][   T45] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[   27.309650][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.318165][   T45] usb 2-1: config 0 descriptor??
[   27.324429][   T45] usb 2-1: bad CDC descriptors
[   27.361393][  T481] usb 4-1: Using ep0 maxpacket: 8
[   27.368638][  T481] usb 4-1: too many endpoints for config 1 interface 1 altsetting 179: 228, using maximum allowed: 30
[   27.381782][  T481] usb 4-1: config 1 interface 1 altsetting 179 has 0 endpoint descriptors, different from the interface descriptor's value: 228
[   27.395341][  T481] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 239, changing to 7
[   27.406669][  T481] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 58277, setting to 1024
[   27.417893][  T481] usb 4-1: config 1 interface 1 has no altsetting 0
[   27.426223][  T481] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   27.435377][  T481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.443481][  T481] usb 4-1: Product: syz
[   27.448287][  T481] usb 4-1: Manufacturer: syz
[   27.453117][  T481] usb 4-1: SerialNumber: syz
[   27.486887][  T515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   27.487047][  T515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:29
[   27.511377][  T339] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   27.532278][   T64] usb 2-1: USB disconnect, device number 3
[   27.624306][  T525] 9pnet_fd: Insufficient options for proto=fd
[   27.664811][  T481] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[   27.672277][  T481] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   27.682504][  T481] usb 4-1: USB disconnect, device number 2
[   27.688555][  T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.705347][  T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   27.721075][  T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.731030][  T339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   27.750091][  T339] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   27.759425][  T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.771013][  T339] usb 3-1: config 0 descriptor??
[   28.181849][  T339] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   28.202748][  T339] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   28.243898][  T531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   28.255889][  T531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   28.385961][  T538] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.458470][   T45] usb 3-1: USB disconnect, device number 5
[   28.481546][   T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   28.512152][  T339] rust_binder: 541: removing orphan mapping 0:4232
[   28.525195][  T545] netlink: 124 bytes leftover after parsing attributes in process `syz.1.74'.
[   28.631550][   T64] usb 4-1: Using ep0 maxpacket: 8
[   28.637721][   T64] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   28.646027][   T64] usb 4-1: config 179 has no interface number 0
[   28.652407][   T64] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   28.663675][   T64] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   28.675062][   T64] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   28.686610][   T64] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   28.699924][   T64] usb 4-1: config 179 interface 65 has no altsetting 0
[   28.706813][   T64] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   28.715855][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.726763][   T64] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8
[   28.771560][   T94] input input8: unable to receive magic message: -110
[   28.778806][   T94] input input8: unable to receive magic message: -32
[   28.786347][   T94] input input8: unable to receive magic message: -32
[   28.976902][  T550] fuse: Bad value for 'fd'
[   28.982647][  T550] 9pnet_fd: Insufficient options for proto=fd
[   29.053926][  T558] rust_binder: 47: no such ref 1
[   29.058919][  T558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47
[   29.089228][  T567] Unsupported ieee802154 address type: 0
[   29.115865][  T571] rust_binder: Write failure EFAULT in pid:58
[   29.441427][   T64] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   29.582963][  T595] rust_binder: 594 RLIMIT_NICE not set
[   29.586768][  T339] rust_binder: 593: removing orphan mapping 0:4224
[   29.604758][   T64] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   29.612120][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   29.613950][   T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.629071][   T64] usb 1-1: config 0 descriptor??
[   29.714102][  T601] incfs: Options parsing error. -22
[   29.719407][  T601] incfs: mount failed -22
[   29.725002][  T601] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.740002][  T601] capability: warning: `syz.1.92' uses 32-bit capabilities (legacy support in use)
[   29.918207][  T604] rust_binder: 63: no such ref 1
[   29.923247][  T604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63
[   30.142770][  T614] rust_binder: 71: no such ref 5
[   30.156885][  T614] rust_binder: Write failure EINVAL in pid:71
[   30.837951][   T64] usb 1-1: Cannot set autoneg
[   30.848876][   T64] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   30.861737][   T64] usb 1-1: USB disconnect, device number 4
[   30.895129][  T619] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   30.904691][  T619] rust_binder: 78: no such ref 1
[   30.915319][   T36] kauditd_printk_skb: 30 callbacks suppressed
[   30.915335][   T36] audit: type=1400 audit(1757136812.380:227): avc:  denied  { write } for  pid=618 comm="syz.2.98" path="socket:[5800]" dev="sockfs" ino=5800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   31.032353][   T36] audit: type=1400 audit(1757136812.500:228): avc:  denied  { bind } for  pid=624 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   31.051669][   T36] audit: type=1400 audit(1757136812.500:229): avc:  denied  { name_bind } for  pid=624 comm="syz.2.100" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   31.072530][   T36] audit: type=1400 audit(1757136812.500:230): avc:  denied  { node_bind } for  pid=624 comm="syz.2.100" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   31.095252][   T36] audit: type=1400 audit(1757136812.500:231): avc:  denied  { append } for  pid=624 comm="syz.2.100" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   31.183656][  T627] syz.1.101 (627): attempted to duplicate a private mapping with mremap.  This is not supported.
[   31.194935][    T9] usb 4-1: USB disconnect, device number 3
[   31.195000][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   31.209110][    T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   31.338399][   T36] audit: type=1400 audit(1757136812.800:232): avc:  denied  { append } for  pid=629 comm="syz.3.102" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.375874][  T630] loop2: detected capacity change from 0 to 7
[   31.383431][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   31.394473][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.403657][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   31.411884][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.421016][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   31.429108][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.438272][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   31.446527][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.455684][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   31.463835][  T338] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   31.463838][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.463866][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   31.499187][  T638] x_tables: duplicate underflow at hook 1
[   31.538598][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   31.548488][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.556130][    C0] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.557782][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   31.566905][    C0] Buffer I/O error on dev loop2, logical block 6, async page read
[   31.574712][    C1] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   31.591601][    C1] Buffer I/O error on dev loop2, logical block 1, async page read
[   31.599429][    C1] Buffer I/O error on dev loop2, logical block 2, async page read
[   31.607288][    C1] Buffer I/O error on dev loop2, logical block 3, async page read
[   31.634408][  T653] 2N: renamed from vcan0 (while UP)
[   31.651469][  T599] Bluetooth: hci0: command 0x1003 tx timeout
[   31.657535][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   31.697132][  T338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.707517][  T338] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   31.718113][  T338] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   31.727295][  T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.735405][  T338] usb 2-1: Product: syz
[   31.739558][  T338] usb 2-1: Manufacturer: syz
[   31.744159][  T338] usb 2-1: SerialNumber: syz
[   31.752959][   T36] audit: type=1400 audit(1757136813.220:233): avc:  denied  { setopt } for  pid=655 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   31.861411][  T339] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   31.883360][   T36] audit: type=1400 audit(1757136813.350:234): avc:  denied  { load_policy } for  pid=658 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   31.883444][  T659] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   31.910918][  T659] SELinux: failed to load policy
[   31.923831][   T36] audit: type=1400 audit(1757136813.390:235): avc:  denied  { mount } for  pid=658 comm="syz.2.111" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   31.946080][   T36] audit: type=1400 audit(1757136813.410:236): avc:  denied  { remount } for  pid=658 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   31.970894][  T338] usb 2-1: 0:2 : does not exist
[   31.977562][  T338] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   31.988380][  T338] usb 2-1: USB disconnect, device number 4
[   32.021437][  T339] usb 1-1: Using ep0 maxpacket: 32
[   32.027749][  T339] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[   32.037503][  T339] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   32.047688][  T339] usb 1-1: config 0 has no interface number 0
[   32.053962][  T339] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 50067, setting to 1024
[   32.065249][  T339] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024
[   32.077124][  T339] usb 1-1: config 0 interface 214 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   32.078598][  T664] rust_binder: Write failure EFAULT in pid:91
[   32.091699][  T339] usb 1-1: config 0 interface 214 has no altsetting 0
[   32.107783][  T339] usb 1-1: New USB device found, idVendor=07c9, idProduct=010e, bcdDevice=5d.4f
[   32.117167][  T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.125539][  T339] usb 1-1: Product: syz
[   32.130257][  T339] usb 1-1: Manufacturer: syz
[   32.135175][  T339] usb 1-1: SerialNumber: syz
[   32.140628][  T339] usb 1-1: config 0 descriptor??
[   32.151886][  T651] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   32.801405][  T338] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   32.951422][  T338] usb 2-1: Using ep0 maxpacket: 16
[   32.957597][  T338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   32.967700][  T338] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   32.978041][  T338] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   32.987110][  T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.995113][  T338] usb 2-1: Product: syz
[   32.999263][  T338] usb 2-1: Manufacturer: syz
[   33.003852][  T338] usb 2-1: SerialNumber: syz
[   33.210847][  T698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'.
[   33.226310][  T338] usb 2-1: 0:2 : does not exist
[   33.233946][  T338] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   33.245992][  T338] usb 2-1: USB disconnect, device number 5
[   33.320775][  T733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92
[   33.698039][  T742] netlink: 'syz.3.136': attribute type 4 has an invalid length.
[   33.726023][  T745] 9pnet_fd: Insufficient options for proto=fd
[   35.451429][  T339] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   35.532969][  T810] cgroup: Bad value for 'name'
[   35.603089][  T339] usb 2-1: Using ep0 maxpacket: 16
[   35.611987][  T339] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   35.625153][  T339] usb 2-1: config 1 interface 0 has no altsetting 0
[   35.635630][  T339] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40
[   35.646268][  T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.658235][  T339] usb 2-1: Product: 퇭욿䌵ƿ䝙欲㡅핪竱겫囊꿤肔폛鯊譞㳪傗诐➌툿⧪㧓韑ꑑ맽㠹笱爫퍕㮶弍屦睐ಉ쏟뽒쀮喘嵛⍭ᵺꖏ਻酪ᒖ큍佼湔᣼쥹辑陿唢㟮尿䥢ố莦㣂숚覄룅潕ꉛᲣክ䦹࡛㯊흈‘ℜ勚³̎闱녅́㶭塚⡦쪮赅端鼁鲺浘㢶扔툋圤鐚é旙᪆榠
[   35.686266][  T824] incfs: Options parsing error. -22
[   35.695388][  T824] incfs: mount failed -22
[   35.701473][  T339] usb 2-1: Manufacturer: ъ
[   35.706126][  T339] usb 2-1: SerialNumber: 쇸䗴킮挘봖ᙰ㳿幤䦓ꪳ움윟蒑䗔෡쭯፰諸秌趕᰸攩㧩䮕
[   35.732616][  T821] kvm: kvm [819]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   35.741219][  T821] kvm: kvm [819]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   35.768183][  T821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'.
[   35.772419][  T827] =======================================================
[   35.772419][  T827] WARNING: The mand mount option has been deprecated and
[   35.772419][  T827]          and is ignored by this kernel. Remove the mand
[   35.772419][  T827]          option from the mount to silence this warning.
[   35.772419][  T827] =======================================================
[   35.815838][  T827] overlayfs: failed to clone lowerpath
[   35.844693][   T45] usb 1-1: USB disconnect, device number 5
[   35.973254][  T854] capability: warning: `syz.3.170' uses deprecated v2 capabilities in a way that may be insecure
[   35.985840][  T854] IPv6: NLM_F_CREATE should be specified when creating new route
[   36.124151][  T339] usb 2-1: USB disconnect, device number 6
[   36.311481][  T338] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   36.461377][  T338] usb 3-1: Using ep0 maxpacket: 8
[   36.467506][  T338] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[   36.477375][  T338] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[   36.488697][  T338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   36.497787][  T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.505970][  T338] usb 3-1: Product: ব闅햂赌圱넓⦠는⚾⸛즻쐮鉂ퟅ⨙켁盗礊Ⲅ暁⨱뽃䮼唛ퟭ䔾๔쮰圿炭偫詪ۺ埣%贆દ▬颅鍼탊詨ꉤ싆쯫౫쪇⁑폈淦橴
[   36.524995][  T338] usb 3-1: Manufacturer: ᫦捰毙儒ꉢ怟厸嵫ᯗ䣓셨寢繁ϩᯔ䣰墘⯎퐏瀁礏륻㡎䟥ʜ㑄છ䷳⎪殴把嘬ᥛ쑱Ờ枖᰾옣캩䑜眊懅啗〟Ὴ壈塀社⦥罒渝ԟ쫁綦璧헵腴懪⭜Ӣ脁含ஜ᷵ᙍꏼ옟ꕹ윴猹ꓚఝ儩ꚮ嘧楖⹄껁꽲赫印耱洈뿁쟸吸ⵣ噌谫ࢉ뉳叮쥚紎슝ꕁ霶蒶露錓肎語籯댎
[   36.558248][  T338] usb 3-1: SerialNumber: з
[   36.792428][  T868] netlink: 'syz.0.175': attribute type 32 has an invalid length.
[   36.819922][  T870] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   36.830052][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   36.871397][   T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   37.020684][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   37.020700][   T36] audit: type=1400 audit(1757136818.480:265): avc:  denied  { create } for  pid=873 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   37.022380][  T875] rust_binder: 132: no such ref 3
[   37.027038][   T45] usb 2-1: Using ep0 maxpacket: 16
[   37.046010][  T875] rust_binder: 132: no such ref 3
[   37.136639][  T338] cdc_ncm 3-1:1.0: bind() failure
[   37.147867][  T338] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   37.161441][  T338] cdc_ncm 3-1:1.1: bind() failure
[   37.179115][  T338] usb 3-1: USB disconnect, device number 6
[   37.221184][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   37.226635][   T36] audit: type=1400 audit(1757136818.690:266): avc:  denied  { setopt } for  pid=877 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.240345][   T45] usb 2-1: unable to read config index 0 descriptor/start: -71
[   37.258520][   T45] usb 2-1: can't read configurations, error -71
[   37.373864][  T881] overlay: Unknown parameter 'fowner>00000000000000000000'
[   37.429444][  T886] rust_binder: Error while translating object.
[   37.429481][  T886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   37.435765][  T886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:123
[   37.457729][   T36] audit: type=1400 audit(1757136818.920:267): avc:  denied  { setattr } for  pid=887 comm="syz.1.181" path="socket:[8846]" dev="sockfs" ino=8846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.564219][  T891] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   37.881976][   T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   37.922250][   T36] audit: type=1400 audit(1757136819.390:268): avc:  denied  { write } for  pid=910 comm="syz.2.187" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.955272][  T916] overlayfs: workdir and upperdir must be separate subtrees
[   38.031372][   T45] usb 2-1: Using ep0 maxpacket: 8
[   38.038180][   T45] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[   38.048337][   T45] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[   38.059610][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   38.068738][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.076758][   T45] usb 2-1: Product: ꆇﭨ얝뎞柢૬먥鵐慟樃ﶏ辏뚗瞆과鶟≉哒돧闎렁項醷ᢢ擀︍圈찫볐↣鉺⏛尭㖪獅䗒ଡ଼ಲ㶸揪혣躺㗪ກኇᵚ㵅ꩼᾸ往泯ᅵ泊亠⎦Ѣ櫶澧犈女䠤䖑놤靾✸儵妑쩩滲刌풳嬋졼忔ꪎ
[   38.102797][   T45] usb 2-1: Manufacturer: а
[   38.107296][   T45] usb 2-1: SerialNumber: syz
[   38.841419][  T599] Bluetooth: hci0: command 0x1003 tx timeout
[   38.841415][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.867344][   T36] audit: type=1400 audit(1757136820.330:269): avc:  denied  { connect } for  pid=934 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   39.093866][  T941] overlayfs: failed to clone upperpath
[   39.139569][   T45] cdc_ncm 2-1:1.0: bind() failure
[   39.152708][   T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   39.159513][   T45] cdc_ncm 2-1:1.1: bind() failure
[   39.197188][   T45] usb 2-1: USB disconnect, device number 8
[   39.208229][   T36] audit: type=1400 audit(1757136820.670:270): avc:  denied  { getopt } for  pid=942 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   39.211784][  T943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=943 comm=syz.3.198
[   39.271978][   T36] audit: type=1400 audit(1757136820.740:271): avc:  denied  { create } for  pid=942 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   39.278257][  T943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=943 comm=syz.3.198
[   39.293794][   T36] audit: type=1400 audit(1757136820.740:272): avc:  denied  { write } for  pid=942 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   39.382261][  T959] 9pnet_fd: Insufficient options for proto=fd
[   39.671399][   T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   39.717952][   T36] audit: type=1400 audit(1757136821.180:273): avc:  denied  { map } for  pid=967 comm="syz.0.205" path="socket:[7720]" dev="sockfs" ino=7720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.735119][  T971] netlink: 'syz.3.206': attribute type 4 has an invalid length.
[   39.741002][   T36] audit: type=1400 audit(1757136821.180:274): avc:  denied  { getopt } for  pid=967 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   39.749204][  T971] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.206'.
[   39.779870][  T970] netlink: 'syz.3.206': attribute type 4 has an invalid length.
[   39.790317][  T970] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.206'.
[   39.851386][   T45] usb 2-1: Using ep0 maxpacket: 16
[   39.862395][   T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   39.871729][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.879951][   T45] usb 2-1: Product: syz
[   39.884668][   T45] usb 2-1: Manufacturer: syz
[   39.890594][   T45] usb 2-1: SerialNumber: syz
[   39.899562][   T45] r8152-cfgselector 2-1: Unknown version 0x0000
[   39.901402][  T339] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   39.906419][   T45] r8152-cfgselector 2-1: config 0 descriptor??
[   40.062796][  T339] usb 3-1: unable to get BOS descriptor or descriptor too short
[   40.070844][  T339] usb 3-1: not running at top speed; connect to a high speed hub
[   40.079921][  T339] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[   40.088365][  T339] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[   40.096557][  T339] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[   40.105745][  T339] usb 3-1: config 129 has no interface number 0
[   40.112003][  T339] usb 3-1: config 129 has no interface number 1
[   40.118249][  T339] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[   40.131549][  T339] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[   40.142465][  T339] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[   40.155610][  T339] usb 3-1: config 129 interface 135 has no altsetting 0
[   40.162572][  T339] usb 3-1: config 129 interface 5 has no altsetting 0
[   40.171464][  T339] usb 3-1: string descriptor 0 read error: -22
[   40.177777][  T339] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[   40.187004][  T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.198671][  T339] usb 3-1: MIDIStreaming interface descriptor not found
[   40.324448][   T45] r8152-cfgselector 2-1: Unknown version 0x0000
[   40.330886][   T45] r8152-cfgselector 2-1: bad CDC descriptors
[   40.338462][   T45] r8152-cfgselector 2-1: USB disconnect, device number 9
[   40.396790][  T966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.405402][  T966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.414295][ T1006] binder: Unknown parameter '18446744073709551615'
[   40.421568][  T380] usb 3-1: USB disconnect, device number 7
[   40.919560][ T1027] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607)
[   40.919584][ T1027] rust_binder: Error while translating object.
[   40.932052][ T1027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.938411][ T1027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121
[   40.978252][ T1035] veth1: entered allmulticast mode
[   41.032006][ T1035] veth1: left allmulticast mode
[   41.047887][ T1038] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   41.183290][ T1050] fuse: Bad value for 'group_id'
[   41.196433][ T1050] fuse: Bad value for 'group_id'
[   41.203499][ T1050] rust_binder: Error while translating object.
[   41.203560][ T1050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   41.209765][ T1050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171
[   41.223623][ T1050] kvm: kvm [1049]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000ff9000
[   41.775081][ T1063] overlayfs: failed to clone upperpath
[   41.788783][ T1065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.240'.
[   42.131387][  T380] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   42.280441][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   42.280457][   T36] audit: type=1400 audit(1757136823.740:284): avc:  denied  { setattr } for  pid=1071 comm="syz.2.243" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   42.311257][  T380] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   42.320347][  T380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.328959][  T380] usb 1-1: config 0 descriptor??
[   42.511386][  T479] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   42.641389][  T479] usb 3-1: device descriptor read/64, error -71
[   42.881413][  T479] usb 3-1: device descriptor read/64, error -71
[   43.044282][ T1080] cgroup: Unknown subsys name 'measure'
[   43.121388][  T479] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   43.194231][ T1091] overlayfs: failed to clone upperpath
[   43.201706][ T1093] overlayfs: failed to clone upperpath
[   43.251406][  T479] usb 3-1: device descriptor read/64, error -71
[   43.491398][  T479] usb 3-1: device descriptor read/64, error -71
[   43.537686][ T1070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.546567][ T1070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.556247][  T380] usb 1-1: Cannot set autoneg
[   43.561020][  T380] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   43.573325][  T380] usb 1-1: USB disconnect, device number 6
[   43.595726][ T1107] 9pnet_fd: Insufficient options for proto=fd
[   43.601991][  T479] usb usb3-port1: attempt power cycle
[   43.743857][   T36] audit: type=1326 audit(1757136825.210:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1114 comm="syz.1.260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f133598ebe9 code=0x0
[   43.941379][  T479] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   43.962470][  T479] usb 3-1: device descriptor read/8, error -71
[   44.092474][  T479] usb 3-1: device descriptor read/8, error -71
[   44.169915][   T36] audit: type=1400 audit(1757136825.630:286): avc:  denied  { map } for  pid=1117 comm="syz.0.261" path="socket:[9777]" dev="sockfs" ino=9777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   44.331374][  T479] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   44.372449][  T479] usb 3-1: device descriptor read/8, error -71
[   44.502322][  T479] usb 3-1: device descriptor read/8, error -71
[   44.621415][  T479] usb usb3-port1: unable to enumerate USB device
[   44.687671][ T1132] 9pnet_fd: Insufficient options for proto=fd
[   44.694247][   T36] audit: type=1400 audit(1757136826.160:287): avc:  denied  { create } for  pid=1131 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   44.717576][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.727157][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.736295][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.754740][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.777003][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.799160][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.809177][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.818369][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   44.827513][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   45.292155][   T36] audit: type=1400 audit(1757136826.760:288): avc:  denied  { mount } for  pid=1142 comm="syz.2.268" name="/" dev="configfs" ino=2426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   45.315693][   T36] audit: type=1400 audit(1757136826.780:289): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   45.383956][   T12] bridge_slave_1: left allmulticast mode
[   45.389893][   T12] bridge_slave_1: left promiscuous mode
[   45.396120][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.404002][   T12] bridge_slave_0: left allmulticast mode
[   45.409716][   T12] bridge_slave_0: left promiscuous mode
[   45.415713][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.490738][   T36] audit: type=1400 audit(1757136826.950:290): avc:  denied  { mounton } for  pid=1146 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   45.526389][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.533489][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.540548][ T1146] bridge_slave_0: entered allmulticast mode
[   45.546930][ T1146] bridge_slave_0: entered promiscuous mode
[   45.553430][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.560862][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.568013][ T1146] bridge_slave_1: entered allmulticast mode
[   45.577093][ T1146] bridge_slave_1: entered promiscuous mode
[   45.587514][   T12] veth1_macvtap: left promiscuous mode
[   45.593092][   T12] veth0_vlan: left promiscuous mode
[   45.624525][ T1155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142
[   45.670419][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.686585][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.693873][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.700921][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.725966][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.733242][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.742468][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.749503][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.758402][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.765463][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.787614][ T1146] veth0_vlan: entered promiscuous mode
[   45.798276][ T1146] veth1_macvtap: entered promiscuous mode
[   45.817032][   T36] audit: type=1400 audit(1757136827.280:291): avc:  denied  { mount } for  pid=1146 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   45.847276][   T36] audit: type=1400 audit(1757136827.280:292): avc:  denied  { mounton } for  pid=1146 comm="syz-executor" path="/root/syzkaller.ePljbI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   45.882315][ T1163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer.
[   46.117643][   T36] audit: type=1400 audit(1757136827.580:293): avc:  denied  { read write } for  pid=1165 comm="syz.4.275" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   46.503133][ T1170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   46.512194][ T1170] rust_binder: 144: no such ref 1
[   46.517231][ T1170] rust_binder: 144: no such ref 1
[   46.522895][ T1170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144
[   46.655478][ T1177] rust_binder: Write failure EFAULT in pid:150
[   46.744488][ T1187] tipc: Started in network mode
[   46.755586][ T1187] tipc: Node identity 4, cluster identity 4711
[   46.762277][ T1187] tipc: Node number set to 4
[   46.801605][ T1191] veth1: entered allmulticast mode
[   46.806810][ T1191] veth1: left allmulticast mode
[   46.835816][ T1201] 9pnet_fd: Insufficient options for proto=fd
[   46.849427][ T1204] __nla_validate_parse: 56 callbacks suppressed
[   46.849441][ T1204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'.
[   46.901601][ T1219] 9pnet_fd: Insufficient options for proto=fd
[   46.919857][ T1221] bridge0: port 3(veth0_to_bridge) entered blocking state
[   46.927152][ T1221] bridge0: port 3(veth0_to_bridge) entered disabled state
[   46.934581][ T1221] veth0_to_bridge: entered allmulticast mode
[   46.940911][ T1221] veth0_to_bridge: entered promiscuous mode
[   46.947026][ T1221] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   46.959614][ T1221] bridge0: port 3(veth0_to_bridge) entered blocking state
[   46.966771][ T1221] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   47.151390][  T479] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[   47.205932][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.218050][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.230164][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.242224][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.254413][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.266811][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.278984][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.291104][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.303231][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   47.315324][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   48.219567][ T1288] fuse: Bad value for 'fd'
[   49.944445][ T1301] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   49.951916][ T1301] rust_binder: Write failure EINVAL in pid:171
[   51.591486][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   51.607711][ T1305] fuse: Unknown parameter 'roo'
[   52.211354][    C0] net_ratelimit: 149646 callbacks suppressed
[   52.211377][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.211417][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   52.217499][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.229412][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   52.241449][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.253420][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   52.265411][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.277266][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   52.289217][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.301237][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   53.631344][    C0] sched: DL replenish lagged too much
[   55.605398][ T1320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.329'.
[   55.981729][ T1320] netlink: 43 bytes leftover after parsing attributes in process `syz.1.329'.
[   56.560385][ T1320] netlink: 'syz.1.329': attribute type 5 has an invalid length.
[   56.672932][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   56.672952][   T36] audit: type=1400 audit(1757136838.020:298): avc:  denied  { read } for  pid=94 comm="acpid" name="event6" dev="devtmpfs" ino=523 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   56.776080][ T1320] netlink: 43 bytes leftover after parsing attributes in process `syz.1.329'.
[   57.018875][   T36] audit: type=1400 audit(1757136838.020:299): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=523 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   57.221380][    C1] net_ratelimit: 134680 callbacks suppressed
[   57.221401][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.221453][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.227497][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.239613][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.251488][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.263358][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.275497][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   57.287614][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.299224][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.311213][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.887114][   T36] audit: type=1400 audit(1757136838.020:300): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=523 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   57.974409][   T36] audit: type=1326 audit(1757136838.830:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1327 comm="syz.3.331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe9138ebe9 code=0x0
[   58.937440][ T1325] syzkaller0: entered promiscuous mode
[   58.954093][ T1325] syzkaller0: entered allmulticast mode
[   62.231340][    C1] net_ratelimit: 123035 callbacks suppressed
[   62.231359][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   62.231377][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.237423][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.249420][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.261382][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.273472][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.285148][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.297014][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.308976][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   62.321101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.241350][    C1] net_ratelimit: 147808 callbacks suppressed
[   67.241371][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   67.241461][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.247442][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.259369][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.271347][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.283356][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.295061][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   67.307026][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.318971][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   67.331190][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.251344][    C1] net_ratelimit: 150717 callbacks suppressed
[   72.251364][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   72.251403][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.257460][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.269467][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.281411][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.293463][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.305169][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.317251][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.329206][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   72.341333][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.261333][    C0] net_ratelimit: 144011 callbacks suppressed
[   77.261354][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.261403][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.267428][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.279448][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   77.291589][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.303279][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.315344][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.327272][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.339359][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.351033][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.271368][    C1] net_ratelimit: 148087 callbacks suppressed
[   82.271388][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.271411][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.277513][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.289439][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.301417][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   82.313521][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.325197][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   82.337183][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.349149][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.361213][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.281367][    C0] net_ratelimit: 143120 callbacks suppressed
[   87.281387][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.281413][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.287580][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.299469][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.311641][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.323332][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   87.335338][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.347139][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   87.359915][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.371691][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.291325][    C1] net_ratelimit: 132838 callbacks suppressed
[   92.291345][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.291399][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.297457][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   92.309491][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.321308][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.333461][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.345164][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.357166][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.368995][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   92.381224][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.301335][    C1] net_ratelimit: 135301 callbacks suppressed
[   97.301356][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.301443][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.307430][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.319492][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.331198][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.343376][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.355163][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.367367][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.379090][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[   97.391077][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.311359][    C1] net_ratelimit: 137162 callbacks suppressed
[  102.311381][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  102.311453][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.317452][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.329609][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.341713][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.353849][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.365537][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  102.377654][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.389451][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.401616][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.321326][    C1] net_ratelimit: 135342 callbacks suppressed
[  107.321346][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.321367][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.327398][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.339516][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.351389][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.363396][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.375075][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.387198][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.399042][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  107.411096][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.331332][    C0] net_ratelimit: 136144 callbacks suppressed
[  112.331353][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.331369][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  112.337571][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.349292][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  112.361429][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.373214][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.385318][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.397063][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.409045][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.420856][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.341312][    C1] net_ratelimit: 124928 callbacks suppressed
[  117.341334][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  117.341458][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.347419][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.359804][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.371661][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.383713][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.395400][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.407549][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.419376][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  117.431432][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.351317][    C1] net_ratelimit: 137243 callbacks suppressed
[  122.351363][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.351545][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.357459][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.369520][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.382148][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  122.394771][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.406511][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.418710][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.430490][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.442501][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.361308][    C1] net_ratelimit: 137518 callbacks suppressed
[  127.361328][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  127.361375][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.367386][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.379529][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.391367][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.403388][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.415122][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  127.427215][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.439035][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.451188][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.371315][    C1] net_ratelimit: 138003 callbacks suppressed
[  132.371335][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  132.371411][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.377398][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.389457][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.401300][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.413304][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.424985][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.437104][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.448947][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  132.460977][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.381328][    C1] net_ratelimit: 139872 callbacks suppressed
[  137.381351][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.381352][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.381515][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.387427][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  137.399485][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.411292][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.423310][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.435398][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.447524][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.459225][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  142.391336][    C1] net_ratelimit: 138074 callbacks suppressed
[  142.391357][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.391359][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.391600][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.397424][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  142.409564][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.421490][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  142.433731][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.445494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.457610][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.469320][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.401318][    C1] net_ratelimit: 137523 callbacks suppressed
[  147.401340][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.401446][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.407406][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.419571][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.431403][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.443652][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.455948][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.467211][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.479030][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  147.491167][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.411317][    C1] net_ratelimit: 137946 callbacks suppressed
[  152.411337][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.411343][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.411538][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.417422][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  152.429709][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.441427][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  152.453676][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.465353][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.477526][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.489183][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.421301][    C1] net_ratelimit: 131585 callbacks suppressed
[  157.421322][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.421456][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.427397][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.439645][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.451223][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.463206][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.475036][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.487338][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.499019][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.511041][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.431289][    C1] net_ratelimit: 131225 callbacks suppressed
[  162.431311][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.431565][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.437382][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.449402][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.461280][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.473434][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.485038][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.497141][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.511297][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.521230][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.441292][    C1] net_ratelimit: 131343 callbacks suppressed
[  167.441314][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  167.441549][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.447390][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.459400][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.471249][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  167.483604][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.495115][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  167.507213][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.519052][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.531348][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.451328][    C1] net_ratelimit: 131786 callbacks suppressed
[  172.451350][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.451379][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.457421][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  172.469541][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.481366][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  172.493619][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.505194][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.517226][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.529042][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  172.541312][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.461330][    C1] net_ratelimit: 131661 callbacks suppressed
[  177.461351][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.461418][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.467415][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.479540][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.491388][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.503583][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.515142][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:52:3c:ec:1d:de, vlan:0)
[  177.527246][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.539046][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.551332][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.471304][    C1] net_ratelimit: 128951 callbacks suppressed
[  182.471325][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  182.471577][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.477415][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.489429][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.501291][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  182.513492][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.525065][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.537709][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.549611][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.561914][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.163731][   T37] INFO: task syz.0.321:1301 blocked for more than 122 seconds.
[  185.211302][   T37]       Not tainted syzkaller #0
[  185.216304][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  186.802669][   T37] task:syz.0.321       state:D stack:0     pid:1301  tgid:1300  ppid:290    flags:0x00004000
[  186.842639][   T37] Call Trace:
[  186.845969][   T37]  <TASK>
[  186.848901][   T37]  __schedule+0x1322/0x1df0
[  186.875713][   T37]  ? __sched_text_start+0x10/0x10
[  186.880793][   T37]  ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10
[  186.913202][   T37]  ? __call_rcu_common+0x41f/0x700
[  186.918379][   T37]  schedule+0xc6/0x240
[  186.952259][   T37]  schedule_timeout+0xb2/0x3a0
[  186.957139][   T37]  ? __cfi_schedule_timeout+0x10/0x10
[  186.984802][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  186.990406][   T37]  ? __percpu_ref_switch_mode+0x345/0x5f0
[  187.024712][   T37]  wait_for_common+0x359/0x630
[  187.029619][   T37]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  187.059717][   T37]  ? wait_for_completion+0x40/0x40
[  187.075178][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  187.081046][   T37]  ? percpu_ref_kill_and_confirm+0xf4/0x220
[  187.122302][   T37]  ? kill_ioctx+0x2b0/0x3d0
[  187.126866][   T37]  wait_for_completion+0x1c/0x40
[  187.162096][   T37]  exit_aio+0x2df/0x3b0
[  187.166315][   T37]  ? __cfi_exit_aio+0x10/0x10
[  187.171002][   T37]  ? uprobe_clear_state+0x2cd/0x340
[  187.199420][   T37]  __mmput+0x30/0x320
[  187.211788][   T37]  ? mmput+0x4d/0x170
[  187.215822][   T37]  mmput+0x55/0x170
[  187.219636][   T37]  do_exit+0x918/0x2630
[  187.312108][   T37]  ? __cfi_do_exit+0x10/0x10
[  187.316811][   T37]  ? futex_wake+0x63a/0x900
[  187.418426][   T37]  ? futex_setup_timer+0xb4/0xd0
[  187.434975][   T37]  ? __kasan_check_write+0x18/0x20
[  187.440178][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  187.481275][    C1] net_ratelimit: 124361 callbacks suppressed
[  187.481295][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  187.481356][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.487353][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.499551][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.511182][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  187.523266][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.535107][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.547318][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.558815][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.570916][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.621950][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  187.627582][   T37]  do_group_exit+0x22a/0x300
[  187.676313][   T37]  ? __kasan_check_write+0x18/0x20
[  187.698851][   T37]  get_signal+0x139d/0x14f0
[  187.725919][   T37]  arch_do_signal_or_restart+0x96/0x720
[  187.742989][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  187.749199][   T37]  ? __kasan_check_write+0x18/0x20
[  187.775088][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  187.780604][   T37]  do_syscall_64+0x64/0xf0
[  187.811696][   T37]  ? clear_bhb_loop+0x50/0xa0
[  187.816427][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  187.852883][   T37] RIP: 0033:0x7f3c9e98ebe9
[  187.857338][   T37] RSP: 002b:00007f3c9f8a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  187.901319][   T37] RAX: fffffffffffffe00 RBX: 00007f3c9ebc5fa8 RCX: 00007f3c9e98ebe9
[  187.909340][   T37] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c9ebc5fa8
[  187.957463][   T37] RBP: 00007f3c9ebc5fa0 R08: 0000000000000000 R09: 0000000000000000
[  187.992385][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.000418][   T37] R13: 00007f3c9ebc6038 R14: 00007fffc970ee00 R15: 00007fffc970eee8
[  188.052532][   T37]  </TASK>
[  188.055709][   T37] NMI backtrace for cpu 1
[  188.055729][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba
[  188.055757][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  188.055768][   T37] Call Trace:
[  188.055774][   T37]  <TASK>
[  188.055782][   T37]  __dump_stack+0x21/0x30
[  188.055809][   T37]  dump_stack_lvl+0x10c/0x190
[  188.055832][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  188.055857][   T37]  dump_stack+0x19/0x20
[  188.055877][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  188.055901][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  188.055922][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  188.055945][   T37]  ? sched_show_task+0x379/0x560
[  188.055968][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  188.055987][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  188.056009][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  188.056030][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  188.056054][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  188.056075][   T37]  watchdog+0xd8f/0xed0
[  188.056098][   T37]  ? __cfi_watchdog+0x10/0x10
[  188.056118][   T37]  ? __kasan_check_read+0x15/0x20
[  188.056142][   T37]  ? __kthread_parkme+0x138/0x180
[  188.056158][   T37]  ? schedule+0xc6/0x240
[  188.056175][   T37]  kthread+0x2c7/0x370
[  188.056192][   T37]  ? __cfi_watchdog+0x10/0x10
[  188.056212][   T37]  ? __cfi_kthread+0x10/0x10
[  188.056230][   T37]  ret_from_fork+0x64/0xa0
[  188.056252][   T37]  ? __cfi_kthread+0x10/0x10
[  188.056270][   T37]  ret_from_fork_asm+0x1a/0x30
[  188.056295][   T37]  </TASK>
[  188.056302][   T37] Sending NMI from CPU 1 to CPUs 0:
[  188.241241][    C0] NMI backtrace for cpu 0
[  188.241261][    C0] CPU: 0 UID: 0 PID: 1341 Comm: kworker/0:6 Not tainted syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba
[  188.241282][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  188.241293][    C0] Workqueue: mld mld_query_work
[  188.241314][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x24/0x70
[  188.241340][    C0] Code: 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0c 25 40 eb 04 00 65 8b 15 1c 07 7f 7e 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 ec 0b 00 00 00 74 2c 8b 91 c8 0b 00
[  188.241355][    C0] RSP: 0018:ffffc90000006c28 EFLAGS: 00000206
[  188.241370][    C0] RAX: ffffffff84e75e33 RBX: 0000000000000000 RCX: ffff88811e509300
[  188.241383][    C0] RDX: 0000000000000100 RSI: 00000000fffffffd RDI: 00000000fffffffd
[  188.241396][    C0] RBP: ffffc90000006c28 R08: ffffc90000006f80 R09: ffffc90000006f90
[  188.241408][    C0] R10: ffffc900000070f0 R11: fffff52000000e22 R12: 0000000000000001
[  188.241420][    C0] R13: 1ffff11021a75b98 R14: 0000000000000003 R15: 00000000fffffffd
[  188.241433][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  188.241448][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.241461][    C0] CR2: 00007efe91594198 CR3: 000000011e08a000 CR4: 00000000003526b0
[  188.241478][    C0] Call Trace:
[  188.241483][    C0]  <IRQ>
[  188.241490][    C0]  find_match+0x1a3/0x10f0
[  188.241509][    C0]  ? stack_depot_save_flags+0x38/0x800
[  188.241530][    C0]  __find_rr_leaf+0x23c/0x790
[  188.241549][    C0]  ? rt6_check_expired+0x250/0x250
[  188.241565][    C0]  ? __siphash_unaligned+0x26e/0x3c0
[  188.241587][    C0]  fib6_table_lookup+0x2c5/0x9b0
[  188.241608][    C0]  ? __cfi_flow_hash_from_keys+0x10/0x10
[  188.241634][    C0]  ? __cfi_fib6_table_lookup+0x10/0x10
[  188.241654][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  188.241678][    C0]  ? enqueue_to_backlog+0x786/0xbf0
[  188.241702][    C0]  ip6_pol_route+0x167/0x12c0
[  188.241724][    C0]  ? netif_rx_internal+0xab/0x340
[  188.241742][    C0]  ? __cfi_ip6_pol_route+0x10/0x10
[  188.241763][    C0]  ? dev_forward_skb+0x80/0x80
[  188.241782][    C0]  ? __dev_forward_skb2+0x4ab/0x770
[  188.241802][    C0]  ? __netif_rx+0x30/0x230
[  188.241824][    C0]  ? veth_xmit+0x4b7/0x820
[  188.241843][    C0]  ip6_pol_route_input+0x5a/0x80
[  188.241864][    C0]  fib6_rule_lookup+0x4cc/0x6b0
[  188.241882][    C0]  ? __cfi_ip6_pol_route_input+0x10/0x10
[  188.241903][    C0]  ? __cfi_fib6_rule_lookup+0x10/0x10
[  188.241922][    C0]  ? ip6t_do_table+0x1dc/0x14d0
[  188.241944][    C0]  ip6_route_input+0x59f/0x8d0
[  188.241966][    C0]  ? __cfi_ip6_route_input+0x10/0x10
[  188.242008][    C0]  ? __cfi_ip6t_do_table+0x10/0x10
[  188.242030][    C0]  ? worker_thread+0xc58/0x1250
[  188.242047][    C0]  ? __cfi_ip6table_mangle_hook+0x10/0x10
[  188.242072][    C0]  ip6_rcv_finish+0x15a/0x3c0
[  188.242092][    C0]  ipv6_rcv+0xed/0x220
[  188.242112][    C0]  ? __cfi_ipv6_rcv+0x10/0x10
[  188.242131][    C0]  ? br_dev_queue_push_xmit+0x553/0x6d0
[  188.242161][    C0]  ? __cfi_ip6_rcv_finish+0x10/0x10
[  188.242182][    C0]  ? __cfi_br_dev_queue_push_xmit+0x10/0x10
[  188.242206][    C0]  netif_receive_skb+0x147/0x7b0
[  188.242230][    C0]  ? __cfi_netif_receive_skb+0x10/0x10
[  188.242252][    C0]  ? br_flood+0x67e/0x730
[  188.242267][    C0]  br_pass_frame_up+0x126/0x1c0
[  188.242285][    C0]  br_handle_frame_finish+0x12d9/0x1720
[  188.242304][    C0]  ? __cfi_br_handle_frame_finish+0x10/0x10
[  188.242324][    C0]  br_handle_frame+0x5a6/0xba0
[  188.242341][    C0]  ? __cfi_br_handle_frame+0x10/0x10
[  188.242358][    C0]  __netif_receive_skb_core+0xf4b/0x3940
[  188.242381][    C0]  ? ip6_mc_input+0x4f3/0x670
[  188.242402][    C0]  ? ip6_mc_input+0x4f3/0x670
[  188.242422][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  188.242443][    C0]  ? qdisc_run_end+0x120/0x120
[  188.242465][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  188.242485][    C0]  ? ip6_rcv_finish+0x344/0x3c0
[  188.242506][    C0]  ? ipv6_rcv+0xed/0x220
[  188.242525][    C0]  ? __cfi_ipv6_rcv+0x10/0x10
[  188.242544][    C0]  ? __cfi_ip6_rcv_finish+0x10/0x10
[  188.242564][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  188.242589][    C0]  process_backlog+0x3e5/0xae0
[  188.242611][    C0]  __napi_poll+0xd3/0x610
[  188.242633][    C0]  net_rx_action+0x584/0xce0
[  188.242650][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  188.242666][    C0]  ? sched_clock+0x44/0x60
[  188.242686][    C0]  ? __cfi_sched_clock_cpu+0x10/0x10
[  188.242705][    C0]  ? try_to_wake_up+0xdfb/0x1b00
[  188.242720][    C0]  ? irqtime_account_irq+0x51/0x1c0
[  188.242737][    C0]  handle_softirqs+0x1ab/0x630
[  188.242757][    C0]  __do_softirq+0xf/0x16
[  188.242770][    C0]  do_softirq+0xa6/0x100
[  188.242786][    C0]  </IRQ>
[  188.242791][    C0]  <TASK>
[  188.242796][    C0]  ? __cfi_do_softirq+0x10/0x10
[  188.242812][    C0]  ? _raw_spin_lock_bh+0x90/0x120
[  188.242830][    C0]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  188.242847][    C0]  ? __kfree_skb+0x18f/0x210
[  188.242859][    C0]  __local_bh_enable_ip+0x74/0x80
[  188.242876][    C0]  _raw_spin_unlock_bh+0x54/0x60
[  188.242895][    C0]  mld_query_work+0x951/0x2c10
[  188.242908][    C0]  ? __kasan_check_write+0x18/0x20
[  188.242925][    C0]  ? __pwq_activate_work+0x308/0x410
[  188.242944][    C0]  ? __cfi_mld_query_work+0x10/0x10
[  188.242956][    C0]  ? pwq_dec_nr_in_flight+0x6c7/0xc60
[  188.242975][    C0]  ? round_jiffies_relative+0xd9/0x100
[  188.242993][    C0]  ? kick_pool+0xb9/0x550
[  188.243007][    C0]  process_scheduled_works+0x7d5/0x1020
[  188.243027][    C0]  worker_thread+0xc58/0x1250
[  188.243041][    C0]  ? schedule+0xc6/0x240
[  188.243053][    C0]  kthread+0x2c7/0x370
[  188.243067][    C0]  ? __cfi_worker_thread+0x10/0x10
[  188.243079][    C0]  ? __cfi_kthread+0x10/0x10
[  188.243092][    C0]  ret_from_fork+0x64/0xa0
[  188.243108][    C0]  ? __cfi_kthread+0x10/0x10
[  188.243121][    C0]  ret_from_fork_asm+0x1a/0x30
[  188.243142][    C0]  </TASK>
[  188.403746][   T23] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { } 10084 jiffies s: 2837 root: 0x0/.
[  192.491290][    C0] net_ratelimit: 105696 callbacks suppressed
[  192.491310][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.491318][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  192.491370][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.497622][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.509257][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  192.521282][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.533032][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.545234][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.556826][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.568999][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)