last executing test programs:

3m8.893599186s ago: executing program 1 (id=1285):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket(0x80000000000000a, 0x2, 0x0) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30)
close_range(r0, 0xffffffffffffffff, 0x0)

3m8.129685876s ago: executing program 1 (id=1304):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x4}, {0x94}]})
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x7, 0xfa, 0x5, 0x7}, {0x4, 0x1, 0x4, 0x5}, {0xa, 0x0, 0x1, 0x3}]})
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000200)={0x1, 0x0, 0x6, 0x7fff, @vifc_lcl_addr=@multicast2, @empty}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x4}, {0x94}]}) (async)
bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x7, 0xfa, 0x5, 0x7}, {0x4, 0x1, 0x4, 0x5}, {0xa, 0x0, 0x1, 0x3}]}) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000200)={0x1, 0x0, 0x6, 0x7fff, @vifc_lcl_addr=@multicast2, @empty}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

3m8.119235057s ago: executing program 1 (id=1306):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x1a8, 0x10, 0x713, 0xffffeffc, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x4e23}, {@in6=@remote, 0x4d3, 0x32}, @in=@multicast2, {0x0, 0x800000, 0xfffffffffffffffd, 0x80000001}, {}, {0x0, 0x5}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "e80c857b65faac4779da4c290569c738c39dac5defb806ba7783bf47e70ba40bb4"}}]}, 0x1a8}}, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
setresuid(0xee01, 0xee01, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x686f)

3m8.046688157s ago: executing program 1 (id=1309):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='udf\x00', 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100)
socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f6e0f000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})

3m7.16443189s ago: executing program 1 (id=1325):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902})
ioctl$TUNSETVNETHDRSZ(r1, 0x800454e0, &(0x7f0000000140))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30}, 0x30)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e26, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0xc804)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000101"], 0x1c}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x7, 0x4)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2})

3m7.061672182s ago: executing program 1 (id=1326):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0xffff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40)
userfaultfd(0x80000)
pipe2$9p(&(0x7f0000000100), 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4040810}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8)
setuid(r1)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000580)={0x0, 0x0, @ioapic})
r3 = socket$inet(0x2, 0x800, 0x6)
sendto$inet(r3, &(0x7f00000007c0)="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", 0x1000, 0x20000000, &(0x7f00000017c0)={0x2, 0x4e23, @local}, 0x10)
r4 = accept4(r3, &(0x7f0000001800)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000001880)=0x80, 0x1800)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1)
recvmsg(r4, &(0x7f0000001b40)={&(0x7f00000019c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a40)=""/135, 0x87}], 0x1}, 0x2000)
getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x80000, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001c80), r4)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x4c, r6, 0x100, 0x70bd2a, 0x63, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x880)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r5)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001e40)={'vcan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x50, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xe}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x990}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r0)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c}, 0x4)
writev(r4, &(0x7f00000026c0)=[{&(0x7f00000020c0)="129933d93ce3f5423232608e196275688f936850c498f39c72df9191d7dfa4ee41efbbbfd41cd45c08ec25ca00415393b68d542114736985f9cadf055ea606ab400f4d19b6e1e7a5d6cb89543abf396de82a1f5d9c686eb5ad357357d69cedd1548d2ee2f34263176b9c0b19360fb0f570205727ce9dc95c9f30000e076f35e38cf4dce3f713080a59e7516449285abc7e65c7ceae13a5216a8d71fdb4e40fe11645275f52c0fa4e4d325b", 0xab}, {&(0x7f0000002180)="797a1d852cc98f0bb54ac0fd569c8d5ff0a94571bc4364f9cf5cc91bea98645db58a02ee5aee792654d3f7b7b8960670b305ed", 0x33}, {&(0x7f00000021c0)="dd89ab7b7f3ec35004358ab3f978cc6cbfdecce58bb33cda3dc9278e66dcdc852fc6a0791d6f1360c43fa67182b9fb4a903b3fe5e4aa957a3e0ef789b47f107f3f3270bc2bcbf63340928fd21c1243b05ebb614197d1dcc9fbf2b62b2331378b50866c2256d021c8415ce5aa9a4738b19097cf22d5dccab648b41cd8957a90bbbf573660429ff3398105cf6397e181b975ee6c6e2c9a577a40e0d209ca7f95e01058a6d5db75e8a081fc6edea1fbe9ba430d4167bd6945dcd88be6e327661ac950fcdfde52b5a77e6e23247820bdc32473e2f07f4eebdc4c7915dc8440adac4c12edceebd6dd52ae436e3a83bda3f00ae7", 0xf1}, {&(0x7f00000022c0)="d02d3a76c3f813a850a175cdd1f8a3fca8679935c55343e8d6ab2ce5050fae79a57c69a2aa898a97a87de2413b4a276ed25546a68f5111e179f8e4c69177189db966b3a853aec40f63bf6fdede67f88ad535cefda16574e5feba249039a4e7772aebaad17da1bf637080d3f7ecd68c6641ec4b0a960d5598985c3edc5dcb72072e3495cd03a307f743ce20759485d90155356be419be1dab6cfdca5553b3", 0x9e}, {&(0x7f0000002380)="d330cb1925f3115353a056d5494b745a526558bc947488961ea1aa5479dda09fbb7a474688a8afeeef14a09c2bb3173246be7f9c11f9cf0e47c3b732bfb28c14", 0x40}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="78054fa0b767d6f95b1b5a04135c290a4da497d57be9dc496d1cd7ec5a1d7852c7779a87e71ef0f4a8852292839f1eb4910e177024e1761a0e8a1a654d19d435592efd0a7ea5005efbac019e0dd52303a81dd546714df094e86b28f1d40680fa5752353c48bf60d3e1b9a4ff18060938c7febeade905323aef428ecbd46e556a626100ab011ae42067b6ee3cae060754b9dc3ced92d5b9bb17197ec688d4be9cbc7474e16ea3fe45907741945a0daa148ab03f18b1b1d46abeaceab0aaf21147d12a7c7d0a87c36f1f753606715da9f70f239603fe12378ae245371c604b73c097b9ceaaf230c09c3470c083bca32b3243f727a0a4", 0xf5}, {&(0x7f0000002500)="88f4fdfd0734b8ea8e499e02830e6820f42b08008e82eabf8c59870816a5d34526f573d545f32e32d5cd3a78e5d490b125e204776d578c57f4c26155caf56058b112caff6b0f8502dcf728e0c0", 0x4d}, {&(0x7f0000002580)="6dc43298d3713e4c5517f1227d61967face7884d1722b2a74456c921595e1bdc6bc6bed735434103b8fa434024320efea40ff31bc21119b18968738b7fe2a82fe357dbc49027b13d400e8ee5b011c85ec5e32090e6", 0x55}, {&(0x7f0000002600)="fd37be7e28ddfd278d6c602456d9e6a016b5593a72e5bc9cfff62aeae808d1b97849201df618a95f3ff37ae8510f67f6468b4f0db6ae6f3b9a0b1f0783131d0d6890f78defd59e9dccce9142b36ea10b58f4f8ab07bda2c7ca69068e875fab237611189c3529116da2bd60e216c55164568b13f35537021160c85cd319b376fb13e0faddde60f0489f795acb91da67b6c9f46ee5cc5fb23050e05d4bbef6ff", 0x9f}], 0xa)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000027c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0x98, r10, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "c6822d660a3b39bcd27d2fcc1972e593"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f34cf1a1fad3b99d55a3f543f1f14199"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "99a1cebe4f56a77aca58473650279bce"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8a63a990b5b64a941916720b5e80ccd5"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "d4b529c94d0993d0198d6d0ad4270d23"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000002b80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002980)={0x1c0, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0xff66}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x208}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff0}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20040000}, 0x8804)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x30, r10, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801)
sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, 0x0, 0x810, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x20000800)

3m7.023975682s ago: executing program 32 (id=1326):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0xffff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40)
userfaultfd(0x80000)
pipe2$9p(&(0x7f0000000100), 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4040810}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8)
setuid(r1)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000580)={0x0, 0x0, @ioapic})
r3 = socket$inet(0x2, 0x800, 0x6)
sendto$inet(r3, &(0x7f00000007c0)="daa85ff7db2e459d07a118667d30f7efd035015180826953ec57fb69ec6ced936bee36fba43a64ccbaf94610beaf666ba6d57ee2bd7f225d99c16c40311ff97b5fa24ac4221a88db1eae87a1d3a3a1c53c44f78bfb892e5ed19464e5dd44a728f91c7a100358e039993418366cfd8b5275b95a54386cb69369c44c1bafa45628fd36c71927c7197d7aa59c2818c826830e925a4d2f97fda699aa0212f276b3b4c253176f00957a09eac4160ab37f5b1f047b3f4449663c7df09a64d2b7fe8926f6e0cd3415677298f237dd6deaf9482da5b892356db479b42d3b25f824e5cbe5e57aaa10892628fdfcfd391cf4a4b9b2577f4aea5e03552341e573812cb05f470fde2132924eb3af8ee7a764a8adba61e4b5b6f6cfebd75bb5318e31547079bc68bf1c809cfa1a3a55d7ddc1e1a96ed9acb019209fdcab65bb828b698f9934cdb8e2b71baf4a197c696384254d1941c38dde83b14874948975f4748a9632ecbd10cd587c534e076fff0f05383ec4ca9303ca611da554867923c1d9ab8ae9fce2118972a92c7ef8690d113d72f015a86ddea5a6d613cd873bc590df342717967936cb4a6100278f752d7eece9dc2e1b9b7c0942a9fd72b151e391b1242e9aa2aa86b58a570fb19a0241f23a58bba297a91bed0facdcabe98de73d9372376ee0d569e027e4335a3f1bf4a2c2c5b963ad342719ddc9722f96333287d7ec0cf9fecebc2f8c0e5819b9440eb25185f6ee39ea0b0818a4765338b9906e67cef1c3d94bba9a3216d8a44905b4c74041f42df08a769dae203c40b61a58834f7fe6f11cfa61f9fc2ba8d7c29253afbcbef912ac67f63ae21600dee6903db9417fbc59791c6becd55edf8e129b2a8d5af1ba8e21bdf2111ed8febda2f4c6fb79f1a52c5735813ac60557092140726ad1985af054a3b8906c30284fdb922a7a526f92e9900710296ac9f09ba9a5e94d32b2d8c8dcd2bd2d5745ea2f8661099164c92e845715b7f6194601ddac4a85fcc81d22baed1864e10ac3c3c64404c78e0de9fd11ca95e0e3073773f62864328466ab3a5df1ef68c42d567c3101d8c5f6b4b53b6c176f873e89de5fed3880f848928b6c67190249fc73d5759496a9df7385088380152fcad93c2e0ce8ec2af16edc51c739f17e044dcfa0cb52597741dac06426bf12d60420ae3747653eb317929f43239fa3747aabe35a2efefa0377c731e96e5959bc45176d7564b38d7478e41eea2c76ba5ed122e3a54ab7eac7cdb8bfaf62334b8a7c0f92bad319f7f8cba4bc5a9a130504e59b5a65e2036fdcc3fed361318fbe0d866fac1b7b42cb44f5ae9fa089d3ad1ee594dab33e84241e995ed7c9e4c485ed9f16a9ab94f29e86710ecaa38ef9175be01914bf9b8856cf0b5fa852071e9dfea1d68b3641bc2f51150500feffa57fa93a86b91a05fb31eef412b88dc3d0d627bab2262d7e0ca72e57b1e091e457089379cae88651103f1c12a96cc1250f12a0b7d45383871097d89c19cb40aa1b29301dd98619d9f676d46785e014bfa80e5a5e2b3203fb0a6d4d1a049f79c7d4f439efe2e92066de99713bef7eab3d226d60a407ba3b74e74309b6c94c28d7a74365c45ebce3c89c6d1ee3dfb20fae05c275f80438bc4994bd9e8e0df9b3dc53bdc1272a2fcffb8a33507b1b23a24bb70e66fde2c6033da595c28c7fbdcd73def7b5476886acfa61d308fe362e5cf903ef190bbbf3ba41501f4eacf4509257068177ffbeeea86837e76581ea0070cfe52e9996a61f6bc9bcc8c93addf702435cc1558e0e07b3861c4e59cb687492e890ac90d2a550a9b5aea01b3c27c49055a0a3945512f8115d046db0c0bb7b0f153c6cbf899311e963fd5ac519dbc78f7b13277681c197174acb145e66aa03c85275b109132411fa0f025aa958cd311b71b197761f8c82ae35fce23244cfb9dbe6df447c7878c0490e9f5f91b9cd7aeb135624b75d17dd30d00b91227c3cd2d0a8ecd70e3f008cc9ccb5c75f8cc0307a489f84c6c2c8a5030ea20bfe794e722073ee29c2e1d56276343a3d4ae21a5f4741ef2c8911e13cf50138a90d8abd682b26cd9a3ccdb4ddea6087d64bed1c215ad3b462c13cee603d722b18ed066ba4b3c5a290fe869279c2c2602fb3093e459a84d4ea1434f10c016f38998bc80d3e2992016948c53b2a82f6516144086b08fe6595ae9224ad588e2dd9cc3a7a13f0a955da8e43aafebd8d03fc8adfbf8b5f09082d974dd99d53ac71bacd6524c12dcead1811c94d0cf8d8d4791d2a6366a8026dd21eec90cd3e16f541f14fbb115af4ec48d8522945ba00bbdc2b39e425609e32ef72bd4660ff11594dbb713a268ea0fa26f6dc8bb19b644067e32d3c477c7cecd21cf4e8c51a66bf42892fe56cd4f02257fae3f1f4cba00d7bf0250218c83af4672819a4cbf6c955cdab793a61c69c69af4fd090cc1cb1dc44415fd6d6e53fd36a325f9b8998a687cea6b92aa02ccf6095295ac575aaaad12fcaa7fb001f80068363b829b661754cf5b0aace2ce09052923be7f7fbf449a604fb250b85dab20789b6b1b04be724e4c95a607a36c8020255afb94e186899df4d27792fcba647afd6518d0299a726c4eb610cc9bffb2fef37c62ef3f8091c693a8407431cc3712b6f6da0d755c07ef523d2e992d8f990921a63f091e076f3c4955d2d767fa2b09590dc2e6422561704288decf55f3476da9eaefc51584a620eb312d44d01b50ab3219c789d23c8e52f54c54ad7400fcff29ddb3018f9bf29691aece2fd168846a1bace196f73a3019df0ae34f4bcf4af1938e4a09165140468b45f6546b44cd9f38e67ace86dfcedbc6e67bd9ba8a68e2caa7871602753645c4f2d327a5b1a746fe55beb226b79b94ddd2d43f66d20926f2f46448d8c2d96af8a4093c52d7422807e1c4cc834f0f6824f1285e373b1017fa2c684668e3648acba14477d9c919bb66416eba8af55dac5f73a2ee4d37e6ce940d5d8207b5b6987f49e6a4a0e5a7f04d94cfb1ffff9785503c64c148246567294b732db01d7b7d05767db549bd65e2641ad879ee96fa4cd91d0d7416629f88a23d3872d21af5a138f084c7754693da372eb8799a405bc1cdc1937957ad06322c5ebea8596fc9d5f4d7f28b080427da111896cfd560fb46b5a6aa7f4580b748e7a0cf75e2a745eddc829935a555a269e8cf62a0090766d512425998bd55447ffea6af25d83d23c549f9ba40518259260489f61367a8d13a7e57e129f4f4b3dcb69c84de0ee0b86343d032f5cbea815fa9748eb0f845582645b037af58bc9ded2d04fac18e5e5cd3bc3afe95bc9b3856bb101610dfe35bd1652743fe7a96bf231dfbfdc60535a2609909f352f035384f04cf8fe8e82f0a85f379f6c972b9fac123fc043f71449a07d5029d1d2ef344de02945687ec325bc802ab7e2111d9ed9b4d5fbfb9f06834ef1f50affa2e7aed9cedcb1d521d4487445759bd20b738358756aa0df80a3c06ef6a0e45c5459ecfbd38f66c23f4615f1c131361100a910d59704021a4d744ad44ac888e0279608a0046ba8711ab54178876ab51ef38ecc35c54d8847834bf3852164f9739b41df08699c620816266901911ae973e415e7182f3c79b75af6a4f62d93c87b292795edf89a8338c184f0a977e372f8eb506ec14dde38da502389be36c3c14a2f4265bd6c397d371a15d2a13ba2814b920257df30e42362896163910c4484ee9a021edbd78ccbe247d90ca70436d495a35096c3b43691868abc18a032a0cb64990b4e202b2e8c8978e70acbef8fd60c4584f0b4efa6adabf7b40bd1769572347ea3b8543ecac0a4abf5e049462c24eed221539719a4b4d1517d3dcf68e3dfe5e065f38732c166c0df791b1572bcedf8de9ab05e908bc241c417fde548280d8badd7083716458ca003bc1817651aa0c947508f92c3d8f3d593ca0f55078fb62d735ccc6fa7b1d521eb880710613a9b8eed6ca502cd5486e89e12c4c84f10439af426928929b8a9770e69aa0f51973abcd3349c23670591e26235e2cd71a076cc4d46770c4d4409396bc691dbe35c5d4c20848965a7d72cdabbec522641d7478663b795b828cf4559dc17740a778b57233de63fea459fdaacd1536041e4076630544b65905afd21a00ae03e7cfc361ac1f063e920f07bdba56e5db4468e9f7932d6f9095c66f108bbaa2c712123ead459deea95ea34fda721f7051cead9e56153f226a643e412a2435342259c07084f7611801206c7f2055dd4281999669b8ec0e813e79088d6f34005e9d37e0fff0a1ea84bb1bd0c11412ca6860a0a0c701a43b1f5295d6e74ad14aadb3e54cba361c2a0f7b541da479055c5abf7fdb14597efe8d96878913317c52fb30385fa8522444404fc2a8e2bd3f6eb583ef5d8d9786153dbd4a08f1076ac97a4ae693827bf695b1a7b3c59d68b8c845e4bb23fdccff88eff8cf2020adf420124eee3412a4a2b9b4bd0c4f5a2879f50810ea29d3f06804bd3d33784c8d79b30c1fcd72457005281c20db36f92d872c4939f753fbd814a035620565a6db2f6ba40feefe90fea0b342ed939408953911d0dbe7e65a8d96f5cfcc56d76ffdfeffb04ac2021ad7b05a488e95b7a75982dff6be3583cd26ce9815fa03e35537c7d45dff409283ca8d345d8c7d7373682ebf410bb4913813489c2619fef87cdb5ec2287cf5036315fed64058d43022346ff92e7aaa738aa894228947fe703410870cee0c169ba9e3e76899838f9035475dbdd2c994cae0710d01b4d3c126f1accd6b20470a41078a2c0b2e26e987882e50976a6f9b5f9ee5432c5288a22ed2ef776158b6fadecdb6bbd6533015a4788f27e55c6ed3df484c53e522dd4f97d9e199509fa905f3ad8fcdab5e7f73b3c16aa3ad0128e6e789a234e98f8cf5bf779cb4338556f82d19c0aa1ce8cbcc82d86486de20c6740c730964ec3c9e6020986e330a991173509bccb17559be60a0d50acb0435b46912887decf50091943589c16a30e3ee8df8e57935d4d6b7f91b910f8eadafa2583a9a26e7ecd4e342ec83ff22c186632df34e8db1273584bd4ed2feeadf23e71a936988451130a487155a5669941b784b1af88209ac33a9a46da089fdc99e87a2704485f27897128c1cff7957bc5b0aaa84cb926b91bcd0a4824b047725dbc0e7d142abb54b5dc40dd0c269790e5b5fbc4595bb1f52a7a69646a7e84bd220c8920f383ca5397cdab938e5e4e2232584be8c316c80a434e586225519405ee48f06838b23a4fb68a87864bb2c242de7e7cc69637037f681435293183064fa28407ae5fa09598a15b7fbed20dc94a92d1efa96b125b3199938edca4902633b1b734b575103d16ea29d36bd2e4ecdc7240336ae828d960925ebd89d6300eda37adb3289d10a297b36ec2d9fe6b06b22bd9ea0e9394ada2aca68875b71cd10f3ad6e598870d57380f39c5c2d3cc1ee9b29f5f9256b19d28dafc66c3e6edd266052410c1841c72a2f96479cf995686e4bb8df2a363ac1ca4ff51495ff752e28a8b80fabe2a8142e91bbbbc9215da9d69fa2d0d44ae73172059421f4200522629778f5c346fe29ed989a9626ca672ee539ee37644be32fa54ecd0c7afe804392c4ecca5f9efd4e6e4577f61c77df127460a5fec00e1db72ec312422000931bc38e9d73476b5ea6ac9a7f236225829f91bdb1131f489ca5efacca3b6c647c58c1e10800fe42d3050ae5f6e8d0c7abe262f2e42166e8d71eaf2fee2650f817d1fbcef00afab050c76725862b9b502a274462fa63085c4a7b171246f36f06047d9e9", 0x1000, 0x20000000, &(0x7f00000017c0)={0x2, 0x4e23, @local}, 0x10)
r4 = accept4(r3, &(0x7f0000001800)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000001880)=0x80, 0x1800)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1)
recvmsg(r4, &(0x7f0000001b40)={&(0x7f00000019c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a40)=""/135, 0x87}], 0x1}, 0x2000)
getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x80000, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001c80), r4)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x4c, r6, 0x100, 0x70bd2a, 0x63, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x880)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r5)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001e40)={'vcan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x50, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xe}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x990}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r0)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c}, 0x4)
writev(r4, &(0x7f00000026c0)=[{&(0x7f00000020c0)="129933d93ce3f5423232608e196275688f936850c498f39c72df9191d7dfa4ee41efbbbfd41cd45c08ec25ca00415393b68d542114736985f9cadf055ea606ab400f4d19b6e1e7a5d6cb89543abf396de82a1f5d9c686eb5ad357357d69cedd1548d2ee2f34263176b9c0b19360fb0f570205727ce9dc95c9f30000e076f35e38cf4dce3f713080a59e7516449285abc7e65c7ceae13a5216a8d71fdb4e40fe11645275f52c0fa4e4d325b", 0xab}, {&(0x7f0000002180)="797a1d852cc98f0bb54ac0fd569c8d5ff0a94571bc4364f9cf5cc91bea98645db58a02ee5aee792654d3f7b7b8960670b305ed", 0x33}, {&(0x7f00000021c0)="dd89ab7b7f3ec35004358ab3f978cc6cbfdecce58bb33cda3dc9278e66dcdc852fc6a0791d6f1360c43fa67182b9fb4a903b3fe5e4aa957a3e0ef789b47f107f3f3270bc2bcbf63340928fd21c1243b05ebb614197d1dcc9fbf2b62b2331378b50866c2256d021c8415ce5aa9a4738b19097cf22d5dccab648b41cd8957a90bbbf573660429ff3398105cf6397e181b975ee6c6e2c9a577a40e0d209ca7f95e01058a6d5db75e8a081fc6edea1fbe9ba430d4167bd6945dcd88be6e327661ac950fcdfde52b5a77e6e23247820bdc32473e2f07f4eebdc4c7915dc8440adac4c12edceebd6dd52ae436e3a83bda3f00ae7", 0xf1}, {&(0x7f00000022c0)="d02d3a76c3f813a850a175cdd1f8a3fca8679935c55343e8d6ab2ce5050fae79a57c69a2aa898a97a87de2413b4a276ed25546a68f5111e179f8e4c69177189db966b3a853aec40f63bf6fdede67f88ad535cefda16574e5feba249039a4e7772aebaad17da1bf637080d3f7ecd68c6641ec4b0a960d5598985c3edc5dcb72072e3495cd03a307f743ce20759485d90155356be419be1dab6cfdca5553b3", 0x9e}, {&(0x7f0000002380)="d330cb1925f3115353a056d5494b745a526558bc947488961ea1aa5479dda09fbb7a474688a8afeeef14a09c2bb3173246be7f9c11f9cf0e47c3b732bfb28c14", 0x40}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="78054fa0b767d6f95b1b5a04135c290a4da497d57be9dc496d1cd7ec5a1d7852c7779a87e71ef0f4a8852292839f1eb4910e177024e1761a0e8a1a654d19d435592efd0a7ea5005efbac019e0dd52303a81dd546714df094e86b28f1d40680fa5752353c48bf60d3e1b9a4ff18060938c7febeade905323aef428ecbd46e556a626100ab011ae42067b6ee3cae060754b9dc3ced92d5b9bb17197ec688d4be9cbc7474e16ea3fe45907741945a0daa148ab03f18b1b1d46abeaceab0aaf21147d12a7c7d0a87c36f1f753606715da9f70f239603fe12378ae245371c604b73c097b9ceaaf230c09c3470c083bca32b3243f727a0a4", 0xf5}, {&(0x7f0000002500)="88f4fdfd0734b8ea8e499e02830e6820f42b08008e82eabf8c59870816a5d34526f573d545f32e32d5cd3a78e5d490b125e204776d578c57f4c26155caf56058b112caff6b0f8502dcf728e0c0", 0x4d}, {&(0x7f0000002580)="6dc43298d3713e4c5517f1227d61967face7884d1722b2a74456c921595e1bdc6bc6bed735434103b8fa434024320efea40ff31bc21119b18968738b7fe2a82fe357dbc49027b13d400e8ee5b011c85ec5e32090e6", 0x55}, {&(0x7f0000002600)="fd37be7e28ddfd278d6c602456d9e6a016b5593a72e5bc9cfff62aeae808d1b97849201df618a95f3ff37ae8510f67f6468b4f0db6ae6f3b9a0b1f0783131d0d6890f78defd59e9dccce9142b36ea10b58f4f8ab07bda2c7ca69068e875fab237611189c3529116da2bd60e216c55164568b13f35537021160c85cd319b376fb13e0faddde60f0489f795acb91da67b6c9f46ee5cc5fb23050e05d4bbef6ff", 0x9f}], 0xa)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000027c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0x98, r10, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "c6822d660a3b39bcd27d2fcc1972e593"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f34cf1a1fad3b99d55a3f543f1f14199"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "99a1cebe4f56a77aca58473650279bce"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8a63a990b5b64a941916720b5e80ccd5"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "d4b529c94d0993d0198d6d0ad4270d23"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000002b80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002980)={0x1c0, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0xff66}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x208}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff0}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20040000}, 0x8804)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x30, r10, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801)
sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, 0x0, 0x810, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x20000800)

2m12.626975491s ago: executing program 3 (id=2365):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) (async)
r2 = socket$netlink(0x10, 0x3, 0x4) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
close(r3) (async)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000d0c100000000000224e0000", 0x58}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e"], 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0) (async)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r8, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x3c, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x3c}}, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async)
r11 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10)
r12 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r12, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10)

2m12.496509963s ago: executing program 3 (id=2366):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x110, r0, 0xe02c4000)

2m12.496122063s ago: executing program 3 (id=2367):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) (async)
geteuid() (async)
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6f64653d303030303030303030304c3030303030303030303030352c00c37a1176962bbb882128624a75cbdf51c53bb5fb5d5aef93ee781606cfa18f047f00f73715ccf382c593b171dd98af2e419623b71387c2"])
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3, 0x2, 0x1, 0x0, @irqchip={0x0, 0x8001}}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
rt_sigaction(0x20, &(0x7f0000000180)={0x0, 0x5, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f00000001c0)) (async)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async)
r1 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) (async)
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m12.480374843s ago: executing program 3 (id=2369):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = socket(0x10, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f0000000200)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x5a3f, 0x0, 0x0, 0x100000}})
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000001440)='./file0\x00', 0x0, 0x8000, 0x0)

2m12.428181924s ago: executing program 3 (id=2371):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000000100)="87d18add2a4f909863b266af52fbbcb8", 0x10) (async)
keyctl$update(0x2, r0, &(0x7f0000000100)="87d18add2a4f909863b266af52fbbcb8", 0x10)
ioprio_set$uid(0x3, 0x0, 0x0) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
read(r1, &(0x7f0000000280)=""/155, 0xfffffffffffffe59)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) (async)
read$FUSE(r3, &(0x7f0000003680)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
prlimit64(r4, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async)
prlimit64(r4, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
getpid()
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r5 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00')
execveat$binfmt(0xffffffffffffffff, r5, 0x0, 0x0, 0x1000) (async)
execveat$binfmt(0xffffffffffffffff, r5, 0x0, 0x0, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r6)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
fchmodat(r6, &(0x7f00000000c0)='./file0\x00', 0x68)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x6b, 0x2, 0x3, "fdd8daa17264923c254c9e70626f3c99", "6f44018265388be210874631175741ad7d3280aef470972d6db2e6de8c7a8ecd8838f0b97ad2bb725e11efaee8078deab9dc2fca5db9f1379377df5193969d1bb22435d1fab0a70677234d79e0376dee498f5b9c223c"}, 0x6b, 0x2)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000080))
sendfile(r1, r1, 0x0, 0x7ffff000)

2m12.386715365s ago: executing program 3 (id=2375):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x183202, 0xa8)
write(r1, &(0x7f0000000080)="9b014adfe77ee9d1a1ef38a9396bfadb0494e57d87fc9b684e5548892745d2abd3a9d215c0f57934924e4bbf8de0fa5d2fe6b9e92d4cbf09dc83edc4d4e6f61a60fa2b60d18c1442e4a9d9f89d377735a348cbf2f42646e1e96711b2e5f45d9123f955efbbfbc478f6612bfbe2dafe674aeb3870df150513257ff8fe9da3667ee0acd2930124b570566cf69bfe30dfca99d6f43f26ae15737b7b92042b91b19c8e66a5d74447edd685ac2a6b874c482da771234b4bca85b3c3dcc6ed", 0xbc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x54, {"670f01c8b9800000c00f3235004000000f3066b866000f00d83a6b008f8878c3600b0a65bc00000000430f001db829fd6166460f3882a9c900000066430f3881220f30"}}, @cpuid={0x2, 0x18, {0x78a2b72f, 0x8}}, @code={0x1, 0x6e, {"66baf80cb8f0c9ec8cef66bafc0ced66baf80cb89f93ce83ef66bafc0cb005eec7442400a2000000c744240200980000ff1c2466410f38810e440f017da6d2a800000000b9800000c00f3235000100000f306645f4f30f098f8988912a"}}, @code={0x1, 0x59, {"b9ec0b00000f32660f388265da6666410f3a167e6c0db9a9080000b8c7bf6256ba000000000f300f32c4a1ed7d30c4636978b31421f61d00440f01c4c4224db7646a93420f017abc"}}, @code={0x1, 0x62, {"660f219bb8010000000f01c1660f3881bc1b00900000c46251ae8f09c5817966ba610066b8460066ef66ba6100b0fdeeb968080000b80e780000ba000000000f3066420fc7360f019b33e000002e0fc72f"}}, @cpuid={0x2, 0x18, {0x4c, 0x6}}, @uexit={0x0, 0x18, 0xdb1}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x6, 0x2}}, @cpuid={0x2, 0x18, {0x5, 0x200}}, @code={0x1, 0x51, {"64460faefe66ba2100edb9800000c00f3235004000000f30440f3245dbd53e430fc3aa00500000420f017c276eb9b10300000f3266baa000ed8f6878c15bc106"}}, @cpuid={0x2, 0x18, {0x24c, 0xcb8}}, @cpuid={0x2, 0x18, {0x3, 0x6}}], 0x28e})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x5, 0x3, 0x1, 0x0, 0x9, 0xffffffff00000000, 0x9c8, 0x0, 0x9, 0x2, 0x2, 0x4, 0x5cd1703f, 0xc8, 0x1, 0xfffffffffffffff8], 0x2, 0x1000}) (async)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000580)={0xda})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000005c0)=0x8000, 0x4) (async)
mount(&(0x7f0000000600)=@rnullb, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='dax\x00', 0x40000, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0)
close(r5) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x2040, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r7, 0x410, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xd3}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x271}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xd1}]}, 0x4c}}, 0x4000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x40480, 0x0)
ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000940)={0xe9, 0x7, 0x4}) (async)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000980)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000009c0)=""/197) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008804)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x4400, 0x0)

2m12.268207986s ago: executing program 33 (id=2375):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x183202, 0xa8)
write(r1, &(0x7f0000000080)="9b014adfe77ee9d1a1ef38a9396bfadb0494e57d87fc9b684e5548892745d2abd3a9d215c0f57934924e4bbf8de0fa5d2fe6b9e92d4cbf09dc83edc4d4e6f61a60fa2b60d18c1442e4a9d9f89d377735a348cbf2f42646e1e96711b2e5f45d9123f955efbbfbc478f6612bfbe2dafe674aeb3870df150513257ff8fe9da3667ee0acd2930124b570566cf69bfe30dfca99d6f43f26ae15737b7b92042b91b19c8e66a5d74447edd685ac2a6b874c482da771234b4bca85b3c3dcc6ed", 0xbc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x54, {"670f01c8b9800000c00f3235004000000f3066b866000f00d83a6b008f8878c3600b0a65bc00000000430f001db829fd6166460f3882a9c900000066430f3881220f30"}}, @cpuid={0x2, 0x18, {0x78a2b72f, 0x8}}, @code={0x1, 0x6e, {"66baf80cb8f0c9ec8cef66bafc0ced66baf80cb89f93ce83ef66bafc0cb005eec7442400a2000000c744240200980000ff1c2466410f38810e440f017da6d2a800000000b9800000c00f3235000100000f306645f4f30f098f8988912a"}}, @code={0x1, 0x59, {"b9ec0b00000f32660f388265da6666410f3a167e6c0db9a9080000b8c7bf6256ba000000000f300f32c4a1ed7d30c4636978b31421f61d00440f01c4c4224db7646a93420f017abc"}}, @code={0x1, 0x62, {"660f219bb8010000000f01c1660f3881bc1b00900000c46251ae8f09c5817966ba610066b8460066ef66ba6100b0fdeeb968080000b80e780000ba000000000f3066420fc7360f019b33e000002e0fc72f"}}, @cpuid={0x2, 0x18, {0x4c, 0x6}}, @uexit={0x0, 0x18, 0xdb1}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x6, 0x2}}, @cpuid={0x2, 0x18, {0x5, 0x200}}, @code={0x1, 0x51, {"64460faefe66ba2100edb9800000c00f3235004000000f30440f3245dbd53e430fc3aa00500000420f017c276eb9b10300000f3266baa000ed8f6878c15bc106"}}, @cpuid={0x2, 0x18, {0x24c, 0xcb8}}, @cpuid={0x2, 0x18, {0x3, 0x6}}], 0x28e})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x5, 0x3, 0x1, 0x0, 0x9, 0xffffffff00000000, 0x9c8, 0x0, 0x9, 0x2, 0x2, 0x4, 0x5cd1703f, 0xc8, 0x1, 0xfffffffffffffff8], 0x2, 0x1000}) (async)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000580)={0xda})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000005c0)=0x8000, 0x4) (async)
mount(&(0x7f0000000600)=@rnullb, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='dax\x00', 0x40000, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0)
close(r5) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x2040, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r7, 0x410, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xd3}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x271}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xd1}]}, 0x4c}}, 0x4000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x40480, 0x0)
ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000940)={0xe9, 0x7, 0x4}) (async)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000980)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000009c0)=""/197) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008804)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x4400, 0x0)

1m8.727430106s ago: executing program 2 (id=3637):
r0 = gettid()
ptrace$getsig(0x4202, r0, 0x8, &(0x7f0000000000))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000000c0)={0x40000000, {{0xa, 0x4e23, 0x8, @loopback}}, {{0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x108)
rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000200)={0x23, 0x1, 0x10001})
flock(r1, 0x2)
write$char_usb(r1, &(0x7f0000000280)="b9024c8d20f7a20a171d932d6cca6516cf9ed7c9534fecb71524b9877a0da4f15f551b8d35034a5ca4399eb55c945ea83d124d038480e8c930e32689fad1d3039ca4e3689eb3eea443fa410c85b2b5d0c2fefb04390d239504610a7b9f27279f917a8305e781aff7adfc9eae9bb733bf932a799e47172cf9e01f6d2a5e9170cd8be4b642f8aa502a9abee93a736c40fb3b7d753d5f4635e365f73f6c599a15d52e1aecb88349df0bf7b91aefc275c8a9d62c482e5c36b896e5d5c187d13e82c12285344fba7db8c0825f15d97ae40932454b374a605e1104a5f3b1f65bc871de7acd3d4e971db932675fc7235b", 0xed)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000380)=""/221)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000480)={0x8, 0x101, 0x7, 0x3, 0xc, "78e7f96074836a58e031e67ce1d5619f4994d1", 0x3, 0xc})
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$can_bcm(r1, &(0x7f0000000a00)={&(0x7f00000004c0)=@nl=@unspec, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000800)=""/19, 0x13}, {&(0x7f0000000840)=""/90, 0x5a}], 0x7, &(0x7f0000000940)=""/150, 0x96}, 0x12000)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000a40)={0x2, 0x2})
read$FUSE(r1, &(0x7f0000000ac0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002b00)={0x20, 0x0, r4, {0x400, 0x4, 0x3, 0x7}}, 0x20)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000002b40)={0x3, "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"})
utimensat(r1, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={{0x77359400}, {0x0, 0xea60}}, 0x100)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000002e00)={<r6=>0xffffffffffffffff, 0x8001, 0x9, 0x4})
pread64(r2, &(0x7f0000002e40), 0x0, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000002e80), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000002ec0), 0xffffffffffffffff)
bind$xdp(r1, &(0x7f0000002f00)={0x2c, 0x2, 0x0, 0x15, r1}, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000002f40)={0x7, 0x1c00})
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000002f80)={0xb91f, 0x5, 0x76b})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002fc0))
setsockopt$packet_buf(r6, 0x107, 0x16, &(0x7f0000003000)="944c808c65405b10348895b379e569111e6c7693d3b45bddae6e1fa220d0b4f1bf1f62f2049e4c304d22d7420327b5fc3b85747c90b8e2a2886b15d7843f4ed1f442a768381cb7c85e65cfd41f", 0x4d)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000003100)={&(0x7f0000003080)=""/70, 0x1000, 0x1000, 0xffffffb4, 0x2}, 0x20)

1m8.726084076s ago: executing program 2 (id=3638):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'})
syz_pidfd_open(0xffffffffffffffff, 0x0) (async)
r1 = syz_pidfd_open(0xffffffffffffffff, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10, 0x0) (async)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10, 0x0)
fcntl$dupfd(r1, 0x0, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80)
read(r3, &(0x7f0000000080)=""/1, 0x1)
socket(0x1d, 0x3, 0x0) (async)
socket(0x1d, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4048002) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4048002)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r4, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xf0, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0xffffffff, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xea, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb, 0x9, 0x5, '\x00', 0x381d5667})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r4, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r8 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x402480, 0x100, 0x6c}, 0x18)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc2, 0x0, 0xfffffffffffffffe}]})
read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, <r12=>0x0}, 0x2020)
quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000201, r12, &(0x7f00000000c0)='./file0\x00')

1m8.671837287s ago: executing program 2 (id=3640):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000006a0015012000"], 0x1c}], 0x1}, 0x4000080)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0500"/12, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES16=r2, @ANYBLOB="29cce705", @ANYBLOB="0000000001"], 0x48}}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000007040)={0x2020}, 0x2020)
sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0})

1m8.618651817s ago: executing program 2 (id=3643):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1) (async)
syz_clone(0x26085800, 0x0, 0x28, &(0x7f0000000500), 0x0, 0x0) (async)
r2 = ioctl$TUNGETDEVNETNS(r1, 0xff09, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000540)=[@acquire, @release], 0x0, 0x0, 0x0}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async)
r7 = socket$key(0xf, 0x3, 0x2) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r8 = fsopen(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
dup3(r7, r8, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="540100001000130700000101000000000000000000001300e0000002000010000000000000006ded00000000000000000a002000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000040000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000004000000000000000000000000000000000000082abd70000000000002000400220000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0) (async)
syz_fuse_handle_req(r6, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x20001, 0x0) (async)
timer_create(0x4, &(0x7f0000000300)={0x0, 0x26, 0x0, @thr={&(0x7f0000000740)="18559d48a70ca6d7c044137e4cec84a8460fc32305c6c09097748f49cd7e68b2dc258664fdb9a3641c8f7cdf7e18c4bf91a6cc47488883ca55291ca54a7bbc220bba23e16ba1e7146e6103985bca58add981be1517fb83539194b54ff157a7fbb882351bffc3058b2e1ce40635c2fb41d0e94138f2bc683a2bff99d7ebd66b20eeee76f188dbd78ffd58595db1af4e780810edea7de1b55f0b6a1f8b91d3f27509598d928b282202050439ed1fdff7086839dd3bccdeeb816d225a0b45aeed31481c196e348b7a92c7eb891fcc016dec606a25c3f1cb55c0e4113a5af1ee96e839bef23694e92db49248afc1288f9cb53a0edffb0344", &(0x7f0000000380)="5f795fae4604097223eec8f34c97ebcec355a5d9af9ef6bd596e1bc8ed057626c6cc17af6884d3ca"}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000000000000ffffffff04000000010000000000f8a011c10de800000d000000090000000000000000000000000000000000000000000000000000000d000000050000000000000000000000ff7f000000000000090000000000000000000000000000000700000001000000060000000200000000000000000000002309000000000000ffffffffffffffff09000000000000007fffffff00000080060000000300000001000000000000000200000000000000060000000000000004000000000000000900000007000000070000000300000001000000000000000500000094020000000000000000000000000000000000000000000000000000060000000400000000000000000000000500000005000000000000000800"/296])

1m8.561877819s ago: executing program 2 (id=3645):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x3, 0x4, 0x8, 0x7}, 'syz0\x00', 0x3b})
creat(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = dup(r2)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0200000008003950323030302e75f54e9e5836a37e88cd716c9a27744851b4547013c5fdf6014098bcea2a162878a2bdebf6bde32b92b871977ff74fb41c1e0dafe706037ee7b4edba7fc8dd51f5bd79939a7a5d62ead2b4e91e9a9b03d69cd629f492d17cc8655cef0e6f103c3792e43fc1e0d7b79cdf72d22a955969788a0578103bf7e0dfe9afc2ad1e4b4a763239be420493844173547eef58a919315671b8ecb3ba36a2aea07033d70b3cf3ac095cb3662eb2292168f9c0"], 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10)
ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000140))

1m8.546819289s ago: executing program 2 (id=3646):
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x400, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setreuid(0xee00, r0)
r1 = getuid()
setreuid(r1, r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) (async, rerun: 32)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000180)="337c02f36708af9084b93d8ff1fe1e393be9b5cfa646f0012a79f511a781deadd9b5f2721d4867cd544a6f088025a7a4efbe86519b09daa8739fb118900afcf651308245bbf4abf2217e6a934bf78b27164da19b8db4c3791f1e33e0de940f0a9601d950d7315863dfd68f9a886879926daa61a44d46e5fb8cf98ea026822ccfc5cbc60407a12c1628cf7b445198370ffd406c65ce920dca89e814adfccad4cac5132ac4a50908a1a7d71e95e563ad98e690ea4acfc485827c2e56433905fa2facfcf9bf7dd237d7a225f6b3fbab9cf8af40eb50d6ba336f216312a6ae", 0xdd}, {&(0x7f0000000280)="e8dcb83853b121c5aaa49ceee481d2b39825b8a9eb66c54e2d0d5c1fd269c949f3aae266f763e7fa1842d3e7ceac286848a1e74da9b75000ff131d73c10006489b41d00d25344c2cf8bdc66ed59cb3c6f0665adf", 0x54}, {&(0x7f0000000300)="8b066f9a7ab29a978d11c14de93f4412ecb022c2be2e8a5b3b962d2bb98b4a3714c37d152f321327f886ab7b30fa15bd326ed5c25e06dd4bfa5584abd5b3cd2aa301cc7b91610d383cbca1854991667dfc8a8d438df34eaa385351e24aed0fde6c87fb9852dbe7162fbbca48d901baac36e7d5efc70ebdbcb9cc8898270c2a160e06c9abc8c12644a012bc9315bba46a0bb6682fa50a8de5228b0021fe20cb68e3497c204d8ee55f212a5836d97ae3bc630b0c575e6fee716bc0cd7cba513638754fbcd5594275", 0xc7}, {&(0x7f0000000400)="8a53d1e96623369be87ce1a887fc981186d986ce425a581c50dadf70e87d48b17b05cb5929bd6cc0aef2f8c94804a9d1df5c35f41969941322cf29274254cd794110fb980dffbfd034356cdb973fe743c5a894640302a06cb75e8bf2c8678fb8982193c2", 0x64}], 0x4) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async)
mount$bpf(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x80000, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0x100000000}}, {@mode={'mode', 0x3d, 0x1c00000000000}}, {@uid={'uid', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0xd}}, {@measure}, {@fowner_lt={'fowner<', r1}}, {@obj_type={'obj_type', 0x3d, '}'}}, {@dont_appraise}, {@measure}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$inet6(r4, 0x0, 0x0, 0x2100, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0x7704, 0x2)

52.676320076s ago: executing program 34 (id=3646):
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x400, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setreuid(0xee00, r0)
r1 = getuid()
setreuid(r1, r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) (async, rerun: 32)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000180)="337c02f36708af9084b93d8ff1fe1e393be9b5cfa646f0012a79f511a781deadd9b5f2721d4867cd544a6f088025a7a4efbe86519b09daa8739fb118900afcf651308245bbf4abf2217e6a934bf78b27164da19b8db4c3791f1e33e0de940f0a9601d950d7315863dfd68f9a886879926daa61a44d46e5fb8cf98ea026822ccfc5cbc60407a12c1628cf7b445198370ffd406c65ce920dca89e814adfccad4cac5132ac4a50908a1a7d71e95e563ad98e690ea4acfc485827c2e56433905fa2facfcf9bf7dd237d7a225f6b3fbab9cf8af40eb50d6ba336f216312a6ae", 0xdd}, {&(0x7f0000000280)="e8dcb83853b121c5aaa49ceee481d2b39825b8a9eb66c54e2d0d5c1fd269c949f3aae266f763e7fa1842d3e7ceac286848a1e74da9b75000ff131d73c10006489b41d00d25344c2cf8bdc66ed59cb3c6f0665adf", 0x54}, {&(0x7f0000000300)="8b066f9a7ab29a978d11c14de93f4412ecb022c2be2e8a5b3b962d2bb98b4a3714c37d152f321327f886ab7b30fa15bd326ed5c25e06dd4bfa5584abd5b3cd2aa301cc7b91610d383cbca1854991667dfc8a8d438df34eaa385351e24aed0fde6c87fb9852dbe7162fbbca48d901baac36e7d5efc70ebdbcb9cc8898270c2a160e06c9abc8c12644a012bc9315bba46a0bb6682fa50a8de5228b0021fe20cb68e3497c204d8ee55f212a5836d97ae3bc630b0c575e6fee716bc0cd7cba513638754fbcd5594275", 0xc7}, {&(0x7f0000000400)="8a53d1e96623369be87ce1a887fc981186d986ce425a581c50dadf70e87d48b17b05cb5929bd6cc0aef2f8c94804a9d1df5c35f41969941322cf29274254cd794110fb980dffbfd034356cdb973fe743c5a894640302a06cb75e8bf2c8678fb8982193c2", 0x64}], 0x4) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async)
mount$bpf(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x80000, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0x100000000}}, {@mode={'mode', 0x3d, 0x1c00000000000}}, {@uid={'uid', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0xd}}, {@measure}, {@fowner_lt={'fowner<', r1}}, {@obj_type={'obj_type', 0x3d, '}'}}, {@dont_appraise}, {@measure}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$inet6(r4, 0x0, 0x0, 0x2100, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0x7704, 0x2)

25.232502759s ago: executing program 4 (id=4307):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
memfd_secret(0x0)
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r4 = gettid()
r5 = gettid()
tkill(r4, 0x12)
tkill(r5, 0x14)
r6 = gettid()
tkill(r6, 0x12)

25.231148769s ago: executing program 6 (id=4308):
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = syz_clone(0x8c0000, &(0x7f0000000540)="c33b3918693869d975f4b8306cd4a6f94db0469cab72cde882163508f5d8521f2f12e57977381d0f5029d89917426ecf20142a580f647e02985750196b01e3c43dbd217a1cafc0f1aa86319247289231a30f007a86bfba44eefd5182384b008269e56a8f0edb5ae7d2e4949bfec48d300bcc1b2126a3eaef20210a909657d830ea2eb36f360994cb312a12ecfc3c2005bb4bd51a4d89370f9b771110d106a55c673332427294445568f62323b62eb8707730c7eef69f4190812eba66baf3770e6f0e4b72aa8945f282cddae66f", 0xcd, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000640)="7d75f10bf69455c6cbe8661e0eff27cdf337d9134e4f36f1152f5e4287707ba7e1e22ffc75766ff04b9f556af0aa57697d92d6383c2cb605c990acd5add05a22af38cdab181f7540b7903266850118a06fb5ef8f44dd90da3df06f001cb99f36b13e2ce5fa9d5c6c79ea41ffe284ce21ce792f1c764940c8618dd7c40367d01c487440")
ptrace(0xffffffffffffffff, r1)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x9, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x0, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0})

25.230879649s ago: executing program 6 (id=4309):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x18, 0x400, 0x70bd25, 0x25dfdbfd, {0x8}, [@typed={0xb, 0x5, 0x0, 0x0, @str='},\x96$--\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x810) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0) (async)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r3=>0xee00]) (async)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) (async)
setregid(0x0, r3) (async)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_cmd={0x26, 0x488, 0x6ec8, 0x2, 0x4, 0x8, 0xd, 0x6, 0x4, 0x8, 0x7, 0xfff, 0x101, 0xff, 0x3, 0x10, [0x0, 0x99]}}) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x12, r5, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r9 = dup3(r8, r7, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, &(0x7f00000053c0)) (async)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r10, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3})

25.230503729s ago: executing program 6 (id=4310):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
close(r6)
write$FUSE_LSEEK(r5, &(0x7f0000000400)={0x18, 0x0, r2, {0x91b}}, 0x18)
dup2(r5, r1)
close_range(r0, 0xffffffffffffffff, 0x0)

25.228209209s ago: executing program 6 (id=4311):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendfile(r2, r0, 0x0, 0x1ff)

25.220577469s ago: executing program 6 (id=4312):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x9, 0xc, 0xe1b0, 0x7, 0x1, 0x9, 0xffffffffffffff30, 0x58, 0x4, 0x4, 0x4, 0x8, 0x1, 0x1, 0x3c98], 0xeeee4001, 0x81})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_freeze_timeout', 0x2ba001, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0xa8, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f8be548}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7728417d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb989cb2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57808809}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54827e15}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77d2036f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8d1}, 0x8000)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000140)={0x11, 0x3, r4, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)={0x0, 0x18, 0x4, "a7c3ad4c"}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$cgroup_freezer_state(r6, &(0x7f0000000540), 0x2, 0x0)
close(0xffffffffffffffff)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r7, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101, 0x2}, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000640)={0x0, 0x1, 0x4, "31bf360b"}, 0x0, 0x0, 0x0, 0x0})
sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

23.968513697s ago: executing program 0 (id=4332):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = gettid()
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0)
rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

23.841182799s ago: executing program 4 (id=4333):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0x2}}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4c4340, 0x0) (async, rerun: 32)
r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) (rerun: 32)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)={0x3f})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3})

23.826665469s ago: executing program 4 (id=4334):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB="6d61783d3030303030fc696cb9302c00"/29])

23.7565343s ago: executing program 4 (id=4335):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00006d7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c744240000700000c7442402c9370000c7442406000000000f011c240f07360f35c4e1cd595496000f32b8090000000f23c80f21f835000080000f23f80f30b8f9ffffff0f23c80f21f835040010000f23f8660fc733b98a0800000f32", 0x5d}], 0x1, 0x0, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x8}], 0x1)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000003c0))
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0))
madvise(&(0x7f00009bc000/0x3000)=nil, 0x3000, 0x4)

23.699937671s ago: executing program 4 (id=4336):
syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010400000009045f00020103df000905050008000200e509050102"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff})
timer_create(0x3, 0x0, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r3, 0x0, 0x0)
prlimit64(r3, 0x6, 0x0, &(0x7f0000000040))
r4 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0})

23.673152531s ago: executing program 0 (id=4337):
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffa)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x8008770b, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623)

23.624250902s ago: executing program 0 (id=4338):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x88a, 0x0, 0x3}]})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001580), 0x35c, 0x0)
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x5, 0x0)
setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x2)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
socket$netlink(0x10, 0x3, 0x12)
r7 = dup3(r5, r0, 0x0)
vmsplice(r4, &(0x7f0000000a80)=[{&(0x7f0000000180)="850ba8824a6b556e330735d55d30fcfdf2185f6a73e27804b8babdbdd52ea3c7c808b1b0eef9350f6cbb90efe916e9168b4e5489d166b11693f29944d91508613b9e05e7c07e2139920e88b6f1bf427c", 0x50}, {&(0x7f0000000680)="919f4824edd749514679611529c90af1dd754719cde655cdc3638037cf41c2bb33aff4d53ef3b8c7ac5ff76efa77c8c69d153707bf097c2914544e7542ab9f67006ffc8ee30417afee205334b676666a9621dd5169664f7eb161f15a2b0e", 0x5e}, {&(0x7f00000002c0)="b313", 0x2}, {&(0x7f0000000440)="eb520e2256aca76cf4c7f4066f14f2c688deeeae5ff8d3f917e8fedd983126835efe720e33598d3cda36a42a40b7475ffb947a3d485f5b92d0a944666d826643895d9a7478eef68f8367e44c80830407b8085015987c0fb320bfe4209b0c0d4df5da7e0f899fd49a594d9004a02c19d7d689de01750229ecaf91b0326ac8c6c7364156aee894e62e62f22ec30262a2cc7b9433679c4f44dd2699c5f7b1358ccf9d823276ddba76c91d1a486910812e4f19da5c694c09bd4279bfd5f1a02da44f01", 0xc1}, {&(0x7f0000000340)="f10f8339afdcfaeebf2c12fa5cfa4cae72fe3d69b128ba94d8f95814af24dd0cff88a44d1796dd97b0434e74732656f4c4cd1f12d559fa8eddceec0375b6299592e3bee1d8b9603cdbce5685e6a70c5f05e9482f49", 0x55}, {&(0x7f0000000980)="95cd8df4c66dd80d61aa32238e9a48b9c67f351e1fd497c66314e6fe919ebdebb9f6e015c35790aee408ba825d489c38cf72477c81c050e576c6399c73481411b0ecdb5593ca9488fc5e0eb01206b1c030fa78e7cee22a05548efb81d7486e8f4abd466f62b54b7103978695231679105e237da81174b4248b972debfa579ab2f3e2aead57b8823a8c78cb3169086a78f9f48612da45047ce13329a9d053efa5990d7f21677945cf4cc50d76fc367caa1f43f46d58b32f814e261feff43fcce404a9439e49b0831e152415d05b4a", 0xce}, {&(0x7f0000000700)="57f2c00863c9b7f63ce8bbf65b27a073eff3f8b60d67949fddacb1a536a57dc3bd139e9847a1dabc53db283ce811656dc603c704bd8d0bed44686a3ca0b7af4547a9844dcd0ef4eafa1a8b4c6827c09a3c235c2f9474b98109101774595ffbaf150c3433ce8fe3a6921d332d63674e8325a3b25b348179f480cf58259910e449f2567ed7e540f05e5ee2cbd6b77b73ae47921d4104ddf293d15f29563e687de792c5660605abe82d128226b152dfa31a36f7ea67b5a8cd1ab79c2bebf14e28058507427bed59558d1bb6cd83f760", 0xce}, {&(0x7f0000000800)="b3e555aa467abad275b1bd07ac69e773e50b2aaeaf611816355582e22303ce46a775bf337c18206d5a013b6920411ec936b0f715e52be95900e9e051a4095d4f8641d9e3bf3303fffa2b34b6301841a09443f934a0bc85af60e6608231933cefd00efb9294504cbb9044d965a2a53d661e1877299b990a76e9b682d27d4f5f89961ef8732302b8b7192d60a662b59d692926d2e6be0a4c64c7f1ef2db99cd77e6b911adadbefe98fda4d7de57135e351b29879c90c8fda9eb3f3e6bfe2caaac928759dab7c06547244e05c7575662ca528", 0xd1}, {&(0x7f0000000540)="c756915ff44c1e9af967f05407114c7d314a30ca78c54c3ef2a20e5900fdee105d175ea91c1738a5cb65f0a24d1723470af5b77d51580ad4d381bdc70bf08d1c9e63d3edaf43204fda7dd5f6b1f554cc77b5b7a498398c6b44d4993b124f488b3d1a610d1c82aaba334049a36acea7a952288f7fc80c70276a32db388495019bac64220aabce50daa04e1598e5336f57ab16b36671d060a023d2374f1fc0b2cb2c3539232a392012221f4ca752499f81c22b193fa1730f898846d6a59161df34397a5de7f8156c2794ab7c5aeb1d03d9bcb49742c5b717368e4bdefbe718b75606d4fad34209ef", 0xe7}], 0x9, 0x2)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x20000000003}], 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x6, 0x18e, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17c, 0x2, 0x1, 0x4, 0x10, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "01b07ed4d351"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x100000, 0x9, 0x10, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm_detail={0xd8, 0x24, 0x13, 0xaa, "fda31d5b405bf2a2d4c43621c0730bcac065f00085cfb8c8b0581f9224141971b62c7d9c2d93238341f52e1939cca7c5b9a1877639d45b14d5f6000c47de76ee5828e76c2af918966d0d0152d309917cd93389451a0090e1f1a0de70bdf98bc211edceb1a87246e966ae581f1a9c5e37ac3ad379cd76d43efa609e7a5dd8a32df483720a21eaa8e7ec66958cfecba45ff2372c3cc88f32368d8e85dd638db7aac81880b629251c805058a2e8016c456365876bb960dc4cf1bcb1d32513bf024e25dd9dc22acf59bfea59e684328d70eeda1ed29e"}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7ff, [0x8, 0x8, 0x0, 0x6d1a]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0xb, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1e7, 0x4, 0x2, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x7}}}}}}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x80, 0x40, 0x6, 0x8, 0x6}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x6, 0xf000, 0xd9, [0xc000, 0xff0000]}]}, 0x9, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x38a945847dcb5171}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x43f}}, {0xef, &(0x7f0000000d00)=@string={0xef, 0x3, "e5390a8762c8e652215519f12ad4049f67c81fb85911e592b5c999762bbbbbb819a143d247bad913fae9eab092f64f38dfd06be67d64acab0f7236c634c9588bbc18399355aa191e7451ed0cc97659f104b776c3fec8ad83ecb00f1c4462898ca2bd2bd12f28b069498bee61e22897363f75e6a4056a0270d37ea947e0886aad9f9caf27f9a8937ec997bc7a78e4581b043f898b9029261b70ead7831b27378f272c438e326a71ef21c8e513e3f79dcbebbb16f53141ac2ccab7ba5ac90228923c2588e34233e52eff6a1a3f110878bf947c1536bde91dc34ec1db5efbc2b41dca35fe439926c63aefdf8806f9"}}, {0xc9, &(0x7f0000000e00)=@string={0xc9, 0x3, "04b9648f7506b95861c0dd08573fbb31719dd77d63d591da6734164e13e561d7dae9f71fc172153243e7a2d3474b88ce7678d873ad44ca61046df0f8328ff61302e14ca5927d40ef6c5dbab3e1f81fcc3700737b2f510b02aa6202fd598bc249a7be70b937d1c93c696dc2f39b7671550f18abff34f2e752387bd6a43fd57d5f6efff743e7b2b86e688b230cf7f0f629cfcd2837f8725fad9c7be5fec3833bf442bf702d369595e96083559415be435281c6502526b6ec78f604a14ea2cfbe6fd38ec3ed6ac08c"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x861}}, {0x4b, &(0x7f0000000f40)=@string={0x4b, 0x3, "8a54291a9650fc93b0f0b29c7fc47e9fc4bb4362d7d3b5778f7a72d2b7ec0f00c1ab466697f1947606743bbfd0bb4ce87462130554a93e3a7906653f272f1df7c6228e7da1a8036852"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000001000)=@lang_id={0x4}}]})

23.10214809s ago: executing program 0 (id=4352):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x33334c7a9dac422f, 0x12, r2, 0x4654000)
r3 = syz_clone(0x10004811, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregset(0x4205, r3, 0x202, &(0x7f00000004c0)={0x0})
read(r1, &(0x7f0000000100)=""/84, 0x54)

23.05339331s ago: executing program 0 (id=4353):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async, rerun: 32)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x7, 0x8a, 0x83, 0xf7}, {0x6, 0x9, 0x81, 0x3}]})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0xa0, 0x4) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G')
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)

22.943206322s ago: executing program 5 (id=4356):
r0 = timerfd_create(0x0, 0x800)
timerfd_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
setresgid(0xee01, 0x0, 0x0)
setreuid(0x0, 0x0)
setgid(0x0)
read(r1, &(0x7f0000000080)=""/93, 0xffffff6c)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x70, 0xcfe1137fc9df63b7, 0x25, 0x2d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x65, 0x33, 0x70, 0x2d, 0x31]}}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x65, 0x39]}}, {@noswap}, {@huge_within_size}]})

22.942984552s ago: executing program 5 (id=4357):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0)
pipe2$9p(&(0x7f0000000040), 0x4880)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0})

22.942662532s ago: executing program 5 (id=4358):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64)
r1 = eventfd(0x4) (rerun: 64)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) (async, rerun: 32)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async, rerun: 32)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async, rerun: 32)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) (rerun: 32)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 32)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x700, 0xfdef)
mount$fuseblk(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}})
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) (async)
accept(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) (async, rerun: 64)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) (rerun: 64)

22.912727422s ago: executing program 5 (id=4359):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1082, 0x2})
capset(&(0x7f0000004240)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x7fff})
prctl$PR_CAPBSET_DROP(0x18, 0x1)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

22.897486342s ago: executing program 5 (id=4360):
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x248841, 0x14)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0xb) (async)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0xb)
fcntl$setlease(r0, 0x400, 0x1) (async)
fcntl$setlease(r0, 0x400, 0x1)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

22.246823512s ago: executing program 4 (id=4361):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf)
write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0)
r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x240080, 0x0)
r3 = openat(r2, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000000), 0x9)
dup2(r4, r1)
close(r1)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2008)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)
openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x40000, 0x60)

21.963256086s ago: executing program 5 (id=4362):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10)
sendto$inet(r0, &(0x7f0000000240)="bbaeee3334347b25f67023ef63903c26863fb2205afd701568006fa8deeccb1c59d84c57c544da8aa6097a1e0c713ff2398e8217b9d11ab211145205e5812f817208e8d2956f11c906e03ff3f095129b18d2d6d95bf2fb9b7fd951236bd104234f52a551dd5fbc9acd85f657275b025acea3275ef7ae776080539a0b80d037c001eb48cd304376cf7afedf0227807d9fcac336e85fba1db2a70392ad7bed5e24662431f6deaa9516c116d2d08c66f358d39dc7ddfa51b2b6dade3927859521a0016aa4befee96f3d571a04ec65081381a99b05aba316746a699b8fa9b45865a8f97d3a8c20eab31e67b9f5c30163fbbf7d1caae0bbe196bb60da", 0xfa, 0x20000000, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

21.791465818s ago: executing program 6 (id=4363):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') (async)
getpid() (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

17.093682846s ago: executing program 0 (id=4364):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)={'macvtap0\x00'})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000)
mmap(&(0x7f0000786000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x8271a000)

6.522989777s ago: executing program 35 (id=4361):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf)
write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0)
r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x240080, 0x0)
r3 = openat(r2, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000000), 0x9)
dup2(r4, r1)
close(r1)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2008)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)
openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x40000, 0x60)

5.079885487s ago: executing program 36 (id=4362):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10)
sendto$inet(r0, &(0x7f0000000240)="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", 0xfa, 0x20000000, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.340443488s ago: executing program 37 (id=4363):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') (async)
getpid() (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

0s ago: executing program 38 (id=4364):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)={'macvtap0\x00'})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000)
mmap(&(0x7f0000786000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x8271a000)

kernel console output (not intermixed with test programs):

221.462228][T10610] rust_binder: Error in use_page_slow: ESRCH
[  221.462247][T10610] rust_binder: use_range failure ESRCH
[  221.468351][T10610] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  221.473866][T10610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  221.481897][T10610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:411
[  221.507062][T10612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10612 comm=syz.5.3487
[  221.529252][T10612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10612 comm=syz.5.3487
[  221.542615][T10612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31070 sclass=netlink_route_socket pid=10612 comm=syz.5.3487
[  221.557417][T10612] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.557758][T10612] rust_binder: Got transaction with invalid offset.
[  221.564335][T10612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  221.571079][T10612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413
[  221.606283][T10615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10615 comm=syz.4.3488
[  221.647035][   T36] audit: type=1400 audit(2000000035.269:716): avc:  denied  { ioctl } for  pid=10621 comm="syz.5.3490" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  221.715385][   T36] audit: type=1400 audit(2000000035.339:717): avc:  denied  { nlmsg_write } for  pid=10636 comm="syz.4.3496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  221.716674][T10637] bridge0: port 3(veth1_macvtap) entered blocking state
[  221.743205][T10637] bridge0: port 3(veth1_macvtap) entered disabled state
[  221.750189][T10637] veth1_macvtap: entered allmulticast mode
[  221.756579][T10637] veth1_macvtap: left allmulticast mode
[  222.173705][T10668] fuse: Unknown parameter 'fuse'
[  222.179954][T10668] overlay: ./file0 is not a directory
[  222.187027][T10668] Invalid ELF header magic: != ELF
[  222.219591][T10673] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.791045][   T36] audit: type=1400 audit(2000000036.409:718): avc:  denied  { create } for  pid=10690 comm="syz.4.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  222.920913][T10700] bridge0: port 3(veth1_macvtap) entered blocking state
[  222.927984][T10700] bridge0: port 3(veth1_macvtap) entered disabled state
[  222.935923][T10700] veth1_macvtap: entered allmulticast mode
[  222.942657][T10700] veth1_macvtap: left allmulticast mode
[  222.987198][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'.
[  223.027845][T10725] lo: entered promiscuous mode
[  223.033589][T10724] lo: left promiscuous mode
[  223.124141][T10734] can: request_module (can-proto-0) failed.
[  223.132324][T10734] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  223.132674][T10734] rust_binder: Write failure EFAULT in pid:436
[  223.151234][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  223.161263][T10736] rust_binder: Error in use_page_slow: ESRCH
[  223.170816][T10736] rust_binder: use_range failure ESRCH
[  223.177030][T10736] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  223.182719][T10736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  223.190854][T10736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:438
[  223.240849][T10747] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3537'.
[  223.336969][T10754] mmap: syz.5.3539 (10754): VmData 29339648 exceed data ulimit 69. Update limits or use boot option ignore_rlimit_data.
[  223.676520][T10805] TCP: TCP_TX_DELAY enabled
[  223.690914][T10809] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3556'.
[  223.700061][T10809] 1��{X��: renamed from 
30��{X�� (while UP)
[  223.707304][T10809] A link change request failed with some changes committed already. Interface 
31��{X�� may have been left with an inconsistent configuration, please check.
[  223.808558][T10819] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3560'.
[  224.200064][T10830] 9pnet_fd: Insufficient options for proto=fd
[  224.694628][   T36] audit: type=1400 audit(2000000038.319:719): avc:  denied  { create } for  pid=10840 comm="syz.4.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  224.696024][T10841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=10841 comm=syz.4.3569
[  224.727379][T10841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10841 comm=syz.4.3569
[  224.740458][T10841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10841 comm=syz.4.3569
[  224.753331][T10841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=10841 comm=syz.4.3569
[  225.223425][   T36] audit: type=1326 audit(2000000038.849:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.0.3580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca38e929 code=0x0
[  225.301723][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  225.301891][ T1540] Bluetooth: hci0: command 0x1003 tx timeout
[  225.337861][T10882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454
[  225.338332][T10882] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  225.348590][T10882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454
[  225.394276][T10890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:458
[  225.414408][T10892] input: syz1 as /devices/virtual/input/input17
[  225.433001][T10892] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  225.484660][T10899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460
[  225.793160][   T36] audit: type=1400 audit(2000000039.419:721): avc:  denied  { unmount } for  pid=10910 comm="syz.2.3593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  225.827684][T10917] binder: Bad value for 'stats'
[  225.832724][T10917] binder: Bad value for 'stats'
[  225.837869][T10917] binder: Bad value for 'stats'
[  225.842887][T10917] binder: Bad value for 'stats'
[  225.847888][T10917] binder: Bad value for 'stats'
[  225.852855][T10917] binder: Bad value for 'stats'
[  225.857844][T10917] binder: Bad value for 'stats'
[  225.862963][T10917] binder: Bad value for 'stats'
[  225.868311][T10917] binder: Bad value for 'stats'
[  225.873349][T10917] binder: Bad value for 'stats'
[  225.878301][T10917] binder: Bad value for 'stats'
[  225.883311][T10917] binder: Bad value for 'stats'
[  227.043813][T10960] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  227.052607][T10960] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  227.101589][  T540] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  227.252641][  T540] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.262850][  T540] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.273838][  T540] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 235, setting to 64
[  227.284784][  T540] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  227.299204][  T540] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.308316][  T540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.316391][  T540] usb 6-1: Product: syz
[  227.320714][  T540] usb 6-1: Manufacturer: syz
[  227.325624][  T540] usb 6-1: SerialNumber: syz
[  227.902526][   T36] audit: type=1326 audit(2000000041.529:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.2.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded138e929 code=0x7fc00000
[  227.926066][   T36] audit: type=1326 audit(2000000041.529:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.2.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fded138e929 code=0x7fc00000
[  227.946711][T10978] SELinux:  Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped).
[  227.950619][   T36] audit: type=1326 audit(2000000041.529:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.2.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded138e929 code=0x7fc00000
[  227.961140][T10978] overlayfs: failed to clone upperpath
[  227.984237][   T36] audit: type=1400 audit(2000000041.589:725): avc:  denied  { relabelto } for  pid=10977 comm="syz.2.3617" name="fuse" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0"
[  228.016389][   T36] audit: type=1400 audit(2000000041.589:726): avc:  denied  { associate } for  pid=10977 comm="syz.2.3617" name="fuse" dev="tmpfs" ino=934 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0"
[  228.030114][T10981] bridge0: port 3(veth1_macvtap) entered blocking state
[  228.052619][T10981] bridge0: port 3(veth1_macvtap) entered disabled state
[  228.059895][T10981] veth1_macvtap: entered allmulticast mode
[  228.067466][T10981] veth1_macvtap: left allmulticast mode
[  228.209765][T10992] overlayfs: failed to clone upperpath
[  228.514076][  T540] cdc_ncm 6-1:1.0: bind() failure
[  228.520538][  T540] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  228.530505][  T540] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  228.543624][  T540] usb 6-1: USB disconnect, device number 24
[  228.715574][T11014] overlay: ./file0 is not a directory
[  228.715806][T11015] overlay: ./file0 is not a directory
[  228.818080][T11035] can: request_module (can-proto-0) failed.
[  228.824938][T11036] can: request_module (can-proto-0) failed.
[  228.829670][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'.
[  228.839877][   T36] audit: type=1400 audit(2000000042.449:727): avc:  denied  { read write } for  pid=11034 comm="syz.2.3638" name="fuse" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0"
[  228.847287][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'.
[  228.873988][   T36] audit: type=1400 audit(2000000042.449:728): avc:  denied  { open } for  pid=11034 comm="syz.2.3638" path="/dev/fuse" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0"
[  228.911146][T11047] binder: Unknown parameter '/dev/ptmx'
[  228.935752][   T36] audit: type=1400 audit(2000000042.559:729): avc:  denied  { ioctl } for  pid=11053 comm="syz.5.3644" path="net:[4026532707]" dev="nsfs" ino=4026532707 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  228.937379][   T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1
[  228.961625][T11054] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.978069][T11054] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  228.993488][T11054] rust_binder: Write failure EINVAL in pid:471
[  229.147203][T11070] netlink: 'syz.0.3650': attribute type 4 has an invalid length.
[  229.163562][T11070] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3650'.
[  229.202957][T11074] bpf: Bad value for 'gid'
[  229.215232][T11078] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  229.467865][T11102] overlayfs: failed to clone upperpath
[  229.835469][T11138] overlayfs: failed to clone lowerpath
[  230.114777][T11143] /dev/sr0: Can't lookup blockdev
[  230.288817][   T36] audit: type=1400 audit(2000000043.909:730): avc:  denied  { create } for  pid=11166 comm="syz.4.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  230.404562][T11178] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3688'.
[  230.538754][T11195] overlayfs: conflicting options: nfs_export=on,index=off
[  231.211613][  T540] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  231.371598][  T540] usb 6-1: Using ep0 maxpacket: 32
[  231.382284][  T540] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  231.411093][  T540] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  231.424611][  T540] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  231.442679][  T540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  231.468379][  T540] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  231.491565][  T540] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  231.521575][  T540] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  231.541029][  T540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.557892][  T540] usb 6-1: config 0 descriptor??
[  231.707835][T11230] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3707'.
[  231.765645][  T540] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  231.969530][   T10] usb 6-1: USB disconnect, device number 25
[  231.976617][   T10] usblp0: removed
[  232.431484][T11262] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3718'.
[  232.452749][T11264] netlink: 'syz.0.3719': attribute type 4 has an invalid length.
[  232.569383][   T36] audit: type=1400 audit(2000000046.189:731): avc:  denied  { append } for  pid=11272 comm="syz.5.3722" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  232.746553][T11281] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  232.819380][T11286] overlayfs: unescaped trailing colons in lowerdir mount option.
[  232.943264][T11289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:502
[  233.613739][   T36] audit: type=1326 audit(2000000047.235:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  233.637175][T11314] netlink: 'syz.0.3737': attribute type 4 has an invalid length.
[  233.682688][   T36] audit: type=1326 audit(2000000047.235:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0ca38d290 code=0x7ffc0000
[  233.719446][   T36] audit: type=1326 audit(2000000047.235:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0ca38d290 code=0x7ffc0000
[  233.744134][   T36] audit: type=1326 audit(2000000047.235:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  233.768194][   T36] audit: type=1326 audit(2000000047.235:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  233.818968][   T36] audit: type=1326 audit(2000000047.235:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  233.849886][   T36] audit: type=1326 audit(2000000047.235:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  233.891812][T11329] tipc: Enabled bearer <udp:syz1>, priority 10
[  233.897595][   T36] audit: type=1326 audit(2000000047.235:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  233.934035][   T36] audit: type=1326 audit(2000000047.235:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  233.959237][   T36] audit: type=1326 audit(2000000047.235:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca38e929 code=0x7ffc0000
[  234.201608][  T540] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  234.351599][  T540] usb 6-1: Using ep0 maxpacket: 8
[  234.357914][  T540] usb 6-1: config 0 has an invalid interface number: 151 but max is 1
[  234.366453][  T540] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.376925][  T540] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  234.386000][  T540] usb 6-1: config 0 has no interface number 0
[  234.392373][  T540] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  234.403576][  T540] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  234.415580][  T540] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  234.426159][  T540] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0
[  234.436397][  T540] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  234.456944][  T540] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  234.471877][  T540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.480106][  T540] usb 6-1: Product: syz
[  234.486256][  T540] usb 6-1: Manufacturer: syz
[  234.491742][T11339] overlayfs: failed to clone upperpath
[  234.497455][  T540] usb 6-1: SerialNumber: syz
[  234.507174][  T540] usb 6-1: config 0 descriptor??
[  234.529908][  T540] snd-usb-audio 6-1:0.151: probe with driver snd-usb-audio failed with error -12
[  234.541980][ T8915] udevd[8915]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  234.717122][T11335] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  234.816951][  T449] usb 6-1: USB disconnect, device number 26
[  235.129176][T11363] netlink: 'syz.0.3756': attribute type 4 has an invalid length.
[  235.141039][T11351] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.156709][T11351] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.164000][T11351] bridge_slave_0: entered allmulticast mode
[  235.171792][T11351] bridge_slave_0: entered promiscuous mode
[  235.178884][T11362] netlink: 'syz.0.3756': attribute type 4 has an invalid length.
[  235.188809][T11362] netlink: 'syz.0.3756': attribute type 4 has an invalid length.
[  235.196758][T11363] netlink: 'syz.0.3756': attribute type 4 has an invalid length.
[  235.206576][   T12] bridge_slave_1: left allmulticast mode
[  235.212365][   T12] bridge_slave_1: left promiscuous mode
[  235.217992][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.225849][   T12] bridge_slave_0: left allmulticast mode
[  235.235998][   T12] bridge_slave_0: left promiscuous mode
[  235.241993][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.309825][T11351] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.316948][T11351] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.324229][T11351] bridge_slave_1: entered allmulticast mode
[  235.330520][T11351] bridge_slave_1: entered promiscuous mode
[  235.340141][T11362] netlink: 'syz.0.3756': attribute type 4 has an invalid length.
[  235.349295][T11363] netlink: 'syz.0.3756': attribute type 4 has an invalid length.
[  235.372850][   T12] tipc: Left network mode
[  235.410382][   T12] veth1_macvtap: left promiscuous mode
[  235.591930][T11351] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.599227][T11351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.606560][T11351] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.613628][T11351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.640260][  T127] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.647946][  T127] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.669253][  T127] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.676362][  T127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.684537][  T127] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.691606][  T127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.717709][T11351] veth0_vlan: entered promiscuous mode
[  235.736396][T11351] veth1_macvtap: entered promiscuous mode
[  236.080881][ T7102] batadv_slave_0: left promiscuous mode
[  236.364365][T11401] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.381597][T11401] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.389313][T11401] bridge_slave_0: entered allmulticast mode
[  236.401989][T11401] bridge_slave_0: entered promiscuous mode
[  236.411094][T11401] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.431545][T11401] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.438750][T11401] bridge_slave_1: entered allmulticast mode
[  236.461994][T11401] bridge_slave_1: entered promiscuous mode
[  236.480303][T11406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[  236.492987][T11407] SELinux: failed to load policy
[  236.552317][T11401] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.559441][T11401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.566776][T11401] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.573844][T11401] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.603030][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.610407][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.620873][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.628067][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.641574][   T31] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  236.653880][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.661101][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.679663][T11401] veth0_vlan: entered promiscuous mode
[  236.694699][T11401] veth1_macvtap: entered promiscuous mode
[  236.737091][T11410] binder: Binderfs stats mode cannot be changed during a remount
[  236.816829][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  236.825797][   T31] usb 6-1: unable to read config index 0 descriptor/start: -71
[  236.834260][   T31] usb 6-1: can't read configurations, error -71
[  237.113171][T11417] rust_binder: Write failure EINVAL in pid:9
[  237.361580][  T310] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  237.452977][T11430] rust_binder: Error while translating object.
[  237.453005][T11430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  237.459234][T11430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14
[  237.531568][  T310] usb 1-1: Using ep0 maxpacket: 16
[  237.547697][  T310] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  237.555896][  T310] usb 1-1: config 0 has no interface number 0
[  237.564817][  T310] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  237.574311][  T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.588457][  T310] usb 1-1: config 0 descriptor??
[  237.796132][   T31] usb 1-1: USB disconnect, device number 12
[  238.253725][T11435] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  238.253751][T11435] rust_binder: Error while translating object.
[  238.271763][T11435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  238.278881][T11435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  238.332653][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3781'.
[  238.351816][T11442] overlayfs: workdir and upperdir must be separate subtrees
[  238.372542][T11442] rust_binder: Write failure EINVAL in pid:20
[  238.372879][T11438] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  238.379135][T11438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  238.391582][T11438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:13
[  238.625962][T11456] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  238.664697][T11457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18
[  238.728331][T11467] binder: Bad value for 'max'
[  238.896630][T11440] binder: Unknown parameter '˺%
W�|��ad������Ԃ��w��`���[(LV�:ȴM�1�~w�.�
[  238.896630][T11440] W��[�.����zM_ܠ��S7�?��YX`n ����@��8�j��	*$�q]��Y�'��j>'
[  238.917696][T11478] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  238.941587][   T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  239.112658][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  239.141572][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  239.171607][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  239.190937][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.210304][   T10] usb 5-1: config 0 descriptor??
[  239.225858][T11465] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  239.267791][T11489] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  239.268193][T11489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  239.283474][T11489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:548
[  239.352099][T11491] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  239.593758][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  239.593776][   T36] audit: type=1400 audit(2000000053.215:748): avc:  denied  { create } for  pid=11479 comm="syz.0.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  239.676165][T11465] 9pnet_fd: p9_fd_create_tcp (11465): problem connecting socket to 127.0.0.1
[  239.703734][   T10] logitech 0003:046D:CA04.000D: unbalanced delimiter at end of report description
[  239.717413][   T10] logitech 0003:046D:CA04.000D: parse failed
[  239.728743][   T10] logitech 0003:046D:CA04.000D: probe with driver logitech failed with error -22
[  239.929220][T11465] rust_binder: Write failure EFAULT in pid:34
[  240.037197][ T7210] usb 5-1: USB disconnect, device number 25
[  240.431091][T11504] /dev/rnullb0: Can't open blockdev
[  240.641399][T11517] SELinux: failed to load policy
[  240.991575][  T449] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  241.163909][  T449] usb 5-1: Using ep0 maxpacket: 32
[  241.178632][  T449] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  241.191759][  T449] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  241.210682][  T449] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  241.229024][  T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  241.260617][  T449] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  241.270454][  T449] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  241.311569][  T449] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  241.331546][  T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.353527][  T449] usb 5-1: config 0 descriptor??
[  241.372971][   T36] audit: type=1400 audit(8000000220.997:749): avc:  denied  { accept } for  pid=11551 comm="syz.5.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  241.588062][  T449] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  241.880039][  T449] usb 5-1: USB disconnect, device number 26
[  241.901960][  T449] usblp0: removed
[  242.571594][   T36] audit: type=1326 audit(8000000222.187:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11567 comm="syz.4.3817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa20a78e929 code=0x0
[  242.611573][ T7794] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  242.651564][  T449] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  242.762577][ T7794] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  242.771322][ T7794] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  242.801554][  T449] usb 6-1: Using ep0 maxpacket: 16
[  242.801563][ T7794] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  242.801584][ T7794] usb 1-1: config 220 has no interface number 2
[  242.813298][  T449] usb 6-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  242.831580][ T7794] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  242.842140][  T449] usb 6-1: config 1 interface 0 has no altsetting 0
[  242.858130][  T449] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.40
[  242.867538][  T449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.871565][ T7794] usb 1-1: config 220 interface 0 has no altsetting 0
[  242.876161][  T449] usb 6-1: Product: "㓨棬휾⛸㹡柡恆좂龄瓕苽䝱ľﾎ診ꜘ蟗ꯓ噰䧄Ᵹ铂䧒觏㩠渭
[  242.891576][ T7794] usb 1-1: config 220 interface 76 has no altsetting 0
[  242.896648][  T449] usb 6-1: Manufacturer: 客ꏖ㺖捻톆迚䎳컷쬎ᾠ㩲顓ᴫﴩ롿㧝ජẝ灆蕐쥜寃㠰᡼ᧅ쏳ᘫĖょ顴촃ἇ壬룥ｫḂ셋쫒虱益ꂵ⿆粙夶쩞迕௺铩뽳헞罩፦؊뾺ꍃ젇캝⬶℠僖恈戊世บ艇ᐒហ緇◈锴㿴奬㲇ⲫ䎚켸彯捚譮搮⒂唹꽨驊뛗岰⾑쥃㪾䎮兴ቧ㫜矦惋‘
[  242.906987][ T7794] usb 1-1: config 220 interface 1 has no altsetting 0
[  242.945292][T11581] rust_binder: Error while translating object.
[  242.945318][T11581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  242.951716][  T449] usb 6-1: SerialNumber: ᖍṘ඲怺䧏츅ε뵜勋畔锐שׁ⭠
[  242.960480][ T7794] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  242.961198][T11581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61
[  242.969266][ T7794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.994070][T11583] netlink: 'syz.4.3822': attribute type 4 has an invalid length.
[  243.013743][ T7794] usb 1-1: Product: syz
[  243.021548][ T7794] usb 1-1: Manufacturer: syz
[  243.031540][ T7794] usb 1-1: SerialNumber: syz
[  243.206492][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.215931][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.242728][  T449] usbhid 6-1:1.0: can't add hid device: -71
[  243.250629][  T449] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  243.260185][ T7794] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  243.271288][  T449] usb 6-1: USB disconnect, device number 29
[  243.279054][ T7794] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  243.286049][ T7794] usb 1-1: No valid video chain found.
[  243.291775][ T7794] usb 1-1: selecting invalid altsetting 0
[  243.311692][ T7794] usb 1-1: USB disconnect, device number 13
[  243.371600][ T7210] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  243.521636][ T7210] usb 5-1: Using ep0 maxpacket: 8
[  243.528030][ T7210] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  243.537412][ T7210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.551816][ T7210] usb 5-1: config 0 descriptor??
[  244.041614][  T305] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  244.141581][   T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  244.167128][ T7210] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  244.177269][  T305] usb 1-1: device descriptor read/64, error -71
[  244.183755][ T7210] asix 5-1:0.0: probe with driver asix failed with error -61
[  244.301604][   T10] usb 6-1: Using ep0 maxpacket: 32
[  244.307962][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  244.319191][   T10] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.330408][   T10] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  244.343664][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  244.350370][   T10] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  244.359706][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.371776][   T10] usb 6-1: config 0 descriptor??
[  244.431655][  T305] usb 1-1: device descriptor read/64, error -71
[  244.671563][  T305] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  244.779948][   T10] zeroplus 0003:0C12:0030.000E: item fetching failed at offset 3/7
[  244.790334][   T10] zeroplus 0003:0C12:0030.000E: parse failed
[  244.796604][   T10] zeroplus 0003:0C12:0030.000E: probe with driver zeroplus failed with error -22
[  244.806072][  T305] usb 1-1: device descriptor read/64, error -71
[  244.988863][T11599] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.996288][T11599] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.003484][T11599] bridge_slave_0: entered allmulticast mode
[  245.009845][T11599] bridge_slave_0: entered promiscuous mode
[  245.017500][T11599] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.025045][T11599] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.032229][T11599] bridge_slave_1: entered allmulticast mode
[  245.038483][T11599] bridge_slave_1: entered promiscuous mode
[  245.051630][  T305] usb 1-1: device descriptor read/64, error -71
[  245.084951][T11599] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.092096][T11599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.099370][T11599] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.106442][T11599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.126939][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.134722][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.143328][  T127] bridge_slave_1: left allmulticast mode
[  245.149038][  T127] bridge_slave_1: left promiscuous mode
[  245.154925][  T127] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.162583][  T305] usb usb1-port1: attempt power cycle
[  245.162662][  T127] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.215532][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.222637][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.231675][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.238997][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.261589][T11599] veth0_vlan: entered promiscuous mode
[  245.272449][T11599] veth1_macvtap: entered promiscuous mode
[  245.279567][  T127] veth1_macvtap: left promiscuous mode
[  245.285341][  T127] veth0_vlan: left promiscuous mode
[  245.501618][  T305] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  245.522593][  T305] usb 1-1: device descriptor read/8, error -71
[  245.571566][ T7794] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  245.613249][   T36] audit: type=1400 audit(8000000225.237:751): avc:  denied  { setattr } for  pid=11615 comm="syz.5.3833" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  245.644763][T11618] fuse: Bad value for 'fd'
[  245.652952][  T305] usb 1-1: device descriptor read/8, error -71
[  245.725646][ T7794] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  245.737044][ T7794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.748481][ T7794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.758543][ T7794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  245.772534][ T7794] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  245.781632][ T7794] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  245.789757][ T7794] usb 7-1: Manufacturer: syz
[  245.795406][ T7794] usb 7-1: config 0 descriptor??
[  245.901602][  T305] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  245.922602][  T305] usb 1-1: device descriptor read/8, error -71
[  246.052710][  T305] usb 1-1: device descriptor read/8, error -71
[  246.138330][  T540] usb 5-1: USB disconnect, device number 27
[  246.146265][T11627] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  246.157312][T11629] lo: entered promiscuous mode
[  246.170355][  T305] usb usb1-port1: unable to enumerate USB device
[  246.171255][T11629] lo: left promiscuous mode
[  246.193108][T11631] tipc: Started in network mode
[  246.198098][T11631] tipc: Node identity 7f000001, cluster identity 4711
[  246.202731][ T7794] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  246.205476][T11631] tipc: Enabled bearer <udp:syz1>, priority 10
[  246.212922][ T7794] appleir 0003:05AC:8243.000F: No inputs registered, leaving
[  246.227564][ T7794] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  246.601588][  T540] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  246.761613][  T540] usb 5-1: Using ep0 maxpacket: 32
[  246.767803][  T540] usb 5-1: config index 0 descriptor too short (expected 100, got 36)
[  246.776030][  T540] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.786979][  T540] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.797259][  T540] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  246.806841][  T540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.816264][  T540] usb 5-1: config 0 descriptor??
[  246.849986][T11651] rust_binder: Error while translating object.
[  246.850029][T11651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  246.856382][T11651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52
[  246.976974][T11661] rust_binder: Write failure EFAULT in pid:62
[  246.987215][T11661] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  247.000800][T11661] rust_binder: Write failure EINVAL in pid:62
[  247.013280][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.029245][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.037374][T11664] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3850'.
[  247.251590][ T7210] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  247.321724][   T10] tipc: Node number set to 2130706433
[  247.401561][ T7210] usb 1-1: Using ep0 maxpacket: 8
[  247.407777][ T7210] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.418740][ T7210] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.428529][ T7210] usb 1-1: config 0 interface 0 has no altsetting 0
[  247.431474][  T540] usbhid 5-1:0.0: can't add hid device: -71
[  247.435434][ T7210] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  247.443759][  T540] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  247.451497][ T7210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.463131][  T540] usb 5-1: USB disconnect, device number 28
[  247.467474][ T7210] usb 1-1: config 0 descriptor??
[  247.680808][ T7210] usbhid 1-1:0.0: can't add hid device: -71
[  247.687037][ T7210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  247.696951][ T7210] usb 1-1: USB disconnect, device number 18
[  248.064229][ T7210] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  248.122752][ T7210] hid-generic 0000:0000:0000.0010: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  248.138606][T11690] fido_id[11690]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  248.169623][   T36] audit: type=1400 audit(8000000227.787:752): avc:  denied  { execute } for  pid=11691 comm="syz.6.3858" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.199926][T11692] rust_binder: Error while translating object.
[  248.199967][T11692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  248.206673][T11692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[  248.265767][T11698] 9pnet: Could not find request transport: v
[  248.275723][T11700] rust_binder: Error while translating object.
[  248.280968][T11700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  248.281378][T11698] 9pnet: Could not find request transport: v
[  248.287288][T11700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[  248.297331][  T305] usb 7-1: USB disconnect, device number 2
[  248.308064][T11698] 9pnet: Could not find request transport: v
[  248.323656][T11698] 9pnet: Could not find request transport: v
[  248.329716][T11698] 9pnet: Could not find request transport: v
[  248.335939][T11698] 9pnet: Could not find request transport: v
[  248.342279][T11698] 9pnet: Could not find request transport: v
[  248.348396][T11698] 9pnet: Could not find request transport: v
[  248.354731][T11698] 9pnet: Could not find request transport: v
[  248.360925][T11698] 9pnet: Could not find request transport: v
[  248.367082][T11698] 9pnet: Could not find request transport: v
[  248.373226][T11698] 9pnet: Could not find request transport: v
[  248.379279][T11698] 9pnet: Could not find request transport: v
[  248.385376][T11698] 9pnet: Could not find request transport: v
[  248.391484][T11698] 9pnet: Could not find request transport: v
[  248.397609][T11698] 9pnet: Could not find request transport: v
[  248.403680][T11698] 9pnet: Could not find request transport: v
[  248.409710][T11698] 9pnet: Could not find request transport: v
[  248.415823][T11698] 9pnet: Could not find request transport: v
[  248.422105][T11698] 9pnet: Could not find request transport: v
[  248.428154][T11698] 9pnet: Could not find request transport: v
[  248.434294][T11698] 9pnet: Could not find request transport: v
[  248.440359][T11698] 9pnet: Could not find request transport: v
[  248.446460][T11698] 9pnet: Could not find request transport: v
[  248.452559][T11698] 9pnet: Could not find request transport: v
[  248.458602][T11698] 9pnet: Could not find request transport: v
[  248.464852][T11698] 9pnet: Could not find request transport: v
[  248.594650][T11709] rust_binder: Write failure EINVAL in pid:34
[  248.685522][T11717] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  248.751670][T11727] overlayfs: failed to clone upperpath
[  248.935192][T11750] rust_binder: Write failure EFAULT in pid:99
[  249.394009][T11782] overlayfs: failed to clone upperpath
[  249.405686][  T305] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  249.446920][   T36] audit: type=1400 audit(8000000229.067:753): avc:  denied  { setattr } for  pid=11789 comm="syz.5.3893" name="PPTP" dev="sockfs" ino=50515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  249.447948][T11790] overlayfs: failed to clone upperpath
[  249.483775][   T36] audit: type=1400 audit(8000000229.107:754): avc:  denied  { link } for  pid=11789 comm="syz.5.3893" name="file1" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  249.562669][  T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.573089][  T305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  249.583222][  T305] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.598155][  T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.607551][  T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.615754][  T305] usb 5-1: Product: syz
[  249.620126][  T305] usb 5-1: Manufacturer: syz
[  249.626080][  T305] usb 5-1: SerialNumber: syz
[  249.886083][  T127] veth1_macvtap: left promiscuous mode
[  249.901616][  T127] veth0_vlan: left promiscuous mode
[  249.928014][T11805] incfs_lookup_dentry err:-1
[  249.931369][   T36] audit: type=1400 audit(8000000229.547:755): avc:  denied  { mounton } for  pid=11804 comm="syz.0.3899" path="/24/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  249.952205][T11805] incfs: Can't find or create .index dir in ./file0
[  249.971666][T11805] incfs: mount failed -1
[  250.119024][T11826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  250.142174][  T305] cdc_ncm 5-1:1.0: bind() failure
[  250.164760][  T305] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  250.181955][  T305] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  250.191750][  T305] usb 5-1: USB disconnect, device number 29
[  250.272133][T11835] 9pnet_fd: Insufficient options for proto=fd
[  250.351877][  T540] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  250.501723][  T540] usb 1-1: Using ep0 maxpacket: 32
[  250.508027][  T540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.519012][  T540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.528812][  T540] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  250.538017][  T540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.546636][  T540] usb 1-1: config 0 descriptor??
[  250.803656][T11853] tmpfs: Unknown parameter 'smackfsroot'
[  250.838887][T11857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=11857 comm=syz.4.3916
[  250.843559][T11860] netlink: 'syz.5.3917': attribute type 4 has an invalid length.
[  250.852006][T11857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11857 comm=syz.4.3916
[  250.859748][T11860] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3917'.
[  250.873407][T11857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11857 comm=syz.4.3916
[  250.896586][T11857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11857 comm=syz.4.3916
[  250.955139][  T540] usbhid 1-1:0.0: can't add hid device: -71
[  250.962502][  T540] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  250.974349][  T540] usb 1-1: USB disconnect, device number 19
[  250.987632][T11883] fuse: Bad value for 'user_id'
[  250.992565][T11883] fuse: Bad value for 'user_id'
[  251.591675][T11897] can: request_module (can-proto-0) failed.
[  251.660004][T11904] fuse: Unknown parameter '0x0000000000000004'
[  251.666972][   T13] tipc: Subscription rejected, illegal request
[  251.699604][T11909] overlayfs: failed to clone upperpath
[  251.810226][   T36] audit: type=1326 audit(8000000231.427:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  251.854408][   T36] audit: type=1326 audit(8000000231.457:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  251.879710][   T36] audit: type=1326 audit(8000000231.457:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  251.900711][T11933] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  251.903645][   T36] audit: type=1326 audit(8000000231.457:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  251.933578][   T36] audit: type=1400 audit(8000000231.457:760): avc:  denied  { mount } for  pid=11923 comm="syz.5.3939" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  251.955935][   T36] audit: type=1326 audit(8000000231.457:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  251.979584][   T36] audit: type=1326 audit(8000000231.457:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  252.005927][   T36] audit: type=1326 audit(8000000231.457:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  252.011700][T11934] rust_binder: Error while translating object.
[  252.029657][   T36] audit: type=1326 audit(8000000231.457:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  252.059179][T11934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  252.059206][T11934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:131
[  252.060201][   T36] audit: type=1326 audit(8000000231.457:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe73618e929 code=0x7ffc0000
[  252.219311][T11944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3945'.
[  252.287636][T11951] SELinux: security_context_str_to_sid (sytem_u�Gй�:��er CPU device: 0
[  252.287636][T11951] Clock Event Device: lapic
[  252.287636][T11951]  max_delta_ns:   34356605070
[  252.287636][T11951]  min_delta_ns:   1000
[  252.287636][T11951]  mult:           268459937
[  252.287636][T11951]  shift:          32
[  252.287636][T11951]  mode:           3
[  252.287636][T11951]  next_event:     252277705135 nsecs
[  252.287636][T11951]  set_next_event: lapic_next_event
[  252.287636][T11951]  shutdown:       lapic_timer_shutdown
[  252.287636][T11951]  periodic:       lapic_timer_set_periodic
[  252.287636][T11951]  oneshot:        lapic_timer_set_oneshot
[  252.287636][T11951]  oneshot stopped: lapic_timer_shutdown
[  252.287636][T11951]  event_handler:  hrtimer_interrupt
[  252.287636][T11951] 
[  252.287636][T11951]  retries:        356663
[  252.287636][T11951] Wakeup Device: <NULL>
[  252.287636][T11951] 
[  252.287636][T11951] Tick Device: mode:     1
[  252.287636][T11951] Per CPU device: 1
[  252.287636][T11951] Clock Event Device: lapic
[  252.287636][T11951]  max_delta_ns:   34356605070
[  252.287636][T11951]  min_delta_ns:   1000
[  252.287636][T11951]  mult:           268459937
[  252.287636][T11951]  shift:          32
[  252.287636][T11951]  mode:           3
[  252.287636][T11951]  next_event:     252278018024 nsecs
[  252.287636][T11951]  set_next_event: lapic_next_event
[  252.287636][T11951]  shutdown:       lapic_timer_shutdown
[  252.287636][T11951]  periodic:       lapic_timer_set_periodic
[  252.287636][T11951]  oneshot:        lapic_timer_set_oneshot
[  252.287636][T11951]  oneshot stopped: lapic_timer_shutdown
[  252.287636][T11951]  event_handler:  hrtimer_interrupt
[  252.287636][T11951] 
[  252.287636][T11951]  retries:        466959
[  252.287636][T11951] Wakeup Device: <N
[  252.325116][T11959] rust_binder: Read failure Err(EAGAIN) in pid:108
[  252.336315][T11964] binder: Unknown parameter '00000000000000000000000'
[  252.494109][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3948'.
[  252.515101][T11959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48070 sclass=netlink_route_socket pid=11959 comm=syz.0.3948
[  252.564694][T11972] /dev/sg0: Can't lookup blockdev
[  252.574631][T11974] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  252.575339][T11974] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[  252.588973][T11974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  252.598800][T11974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:148
[  252.660858][T11981] cgroup: fork rejected by pids controller in /syz4
[  252.741571][T12121] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  252.781054][T12125] lo: entered promiscuous mode
[  252.786284][T12125] lo: left promiscuous mode
[  252.846175][T12127] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  252.974492][T12131] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  253.241567][  T305] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  253.381578][  T305] usb 5-1: device descriptor read/64, error -71
[  253.631647][  T305] usb 5-1: device descriptor read/64, error -71
[  253.827208][T12177] xfrm0: mtu less than device minimum
[  253.901623][  T305] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  254.031620][  T305] usb 5-1: device descriptor read/64, error -71
[  254.103212][T12186] overlayfs: failed to clone upperpath
[  254.167864][T12206] overlayfs: missing 'lowerdir'
[  254.189750][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3988'.
[  254.272431][  T305] usb 5-1: device descriptor read/64, error -71
[  254.300419][T12215] tipc: Started in network mode
[  254.305611][T12215] tipc: Node identity eecc5c5791a5, cluster identity 4711
[  254.313068][T12215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.323037][T12215] tipc: Disabling bearer <eth:syzkaller0>
[  254.351909][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3997'.
[  254.374267][T12234] bond_slave_1: mtu less than device minimum
[  254.381717][  T305] usb usb5-port1: attempt power cycle
[  254.527897][T12246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132
[  254.537139][T12248] rust_binder: Write failure EINVAL in pid:136
[  254.721635][  T305] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  254.752676][  T305] usb 5-1: device descriptor read/8, error -71
[  254.831625][  T449] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  254.885859][  T305] usb 5-1: device descriptor read/8, error -71
[  254.992799][  T449] usb 1-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.997912][T12283] cgroup2: Unknown parameter 'net'
[  255.004196][  T449] usb 1-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.020270][  T449] usb 1-1: config 0 interface 0 has no altsetting 0
[  255.027161][  T449] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  255.037387][  T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.050788][  T449] usb 1-1: config 0 descriptor??
[  255.141601][  T305] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  255.162640][  T305] usb 5-1: device descriptor read/8, error -71
[  255.292631][  T305] usb 5-1: device descriptor read/8, error -71
[  255.402122][  T305] usb usb5-port1: unable to enumerate USB device
[  255.467907][  T449] acrux 0003:1A34:F705.0011: item fetching failed at offset 2/7
[  255.475868][  T449] acrux 0003:1A34:F705.0011: parse failed
[  255.481929][  T449] acrux 0003:1A34:F705.0011: probe with driver acrux failed with error -22
[  255.653127][T12315] 9pnet_virtio: no channels available for device syz
[  255.677958][T12317] fuse: Bad value for 'rootmode'
[  255.727228][T12329] bpf: Bad value for 'mode'
[  255.736060][  T449] usb 1-1: USB disconnect, device number 20
[  255.760322][T12333] lo: entered promiscuous mode
[  255.765570][T12332] lo: left promiscuous mode
[  256.259504][T12373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer.
[  256.381472][T12375] 9pnet_fd: Insufficient options for proto=fd
[  256.411577][ T7794] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  256.562606][ T7794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.572875][ T7794] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  256.581920][ T7794] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  256.591151][ T7794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.599940][ T7794] usb 5-1: config 0 descriptor??
[  257.174018][T12377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160
[  257.174408][T12377] rust_binder: Error while translating object.
[  257.183717][T12377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  257.189888][T12377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160
[  257.231304][T12381] binder: Bad value for 'max'
[  257.641568][  T449] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  257.791929][  T449] usb 1-1: no configurations
[  257.796621][  T449] usb 1-1: can't read configurations, error -22
[  257.931608][  T449] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  258.082060][  T449] usb 1-1: no configurations
[  258.086788][  T449] usb 1-1: can't read configurations, error -22
[  258.093218][  T449] usb usb1-port1: attempt power cycle
[  258.431608][  T449] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  258.452380][  T449] usb 1-1: no configurations
[  258.457035][  T449] usb 1-1: can't read configurations, error -22
[  258.591594][  T449] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  258.612384][  T449] usb 1-1: no configurations
[  258.617031][  T449] usb 1-1: can't read configurations, error -22
[  258.623556][  T449] usb usb1-port1: unable to enumerate USB device
[  258.867151][T12402] overlayfs: conflicting options: userxattr,verity=on
[  259.020737][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4059'.
[  259.041057][T12428] fuse: Bad value for 'fd'
[  259.047220][T12431] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4061'.
[  259.057447][T12431] overlayfs: failed to resolve './file1': -2
[  259.079518][  T449] usb 5-1: USB disconnect, device number 34
[  259.125306][   T36] kauditd_printk_skb: 74 callbacks suppressed
[  259.125325][   T36] audit: type=1400 audit(8000000238.747:840): avc:  denied  { write } for  pid=12437 comm="syz.4.4064" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  259.491591][  T449] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  259.621694][  T449] usb 5-1: device descriptor read/64, error -71
[  259.675048][T12477] overlayfs: failed to clone lowerpath
[  259.725974][T12482] overlayfs: failed to clone upperpath
[  259.758256][T12492] netlink: 'syz.5.4081': attribute type 4 has an invalid length.
[  259.771045][T12493] netlink: 'syz.5.4081': attribute type 4 has an invalid length.
[  259.881589][  T449] usb 5-1: device descriptor read/64, error -71
[  260.121615][  T449] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  260.251592][  T449] usb 5-1: device descriptor read/64, error -71
[  260.441753][T12541] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  260.441787][T12541] rust_binder: Error in use_page_slow: EBUSY
[  260.452442][T12541] rust_binder: use_range failure EBUSY
[  260.458530][T12541] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  260.464096][T12541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  260.471777][T12541] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  260.482259][T12541] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:186
[  260.494551][  T449] usb 5-1: device descriptor read/64, error -71
[  260.611656][  T449] usb usb5-port1: attempt power cycle
[  260.786181][T12560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205
[  260.786914][T12560] rust_binder: Read failure Err(EFAULT) in pid:205
[  260.951638][  T449] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  260.982721][  T449] usb 5-1: device descriptor read/8, error -71
[  261.111606][ T7794] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  261.112705][  T449] usb 5-1: device descriptor read/8, error -71
[  261.262889][ T7794] usb 1-1: unable to get BOS descriptor or descriptor too short
[  261.271027][ T7794] usb 1-1: not running at top speed; connect to a high speed hub
[  261.279549][ T7794] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  261.292262][ T7794] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  261.301426][ T7794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.309555][ T7794] usb 1-1: Product: syz
[  261.313809][ T7794] usb 1-1: Manufacturer: syz
[  261.318389][ T7794] usb 1-1: SerialNumber: syz
[  261.361599][  T449] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  261.382641][  T449] usb 5-1: device descriptor read/8, error -71
[  261.512708][  T449] usb 5-1: device descriptor read/8, error -71
[  261.527366][ T7794] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  261.537603][ T7794] usb 1-1: USB disconnect, device number 25
[  261.545599][ T8915] udevd[8915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  261.622142][  T449] usb usb5-port1: unable to enumerate USB device
[  261.960624][T12588] /dev/rnullb0: Can't lookup blockdev
[  262.183547][   T12] tipc: Subscription rejected, illegal request
[  262.271707][ T7794] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  262.416073][T12632] input: syz1 as /devices/virtual/input/input18
[  262.442734][ T7794] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  262.454553][ T7794] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  262.466100][ T7794] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  262.477939][ T7794] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  262.487050][ T7794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.497886][T12591] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  262.731617][  T449] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  262.749713][   T36] audit: type=1326 audit(8000000242.367:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.6.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94738e929 code=0x7fc00000
[  262.881608][  T449] usb 5-1: Using ep0 maxpacket: 16
[  262.887930][  T449] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  262.896198][  T449] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.906696][  T449] usb 5-1: config 0 has no interface number 0
[  262.914804][  T449] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  262.923957][  T449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.931989][  T449] usb 5-1: Product: syz
[  262.936192][  T449] usb 5-1: Manufacturer: syz
[  262.938904][T12669] fuse: Bad value for 'user_id'
[  262.940818][  T449] usb 5-1: SerialNumber: syz
[  262.945960][T12669] fuse: Bad value for 'user_id'
[  262.953994][  T449] usb 5-1: config 0 descriptor??
[  263.111756][ T7794] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  263.120050][ T7794] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input19
[  263.131161][ T7794] usb 1-1: USB disconnect, device number 26
[  263.131191][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  263.501106][T12681] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4144'.
[  263.722522][T12693] 9pnet_fd: p9_fd_create_tcp (12693): problem connecting socket to 127.0.0.1
[  263.909982][T12707] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[  263.910011][T12707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  263.918111][T12707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:233
[  263.949373][T12709] netlink: 'syz.0.4153': attribute type 32 has an invalid length.
[  263.968340][T12710] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  264.084425][T12721] bridge0: port 3(veth0_to_bridge) entered blocking state
[  264.099399][T12721] bridge0: port 3(veth0_to_bridge) entered disabled state
[  264.115325][T12721] veth0_to_bridge: entered allmulticast mode
[  264.129441][T12721] veth0_to_bridge: entered promiscuous mode
[  264.141635][T12721] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  264.164079][T12721] bridge0: port 3(veth0_to_bridge) entered blocking state
[  264.171280][T12721] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  264.275884][T12735] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4160'.
[  264.302021][T12737] lo: entered promiscuous mode
[  264.314940][T12736] lo: left promiscuous mode
[  264.925383][T12747] sock: sock_timestamping_bind_phc: sock not bind to device
[  264.951436][T12751] 9pnet_fd: p9_fd_create_tcp (12751): problem connecting socket to 127.0.0.1
[  265.428510][  T310] usb 5-1: USB disconnect, device number 39
[  265.516504][T12794] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4183'.
[  265.526582][   T36] audit: type=1400 audit(8000000245.157:842): avc:  denied  { write } for  pid=12793 comm="syz.4.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  265.871626][  T310] usb 5-1: new low-speed USB device number 40 using dummy_hcd
[  265.966344][T12811] 9pnet_fd: p9_fd_create_tcp (12811): problem connecting socket to 127.0.0.1
[  265.996152][T12815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  265.996186][T12815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251
[  266.005823][  T310] usb 5-1: device descriptor read/64, error -71
[  266.031834][   T36] audit: type=1400 audit(8000000245.657:843): avc:  denied  { getattr } for  pid=12819 comm="syz.0.4192" path="/proc/256/cgroup" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  266.055730][   T36] audit: type=1400 audit(8000000245.657:844): avc:  denied  { mounton } for  pid=12819 comm="syz.0.4192" path="/proc/256/cgroup" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  266.079389][   T36] audit: type=1400 audit(8000000245.657:845): avc:  denied  { mount } for  pid=12819 comm="syz.0.4192" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  266.110791][T12822] rust_binder: Write failure EINVAL in pid:258
[  266.261882][  T310] usb 5-1: device descriptor read/64, error -71
[  266.511585][  T310] usb 5-1: new low-speed USB device number 41 using dummy_hcd
[  266.641770][  T310] usb 5-1: device descriptor read/64, error -71
[  266.881612][  T310] usb 5-1: device descriptor read/64, error -71
[  266.991679][  T310] usb usb5-port1: attempt power cycle
[  267.189936][T12870] 9pnet_fd: p9_fd_create_tcp (12870): problem connecting socket to 127.0.0.1
[  267.331643][  T310] usb 5-1: new low-speed USB device number 42 using dummy_hcd
[  267.352738][  T310] usb 5-1: device descriptor read/8, error -71
[  267.482779][  T310] usb 5-1: device descriptor read/8, error -71
[  267.721665][  T310] usb 5-1: new low-speed USB device number 43 using dummy_hcd
[  267.745905][  T310] usb 5-1: device descriptor read/8, error -71
[  267.857816][T12897] netlink: 'syz.0.4223': attribute type 4 has an invalid length.
[  267.882762][  T310] usb 5-1: device descriptor read/8, error -71
[  267.927717][T12902] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4224'.
[  267.937145][T12902] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4224'.
[  267.947391][T12902] netlink: 'syz.0.4224': attribute type 6 has an invalid length.
[  267.955438][T12902] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4224'.
[  267.991678][  T310] usb usb5-port1: unable to enumerate USB device
[  268.262288][T12904] 9pnet_fd: p9_fd_create_tcp (12904): problem connecting socket to 127.0.0.1
[  268.523229][T12922] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  268.524946][T12923] incfs: mount failed -22
[  268.550625][   T36] audit: type=1326 audit(8000000248.167:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12926 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20a78e929 code=0x7ffc0000
[  268.564118][T12929] netlink: 5308 bytes leftover after parsing attributes in process `syz.6.4232'.
[  268.574657][   T36] audit: type=1326 audit(8000000248.167:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12926 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20a78e929 code=0x7ffc0000
[  268.614232][   T36] audit: type=1326 audit(8000000248.167:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12926 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa20a78e929 code=0x7ffc0000
[  268.639334][   T36] audit: type=1326 audit(8000000248.167:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12926 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20a78e929 code=0x7ffc0000
[  268.664848][   T36] audit: type=1326 audit(8000000248.167:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12926 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20a78e929 code=0x7ffc0000
[  268.688916][   T36] audit: type=1326 audit(8000000248.167:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12926 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20a78e929 code=0x7ffc0000
[  269.285508][T12976] 9pnet_fd: p9_fd_create_tcp (12976): problem connecting socket to 127.0.0.1
[  269.332034][T12980] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  269.617889][T13010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  269.627977][T13010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349
[  269.828391][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4273'.
[  269.846450][T13026] bridge_slave_1: left allmulticast mode
[  269.852134][T13026] bridge_slave_1: left promiscuous mode
[  269.857752][T13026] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.865443][T13026] bridge_slave_0: left allmulticast mode
[  269.871253][T13026] bridge_slave_0: left promiscuous mode
[  269.877027][T13026] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.911576][   T10] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  271.063426][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  271.075913][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  271.089187][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  271.098585][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.107776][   T10] usb 5-1: config 0 descriptor??
[  271.113168][T13047] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  271.616392][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  271.622640][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  271.634498][   T10] usb 5-1: USB disconnect, device number 44
[  272.150739][T13109] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  272.151410][T13109] sit0: entered promiscuous mode
[  272.164709][T13109] netlink: 'syz.4.4299': attribute type 1 has an invalid length.
[  272.172780][T13109] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4299'.
[  272.182977][T13109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  272.183005][T13109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:356
[  272.192849][T13112] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  272.213902][T13118] 9pnet: p9_errstr2errno: server reported unknown error ��p��A���
��;
KZ�44�/@�q��k�p
[  272.213902][T13118] �C<+
[  272.242157][T13124] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4305'.
[  272.253308][T13118] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  272.501602][  T449] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  272.663074][  T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  272.674137][  T449] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  272.687168][  T449] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  272.696498][  T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.706978][  T449] usb 5-1: config 0 descriptor??
[  272.713651][T13128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  272.730259][T13175] overlayfs: failed to clone upperpath
[  272.736149][T13175] overlayfs: failed to clone upperpath
[  272.741995][T13175] overlayfs: failed to clone upperpath
[  272.747913][T13175] overlayfs: failed to clone upperpath
[  272.753843][T13175] overlayfs: failed to clone upperpath
[  272.760015][T13175] overlayfs: failed to clone upperpath
[  272.765989][T13175] overlayfs: failed to clone upperpath
[  272.771935][T13175] overlayfs: failed to clone upperpath
[  272.777808][T13175] overlayfs: failed to clone upperpath
[  272.783620][T13175] overlay: Unknown parameter 'mounts'
[  272.789183][T13175] overlay: Unknown parameter 'mounts'
[  272.794743][T13175] overlay: Unknown parameter 'mounts'
[  272.800271][T13175] overlay: Unknown parameter 'mounts'
[  272.805960][T13175] overlay: Unknown parameter 'mounts'
[  272.811542][T13175] overlay: Unknown parameter 'mounts'
[  272.817098][T13175] overlay: Unknown parameter 'mounts'
[  272.823173][T13175] overlay: Unknown parameter 'mounts'
[  272.828933][T13175] overlay: Unknown parameter 'mounts'
[  272.834553][T13175] overlay: Unknown parameter 'mounts'
[  272.840073][T13175] overlay: Unknown parameter 'mounts'
[  272.845711][T13175] overlay: Unknown parameter 'mounts'
[  272.851667][T13175] overlay: Unknown parameter 'mounts'
[  272.857171][T13175] overlay: Unknown parameter 'mounts'
[  272.862753][T13175] overlay: Unknown parameter 'mounts'
[  272.868419][T13175] overlay: Unknown parameter 'mounts'
[  272.874144][T13175] overlay: Unknown parameter 'mounts'
[  272.879916][T13175] overlay: Unknown parameter 'mounts'
[  272.885704][T13175] overlay: Unknown parameter 'mounts'
[  272.891284][T13175] overlay: Unknown parameter 'mounts'
[  272.897189][T13175] overlay: Unknown parameter 'mounts'
[  272.902810][T13175] overlay: Unknown parameter 'mounts'
[  272.908301][T13175] overlay: Unknown parameter 'mounts'
[  272.913857][T13175] overlay: Unknown parameter 'mounts'
[  273.184831][  T449] usbhid 5-1:0.0: can't add hid device: -71
[  273.190956][  T449] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  273.199881][  T449] usb 5-1: USB disconnect, device number 45
[  273.721160][T13214] binder: Bad value for 'max'
[  273.875692][T13223] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  273.885686][   T36] kauditd_printk_skb: 85 callbacks suppressed
[  273.885702][   T36] audit: type=1400 audit(8000000259.512:937): avc:  denied  { relabelto } for  pid=13222 comm="syz.0.4338" name="file0" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  273.919237][   T36] audit: type=1400 audit(8000000259.522:938): avc:  denied  { associate } for  pid=13222 comm="syz.0.4338" name="file0" dev="tmpfs" ino=773 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0"
[  273.946741][   T36] audit: type=1400 audit(8000000259.522:939): avc:  denied  { create } for  pid=13222 comm="syz.0.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  274.089451][   T36] audit: type=1400 audit(8000000259.712:940): avc:  denied  { bind } for  pid=13239 comm="syz.5.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  274.091614][  T449] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  274.112064][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.130432][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.140182][T13244] /dev/rnullb0: Can't lookup blockdev
[  274.142564][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.160039][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.172210][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.184669][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.197047][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.209075][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.221340][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.233351][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.274027][  T449] usb 5-1: config 4 has an invalid interface number: 95 but max is 0
[  274.285776][  T449] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  274.297437][  T449] usb 5-1: config 4 has no interface number 0
[  274.303877][  T449] usb 5-1: config 4 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  274.315844][  T449] usb 5-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  274.327743][  T449] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  274.337287][  T449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.345668][  T449] usb 5-1: Product: syz
[  274.355904][  T449] usb 5-1: Manufacturer: syz
[  274.365715][  T449] usb 5-1: SerialNumber: syz
[  274.404580][T13252] 9p filesystem being mounted at /403/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  274.432656][   T36] audit: type=1400 audit(8000000260.062:941): avc:  denied  { unlink } for  pid=11401 comm="syz-executor" name="file0" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  274.487995][   T36] audit: type=1326 audit(8000000260.112:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.0.4353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01e138e929 code=0x0
[  279.111571][    C1] net_ratelimit: 88164 callbacks suppressed
[  279.111593][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.111606][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  279.111822][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  279.117841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.130195][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  279.141907][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  279.154135][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  279.165880][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.178050][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  279.189888][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.651530][    C1] sched: DL replenish lagged too much
[  284.121546][    C0] net_ratelimit: 91436 callbacks suppressed
[  284.121569][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  284.121615][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  284.127737][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  284.139580][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  284.152146][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  284.165754][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  284.177977][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  284.189799][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  284.201915][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  284.213751][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  286.712929][  T449] usb 5-1: MIDIStreaming interface descriptor not found
[  289.131543][    C1] net_ratelimit: 91495 callbacks suppressed
[  289.131564][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  289.131601][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  289.137739][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  289.149871][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  289.161840][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  289.173910][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  289.185757][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  289.197862][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  289.209655][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  289.221734][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  291.971683][  T449] usb 5-1: USB disconnect, device number 46
[  294.141546][    C0] net_ratelimit: 90321 callbacks suppressed
[  294.141569][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  294.141582][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  294.141659][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  294.147868][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  294.159627][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  294.171824][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  294.183554][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  294.195867][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  294.207496][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  294.219710][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  299.151549][    C0] net_ratelimit: 117936 callbacks suppressed
[  299.151570][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  299.151594][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  299.157809][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  299.169743][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  299.181771][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  299.193654][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  299.205754][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  299.217596][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  299.229638][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  299.241493][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  304.161558][    C1] net_ratelimit: 134938 callbacks suppressed
[  304.161582][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  304.161636][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  304.167707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  304.179908][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  304.191731][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  304.203836][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  304.215701][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  304.227760][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  304.239633][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  304.251650][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  309.171547][    C1] net_ratelimit: 129197 callbacks suppressed
[  309.171568][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  309.171774][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  309.177659][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  309.189825][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  309.201710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  309.213872][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  309.225662][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  309.237595][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  309.249504][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  309.261768][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  314.181545][    C0] net_ratelimit: 138135 callbacks suppressed
[  314.181567][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  314.181588][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  314.187940][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  314.199759][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  314.211708][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  314.223643][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  314.235707][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  314.247460][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  314.259503][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  314.271410][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  319.191554][    C0] net_ratelimit: 138021 callbacks suppressed
[  319.191578][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  319.191587][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  319.191628][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  319.197727][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  319.209666][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  319.221820][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  319.233544][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  319.245564][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  319.257365][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  319.269524][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  324.201582][    C1] net_ratelimit: 140344 callbacks suppressed
[  324.201604][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  324.201661][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  324.207697][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  324.219747][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  324.231826][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  324.245289][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  324.257207][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  324.269151][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  324.281052][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  324.293205][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  328.673751][   T13] bridge_slave_1: left allmulticast mode
[  328.704498][   T13] bridge_slave_1: left promiscuous mode
[  328.767622][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.211557][    C1] net_ratelimit: 134777 callbacks suppressed
[  329.211580][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  329.211702][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  329.218098][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  329.230296][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  329.242627][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  329.255727][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  329.267686][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  329.279708][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  329.291701][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  329.303979][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  330.211793][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.221557][    C1] net_ratelimit: 138812 callbacks suppressed
[  334.221580][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  334.221678][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  334.227675][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  334.239759][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  334.251643][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  334.263741][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  334.275522][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  334.287482][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  334.299539][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  334.311761][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  339.231553][    C1] net_ratelimit: 133333 callbacks suppressed
[  339.231575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.231750][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  339.237748][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.249826][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  339.261710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  339.273816][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  339.285592][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.297575][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  339.309439][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.321676][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  344.241589][    C1] net_ratelimit: 135235 callbacks suppressed
[  344.241610][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.241687][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  344.247710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.259920][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  344.271681][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  344.283637][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  344.295530][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.307594][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  344.319347][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.331462][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  349.251561][    C0] net_ratelimit: 137227 callbacks suppressed
[  349.251581][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  349.251622][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.257823][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  349.269643][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.281688][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  349.293600][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  349.305649][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  349.317458][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.329388][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  349.341287][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  354.261568][    C1] net_ratelimit: 129370 callbacks suppressed
[  354.261589][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  354.261678][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  354.267705][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  354.279647][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  354.291567][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  354.303714][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  354.315514][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  354.327584][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  354.339533][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  354.351531][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  359.271540][    C0] net_ratelimit: 139175 callbacks suppressed
[  359.271563][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  359.271582][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  359.277824][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  359.289630][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  359.301730][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  359.313671][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  359.325808][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  359.337608][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  359.349572][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  359.361454][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  364.281552][    C1] net_ratelimit: 138582 callbacks suppressed
[  364.281576][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  364.281614][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  364.287674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  364.299752][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  364.311687][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  364.323603][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  364.335677][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  364.347826][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  364.359702][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  364.371854][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  369.291559][    C1] net_ratelimit: 137326 callbacks suppressed
[  369.291582][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  369.291633][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  369.297677][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  369.309746][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  369.321636][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  369.333785][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  369.345514][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  369.357486][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  369.369409][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  369.381660][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  374.301542][    C1] net_ratelimit: 128770 callbacks suppressed
[  374.301563][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  374.301815][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  374.307747][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  374.319722][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  374.331708][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  374.344172][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  374.355949][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  374.367952][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  374.379854][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  374.392102][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  379.311562][    C1] net_ratelimit: 133910 callbacks suppressed
[  379.311584][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  379.311670][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  379.317743][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  379.329700][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  379.341653][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  379.353666][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  379.365543][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  379.377806][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  379.389652][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  379.401722][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  384.321576][    C1] net_ratelimit: 136323 callbacks suppressed
[  384.321599][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  384.321668][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  384.327674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  384.339919][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  384.351676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  384.363668][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  384.375582][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  384.387519][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  384.399409][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  384.411561][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  389.331551][    C1] net_ratelimit: 132719 callbacks suppressed
[  389.331572][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  389.331637][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  389.337743][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  389.349826][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  389.361689][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  389.373703][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  389.385583][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  389.397517][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  389.409762][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  389.422490][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  394.341561][    C1] net_ratelimit: 137860 callbacks suppressed
[  394.341583][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  394.341626][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  394.347707][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  394.359745][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  394.371663][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  394.383584][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  394.395479][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  394.407617][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  394.419384][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  394.431404][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  399.351569][    C0] net_ratelimit: 125930 callbacks suppressed
[  399.351592][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  399.351618][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  399.357881][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  399.369866][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  399.382170][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  399.393989][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  399.405963][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  399.417838][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  399.430362][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  399.442681][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  404.361547][    C1] net_ratelimit: 139796 callbacks suppressed
[  404.361568][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  404.361630][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  404.367666][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  404.379771][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  404.391713][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  404.403744][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  404.415660][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  404.427890][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  404.439701][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  404.451714][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  409.371576][    C0] net_ratelimit: 141281 callbacks suppressed
[  409.371597][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  409.371596][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  409.371703][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  409.377729][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  409.389926][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  409.401715][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  409.413965][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  409.425765][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  409.437803][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  409.449621][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  414.381558][    C1] net_ratelimit: 138545 callbacks suppressed
[  414.381581][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  414.381630][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  414.387660][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  414.399682][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  414.411602][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  414.423627][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  414.435518][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  414.447687][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  414.459457][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  414.471597][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  419.391561][    C1] net_ratelimit: 139640 callbacks suppressed
[  419.391584][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  419.391642][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  419.397678][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  419.409756][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  419.421722][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  419.433902][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  419.445710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  419.457788][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  419.469799][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  419.481740][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  424.401553][    C1] net_ratelimit: 139709 callbacks suppressed
[  424.401582][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  424.401609][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  424.407736][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  424.420097][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  424.432897][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  424.444863][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  424.457286][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  424.469762][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  424.481471][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  424.493615][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  429.411551][    C1] net_ratelimit: 138066 callbacks suppressed
[  429.411574][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  429.411616][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  429.417744][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  429.431707][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  429.441715][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  429.453721][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  429.465590][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  429.477554][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  429.489712][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  429.501783][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  434.421558][    C1] net_ratelimit: 136240 callbacks suppressed
[  434.421579][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  434.421604][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  434.427650][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  434.439754][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  434.451608][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  434.463670][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  434.475570][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  434.487629][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  434.499448][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  434.511550][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  435.383260][   T37] INFO: task kworker/u8:2:46 blocked for more than 124 seconds.
[  435.393233][   T37]       Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0
[  435.400176][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  435.543682][   T36] audit: type=1400 audit(8000000421.122:943): avc:  denied  { write } for  pid=282 comm="syz-executor" path="pipe:[1577]" dev="pipefs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  435.621980][   T37] task:kworker/u8:2    state:D stack:0     pid:46    tgid:46    ppid:2      flags:0x00004000
[  435.791621][   T37] Workqueue: events_unbound linkwatch_event
[  435.797594][   T37] Call Trace:
[  435.800876][   T37]  <TASK>
[  435.952141][   T37]  __schedule+0x145b/0x1f10
[  435.956715][   T37]  ? __sched_text_start+0x10/0x10
[  436.042353][   T37]  ? mutex_spin_on_owner+0x1e8/0x470
[  436.047705][   T37]  ? kthread_data+0x54/0xc0
[  436.103194][   T37]  ? wq_worker_sleeping+0x69/0x260
[  436.108362][   T37]  ? trace_contention_begin+0xc0/0xc0
[  436.192688][   T37]  schedule+0xc6/0x240
[  436.196838][   T37]  schedule_preempt_disabled+0x14/0x30
[  436.307334][   T37]  __mutex_lock+0x836/0x1b60
[  436.328766][   T37]  ? sched_clock_noinstr+0xd/0x30
[  436.362750][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  436.369580][   T37]  ? save_fpregs_to_fpstate+0x196/0x230
[  436.408410][   T37]  ? __kasan_check_write+0x18/0x20
[  436.425352][   T37]  ? __switch_to+0xc7b/0x1310
[  436.430089][   T37]  ? _raw_spin_unlock+0x45/0x60
[  436.475562][   T37]  ? finish_task_switch+0x13a/0x780
[  436.480858][   T37]  __mutex_lock_slowpath+0xe/0x20
[  436.535929][   T37]  mutex_lock+0x102/0x1c0
[  436.540321][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  436.545273][   T37]  ? kick_pool+0xb9/0x550
[  436.549630][   T37]  rtnl_lock+0x19/0x20
[  436.553765][   T37]  linkwatch_event+0x12/0x60
[  436.558376][   T37]  process_scheduled_works+0x7d2/0x1020
[  436.563972][   T37]  worker_thread+0xc58/0x1250
[  436.568665][   T37]  kthread+0x2ca/0x370
[  436.572758][   T37]  ? __cfi_worker_thread+0x10/0x10
[  436.577879][   T37]  ? __cfi_kthread+0x10/0x10
[  436.582496][   T37]  ret_from_fork+0x64/0xa0
[  436.586925][   T37]  ? __cfi_kthread+0x10/0x10
[  436.591553][   T37]  ret_from_fork_asm+0x1a/0x30
[  436.596331][   T37]  </TASK>
[  436.599439][   T37] INFO: task syz.5.3827:11603 blocked for more than 125 seconds.
[  436.621827][   T37]       Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0
[  436.628719][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  437.094461][   T37] task:syz.5.3827      state:D stack:0     pid:11603 tgid:11603 ppid:7441   flags:0x00004006
[  437.104708][   T37] Call Trace:
[  437.108007][   T37]  <TASK>
[  437.110944][   T37]  __schedule+0x145b/0x1f10
[  437.115546][   T37]  ? __sched_text_start+0x10/0x10
[  437.120589][   T37]  ? stack_depot_save_flags+0x38/0x800
[  437.126090][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  437.131211][   T37]  ? __kasan_check_write+0x18/0x20
[  437.136354][   T37]  ? trace_contention_begin+0xc0/0xc0
[  437.141779][   T37]  schedule+0xc6/0x240
[  437.145859][   T37]  schedule_preempt_disabled+0x14/0x30
[  437.151326][   T37]  __mutex_lock+0x836/0x1b60
[  437.155962][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  437.162760][   T37]  ? locks_remove_file+0x346/0x1000
[  437.167980][   T37]  ? __cfi_slab_free_after_rcu_debug+0x10/0x10
[  437.174203][   T37]  ? __cfi_locks_remove_file+0x10/0x10
[  437.179682][   T37]  ? __call_rcu_common+0x40b/0x6f0
[  437.184843][   T37]  ? __asan_memset+0x39/0x50
[  437.189575][   T37]  ? __fsnotify_parent+0x217/0x5c0
[  437.194722][   T37]  __mutex_lock_slowpath+0xe/0x20
[  437.199755][   T37]  mutex_lock+0x102/0x1c0
[  437.204129][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  437.208989][   T37]  ? call_rcu+0x14/0x20
[  437.213184][   T37]  rtnl_lock+0x19/0x20
[  437.217256][   T37]  tun_chr_close+0x41/0x150
[  437.221793][   T37]  ? __cfi_tun_chr_close+0x10/0x10
[  437.226911][   T37]  __fput+0x1fb/0xa00
[  437.230899][   T37]  ? call_rcu+0x14/0x20
[  437.235099][   T37]  ____fput+0x20/0x30
[  437.239088][   T37]  task_work_run+0x1e0/0x250
[  437.243711][   T37]  ? __cfi_task_work_run+0x10/0x10
[  437.248829][   T37]  ? free_nsproxy+0x223/0x290
[  437.253533][   T37]  do_exit+0x9b4/0x2630
[  437.257692][   T37]  ? __sched_text_start+0x10/0x10
[  437.262754][   T37]  ? __cfi_do_exit+0x10/0x10
[  437.267351][   T37]  ? __kasan_check_write+0x18/0x20
[  437.272557][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  437.277692][   T37]  ? __kasan_check_read+0x15/0x20
[  437.282745][   T37]  ? cgroup_update_frozen+0x160/0x990
[  437.288128][   T37]  do_group_exit+0x22a/0x300
[  437.292753][   T37]  ? cgroup_leave_frozen+0x16c/0x2b0
[  437.298052][   T37]  get_signal+0x139d/0x14f0
[  437.302588][   T37]  arch_do_signal_or_restart+0x96/0x720
[  437.308147][   T37]  ? common_nsleep+0x93/0xb0
[  437.312783][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  437.318948][   T37]  ? __se_sys_clock_nanosleep+0x300/0x390
[  437.324731][   T37]  ? __kasan_check_read+0x15/0x20
[  437.329768][   T37]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  437.335867][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  437.341345][   T37]  do_syscall_64+0x64/0xf0
[  437.345805][   T37]  ? clear_bhb_loop+0x50/0xa0
[  437.350496][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  437.356418][   T37] RIP: 0033:0x7fe7361c11e5
[  437.360849][   T37] RSP: 002b:00007fe736fdcf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  437.369297][   T37] RAX: fffffffffffffdfc RBX: 00007fe7363b5fa0 RCX: 00007fe7361c11e5
[  437.377308][   T37] RDX: 00007fe736fdcfc0 RSI: 0000000000000000 RDI: 0000000000000000
[  437.385335][   T37] RBP: 00007fe736210b39 R08: 0000000000000000 R09: 0000000000000000
[  437.393347][   T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  437.401331][   T37] R13: 0000000000000000 R14: 00007fe7363b5fa0 R15: 00007ffd3aefab78
[  437.409452][   T37]  </TASK>
[  439.431558][    C1] net_ratelimit: 124205 callbacks suppressed
[  439.431580][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  439.431637][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  439.437663][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  439.449707][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  439.461621][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  439.473668][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  439.485469][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  439.497484][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  439.509477][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  439.521550][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  440.292608][   T37] INFO: task syz.6.4060:12429 blocked for more than 129 seconds.
[  440.300378][   T37]       Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0
[  443.132683][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  443.141402][   T37] task:syz.6.4060      state:D stack:0     pid:12429 tgid:12429 ppid:11599  flags:0x00004006
[  443.711971][   T37] Call Trace:
[  443.715296][   T37]  <TASK>
[  443.718228][   T37]  __schedule+0x145b/0x1f10
[  444.441569][    C1] net_ratelimit: 141935 callbacks suppressed
[  444.441591][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  444.441641][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  444.447691][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  444.459819][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  444.471670][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  444.483855][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  444.495621][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  444.507628][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  444.519517][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  444.531442][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:79:f7:5c:9c:37, vlan:0)
[  445.142585][   T37]  ? __sched_text_start+0x10/0x10
[  445.147671][   T37]  ? stack_depot_save_flags+0x38/0x800