last executing test programs:

1m47.593154501s ago: executing program 1 (id=146):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a00)={0x1c8, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fda={0x66646185, 0xa, 0x1, 0x37}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0x22}, @fda={0x66646185, 0x9, 0x2, 0x11}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x1100, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x1}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x7, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x2}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x0, 0x28}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x5, 0x0, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/241, 0xf1, 0x2, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/15, 0xf, 0x0, 0x24}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xdc, 0x0, &(0x7f0000000900)="102e258008cf044b3fab899fc766c8be72b2cfe545636ff7c9a74f6c21ba290279af78fc06f9838878658eccc5f42f4559b1ec39b7362c9f56216fe6a575c4c7058c8a9e6aab07204114fb97e99512d149cdcf228082be17d508355eecf3e8034006cf074a004709f7085d0cdfcc1d9e742727ccf7452e129987c5af614ff98012da417fad4fb9a57e2fdc6d0539f3582c4a95548a97d1173a4c35060ff43e5956daf443d113b80ce28c6070d65caaf46c9556276a2b7133070d3b7acbef8a2e4a8a54db96dc65a48bc3f4c3766f448a9e7126e9307285f203c28bd5"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1m47.588138391s ago: executing program 1 (id=147):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200880, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x3, 0xb]}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200880, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x3, 0xb]}, 0x10) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async)

1m46.392396779s ago: executing program 2 (id=153):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000000)={0x2710, 0x80, 0x280, &(0x7f0000000240)=[0x80000001, 0x1, 0x5, 0x0, 0x4, 0xb, 0x0, 0x9, 0x9, 0x3, 0x7, 0x80000001, 0x1, 0x100000001, 0x5b4a, 0x8, 0x7, 0x7ff, 0x5, 0xffffffffffffee79, 0x8, 0x241, 0x81, 0x1, 0x0, 0x9515f15, 0x206c, 0x8, 0xb, 0x10, 0x0, 0x5, 0x800, 0x7, 0x1, 0xd5, 0x760, 0xab, 0x9, 0x6236ff55, 0x5, 0x7, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x8e, 0xffff, 0xfffffffffffffffc, 0x7, 0xbfb0000000000000, 0x85, 0x8a, 0x9, 0x9, 0x40, 0xf6aa, 0x9ca9, 0x6, 0xefd, 0x6, 0x3, 0xffff, 0x9, 0x9, 0xd15a, 0x4, 0x422, 0x9, 0xeaa5, 0xfffffffffffff0a2, 0xb39, 0x1, 0x400, 0xd, 0x9, 0x6, 0x35400000000000, 0x9, 0x6, 0x5, 0xf, 0x6, 0x8, 0x2f, 0x660, 0x200, 0xa36, 0x401, 0x7, 0x9, 0x2, 0x80, 0x3, 0xe, 0x41, 0xfffffffffffffff7, 0x2, 0x74af, 0x7, 0xcc1a, 0xf, 0x7ff, 0x7fffffffffffffff, 0x6, 0x6, 0x6, 0x8, 0x100, 0x3, 0x1000, 0x7, 0x5, 0x4, 0x2, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x800, 0x8, 0x5, 0x500000, 0xb0fc580, 0x3, 0x2, 0x7]})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x1000, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"])
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000180)={'syz0\x00', {0x4, 0x8000, 0x6, 0xfffb}, 0x44, [0x7, 0x4, 0x126, 0x7, 0x0, 0x9, 0x5, 0x0, 0xfffff800, 0x8, 0x6, 0x6, 0x5, 0x2, 0x1d7b, 0x80, 0x5, 0xc, 0x3, 0x7, 0x0, 0x9, 0x4, 0x8, 0xff, 0x40, 0x4, 0x5, 0x5, 0x44, 0x1, 0x1, 0x10, 0x26, 0xb, 0x0, 0xffff, 0x1, 0x401, 0xece3, 0x75, 0xfffffff8, 0xffff, 0xffffffff, 0x101, 0x1000, 0x2, 0x68, 0xbf, 0xa5f7, 0x90d2, 0x5, 0x1, 0xfffffffe, 0x2, 0x8, 0x1, 0x7, 0x3, 0xfff, 0x9, 0xffffffff, 0xb], [0xfffffffe, 0xb61, 0x1, 0x3a7b, 0x3, 0x80000000, 0x2, 0x1, 0x11b, 0x2, 0x0, 0xa5, 0xe, 0x6, 0x4, 0x5, 0x1, 0xf78e, 0x800, 0x3ff, 0x0, 0x0, 0xfffffff9, 0x3, 0x7f, 0xe2c, 0x4, 0x7, 0xad3c67d0, 0x1, 0x7, 0x4, 0x6, 0x6, 0xf3d, 0x3, 0x7, 0x7, 0x8, 0x3, 0x5, 0x7, 0x8c, 0xc608c03, 0x3, 0x0, 0x7, 0x2, 0xff, 0x4, 0x7, 0x7, 0x3, 0x200, 0x6, 0x4, 0x21bd, 0x6, 0xa8a9, 0x0, 0xfff, 0x1, 0x1, 0x1], [0x10, 0x1, 0x7, 0x6, 0x8000, 0x0, 0x5, 0x6, 0x4, 0x7, 0xf, 0xe, 0x43, 0x10000, 0x9, 0x8, 0x455, 0xfff, 0xa, 0x9, 0x2, 0x1, 0x3, 0x2, 0x8, 0x4, 0x8, 0x7ff, 0x400, 0x9, 0xd, 0x0, 0x5, 0x401, 0x0, 0x10, 0x1, 0x475, 0x3, 0xfffffffd, 0x4, 0x800, 0x5, 0x5b, 0xfffffffd, 0x7fffffff, 0x5, 0x2ab5, 0x7, 0x9, 0x7, 0x3, 0xa, 0x0, 0x4, 0x8000, 0x4, 0x3, 0x2, 0x1c, 0x4, 0x9, 0x8, 0x7], [0x6, 0x0, 0xb, 0x1, 0x465, 0x80, 0x4, 0x6000000, 0x4300, 0x400, 0x8, 0x7, 0x7, 0x200, 0x1, 0x1, 0x8, 0x7, 0x26d, 0x81, 0x9, 0x800, 0xffff, 0x1, 0xff, 0x5, 0x14, 0x0, 0x8000, 0x3b8e4c61, 0x8000, 0x8, 0xfffffff8, 0x0, 0x7, 0x0, 0x6, 0x2, 0x0, 0x5, 0x5, 0x1, 0x4, 0xc58, 0x7f, 0x9, 0x6, 0xfffffffa, 0x800, 0x100, 0x401, 0x906, 0x5, 0xff, 0x7ff, 0xf7, 0x1, 0x1, 0x2, 0xc, 0x8, 0x8, 0x80, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setpgid(0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006)
fadvise64(0xffffffffffffffff, 0x1003, 0x9, 0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'team_slave_1\x00', @multicast})
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f00000000c0)={0x9, {{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x10}, 0xffff}}, {{0xa, 0x4e24, 0x81, @mcast2, 0xffff}}}, 0x108)

1m46.281902491s ago: executing program 2 (id=155):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x19, 0x0, 0x101}})
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x100)
ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x99b33000)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
inotify_init()
io_setup(0x4, &(0x7f0000000100))
socket$nl_audit(0x10, 0x3, 0x9) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x19, 0x0, 0x101}}) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x100) (async)
ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000040)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x99b33000) (async)
prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async)
inotify_init() (async)
io_setup(0x4, &(0x7f0000000100)) (async)

1m46.257950741s ago: executing program 2 (id=156):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in6=@private2, @in6=@mcast1}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x3507, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @extra_flags={0x8, 0x18, 0x80ff}]}, 0x140}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendto$packet(r2, &(0x7f0000000040)="1d", 0x1, 0x0, &(0x7f0000000140)={0x11, 0x1b, r4, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

1m46.215846122s ago: executing program 2 (id=157):
write(0xffffffffffffffff, &(0x7f0000000000)="ac1d33b7ac42f71d4c10ee11cb445600112256b6b79bdaed993a2ccd51f43750e04b9137dd8372c7006cc8aa08e64b958ddf61d216aaf599d289bf73bc17ea77efe1ad166a2473a67d7367e76eed4a262e626879a10c4d1767cd96abf8988d826047349d816c091bcf33ec9457d0edc813f14108913c86944380cbefb13fe4143b346a5d0b2b43eba58728b3a0f7c7", 0x8f) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x80)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ff9000/0x2000)=nil) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000380)) (async)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000003c0)=0xe74651f7e1b9c52b) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) (rerun: 64)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r5, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x15, 0x0, @random="328639c16cb90494aa9adc12cceb4fe82c"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4048041)
sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/uts\x00')
splice(r3, &(0x7f00000006c0)=0x100000000, r6, &(0x7f0000000740)=0x8, 0x9, 0x5) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "75f6e08402d2c44f6ef3b7"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a282c82c5e"}]}, 0x48}, 0x1, 0x0, 0x0, 0x2406c000}, 0x4000004)
linkat(r4, &(0x7f0000000900)='./file0\x00', r4, &(0x7f0000000940)='./file0\x00', 0x800) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, 0x12, r4, 0x845ff000)
symlink(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0/file0\x00') (async)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0)
ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000a40)=0x9) (async)
pipe2(&(0x7f0000000a80)={<r8=>0xffffffffffffffff}, 0x84000)
pread64(r8, &(0x7f0000000ac0)=""/175, 0xaf, 0x0) (async)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0), &(0x7f0000000c00), 0x2, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000c40)={0x10003, 0x4, 0xeeef0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000c80)={0x2b}) (async)
truncate(&(0x7f0000000cc0)='./file0/file0\x00', 0x9) (async)
sendmsg$unix(r4, &(0x7f0000000fc0)={&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d80), 0x0, &(0x7f0000000f40)=[@rights={{0x20, 0x1, 0x1, [r8, r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r8, r1, r7]}}], 0x60, 0x4008440}, 0x4000)

1m46.147461573s ago: executing program 3 (id=160):
socket$inet6(0xa, 0x400000000001, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(0x0)
rmdir(&(0x7f0000000440)='./file0\x00')

1m46.105793944s ago: executing program 3 (id=162):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
close_range(r1, r0, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

1m43.04123842s ago: executing program 1 (id=163):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0xde, 0x80000)
mmap$usbmon(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1, 0x40010, r1, 0x4)
read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000020c0)={{0x3, 0x200, 0x0, 0xd5, 0x51, 0xffffffff}, 0xf1, [0x3323, 0x2, 0x60000000, 0x8, 0x8, 0x5, 0xff, 0x81, 0x5, 0x6, 0x5, 0xfffffa44, 0x67, 0xfd, 0x8, 0xd, 0x8001, 0x2, 0xb3, 0xd, 0xab8, 0x7, 0x9, 0xd4da, 0x7, 0xc4, 0x0, 0x9, 0x3, 0x6, 0x5, 0x8, 0x8, 0x1, 0x1, 0xe, 0x2, 0x4157, 0xe, 0x8001, 0x1, 0xc6ab, 0x2, 0x6b, 0x7, 0xfffffff9, 0x3, 0x4, 0x52b80000, 0x1de, 0x5, 0x24a, 0xb, 0xef, 0x50000000, 0x10, 0x0, 0x466, 0x6, 0x26e, 0x7, 0x9, 0x14000, 0x3, 0x8, 0x2d1d, 0x3, 0x80000000, 0x5, 0x2, 0x9, 0x2, 0x10000, 0x33, 0x8, 0x5, 0x8001, 0x9, 0xc, 0x7b38, 0x40ff, 0x4, 0x4, 0x10, 0xb0, 0x8, 0x10001, 0x5, 0x2, 0xc8, 0x8, 0x7, 0xff, 0x7, 0x7, 0x8000, 0x5, 0x6, 0x2, 0x6, 0x2, 0x6eb7, 0x80, 0x3, 0x8, 0xfffffff9, 0x3, 0x4, 0x8, 0x8, 0x4, 0x0, 0x7fffffff, 0xc, 0x3, 0x0, 0xe5e, 0x3, 0x9, 0x2, 0x5, 0x7, 0x81, 0x3, 0x5, 0x6, 0x6, 0x1, 0x7, 0x2, 0x6, 0x0, 0xffff, 0x9, 0xff, 0x6, 0x9, 0x5, 0x7, 0x0, 0x3, 0x4, 0xfff, 0x200, 0x10001, 0x6, 0x9, 0xcb, 0x2, 0x0, 0x4, 0x66, 0x7fff, 0xb, 0xffffff95, 0x0, 0xfff, 0x7, 0x800, 0x7, 0x6, 0x7, 0x89, 0x79, 0x4c766011, 0x1, 0x7, 0x7ff, 0x6, 0x4, 0xfffffffd, 0x5, 0x80000000, 0x5, 0x7, 0x7f, 0x224, 0x1, 0x5, 0x9, 0x5, 0x1, 0x4, 0x3, 0x8, 0xffffffff, 0x6, 0x3, 0x7, 0x9, 0x6, 0x1, 0x9, 0x5, 0x90, 0xb1cd, 0xffffffff, 0xe9, 0x9, 0x4, 0x0, 0x1, 0x2, 0xff, 0x5, 0xc, 0x1, 0x5, 0x4, 0x1b, 0x0, 0x7, 0x3, 0x6, 0x8, 0x8e7, 0x10, 0x10, 0x0, 0xfffff2ed, 0x400, 0x1, 0x400, 0x40, 0x2, 0x6d, 0x4, 0x4, 0x1, 0x8, 0xd, 0x8, 0xfffffffc, 0x4, 0x9, 0x5, 0x68, 0x10000, 0x8bc, 0x0, 0xb0, 0x9, 0x1, 0x8, 0x95a, 0x510d, 0x4, 0x1, 0x9, 0x8, 0x52, 0x401, 0x4b1d, 0xffff, 0x1, 0x88c, 0x3, 0x63, 0x9, 0x9, 0x10000, 0x10001, 0x0, 0xd, 0x1, 0x9, 0xf713, 0xa, 0x8, 0x8, 0x0, 0xfffffffa, 0x5, 0xad, 0x401, 0x7, 0x2, 0x2, 0x3, 0x101, 0x5b, 0x7fffffff, 0x100, 0x1cc, 0x134, 0x46, 0xffffffff, 0x3ff, 0x1, 0x1, 0x307, 0xf98, 0x2, 0x7, 0x7fff, 0xa4, 0x7fff, 0x1, 0x34, 0xa, 0x4, 0x1, 0x5, 0x6, 0x2, 0x2656, 0x8000, 0x177, 0x11, 0x401, 0x1, 0xe, 0xff, 0x0, 0x4, 0x8, 0xb903, 0x48, 0xfffffffb, 0x3, 0x9, 0x25, 0x101, 0x8, 0x8, 0x1, 0x4, 0x2, 0x0, 0x0, 0xffff8001, 0x9, 0x1000, 0xb42, 0x0, 0x1, 0xb77, 0x5, 0x8, 0x0, 0x8, 0x9, 0x3, 0x6, 0x3, 0x3, 0x2, 0x1, 0xabf, 0x80, 0x80000000, 0x2, 0x6, 0x1, 0x100, 0x2, 0x41, 0x1, 0x6, 0x4, 0xfffffbff, 0x4, 0x8, 0x5, 0x80000001, 0x9, 0x3, 0x2, 0x7, 0x80000000, 0x6, 0x0, 0x2, 0xfffffff8, 0x0, 0xfffffff7, 0x4dd7, 0xd03, 0xb2c, 0x4, 0x8, 0x5, 0x4, 0x6, 0x4, 0x0, 0x8, 0x40, 0xeb, 0x1, 0x3, 0x5f6b, 0x92, 0x1, 0x6, 0x80000001, 0x8, 0x10, 0x2, 0x2, 0x1, 0x1b74, 0x4, 0x6, 0x2ef, 0x7, 0x6, 0x0, 0x4, 0x8001, 0x401, 0x80, 0xd0, 0xffffffff, 0x400, 0x4, 0x400, 0x6, 0x7, 0x44, 0x3ff, 0x7fffffff, 0x0, 0xa0, 0x7, 0x7, 0x1, 0x9, 0x9, 0xb, 0x40fe, 0x4, 0x0, 0xffff, 0xfffffffd, 0x9, 0x8, 0x1ff, 0x200000, 0x0, 0x9, 0x41, 0x64, 0x3ff, 0x7, 0xfffffff8, 0xc5db, 0x3, 0x5, 0xffffffff, 0xfffffffb, 0xffffffff, 0x2, 0x10, 0x7, 0x6, 0xc9, 0x10, 0xf40f, 0x6, 0x9, 0xff, 0x4, 0xfffffffa, 0x911, 0x3, 0x2f0, 0x1, 0x3, 0x7ff, 0x8, 0x9, 0x8, 0x0, 0x6, 0x8, 0xda02, 0x7e2, 0x0, 0x8, 0xd, 0x800, 0x7, 0xe324, 0x49, 0x5, 0x2, 0x3, 0x6, 0x3d0, 0x17, 0x101, 0x8, 0x1, 0x5ebf, 0x4, 0x300, 0xfff, 0x7, 0x8a9f, 0x4, 0x9, 0x100, 0xba3, 0x80000001, 0x7, 0x3ff, 0x0, 0xffff0000, 0x5, 0x8, 0x4, 0x7fffffff, 0x5, 0xd, 0x1, 0x6d28, 0x80000001, 0x7ff, 0x2, 0x9, 0x3, 0x0, 0x5, 0x69, 0xe5e, 0xffffffff, 0x9, 0x4c1f, 0x7, 0x8, 0x1, 0x3, 0x6, 0x4, 0x40, 0x4a, 0xc2, 0x5, 0x9, 0xae, 0x3, 0x2, 0x15768e6b, 0x2, 0x0, 0xd04, 0x5a, 0x5, 0x80, 0x3, 0xed, 0x10001, 0x200, 0x7f, 0xc, 0x3d48, 0x9, 0x0, 0x4, 0xffffffff, 0x4, 0x6, 0x60, 0x3, 0x24, 0x3, 0x9, 0x3, 0x9, 0x3, 0x7ff, 0x4, 0x0, 0x2d6, 0x8, 0x8, 0x7, 0x6, 0xfff, 0x6, 0x8fe, 0x6, 0x80000001, 0x9, 0x7f859ad1, 0x9, 0x7, 0xfffffff9, 0x3e, 0x1, 0x6, 0xffff, 0x8001, 0x3ff, 0x7, 0x0, 0x7, 0x5, 0x3, 0x3, 0x2, 0xfdb, 0x81, 0xfffffffa, 0x0, 0xb77, 0xe5ae, 0xd, 0x0, 0x401, 0x4, 0xfffffc49, 0xfffffffd, 0xc0, 0x10, 0x8ebd, 0xb8, 0x10001, 0x4, 0x3, 0x6, 0x3, 0xfff, 0x800, 0xfffffff9, 0x7, 0xa, 0x6, 0x7, 0x4, 0x1, 0x4, 0x8, 0x7fffffff, 0x8, 0xfffffbff, 0x1ae, 0xf, 0xb77, 0x8, 0x7, 0x4a, 0xfffffffc, 0x2, 0x3, 0x9, 0x0, 0xfffffffb, 0x9, 0x9, 0x9076, 0x6, 0x2, 0xa9d, 0xa4, 0xf12, 0x8001, 0x2, 0x5, 0x0, 0x88ff, 0x5, 0x3, 0x9, 0x2, 0x2d0, 0x159, 0x1, 0x9, 0x5f00, 0x0, 0x0, 0x2, 0x5, 0x0, 0x2, 0x5, 0x9, 0xb20, 0x0, 0x1, 0x81, 0x800, 0x7, 0x400, 0x4, 0xd, 0x2, 0x9, 0x80, 0x3, 0x3, 0x0, 0x3e7071e6, 0x10000, 0x6, 0xffffffff, 0x7f, 0x7, 0x7, 0xd4, 0xe32, 0x3, 0xd, 0x101, 0x1, 0x9, 0x7, 0x7, 0x2, 0x8000, 0xfffffffa, 0xa5, 0x2, 0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x0, 0x7, 0x4, 0xff, 0x3, 0x0, 0x6, 0x200, 0x80000001, 0xfffffff9, 0x625, 0x1, 0x607, 0x435, 0x9, 0x81, 0x2, 0x7, 0x7, 0x10001, 0x8, 0x4, 0x9, 0x8, 0x4, 0x6, 0x81, 0x1, 0x6, 0xb, 0x1, 0x5, 0xffffffff, 0xf, 0x7ff, 0x6, 0xffff392f, 0x1, 0x4, 0x401, 0x9, 0x4154e678, 0x200, 0x9, 0x7560, 0x8, 0xac7, 0x6, 0xf, 0xfffffff2, 0x2, 0x1, 0x1, 0x0, 0x2, 0x9, 0x1, 0x6, 0x1e3, 0x9, 0x2, 0x9, 0x4d8, 0x1, 0x5, 0x5, 0x5, 0x5, 0xb, 0xffffff02, 0x5, 0xf, 0xc81, 0x5, 0x809, 0x1, 0x80, 0x6, 0x795, 0x6, 0x5, 0x5, 0xffffffa2, 0x3, 0x0, 0x3, 0x8, 0x3, 0x6, 0x5, 0xdc88, 0x2, 0x7, 0x3, 0x5, 0xa, 0x6c777c06, 0x6c01, 0x8001, 0x1000, 0x0, 0x4, 0x10, 0x17c, 0x2, 0x0, 0x8, 0x9, 0xb2, 0x8, 0x8, 0x5, 0x0, 0x3, 0xffffffff, 0xc, 0x7, 0x5, 0x9, 0x3, 0x1, 0x83, 0xfff, 0x80000000, 0xd52d, 0x6, 0x0, 0xa2b, 0x1, 0xfffffffe, 0x8, 0x9, 0x2, 0x5, 0x0, 0x10001, 0x4, 0xfffffff3, 0x1d, 0x10, 0x8, 0x6, 0x3ff, 0x0, 0x1, 0xb6cd, 0x7, 0x1, 0x10001, 0xa, 0x0, 0x7, 0x1, 0x40, 0x6c, 0xb, 0x6, 0xd, 0x10001, 0x8814, 0x9, 0x3, 0x188c, 0x9, 0x101, 0x3ff, 0x2, 0x5, 0x9, 0x10, 0x8, 0x1000, 0x9, 0x3, 0xfa25, 0x8, 0x8, 0x40, 0x80000001, 0x0, 0x7, 0x15, 0x4, 0x2, 0x2, 0x7ff, 0x2, 0x5, 0xb, 0x8, 0x7, 0x7, 0x10001, 0xff, 0xffff2249, 0x8, 0x9, 0xffffffff, 0x3, 0xda, 0x0, 0x996, 0xf, 0xa01, 0x75309ea9, 0x620c9a68, 0xfffeffff, 0x3, 0x6, 0x9, 0x0, 0x342, 0x905, 0x0, 0xff, 0x1ff, 0x1, 0x4, 0x9, 0x200, 0xfffffffa, 0x6, 0x9, 0x2, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x6, 0x5, 0x0, 0x40000000, 0x5, 0x7ff, 0x8, 0x5, 0x200, 0x0, 0xe, 0x8, 0x92df, 0x82a, 0xe6, 0x8, 0xff, 0x6, 0x9, 0x8, 0xfffffffb, 0xffff0ed2, 0x3, 0x2, 0xc, 0xffff8001, 0x3, 0x81, 0x10000, 0x7, 0x80000000, 0x6, 0x5, 0x0, 0x7, 0x1, 0x3ff, 0x6, 0x0, 0x7, 0x4, 0x8000, 0x6, 0x9, 0x1, 0x0, 0x58, 0x8001, 0x83, 0x8, 0x3, 0x0, 0xd, 0x4, 0x8, 0x24, 0x4, 0x80, 0x4, 0x3fff8000, 0x1, 0x1, 0xffff, 0xe, 0x65fa6783, 0x2be, 0x74b, 0x3, 0x8, 0x2, 0x3ff, 0x1ff, 0xfffffffb, 0x6]})
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000003100), 0x4)
syz_open_dev$evdev(&(0x7f0000003140), 0x200, 0x40000)
unlinkat(r0, &(0x7f0000003180)='./file0\x00', 0x200)
r3 = syz_open_dev$evdev(&(0x7f00000031c0), 0x276c, 0x598b57fe0a87042a)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003440)=[{&(0x7f0000003200)="ce88217025f37d1a3569a57c65e3c109de7d5c54c7af2d6aa14648730fc4dafc27bad910cc3adf14ba6bea220d5bdbfa90ad1dc58c696512dcce32565c229f037e85122b9acc8b814ef1f6eea91fe3af50c67f283bbdf62eb8445f4637f21b44cda1aa8e8887836d10b63383e7717cca3c10bb65c9cae904cfabf3e77ce541d638dc0fefb0447a5fbb2fafe2d51ec17e66e9b536537e2e", 0x97}, {&(0x7f00000032c0)="ee1af2800713497976273ae4cc8eb39dda58295055850cb75c984fe8be996f8c", 0x20}, {&(0x7f0000003300)="15e28e97e97fb503fd2034d5f54f8f1419ccdc228231b3baacdd34c67b4694f6a1390ed20907d4bd34e2d198815da3fba0b69baa7ea8ea806124244fecf34f51d1e7aa6dbcd72d071bbe3f7bb57da50a1dd7397516128eb8743b1663b7cd08e8bc7d47f7aa6bc029aa7670aaf6d566a92d1d9ea5bbd682d89d81f20937850f63b8a3546294df811fcfec045ad8c70c18a7e85b751a7398824776641db9da452aca47100cacf5a8d85caa92acda", 0xad}, {&(0x7f00000033c0)="3e43df94113fb0445d0a9bdb601ed9768de3d84becbf12cd74e0e100155d6974e80e822545479ae8d4592073f35b92675d7c613e838e7c0968502c881795ecd17adf8b59", 0x44}], 0x4)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect$uac1(0x6, 0xb0, &(0x7f0000003480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x9a, 0x0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x8}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x4, 0xb, 0x7], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8000, 0xff01, 0x4, "5df0"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x36d, 0x9e3, 0x4d, "988b"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x5}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xa8, 0x8, {0x7, 0x25, 0x1, 0x80, 0x7d, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x1c, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x10, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x7, 0x9, {0x7}}}}}}}]}}, &(0x7f0000003880)={0xa, &(0x7f0000003540)={0xa, 0x6, 0x300, 0xe, 0x5, 0xc, 0x10, 0x12}, 0x15, &(0x7f0000003580)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x26, 0xe111, 0x6, [0x3f3f]}]}, 0x5, [{0xd2, &(0x7f00000035c0)=@string={0xd2, 0x3, "5d3063fdb855cef27880995027c72fed3ba949e4d7ef7f2d20195c282907a505b9611ff3beee3663edb4cdf526430dc717c5629aca1efca634cbcffa282a67ce757142ae5bf689a4bee02670eff9a96b167bfc8cd4e6e4d8a6e90865ead11b6838e195773f8461746f61a67ad0f328dcd77361ecaf0ccff95c19791e668426e49242e3bdaba20c21cd53bd6cb39c46853126054a6d0b229be796e35315b0a7e33a49a226897b742a5e600e7e3222e8b7fb8c2299307640364b57bcf3ea6e34672e096e66d63e66e3565f73a19568ad6a"}}, {0x4, &(0x7f00000036c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x16, &(0x7f0000003700)=@string={0x16, 0x3, "2d674b940ce80083d55f897af2480129aa674429"}}, {0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x429}}, {0xf9, &(0x7f0000003780)=@string={0xf9, 0x3, "61046f290892b31589001cccb75f54c0349a0e1e5bfe5e22d51964fd77ae4cd8b6ac1c7883edaccfd600db7f85803fc1830324b1e8063b0de7df309197d20ce683effbd7423068b4dfaab0a12ead32d903570698558bcb1ab6feb016869cdc98d45fc0661d6c3eb71104c906029a3a1a5d9078f7e507ef314c01d2adfb7990cb39a02b52f931135cf38a88a436972cd8f9a41eea827adbbe89ed306c37301a32c1478c67c0de789ec0b84938eb8975a35da90f6d00959f91e42f9fe97c0ee0158f60b665987f6098963e600df6049ee2c24d03741468bd246dcb709ff2cb34b52c258f8363cb8a10fef80f32df6c717a423e4e8c304a7f"}}]})
syz_usb_control_io(r4, &(0x7f0000003ac0)={0x2c, &(0x7f0000003900)={0x0, 0x31, 0x8f, {0x8f, 0xa, "81b24fa049107ed87a3cd3986d5fca170a57edb6244c588b3a454ec0b1ce35b4c0e293781722eb4d9d96fdd41f90f0367f4056c2de65af8ea51f05c16db34b10fbee51b95d983edbf4ca15f3854c8820af0e16712bee6b21f6846e03b303d0ed142e14143ff2aa8a4cdf59b744346ea44cae12ebda8ab9477ea9d5200f0f95370662f1a1ba67c72e2655f94720"}}, &(0x7f00000039c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f0000003a00)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000003a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x8, 0x5, "b2d7b0d8", "3345c5c0"}}, &(0x7f0000003a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2c, 0x8, 0x1, 0x3, 0x1, 0x7, 0xe}}}, &(0x7f0000003f40)={0x84, &(0x7f0000003b00)={0x40, 0x6, 0x67, "d7f9794df01767d195301e147c4d7794162ad531e046fb27799f7b2f727ee189c12de3d9df74c3413fbd0ed5e8d0c051b424d1f8c783db93314514c5538c62b23ce29ab9f0551a7ca0ba0bba6f3a4a164346cbfd49682c79f1ba559fe03dd1aeb1b750864aea54"}, &(0x7f0000003b80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003bc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000003c00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000003c40)={0x20, 0x0, 0x4, {0x60, 0x4}}, &(0x7f0000003c80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000003cc0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000003d00)={0x40, 0xb, 0x2, 'cG'}, &(0x7f0000003d40)={0x40, 0xf, 0x2, 0xbba6}, &(0x7f0000003d80)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000003dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000003e00)={0x40, 0x19, 0x2, "b0d5"}, &(0x7f0000003e40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000003e80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000003ec0)={0x40, 0x1e, 0x1, 0xd8}, &(0x7f0000003f00)={0x40, 0x21, 0x1, 0x3}})
r5 = syz_usb_connect$cdc_ncm(0x5, 0x97, &(0x7f0000004000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x2, 0xc0, 0x36, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "f8"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0x7fff, 0x2}, [@acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0x8, 0x24, 0x7, 0xc0, 0x1000, [0x386d]}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x7, 0x9, 0xea}, @obex={0x5, 0x24, 0x15, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0x10, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x60, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xa, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x5, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x7, 0x4}}}}}}}]}}, &(0x7f0000004200)={0xa, &(0x7f00000040c0)={0xa, 0x6, 0x310, 0x3, 0x1, 0x49, 0x0, 0x81}, 0x38, &(0x7f0000004100)={0x5, 0xf, 0x38, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x1, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x7, 0xf, 0x72ec, [0xff00cf, 0x0, 0x3fc0, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x2f, 0xf7, 0xd2}]}, 0x2, [{0x42, &(0x7f0000004140)=@string={0x42, 0x3, "cd1454f807ebe4b1d4aa575b6e34e2b0494577e5391c9ba3f7f5a57dbe4c745b5af6056e2babb73744a48755c406fb8faa11eaee02af514505e04eb6cbe4a68b"}}, {0x4, &(0x7f00000041c0)=@lang_id={0x4, 0x3, 0x1c0a}}]})
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000004380)={0x14, &(0x7f0000004240)={0x20, 0x5, 0xe1, {0xe1, 0x30, "c1317fa060e397a8e32ac6e3612b4d576c058215158a3cabf85e0e4638029e5ff28d020979f3ac79758f7b25a676a425cdbb531a8119660170e0f1d0d749b157e0bc1ee381c4c3c9ce84ff47639d59f9f2048d16bd7f05a81e3e96f7354d53eeb194ddf4042da6db3761d4475d30dce3f79ec773fddc3b9c77d2c0676568a832dd81db1bbbeb2af70687a9f02e999ac63aebb7b279ba732f527ce88c45becb15d6dab29d625b2a74b3f250008c3219224692bb1eeccc5d58690d608fad38154664519fae31e221b68169e22bd96ae166fa44ddfb3705ffdb4d27c1f48bea92"}}, &(0x7f0000004340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004640)={0x44, &(0x7f00000043c0)={0x20, 0x12, 0xb9, "b70141fcc30c2b54ac9f84d807fb978a5e4d6a46f7c28f00cacac9cbaee5b395f00c6a2ea15bb08a220110052fa99c759cc2d7f039ea0cd2fad6a1f1e503a8c91056e8eaa164901c71ced72e51016b25351dd1173075a573de06e2e0f220e3ee4d81a65bbba73b8e07a1bf79d279c9bfe11f0c6a6256b73cbf21bbf10030358089d16024867aa70570e6c926cb2bf0cf8c892f9e175c33391395f18eaf805943697d91a4426a2e04cb3a283088709785cb4a603d6b993f8b25"}, &(0x7f0000004480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000044c0)={0x0, 0x8, 0x1, 0xb6}, &(0x7f0000004500)={0x20, 0x80, 0x1c, {0x6e, 0x0, 0x1, 0x45c, 0x5, 0xc000, 0x8, 0x3, 0x6, 0x7, 0x9, 0x1}}, &(0x7f0000004540)={0x20, 0x85, 0x4}, &(0x7f0000004580)={0x20, 0x83, 0x2}, &(0x7f00000045c0)={0x20, 0x87, 0x2}, &(0x7f0000004600)={0x20, 0x89, 0x2}})
syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000046c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x0, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "40d0d9f5"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x8001, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x13}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xf9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xb, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x55, 0x7}}}}}}}]}}, &(0x7f0000004b00)={0xa, &(0x7f0000004740)={0xa, 0x6, 0x11, 0x6, 0x5, 0x2, 0x10, 0x8e}, 0x19, &(0x7f0000004780)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "136521954b2b86d5d58e0e68c05b0ef6"}]}, 0x8, [{0xab, &(0x7f00000047c0)=@string={0xab, 0x3, "73626898ef0c2d425e5252949442b37c082bb4bba751de9f7fff1feb2ee4f53cff34ce1887f43f1f7dde6eb2e4842cf0c0025ae57ee04c256f77496d4587ca0f01aaacba5e60f9f545c7fb85f161b4ca3e1b94e3268be497bd7940e100e38e91ddf98a11c8e3338be62a2136b4b493dc2a76b7e428c4fcf84965181a5cfe1da710798f07d36552b7ac65698918ae5a0d16088445c9876197a4bb5382f5f9f2636ea5249b1c19f5feb4"}}, {0x4, &(0x7f0000004880)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x86, &(0x7f00000048c0)=@string={0x86, 0x3, "2f9ebb82be16df4dbff489ab7c523f2a5d809b9a8f74f5d772aa23129a1976cc3d7be5195bf117ffe789cfe2c0b2baad4f218318b63c8bac4566a798fe99f1872c7718a6a6d9af2e4526276ba2d01f62a3a367a1c37f9e8a10e2665a3a2ecf54b79dedd3141ab4ce5ca92687ef812d4cca3e0543f89dd6ce42b68403c9270760c8ef2e5f"}}, {0x4, &(0x7f0000004980)=@lang_id={0x4, 0x3, 0x419}}, {0x33, &(0x7f00000049c0)=@string={0x33, 0x3, "e8f23d8ce6efbd248eb9bf6efa5f7752262d82d27fea81f330d7ddbca869b45e932216da0295f226bbf51209587e8f863a"}}, {0x4, &(0x7f0000004a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4f, &(0x7f0000004a40)=@string={0x4f, 0x3, "c9b100bd843dc9235a7d665fce0f5189da2bf59d566d13ac7ec3434b6217548fe81867d244100dbcf0882bd340fbe214406774f675fd1edaa219714f9000ef9ceddffe1b1627c43681f967be3b"}}, {0x4, &(0x7f0000004ac0)=@lang_id={0x4, 0x3, 0x1407}}]})
sendto$inet6(0xffffffffffffffff, &(0x7f0000004b80)="f6790ecacdb82fadc366fb061ed167092785b57319fb12476f0b7ed1945a75367acdde5e2eecf6f96f6437a7a388bb21f0d86d091983962c6bb1d2ca7d8233adf447d7cd34dd9ebecc5522738e1de52670c40c2c0d66b5f075947cb1b405433051aaef1614df3009e23ad11acf1c61af4c19d0c64850b3989bdce37f84c55639e15cc80f41335bc430d23d1588738a59c5d41d7005e500b55902b5", 0x9b, 0x4010, &(0x7f0000004c40)={0xa, 0x4e22, 0xc, @empty, 0x681}, 0x1c)
recvfrom$unix(r0, &(0x7f0000004c80)=""/111, 0x6f, 0x1, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0x11a, &(0x7f0000004d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x3, 0x1, 0x40, 0x20, 0x48, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x263, 0x41}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x6, 0x2, [0x7, 0xa], 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x2, 0x4, [0x8, 0x6, 0x5, 0x3]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0xae919dc7b1684e7b, 0x3, 0xf, 0x8, 0x4, 0x80}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x8, 0x3, "2cb074"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x1, 0x5b, 0x8, 0x1, 0x1}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x3, 0x4, '$'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0xf, 0x5, "", "b1"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x2, 0x3}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xd, 0x1, 0x4, "0ec262a27541e6"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xd80, 0xfff, 0x7f, "05ba783000815e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff8, 0x7, 0x4, "b1eaaaaf66"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xde, 0x2, 0x9d, {0x7, 0x25, 0x1, 0x81, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x60, 0xc, 0x8}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0xd, 0x10, "55730ed0ef3460d9"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x70b, 0x59, 0x7, "d9142a6c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xe, 0xf7, 0x3, {0x7, 0x25, 0x1, 0x1, 0x6, 0x1}}}}}}}]}}, &(0x7f0000004f00)={0xa, &(0x7f0000004e40)={0xa, 0x6, 0x200, 0x2, 0xce, 0x2, 0x40, 0xf}, 0x10, &(0x7f0000004e80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xc8, 0x3, 0xfffb, 0x3}]}, 0x1, [{0x4, &(0x7f0000004ec0)=@lang_id={0x4, 0x3, 0x44d}}]})
syz_usb_ep_write(r5, 0xf, 0x70, &(0x7f0000004f40)="1e70bedd8d851d2667a404c9b5f96673769bbea96ce07600af05d893bfa4b88d97e1f6ed26cca6a171bc7a2c642205dc1857cbd6d8980bb23eed806bca249a82b578bc588debd632d302add9222196095d2eb7f1e710bd1db7abf21d192c151e3e2d560ff03dbabddb12f855a0a8363f")
geteuid()
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004fc0)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000051c0)={<r7=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000053c0)={r6, r7, "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", "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"})
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000063c0)={0x1, 0x2})
read$FUSE(r0, &(0x7f0000006400)={0x2020}, 0x2020)
syz_open_procfs(r2, &(0x7f0000008440)='fd/3\x00')
syz_clone(0x201e5000, &(0x7f0000008480)="fbd0ec9d5bfd8d49a63916c6431a1b469c4da4589d6df85506df6c279eb13ed5a3a71f3fa02dc26d838b928c67d6cfbf22fb2a7bafa6ce79969a5d99761ec3db38296bb34a7d3b16c29c891e4872691374eb02c0dbd195c921abf3c605342d3d3170dc4c6a093e433a1bd7dfce4cb43684700abe419a5399d3d0f91524760db8793ed64c7312c3b07fae2af99e7bf16cd296b0c6be163ff92ead4506d8ac80c925243f49e8584626bdae0526807b549d1d97da8b90d7319f3b2b2578afd869f4a73c1499806098fae9f72b77502db5aa5c3195f2123a47ecbbbc1551ad1659385a1959123fac4a5f5c202713cef0cc0776e59c78", 0xf4, &(0x7f0000008580), &(0x7f00000085c0), &(0x7f0000008600)="112705609cde73dbfe97b99feb65a15fc2bee63594f6f15524c390835919518dadd810c817c314e5480c7ac4ba372ca3b13b028e22e6df5ae64b6723e0fcc5f93e801b8af58a97e5ba59f74cf991df5e3cd8be4181ba0b1d05f5dbae8ba5eb148494a36c34bbf80b0f6d02915363a94c02346cede166990a4251e2fc7be0843c6f0fe75f39936d2396733944640258b3ee0852")
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000008c40)={0x24, &(0x7f0000008a00)={0x20, 0x24, 0xa6, {0xa6, 0xd, "e0d22be6c59718786f81a7890abaeae0b38675bd38f2182406560f9b49c0e5e9e5a72649b227803b3945e4cd47e06bd15cab413b2fd2e0418b8a8bc1c31cd0059fdc9786961e38dfc7c2cdef6c52cde1220ce05e47addf014d86a7671c86b3c983036bf2db4a14597a1f16fb8be8afe55896330d010fd5d416b494196b39a38056573898d9d0c21c3f910cdf527be2098e01142c44b6e34b88e89c5e3bedaad8e54e914d"}}, &(0x7f0000008ac0)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "d2e82885d03ff43057817f61259a07960a2688f02076d25c53870c072ed975e1ff3f35a33b494e6d8145ffc088aa5f29fece1d5e8dba55379528d3085532b4332eaab0905e4ccbda5905be0847a2271a8e13d1fbb8748bda199f1bea1a741c4d7bb3e5894e6def3132f9e296db562b1d559d47e3751d0c87b4508fd9fb468f1153c2a101de84e03c69483a3e84e024639de3ff1786af4776be02470399bcf11c825e53bd594605991efed89fdd92a1a7d233ba81c7b07d04c9b6ac3eb0d7a6cbec44e295ec0491bba62f8e067390c6e0"}}, &(0x7f0000008bc0)={0x0, 0x22, 0xa, {[@main=@item_012={0x1, 0x0, 0x9, "94"}, @main=@item_012={0x2, 0x0, 0xc, "0989"}, @local=@item_4={0x3, 0x2, 0x2, "5ab840f6"}]}}, &(0x7f0000008c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0xf9, 0x1, {0x22, 0xac4}}}}, &(0x7f0000008e00)={0x2c, &(0x7f0000008c80)={0x40, 0x30, 0x3, "2953bb"}, &(0x7f0000008cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000008d00)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000008d40)={0x20, 0x1, 0x75, "2fe70870b977d983d941bc9ed85b4d2ed5b0667f8113b10947bfc951f849243470a1525ae58cfe5b3dc623bb3b56626bd1ad7debef44748f68068b4f582f182a67c7b0e36fe4ea459852e0cd16f20370c909e51ac4047bac0e49d2a9bb7790432a7b30ea8896d724331040f2112fe453cd17fffbd2"}, &(0x7f0000008dc0)={0x20, 0x3, 0x1, 0x6}})

1m34.589321768s ago: executing program 2 (id=165):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x24000048, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffd, @remote, 0x9}, 0x1c)
syz_io_uring_setup(0x7fbc, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x3)
ioctl$TCSETSW2(r4, 0x5425, 0x0)
preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f2, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
signalfd4(r3, &(0x7f0000000080)={[0x100000001]}, 0x8, 0x80800)
sendfile(r0, r0, 0x0, 0x7ffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(r6, r6)
setuid(r6)

1m31.78637018s ago: executing program 3 (id=166):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f0000000140)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async)

1m28.720871737s ago: executing program 1 (id=168):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x2010, 0xffffffffffffffff, 0x7b006000)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

1m24.012185558s ago: executing program 2 (id=169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xf97ad6f95ad21833)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r3 = syz_clone(0x10600, &(0x7f0000000100)="d70d30994803035211aaa356104063045cadff937096421d85bfbd67e89a33231f660e3ee9e3fc8bc37f63867a6c1cbb7644df74d453ef7065e102caaf526b4f187cce73e8ff731849fe23f22bec3b822da00ad148e4309a64acfe17dd34b47c958cb12d68c526d18685af4e423d9ac819f066c35ea151046264b6277c", 0x7d, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="5ec2f1b607efe69049828d39659bcbff33dc8ca2fc4900a78f4a8f1a08260adee8830b31ea11ba77c0b08330c96892bfb90f0b865cf5b4a48b3ae5bc48e7fd84282ee53018af9eae0ad11a146e844884939f1dd9d6dfe974a13e4e655b7ff74704896e11a729c7303a3483f3b2e29715cca73ce2382054eb917f49eac57dfa4f8e657e")
r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/icmp6\x00')
r5 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x5)
fchdir(r6)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x7b659c362602db41}, 0xc0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000540))
exit(0x1ff)
write$UHID_INPUT(r4, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m23.290984409s ago: executing program 3 (id=171):
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118)
pipe2(&(0x7f0000001040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00')
pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x12, r7})
bind$packet(r4, &(0x7f0000000080)={0x11, 0x1b, r7, 0x1, 0x5, 0x6, @remote}, 0x14)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84000)
tee(r0, r8, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r12, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)

1m21.632407834s ago: executing program 1 (id=172):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00')
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000)

1m19.520017666s ago: executing program 1 (id=174):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
execve(0x0, 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xd25)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r3}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"])
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f)
setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x80004, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000017c0)={0x114, 0x0, &(0x7f0000000680)=[@free_buffer={0x40086303, r1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1014, 0x3}, @flat=@handle={0x73682a85, 0x10b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/94, 0x5e, 0x2, 0x1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/122, 0x7a, 0x1, 0x2f}, @flat=@weak_handle={0x77682a85, 0x110b}, @fda={0x66646185, 0x8, 0x2, 0x1e}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x40}, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x1100, 0x3}, @fda={0x66646185, 0x2, 0x0, 0x3b}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}}], 0x1000, 0x0, &(0x7f00000007c0)="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"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
r10 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r11 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x124, 0x0, &(0x7f0000001a00)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x2, 0x9}, @fda={0x66646185, 0x5, 0x2, 0x2b}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}, 0x400}, @clear_death={0x400c630f, 0x2}, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x1}, @free_buffer={0x40086303, r3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffff73, 0x18, &(0x7f0000001880)={@fd={0x66642a85, 0x0, r11}, @fd, @ptr={0x70742a85, 0xcf, &(0x7f0000001800)=""/98, 0x62, 0x1, 0x4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @exit_looper, @exit_looper, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001940)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/47, 0x2f, 0x1, 0x2d}, @flat=@binder={0x73622a85, 0x9cac1a4d30f0a577, 0x2}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000019c0)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f0000001b40)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36"})
r12 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x3}, 0x10)

1m14.856858127s ago: executing program 3 (id=175):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=""/81, &(0x7f0000000140)=""/9, 0x2})

1m8.478142823s ago: executing program 32 (id=169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xf97ad6f95ad21833)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r3 = syz_clone(0x10600, &(0x7f0000000100)="d70d30994803035211aaa356104063045cadff937096421d85bfbd67e89a33231f660e3ee9e3fc8bc37f63867a6c1cbb7644df74d453ef7065e102caaf526b4f187cce73e8ff731849fe23f22bec3b822da00ad148e4309a64acfe17dd34b47c958cb12d68c526d18685af4e423d9ac819f066c35ea151046264b6277c", 0x7d, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="5ec2f1b607efe69049828d39659bcbff33dc8ca2fc4900a78f4a8f1a08260adee8830b31ea11ba77c0b08330c96892bfb90f0b865cf5b4a48b3ae5bc48e7fd84282ee53018af9eae0ad11a146e844884939f1dd9d6dfe974a13e4e655b7ff74704896e11a729c7303a3483f3b2e29715cca73ce2382054eb917f49eac57dfa4f8e657e")
r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/icmp6\x00')
r5 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x5)
fchdir(r6)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x7b659c362602db41}, 0xc0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000540))
exit(0x1ff)
write$UHID_INPUT(r4, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m5.38814637s ago: executing program 3 (id=178):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

1m3.548033318s ago: executing program 33 (id=174):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
execve(0x0, 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xd25)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r3}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"])
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f)
setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x80004, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000017c0)={0x114, 0x0, &(0x7f0000000680)=[@free_buffer={0x40086303, r1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1014, 0x3}, @flat=@handle={0x73682a85, 0x10b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/94, 0x5e, 0x2, 0x1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r3}, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/122, 0x7a, 0x1, 0x2f}, @flat=@weak_handle={0x77682a85, 0x110b}, @fda={0x66646185, 0x8, 0x2, 0x1e}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x40}, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x1100, 0x3}, @fda={0x66646185, 0x2, 0x0, 0x3b}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}}], 0x1000, 0x0, &(0x7f00000007c0)="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"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
r10 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r11 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x124, 0x0, &(0x7f0000001a00)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x2, 0x9}, @fda={0x66646185, 0x5, 0x2, 0x2b}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}, 0x400}, @clear_death={0x400c630f, 0x2}, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x1}, @free_buffer={0x40086303, r3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffff73, 0x18, &(0x7f0000001880)={@fd={0x66642a85, 0x0, r11}, @fd, @ptr={0x70742a85, 0xcf, &(0x7f0000001800)=""/98, 0x62, 0x1, 0x4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @exit_looper, @exit_looper, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001940)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/47, 0x2f, 0x1, 0x2d}, @flat=@binder={0x73622a85, 0x9cac1a4d30f0a577, 0x2}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000019c0)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f0000001b40)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36"})
r12 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x3}, 0x10)

54.336432168s ago: executing program 0 (id=180):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0)
read(r1, &(0x7f0000000080)=""/122, 0x7a)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000021c0)=ANY=[@ANYBLOB="380000000104010200000000400000000500000906000640000400000a000200000000ff0000000005000100010000000600064000010000838264288ee7ee4ae1af3eab7201c400801928974f2cd9f578f17ee51f522b80c5fa41dbaa7e376b7c4c4f6efea4f43accdd83ba32027d562361af5d8c48a90a13a2093798ef908577c3af39befe84eaf44a27dea447a4d412bf4315baaaba38c9f767522ad2241fca0c5998afe302e911d4baa169a4dc81d1560255a8306b6b7032d27491f4f012b5a261e662cbd1271e5c9ed1fa732f164ec00b4c064b"], 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x10)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

46.503176976s ago: executing program 34 (id=178):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

39.742220028s ago: executing program 0 (id=182):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x51, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a3695"})
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x1, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0xfffffffffffffe7a, 0x0, &(0x7f0000000440)="c410687af45c2c88d140855b60ff0ae19139acbe886e09540e73a8da59f0f884601ebbc9ecc0d68b87cf9a14b0974281981642e61e4b7c75d3b4f86c68e0d90761343f3e7960c926da42f34cdeec3c3b"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x51, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a3695"}) (async)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r1) (async)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x1, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0xfffffffffffffe7a, 0x0, &(0x7f0000000440)="c410687af45c2c88d140855b60ff0ae19139acbe886e09540e73a8da59f0f884601ebbc9ecc0d68b87cf9a14b0974281981642e61e4b7c75d3b4f86c68e0d90761343f3e7960c926da42f34cdeec3c3b"}) (async)

36.385716609s ago: executing program 0 (id=183):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406d040ec70000000000010902240001000000080904a804010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "35235097"}]}}, 0x0}, 0x0)
chdir(0x0)
r2 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0)
fstat(r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x52602, 0x1a8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000700)={0x79, 0x0, 0x9f1})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000064d564b"])
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x801b, 0x0)
ptrace$getregset(0x4205, 0x0, 0x1, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t')

26.545530878s ago: executing program 0 (id=184):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {{@in=@empty, @in=@loopback, 0x4e24, 0x8, 0x4e24, 0x6, 0xa, 0xa0, 0x0, 0x1}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x1000, 0x200, 0x2, 0x20}, {}, {0x0, 0x0, 0x9, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'pim6reg0\x00', {0x1}, 0x3f8})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$key(0xf, 0x3, 0x2)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x2)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
timer_create(0x3, 0x0, &(0x7f00000005c0)=<r6=>0x0)
timer_delete(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x2, 0x2, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
fsync(0xffffffffffffffff)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x67, 0x65, 0x65]}}]})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020)

21.945824118s ago: executing program 0 (id=185):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"})
r1 = syz_usb_connect(0x0, 0xc6a, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0xa9, 0x5, 0x92, 0x50c3ab95efd839d1, 0x5c6, 0x23, 0x97f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc58, 0x4, 0x1, 0xc, 0x0, 0x8, [{{0x9, 0x4, 0x72, 0x9, 0x5, 0xe8, 0xd9, 0x81, 0x80, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "7db3e92c"}, {0x5, 0x24, 0x0, 0xffa4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x3, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x5, 0x28, 0x65, 0x7f, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x7, 0x8, 0x7}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xe}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "f22d2c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x52, 0x95}, [@country_functional={0xc, 0x24, 0x7, 0x4, 0x3, [0x1000, 0x6, 0x8]}]}], [{{0x9, 0x5, 0x81, 0x8, 0x200, 0x4, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x4ebb}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x6, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x4, 0x1, 0x1, [@generic={0x75, 0x5, "94d056ebc5ed6a50a03b68a032823a71b9df914369492a06b6d5f2755cdb5efee0c2f430b42490dff357eca4453240508030c0497897e88ea5e1863e3cf77b4e77114ada3d09dd91fdf1667fe286ca020d60a10bd53a341c4b08282318d3a993cd3d93f62cb1da8fe0b32b20eefff1f4530897"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x6, 0x4, 0xe0, [@generic={0xfb, 0x24, "c3b02003141ebb624ce8a4d476b691d039f53c6d033269943f3d747243ef4cd6cdb873bbd1e2f2eaa39822b701183458fa131e0e071b1ba575778675b7c08b80076e27b3c6bdd703f56cf17028d92a33329b25c50131d2362114720121a8d28ef26cbfdd9fa659d2c93b668cf2d5f56b262270a4fc18008997fbeb046978d79695f44cbd40c5d067c1f4c3c51d894307a68c74a8c18e8189935d37fd6b9cdbe20960789f4cc8d5c556253e23e72f3ae28e0a492d82b13e21f09b46bce29d160104833da2428da4555f4ad0fda696fef38aa56233d176a9846217eb439c9b83a508f098d56d5364ca5251ed716c94927eb34be991dcba05b2d2"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x98, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x6}]}}]}}, {{0x9, 0x4, 0x76, 0x1, 0xb, 0x7, 0xb1, 0x5d, 0x3d, [@generic={0x8b, 0x10, "e0d55fd4268f81f818177c88243cc1e4b5e2e86cdc895ed5ee4ee52404c05afdf6c357f39c7a68869ba30c47eb4376d03201dea4bcff05dd9e2df60f0855326c816656ac074365b8857777ec6fdc004975710f19ae08eefae56edcd53c6f69635a32b58d64750975e0bea1f890cf7c13be56a5f1376064f9994904c0c44190eca0d3f247860baa4ced"}], [{{0x9, 0x5, 0x9, 0x13, 0x20, 0x4, 0x8, 0x6, [@generic={0x81, 0x8, "f17e39e55afdc4ae57abd3e208981deea3c535a34528051d20f3bd9b4998c68257738434821c6c4660b2242efd321d2c96ef674bbb576f7f86b1a52b9b8726de89647b5a5c1209fa67dece1c117a22dc88dcc79c8c395a7c4701ca8c405340f0a52744219208f3c3923500cb66e06ab55c695c7f02bd2668bad699005cbe17"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x2, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x9, 0xa, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x90842d843977e6e7, 0x7f, 0x4}, @generic={0x5c, 0x3, "423d25dc4d91b809e67e55b33d440f85d77593e1a6dd73fa09393682954437b142a8680dd7c779f9180ad9274f10b2f60177889d8a6804b6f6a4e0ae2e1be12e6b97d7169fafa1830aa8dfe53449285f641c09f070d011b30412"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x8, 0xb8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x2, 0xf7, 0x4d, [@generic={0x92, 0x7, "0adb611b4eba35d7bb8ae9acd168123c0ec2f43b97fff06fe3a2f80cb980101a16a44cffa9d6c42c4f0b8207d4865acf75c9972ddcf7cce5d621b1a909f95a6f1a652baeab66f3d90001a5a6a8fab4197eac8e40a8c36d974bf35f281d02b07d67450ff5643419eb419a9a7b2f8d3b7206eaf9f9789b6c409f1583743dc7ef6325e7ad1a89c739a784dd287fccd1aaab"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x1, 0x0, 0x5, [@generic={0x76, 0xe, "7766ef1af2f67561cb1620d92561ee9a935defbe53418be3281db9a5623ea74400d41de774b9eb9ed0686b714745e20c8ff92ed404045712063d6d6576711bc2cf82e571bae312286168056c77dd849a687bcccb30f08ddd7f8f7f3ff8d052a14336dd625085c2180ecad951f8ad34cf16b5b8cd"}, @generic={0xc5, 0x8, "23dc901cd3cab5ba7f70c5880d23bd3d6ec76fed853ae43ed3d4aa079524a2e295dffa0f51fe03fb1645f363d7e4bed4c004b6b3bc4dcad9230a9526d1113b2cf02d115396bbe5dbebc725686cd0f4dfeffab0d7c7458a6fb06a498c8f9a0557c072798e891da2fe4819315e30a0b3581013e8d163a478fe1d1f673005878c2235979be7daa1ef120ebe46fd210dedf69b29b2edd14e2e69130b014e891b27d3cf27d976381ec6f47449e56b9157389bd4cdd67e5a9f84be6a7f62cb8405b293d1ac61"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x7af, 0x6, 0x6, 0x0, [@generic={0x102, 0x8, "bc6401299e9aff8120c1b68a0798f6e1d3db169295b7382954a382bed2f3a10c4a07aff0361f67ac1ee1bfe98c07af9fd918ab4b41ab97abe9d6706c4dbd30ee007e4c83b526e7fd1278a8f7e4c9ca93ed381eddcbbb3c0a43b59f9664bc9f171630eb74a57b3abf6f796ef421813b95406a3d39a3feb2308ddeb938c809f2221a3303d749ad0d2992945fa34c3b6bb56a5a8f2da48fd3b2ffe0f6cf05242cfaffe0979c3c7b320d309de6cbc6c9d554aa17d1fe58efc3334cc02452a78d2d1ccdc393112409457f542c65a0b4bda745d1ac1398b573b924a45cfe9c147e4b4ea88ea03ab6d42134763a5f48fae90f4038c945b822348f6352077acb8e767bff"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x80, 0xfd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}, @generic={0x95, 0x4, "b55cadfdeb47875c8bb5bdf73d7c58a72a8a3a7bea4c2c0c4ecf9e43f3070f4825d5add41bcc282d61c5b1c88669b145cc45ee98cc27167f5550e42c65a02454a8b21342a9acf5b45333f556e69dd68fe01b39ddac3fdeddbd33df4fe685f217c1ac09b1c3dc4ee1297d704601db3b6ccb5995bce405959cdcaaf1eb51636cb18b7c2c75e2e4f8e2703a77341ee03ab1d75519"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x7, 0x43}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x10, 0x5, 0x4, [@generic={0x13, 0x7, "b2456fa7059ba7bdec4d45041d80f963d4"}, @generic={0xc4, 0xf, "08235780c629c879ca24d9d3b4cd31230bee35c4288144ff580838e6c0d42ff4dd83b334f9bb929c627f43da847d18ec70aad55249f2f0776c50148ac819bf618b6cdf415ae3952ffe4821d08bb3e4c783b04b2b7b64ce4f64d275cde89307c33b8546c6f348033439fa193787959f009aa52b00984a0901824ee05706b7ebe55c53ec04f2760c74891e7355d50849ee1a7b0ea6d04312c0927dd6adf3775dafc2b05b1d1a0a8748690504d7308d9c0a35024e0212db1d3c72e366d90864602f7209"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x4, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xd8}]}}]}}, {{0x9, 0x4, 0x16, 0x7, 0x6, 0x24, 0xf3, 0xef, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'q6'}, {0x5, 0x24, 0x0, 0xff59}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x7, 0xa}, {0x6, 0x24, 0x1a, 0x8, 0x39}, [@mbim={0xc, 0x24, 0x1b, 0x259, 0x6, 0x2, 0xb, 0x0, 0x8}]}, @generic={0x80, 0x23, "4b7abcafd4ec69e60b78bcce6de67fc65e261f62c71719fb7ce4c5afa926d6f7926a496198db11a720f9495caa4b19fe8f8eb3b589cdf7394186202998b2a93f82b7a53a3afda4d9d88e600b6384d5d15d6cec72a29fd1dff9f4fd2c80a8246fe3057e474527557a4dc68ba643dada381556bd8be77e06c62dbe744c9a8c"}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x53, 0x4, 0x7, [@generic={0x54, 0x22, "91fe7bae3a400dfda0c95d839410080fd910419fc3afe8b6a29538255781fbbe1b1f03147b2a819cb187541fa675405ee08349521f8cf957484ef51d819ee2a4991e4915b493fe42f588f1165be7439c360d"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0xf, 0xa, 0x5, [@generic={0x51, 0x10, "0a5831ec2a5a4adb3e0cd271ec6c446fd53c1bf93a60c0ab2aabec04bb5301038f795bf26cea8942737a38391823b4a554708d6b28762815be6876c0446acd209195455d9d0d58f30ced0c47cbd178"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x307, 0x6, 0x6, 0x7, [@generic={0xab, 0x24, "cbb1037d7464efb67c40110903078efe91c7709dc8291dc0f05f2db802101d6d919c0743c794ca4c44c3766ee6ed3912b34f211a5304b6669a2fd1957d4e711624fc2e158934a07c5c5bbed8c0cbd814bc2338de93af762d0f597952b09019255effe87fef5fbb62dca331a9f7aacc4f45e3ba984bd6536c6057d5685426c0b2df75cf91cfadf06541f8ad421d6984f14b6415fa5ff7feac9885b03194d5fc50525424a101016519f5"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x5, 0x6, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0xfb, 0x9}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x5, 0x3b, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x7, 0x4e, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xb}]}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x5, 0xb8, 0x46, 0xd9, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x1}]}], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x7ef, 0x9, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x28, 0x1}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0xf3, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb}, @generic={0xc9, 0x21, "80faac4723b3fb4123bddabc2f187e8045ab262728b874e6f7408fc98e54af14496dad5f2bef44b2ee9f971d9e15c7d26f51b75b9178c4b66ebcfb3bc6ba3287143a610865bd993d61ed39252053c9d46e7c65a3810f50b4d3fa00e273148c1e24bc3d3ff0c4e26d97e092568c2b5ad734e663d7359ab1bde56415586a128361fc00d309a53fe61dd947f3fde847a2d017f87e54b5a724be6948da4c485226698aeb05bd52976446d93b296dee4e61a3623f69876c4e75fa9cbbf8990e6e93c65830c5dbb23290"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x40, 0xe7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4a85}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xf, 0x5, 0x1, [@generic={0x73, 0xf, "5664244e121774f3e755bf3c13368589d8f306934081eda798d54c968f4d469dd985080ce75fdb1f44946f4945be31b44e46ce2f8d8defe3d1780e3e71fce8ec4db728baed4a094b3315df28d9f5ffa2cb2b6d10687568b136eda0ccae6cbace468aeaaffaa296c1d8c211c19d7d6893ff"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x5, 0xd, 0xff, 0x40, 0x9}, 0x6b, &(0x7f0000000200)={0x5, 0xf, 0x6b, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0xf000, 0x1, [0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x61, "3153198cfc102b9181e062128ecec5dd"}, @ss_container_id={0x14, 0x10, 0x4, 0xd1, "7428b040d74ffba3910c7451c49ae971"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x22, 0x5, 0x728d, 0xf, 0x5, [0xff0000, 0xff00, 0x3f, 0xff1e, 0xcf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x42, 0xff, 0x3, 0x1ff, 0x2}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0xf0, &(0x7f0000000300)=@string={0xf0, 0x3, "f8fc95556fdc32d0ac43c11323b7191bff436169db5127402de002572c09875658044be9a51c881dfbd934bad3f4bac6663b368314ce9700530ec4dbee5b52922c37e6bb2a2856401f3d72a4133260c88391e888d738dedc4891409ca1e87412d5d9e7ba09febf6f42ae8b46775c7bb0094f740f4ee643070f6c04b759f446d7c5971606df2f9e29792245e16fbb3df8d061d80f6307a3e3a0387dfd48fec7452d0efa10897e19bdc10c557bf5821c3a35be1e50b22e01d81ddd3bd4d03b922e048714920665dd0610484b628472b6f66cc013d5e7afebc4bb2ccd7fc0b8d27e8aa3a04e8c3ec81f4041bac585d6"}}, {0xa9, &(0x7f0000000400)=@string={0xa9, 0x3, "7012ccb260e8ad41b9bce491ccaba0b567e5ffc96174efd5338276208f6d040edcbd2f64dbd49bd7b1d17b981fcb52ede32e18480cf686b7cab251cf9f492e1b150c8623851c1d2683394cbccd3c385956f32651d6495eca60e801bf7f458242c0a514b3e19c19ebbe59a637b34e7545497c46ce8b72974d97e0990d3abb0a271abc69ead12bb5ae20dc9efe592e7a3eee480a9441b7bd7bc798b0bb5aa20c4e3157f9dbc4481f"}}]})
syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, &(0x7f0000000500)={0x40, 0x8, 0x69, {0x69, 0xc, "4fec89574d16f10bf3426e02e3a577991428af8783b93924e0eaab58615df12e00549b35cb7d836b6d4e548f8081af1783d83178c9cf541ea34b09c338529346e5e64d4c3061cb13cd9d85a71a72e6b6a231bd14eb240e001029ba999c4fbee27073e903a639d9"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000005c0)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x8, "47149c88"}, @local=@item_012={0x2, 0x2, 0x4, "d4b0"}, @local=@item_4={0x3, 0x2, 0x8, "2ff4e2f7"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x52e}}}}, &(0x7f0000001680)={0x2c, &(0x7f00000014c0)={0x0, 0x13, 0x99, "90784217982f8147838de0daffe110bf52b291d6af24ce6d0eb85399a4c4e9216493bf5510c0d8f208cc05ea68f4d059c4bf6ab1c20217a29495c68257b6f3034e86d9f30a5c804f1ce385913eefd7738c585cde6964a26f20b248b20c9f43850525c570125615b07b35f1f9485b01f2491d782496d19f7d2bf056af10bb513706c6ecb13babac2295e7719971f03ced10543a0a872cd6f801"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001580)={0x20, 0x1, 0xb6, "e5d08ea9db2310f403f1d8f0dc649e5310d92e06f56e6d8a501174fafe96ac9fb7e6938ee865cb017b6e11bbd473c9050e2e03416a0717a088d01590c059771378baef096205db172aaed3dcb90a6ebb9ca42ec1bf666218e3bf2bbffbc5e7ebce22e3c887a9ca56fe9195861ed5c7945d1c1f6591ac7b7a2f8aa49f7505c76dda63956f1d4bf693896a93aed46297e45d0e26f38823b5b09e95fd19c0a4e854edecf35f266b58757348d1c99a981f0f61ec35cf43ea"}, &(0x7f0000001640)={0x20, 0x3, 0x1, 0x8}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000140), 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0x3, 0x0, 0x34}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x1, 0xf}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0})

16.474027251s ago: executing program 0 (id=186):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5414, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010002, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x6]}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, 0x0, &(0x7f0000000200)) (async)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x200044, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xc000}})
read$FUSE(r8, 0x0, 0x2000)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 35 (id=186):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5414, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010002, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x6]}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, 0x0, &(0x7f0000000200)) (async)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x200044, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xc000}})
read$FUSE(r8, 0x0, 0x2000)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts.
[   27.946994][   T36] audit: type=1400 audit(1750964417.840:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.948610][  T281] cgroup: Unknown subsys name 'net'
[   27.971935][   T36] audit: type=1400 audit(1750964417.840:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.002775][   T36] audit: type=1400 audit(1750964417.870:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.003156][  T281] cgroup: Unknown subsys name 'devices'
[   28.115490][  T281] cgroup: Unknown subsys name 'hugetlb'
[   28.121140][  T281] cgroup: Unknown subsys name 'rlimit'
[   28.296260][   T36] audit: type=1400 audit(1750964418.190:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.322247][   T36] audit: type=1400 audit(1750964418.190:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.336540][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.349847][   T36] audit: type=1400 audit(1750964418.190:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.381268][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.382609][   T36] audit: type=1400 audit(1750964418.260:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.418419][   T36] audit: type=1400 audit(1750964418.260:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.444484][   T36] audit: type=1400 audit(1750964418.270:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.470019][   T36] audit: type=1400 audit(1750964418.270:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.735704][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.742794][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.749980][  T291] bridge_slave_0: entered allmulticast mode
[   29.757633][  T291] bridge_slave_0: entered promiscuous mode
[   29.773307][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.780477][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.787751][  T291] bridge_slave_1: entered allmulticast mode
[   29.794307][  T291] bridge_slave_1: entered promiscuous mode
[   29.855228][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.862332][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.869670][  T288] bridge_slave_0: entered allmulticast mode
[   29.876086][  T288] bridge_slave_0: entered promiscuous mode
[   29.891313][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.899981][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.907229][  T288] bridge_slave_1: entered allmulticast mode
[   29.913709][  T288] bridge_slave_1: entered promiscuous mode
[   29.919816][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.926968][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.934201][  T290] bridge_slave_0: entered allmulticast mode
[   29.940585][  T290] bridge_slave_0: entered promiscuous mode
[   29.956733][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.964008][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.971381][  T290] bridge_slave_1: entered allmulticast mode
[   29.979479][  T290] bridge_slave_1: entered promiscuous mode
[   29.989936][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.997268][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.005908][  T289] bridge_slave_0: entered allmulticast mode
[   30.012383][  T289] bridge_slave_0: entered promiscuous mode
[   30.027187][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.034338][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.042452][  T289] bridge_slave_1: entered allmulticast mode
[   30.050027][  T289] bridge_slave_1: entered promiscuous mode
[   30.221186][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.228994][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.236445][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.246315][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.256482][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.263778][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.271257][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.279014][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.294021][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.301295][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.309088][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.316164][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.325312][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.332952][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.340610][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.347802][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.414552][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.422491][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.430672][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.439576][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.447100][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.454919][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.462318][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.469795][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.485004][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.492428][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.500700][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.508211][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.516734][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.523814][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.533221][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.540312][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.555555][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.562727][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.573441][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.580515][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.589027][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.596585][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.615619][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.623062][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.681367][  T289] veth0_vlan: entered promiscuous mode
[   30.695716][  T288] veth0_vlan: entered promiscuous mode
[   30.708583][  T291] veth0_vlan: entered promiscuous mode
[   30.732852][  T288] veth1_macvtap: entered promiscuous mode
[   30.739713][  T290] veth0_vlan: entered promiscuous mode
[   30.755149][  T289] veth1_macvtap: entered promiscuous mode
[   30.763534][  T291] veth1_macvtap: entered promiscuous mode
[   30.780848][  T290] veth1_macvtap: entered promiscuous mode
[   30.831513][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.941083][  T321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.958614][  T321] __vm_enough_memory: pid: 321, comm: syz.3.7, bytes: 70373039144960 not enough memory for the allocation
[   31.017422][  T332] __vm_enough_memory: pid: 332, comm: syz.3.9, bytes: 70373039144960 not enough memory for the allocation
[   31.036846][  T335] binder: Bad value for 'stats'
[   31.042255][  T328] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   31.067218][  T332] /dev/rnullb0: Can't open blockdev
[   31.200450][  T335] syzkaller0: entered promiscuous mode
[   31.208773][  T335] syzkaller0: entered allmulticast mode
[   31.428256][  T353] rust_binder: Write failure EFAULT in pid:12
[   31.512975][  T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   31.693072][  T307] usb 4-1: Using ep0 maxpacket: 8
[   31.693852][   T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   31.699546][  T307] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.719927][  T307] usb 4-1: config 0 interface 0 has no altsetting 0
[   31.738287][  T307] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[   31.748607][  T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.761069][  T307] usb 4-1: config 0 descriptor??
[   31.812961][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   31.855492][   T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   31.866627][   T46] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   31.883644][   T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   31.894305][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.912490][   T46] usb 1-1: config 0 descriptor??
[   31.931860][  T370] Zero length message leads to an empty skb
[   31.952983][   T10] usb 3-1: device descriptor read/64, error -71
[   32.174295][  T307] hid-generic 0003:048D:CE50.0001: unknown main item tag 0x6
[   32.194567][  T307] hid-generic 0003:048D:CE50.0001: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input0
[   32.206276][   T10] usb 3-1: device descriptor read/64, error -71
[   32.220521][  T307] usb 4-1: USB disconnect, device number 2
[   32.230882][  T384] can0: slcan on ptm0.
[   32.260559][  T382] fido_id[382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   32.324725][  T355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.334203][  T384] can0 (unregistered): slcan off ptm0.
[   32.345282][  T355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.401164][   T46] usb 1-1: string descriptor 0 read error: -71
[   32.416484][   T46] usb 1-1: USB disconnect, device number 2
[   32.442995][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   32.456486][  T405] process 'syz.3.25' launched '/dev/fd/8' with NULL argv: empty string added
[   32.483188][  T405] rust_binder: Write failure EFAULT in pid:20
[   32.593045][   T10] usb 3-1: device descriptor read/64, error -71
[   32.763018][   T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   32.853172][   T10] usb 3-1: device descriptor read/64, error -71
[   32.934476][   T46] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[   32.943642][   T46] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[   32.952043][   T46] usb 1-1: Product: syz
[   32.963158][   T46] usb 1-1: Manufacturer: syz
[   32.963668][   T10] usb usb3-port1: attempt power cycle
[   32.967902][   T46] usb 1-1: SerialNumber: syz
[   32.983766][   T46] usb 1-1: config 0 descriptor??
[   33.255752][   T36] kauditd_printk_skb: 99 callbacks suppressed
[   33.255786][   T36] audit: type=1400 audit(1750964423.150:173): avc:  denied  { mounton } for  pid=429 comm="syz.3.30" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   33.312975][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   33.339038][   T10] usb 3-1: device descriptor read/8, error -71
[   33.392711][   T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   33.403116][   T36] audit: type=1400 audit(1750964423.290:174): avc:  denied  { name_bind } for  pid=432 comm="syz.3.31" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   33.424070][   T46] asix 1-1:0.0: probe with driver asix failed with error -61
[   33.434650][   T36] audit: type=1400 audit(1750964423.290:175): avc:  denied  { node_bind } for  pid=432 comm="syz.3.31" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   33.474628][   T10] usb 3-1: device descriptor read/8, error -71
[   33.487676][   T36] audit: type=1400 audit(1750964423.380:176): avc:  denied  { read write } for  pid=432 comm="syz.3.31" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.500971][   T46] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   33.513258][   T36] audit: type=1400 audit(1750964423.380:177): avc:  denied  { open } for  pid=432 comm="syz.3.31" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.519580][   T46] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   33.561540][  T435] fido_id[435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   33.599298][   T36] audit: type=1400 audit(1750964423.490:178): avc:  denied  { mount } for  pid=403 comm="syz.0.27" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   33.621977][   T36] audit: type=1400 audit(1750964423.490:179): avc:  denied  { unlink } for  pid=403 comm="syz.0.27" name="#1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   33.644428][   T36] audit: type=1400 audit(1750964423.490:180): avc:  denied  { mount } for  pid=403 comm="syz.0.27" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.668447][   T36] audit: type=1400 audit(1750964423.560:181): avc:  denied  { map } for  pid=403 comm="syz.0.27" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   33.696463][   T36] audit: type=1400 audit(1750964423.560:182): avc:  denied  { read write } for  pid=441 comm="syz.3.33" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   33.727509][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   33.754060][   T10] usb 3-1: device descriptor read/8, error -71
[   33.761041][  T448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'.
[   33.778044][    T9] usb 1-1: USB disconnect, device number 3
[   33.884177][   T10] usb 3-1: device descriptor read/8, error -71
[   33.993146][   T10] usb usb3-port1: unable to enumerate USB device
[   34.081377][  T459] binder: Unknown parameter 'fscontôxt'
[   34.306140][  T461] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   34.306174][  T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   34.314977][  T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:24
[   34.510924][  T479] fuseblk: Bad value for 'user_id'
[   34.525583][  T479] fuseblk: Bad value for 'user_id'
[   34.546321][  T482] rust_binder: Error in use_page_slow: ESRCH
[   34.546340][  T482] rust_binder: use_range failure ESRCH
[   34.552603][  T482] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   34.558303][  T482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   34.566281][  T482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:38
[   34.597446][  T489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24
[   34.612965][   T46] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   34.794043][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   34.805174][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.816841][   T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   34.829838][   T46] usb 4-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00
[   34.839102][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.848045][   T46] usb 4-1: config 0 descriptor??
[   34.983064][   T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   35.133995][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.144388][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   35.154902][   T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   35.164139][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   35.172193][   T31] usb 3-1: SerialNumber: syz
[   35.255895][  T466] fuse: Unknown parameter 'f�'
[   35.258731][  T468] fuse: Unknown parameter 'f�'
[   35.267121][  T466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.281016][   T46] ntrig 0003:1B96:0001.0003: unknown main item tag 0xd
[   35.288188][   T46] ntrig 0003:1B96:0001.0003: unknown main item tag 0xd
[   35.295963][   T46] ntrig 0003:1B96:0001.0003: hidraw0: USB HID v0.06 Device [HID 1b96:0001] on usb-dummy_hcd.3-1/input0
[   35.395635][  T513] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   35.404886][  T513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   35.430110][  T515] rust_binder: Error while translating object.
[   35.430157][  T515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   35.437594][  T515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46
[   35.487162][  T520] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   35.543261][   T10] usb 4-1: USB disconnect, device number 3
[   35.715971][  T537] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   35.716555][  T535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   35.725024][  T537] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   35.725192][  T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:56
[   35.743694][  T535] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   35.753552][  T535] rust_binder: Read failure Err(EFAULT) in pid:56
[   35.777763][  T305] Bluetooth: hci1: Frame reassembly failed (-84)
[   37.563595][  T556] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   37.610987][  T561] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   37.618287][  T561] rust_binder: Write failure EINVAL in pid:75
[   37.654069][   T31] usb 3-1: 0:2 : does not exist
[   37.665648][   T31] usb 3-1: unit 5 not found!
[   37.679897][   T31] usb 3-1: USB disconnect, device number 6
[   37.684779][  T565] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   37.696843][  T565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   37.716087][  T543] udevd[543]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.792958][   T53] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   37.906927][  T577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46
[   37.926528][  T582] binder: Unknown parameter 'nl80211'
[   37.959381][  T589] overlayfs: missing 'lowerdir'
[   38.103756][  T595] exFAT-fs (rnullb0): invalid boot record signature
[   38.110831][  T595] exFAT-fs (rnullb0): failed to read boot sector
[   38.117279][  T595] exFAT-fs (rnullb0): failed to recognize exfat type
[   38.146729][  T307] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   38.167558][  T600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61
[   38.278714][   T36] kauditd_printk_skb: 53 callbacks suppressed
[   38.278736][   T36] audit: type=1400 audit(1750964428.170:236): avc:  denied  { bind } for  pid=607 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.314176][   T36] audit: type=1400 audit(1750964428.210:237): avc:  denied  { bind } for  pid=607 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   38.338517][  T307] usb 4-1: Using ep0 maxpacket: 32
[   38.350711][  T307] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   38.364872][  T307] usb 4-1: config 0 interface 0 has no altsetting 0
[   38.371762][  T307] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   38.381077][  T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.390851][  T307] usb 4-1: config 0 descriptor??
[   38.491069][   T36] audit: type=1400 audit(1750964428.380:238): avc:  denied  { append } for  pid=607 comm="syz.1.90" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   38.522349][   T36] audit: type=1400 audit(1750964428.380:239): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.547825][   T36] audit: type=1400 audit(1750964428.380:240): avc:  denied  { open } for  pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.576495][  T616] overlayfs: missing 'lowerdir'
[   38.580076][   T36] audit: type=1400 audit(1750964428.380:241): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.624060][   T36] audit: type=1400 audit(1750964428.400:242): avc:  denied  { read } for  pid=613 comm="syz.2.92" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   38.625598][  T619] capability: warning: `syz.1.94' uses deprecated v2 capabilities in a way that may be insecure
[   38.663261][   T36] audit: type=1400 audit(1750964428.400:243): avc:  denied  { open } for  pid=613 comm="syz.2.92" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   38.693725][   T36] audit: type=1400 audit(1750964428.400:244): avc:  denied  { ioctl } for  pid=613 comm="syz.2.92" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   38.719731][   T36] audit: type=1400 audit(1750964428.400:245): avc:  denied  { set_context_mgr } for  pid=613 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   38.752958][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   38.905051][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   38.913715][    T9] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.923844][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[   38.931853][    T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40
[   38.941025][  T365] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   38.948587][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.956703][    T9] usb 3-1: Product: syz
[   38.960934][    T9] usb 3-1: Manufacturer: syz
[   38.965848][    T9] usb 3-1: SerialNumber: syz
[   39.112963][  T365] usb 2-1: Using ep0 maxpacket: 8
[   39.121027][  T365] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   39.129469][  T365] usb 2-1: config 179 has no interface number 0
[   39.135858][  T365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   39.146942][  T365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   39.158372][  T365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   39.169855][  T365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   39.182388][  T365] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   39.195690][  T365] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   39.196471][  T614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'.
[   39.204846][  T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.223469][  T624] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   39.233613][  T614] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   39.233657][  T614] rust_binder: Error while translating object.
[   39.251533][  T614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.258303][  T614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44
[   39.270630][  T307] usbhid 4-1:0.0: can't add hid device: -71
[   39.286881][  T307] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   39.304552][    T9] usbhid 3-1:1.0: can't add hid device: -71
[   39.311571][  T307] usb 4-1: USB disconnect, device number 4
[   39.319657][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   39.331366][  T628] binder: Binderfs stats mode cannot be changed during a remount
[   39.341869][    T9] usb 3-1: USB disconnect, device number 7
[   39.458143][  T624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.466939][  T624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.593414][  T643] overlayfs: missing 'lowerdir'
[   39.845608][    T9] usb 2-1: USB disconnect, device number 2
[   39.851517][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   39.851560][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   39.918842][  T666] overlay: filesystem on ./file0/../file0 not supported as upperdir
[   39.929969][  T666] __vm_enough_memory: pid: 666, comm: syz.3.110, bytes: 70373039144960 not enough memory for the allocation
[   40.007727][  T675] overlayfs: missing 'workdir'
[   40.032112][  T677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'.
[   40.078130][  T677] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   40.346724][  T699] syz.0.120 uses obsolete (PF_INET,SOCK_PACKET)
[   40.382102][  T706] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   40.389903][  T706] rust_binder: Write failure EINVAL in pid:95
[   40.405284][  T709] overlayfs: missing 'workdir'
[   40.573106][  T731] syz.0.131: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[   40.577374][  T736] overlayfs: missing 'workdir'
[   40.591239][  T731] CPU: 0 UID: 0 PID: 731 Comm: syz.0.131 Not tainted 6.12.30-syzkaller-g1ccb219f8cda #0 7a2e1ed1be67dd4e5f42c8044c2ea2ca0199c2ac
[   40.591281][  T731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   40.591308][  T731] Call Trace:
[   40.591316][  T731]  <TASK>
[   40.591327][  T731]  __dump_stack+0x21/0x30
[   40.591386][  T731]  dump_stack_lvl+0x10c/0x190
[   40.591415][  T731]  ? __cfi_dump_stack_lvl+0x10/0x10
[   40.591444][  T731]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   40.591471][  T731]  dump_stack+0x19/0x20
[   40.591498][  T731]  warn_alloc+0x1bc/0x2a0
[   40.591522][  T731]  ? __kasan_slab_free+0x5f/0x80
[   40.591559][  T731]  ? __cfi_warn_alloc+0x10/0x10
[   40.591584][  T731]  ? __get_vm_area_node+0x1dc/0x3a0
[   40.591611][  T731]  ? xskq_create+0xdb/0x2a0
[   40.591639][  T731]  __vmalloc_node_range_noprof+0x68e/0x1420
[   40.591674][  T731]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   40.591702][  T731]  ? avc_has_perm+0x144/0x220
[   40.591730][  T731]  ? kasan_save_alloc_info+0x40/0x50
[   40.591757][  T731]  ? __kasan_kmalloc+0x96/0xb0
[   40.591793][  T731]  vmalloc_user_noprof+0x77/0x90
[   40.591820][  T731]  ? xskq_create+0xdb/0x2a0
[   40.591845][  T731]  xskq_create+0xdb/0x2a0
[   40.591898][  T731]  xsk_init_queue+0xb6/0x120
[   40.591923][  T731]  xsk_setsockopt+0x4dc/0x6f0
[   40.591948][  T731]  ? __cfi_xsk_setsockopt+0x10/0x10
[   40.591973][  T731]  ? do_futex+0x356/0x500
[   40.592010][  T731]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   40.592036][  T731]  ? security_socket_setsockopt+0x33/0xd0
[   40.592067][  T731]  ? __cfi_xsk_setsockopt+0x10/0x10
[   40.592092][  T731]  do_sock_setsockopt+0x26d/0x400
[   40.592130][  T731]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   40.592159][  T731]  __x64_sys_setsockopt+0x1b8/0x250
[   40.592186][  T731]  x64_sys_call+0x2adc/0x2ee0
[   40.592219][  T731]  do_syscall_64+0x58/0xf0
[   40.592240][  T731]  ? clear_bhb_loop+0x50/0xa0
[   40.592270][  T731]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   40.592297][  T731] RIP: 0033:0x7f3401f8e929
[   40.592323][  T731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.592344][  T731] RSP: 002b:00007f34005f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   40.592372][  T731] RAX: ffffffffffffffda RBX: 00007f34021b5fa0 RCX: 00007f3401f8e929
[   40.592390][  T731] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[   40.592405][  T731] RBP: 00007f3402010b39 R08: 0000000000000004 R09: 0000000000000000
[   40.592421][  T731] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[   40.592438][  T731] R13: 0000000000000000 R14: 00007f34021b5fa0 R15: 00007ffcdd8340f8
[   40.592458][  T731]  </TASK>
[   40.592473][  T731] Mem-Info:
[   40.867417][  T731] active_anon:5805 inactive_anon:0 isolated_anon:0
[   40.867417][  T731]  active_file:15920 inactive_file:2187 isolated_file:0
[   40.867417][  T731]  unevictable:0 dirty:57 writeback:0
[   40.867417][  T731]  slab_reclaimable:5702 slab_unreclaimable:70337
[   40.867417][  T731]  mapped:24205 shmem:164 pagetables:823
[   40.867417][  T731]  sec_pagetables:0 bounce:0
[   40.867417][  T731]  kernel_misc_reclaimable:0
[   40.867417][  T731]  free:1533310 free_pcp:3288 free_cma:0
[   40.913152][  T731] Node 0 active_anon:23204kB inactive_anon:0kB active_file:63680kB inactive_file:8748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96864kB dirty:236kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4544kB pagetables:3336kB sec_pagetables:0kB all_unreclaimable? no
[   40.945226][  T731] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:5720kB free_cma:0kB
[   40.976125][  T731] lowmem_reserve[]: 0 3921 3921
[   40.981345][  T731] Normal free:3174808kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23168kB inactive_anon:0kB active_file:63680kB inactive_file:8748kB unevictable:0kB writepending:236kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5584kB local_pcp:5140kB free_cma:0kB
[   41.014204][  T731] lowmem_reserve[]: 0 0 0
[   41.018617][  T731] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   41.034847][  T731] Normal: 0*4kB 697*8kB (UME) 865*16kB (UM) 360*32kB (ME) 818*64kB (UM) 140*128kB (UME) 45*256kB (UME) 18*512kB (UME) 15*1024kB (UM) 10*2048kB (UME) 734*4096kB (UM) = 3164248kB
[   41.053669][  T731] 20617 total pagecache pages
[   41.058465][  T731] 0 pages in swap cache
[   41.069192][  T731] Free swap  = 124996kB
[   41.084755][  T746] incfs: iterate_incfs_dir / -22
[   41.087639][  T731] Total swap = 124996kB
[   41.097510][  T731] 2097051 pages RAM
[   41.101511][  T731] 0 pages HighMem/MovableOnly
[   41.106366][  T731] 351521 pages reserved
[   41.112936][  T731] 0 pages cma reserved
[   41.129928][  T731] Memory allocations:
[   41.134129][  T731]          0 B        0 init/main.c:1370 func:do_initcalls
[   41.141447][  T731]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   41.149666][  T731]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   41.162957][  T731]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   41.171542][  T731]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   41.179925][  T731]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   41.188623][  T731]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   41.196632][  T731]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   41.204674][  T731]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   41.206832][  T749] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.212838][  T731]          0 B        0 init/initramfs.c:101 func:find_link
[   41.254458][  T755] FAT-fs (rnullb0): bogus number of reserved sectors
[   41.261302][  T755] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   41.408392][  T766] input: syz1 as /devices/virtual/input/input5
[   41.414761][  T766] input: failed to attach handler leds to device input5, error: -6
[   41.634039][  T779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   41.634071][  T779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:136
[   41.658632][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[   41.733000][   T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   41.836323][  T786] bridge0: port 3(veth0_to_bridge) entered blocking state
[   41.843641][  T786] bridge0: port 3(veth0_to_bridge) entered disabled state
[   41.850895][  T786] veth0_to_bridge: entered allmulticast mode
[   41.857697][  T786] veth0_to_bridge: entered promiscuous mode
[   41.863872][  T786] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   41.876840][  T786] bridge0: port 3(veth0_to_bridge) entered blocking state
[   41.884205][  T786] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   41.902985][   T31] usb 4-1: Using ep0 maxpacket: 16
[   41.909348][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.920518][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.930316][   T31] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   41.939505][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.948458][   T31] usb 4-1: config 0 descriptor??
[   42.357506][   T31] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[   42.556897][   T46] usb 4-1: USB disconnect, device number 5
[   42.773707][  T798] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.774069][  T798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145
[   42.792571][  T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   42.801932][  T800] rust_binder: Read failure Err(EFAULT) in pid:147
[   42.831818][  T800] rust_binder: Write failure EINVAL in pid:147
[   42.889659][  T802] input: syz0 as /devices/virtual/input/input6
[   42.904970][  T802] team_slave_1: entered promiscuous mode
[   42.910832][  T802] team_slave_1: entered allmulticast mode
[   42.941062][  T808] random: crng reseeded on system resumption
[   43.027359][  T815] rust_binder: Error while translating object.
[   43.027395][  T815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   43.033865][  T815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:72
[   43.145819][  T835] random: crng reseeded on system resumption
[   43.163376][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.175653][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.187910][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.200247][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.212501][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.224644][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.236773][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.248932][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.261183][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.273403][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   43.711397][   T36] kauditd_printk_skb: 118 callbacks suppressed
[   43.711424][   T36] audit: type=1400 audit(1750964433.210:364): avc:  denied  { read write } for  pid=834 comm="syz.0.161" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.093768][  T542] Bluetooth: hci0: command 0x1003 tx timeout
[   46.105736][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   46.716641][    C1] sched: DL replenish lagged too much
[   48.172984][    C0] net_ratelimit: 57446 callbacks suppressed
[   48.173007][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   48.191835][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   48.205019][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   48.218390][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   48.230958][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   48.243143][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   48.255439][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   48.267482][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   48.279610][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   48.291805][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   48.818866][   T36] audit: type=1400 audit(1750964433.210:365): avc:  denied  { open } for  pid=834 comm="syz.0.161" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   53.182971][    C0] net_ratelimit: 58706 callbacks suppressed
[   53.182995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   53.201023][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   53.213053][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   53.225298][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   53.237606][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   53.250082][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   53.262576][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   53.274709][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   53.286821][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   53.298921][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   53.516252][   T36] audit: type=1400 audit(1750964438.640:366): avc:  denied  { ioctl } for  pid=834 comm="syz.0.161" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   57.474513][  T843] rust_binder: Write failure EFAULT in pid:158
[   57.748203][   T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   58.192974][    C0] net_ratelimit: 52938 callbacks suppressed
[   58.192996][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   58.211340][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   58.224076][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   58.236111][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   58.248158][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   58.260728][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   58.272892][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   58.285085][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   58.297301][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   58.309379][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   59.412543][   T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[   59.436206][   T36] audit: type=1400 audit(1750964449.330:367): avc:  denied  { name_bind } for  pid=844 comm="syz.2.165" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   59.499249][   T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   59.774947][   T36] audit: type=1400 audit(1750964449.330:368): avc:  denied  { node_bind } for  pid=844 comm="syz.2.165" saddr=fe88::103 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   59.872318][   T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.903076][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.911140][   T46] usb 2-1: Product: syz
[   59.973593][   T46] usb 2-1: Manufacturer: á°Š
[   59.978875][   T46] usb 2-1: SerialNumber: syz
[   62.303503][  T852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.364726][   T36] audit: type=1400 audit(1750964449.470:369): avc:  denied  { name_bind } for  pid=844 comm="syz.2.165" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   63.735005][    C0] net_ratelimit: 33325 callbacks suppressed
[   63.735027][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   63.753731][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   63.766922][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   63.780082][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.792945][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   63.805357][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   63.817456][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.829801][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   63.841979][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   63.854037][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   63.930308][  T853] rust_binder: Error while translating object.
[   63.930366][  T853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   64.273111][  T852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.285508][   T46] usb 2-1: can't set config #1, error -71
[   64.725090][  T853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111
[   64.725879][  T855] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.978408][   T36] audit: type=1400 audit(1750964452.550:370): avc:  denied  { append } for  pid=851 comm="syz.3.166" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   65.225262][   T46] usb 2-1: USB disconnect, device number 3
[   68.145261][   T36] audit: type=1400 audit(1750964458.020:371): avc:  denied  { mount } for  pid=859 comm="syz.2.169" name="/" dev="configfs" ino=2444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   68.673529][   T36] audit: type=1400 audit(1750964458.020:372): avc:  denied  { search } for  pid=859 comm="syz.2.169" name="/" dev="configfs" ino=2444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.742910][    C0] net_ratelimit: 49237 callbacks suppressed
[   68.742933][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   68.761637][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   68.773708][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   68.785835][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   68.798031][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   68.810544][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   68.822684][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   68.834795][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   68.847079][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   68.859104][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   71.606540][   T36] audit: type=1400 audit(1750964458.020:373): avc:  denied  { ioctl } for  pid=859 comm="syz.2.169" path="socket:[7375]" dev="sockfs" ino=7375 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.752973][    C0] net_ratelimit: 57256 callbacks suppressed
[   73.752995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   73.771357][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   73.783453][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   73.795588][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   73.807709][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   73.819824][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   73.831869][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   73.843993][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   73.856164][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   73.868294][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   78.762983][    C0] net_ratelimit: 57599 callbacks suppressed
[   78.763006][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   78.781241][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   78.793691][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   78.806711][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   78.818921][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   78.830972][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   78.843270][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   78.855930][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   78.868076][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   78.880362][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   83.772943][    C0] net_ratelimit: 57851 callbacks suppressed
[   83.772966][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   83.791661][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   83.803700][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   83.815916][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   83.828025][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   83.840280][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   83.853076][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   83.865256][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   83.877545][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   83.889628][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   88.782912][    C0] net_ratelimit: 55426 callbacks suppressed
[   88.782935][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   88.800999][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   88.813098][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   88.825317][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   88.837611][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   88.849952][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   88.862006][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   88.874040][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   88.886102][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   88.898315][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   93.792945][    C0] net_ratelimit: 57148 callbacks suppressed
[   93.792968][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   93.810960][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   93.823161][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   93.835526][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   93.847552][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   93.860388][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   93.872688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   93.884839][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   93.897595][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   93.909729][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   98.802954][    C0] net_ratelimit: 58880 callbacks suppressed
[   98.802978][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   98.821014][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   98.833296][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   98.845417][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   98.857561][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   98.870366][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   98.882754][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   98.894899][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[   98.907015][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   98.919176][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  103.812889][    C0] net_ratelimit: 56675 callbacks suppressed
[  103.812912][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  103.830957][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  103.843092][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  103.855639][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  103.867819][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  103.879954][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  103.892072][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  103.904223][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  103.916416][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  103.928877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  105.789341][   T36] audit: type=1400 audit(1750964495.680:374): avc:  denied  { mounton } for  pid=889 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  108.822924][    C0] net_ratelimit: 51983 callbacks suppressed
[  108.822948][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  108.841262][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  108.853471][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  108.865963][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  108.878150][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  108.890200][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  108.902585][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  108.914672][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  108.926770][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  108.938876][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  113.832921][    C0] net_ratelimit: 54575 callbacks suppressed
[  113.832943][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  113.851167][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  113.863286][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  113.875349][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  113.888510][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  113.901091][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  113.913409][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  113.925530][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  113.937680][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  113.949826][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  118.842897][    C0] net_ratelimit: 56787 callbacks suppressed
[  118.842921][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  118.861319][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  118.873871][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  118.886884][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  118.899618][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  118.912223][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  118.924803][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  118.937582][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  118.950129][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  118.962593][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  123.852941][    C0] net_ratelimit: 55735 callbacks suppressed
[  123.852964][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  123.871092][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  123.883229][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  123.895372][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  123.907472][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  123.919505][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  123.931555][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  123.943765][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  123.955879][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  123.967924][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.254924][   T36] audit: type=1400 audit(1750964515.140:375): avc:  denied  { ioctl } for  pid=906 comm="syz.0.184" path="socket:[7019]" dev="sockfs" ino=7019 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  126.074397][   T36] audit: type=1400 audit(1750964515.280:376): avc:  denied  { mount } for  pid=906 comm="syz.0.184" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  126.335721][  T908] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  126.477069][   T36] audit: type=1400 audit(1750964516.230:377): avc:  denied  { mounton } for  pid=906 comm="syz.0.184" path="/61/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  127.229826][   T36] audit: type=1400 audit(1750964517.120:378): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  128.862911][    C0] net_ratelimit: 55278 callbacks suppressed
[  128.862936][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  128.880942][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  128.893156][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  128.905208][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  128.917334][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  128.929366][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  128.941949][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  128.954086][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  128.966286][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  128.978384][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  129.583797][  T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187
[  131.696909][  T900] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.753679][  T900] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.775058][  T900] bridge_slave_0: entered allmulticast mode
[  131.799654][  T900] bridge_slave_0: entered promiscuous mode
[  131.909113][  T893] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.924560][  T893] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.944783][  T893] bridge_slave_0: entered allmulticast mode
[  131.978156][  T893] bridge_slave_0: entered promiscuous mode
[  132.060191][  T889] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.073063][  T889] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.080183][  T889] bridge_slave_0: entered allmulticast mode
[  132.123693][  T889] bridge_slave_0: entered promiscuous mode
[  132.265573][  T900] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.272669][  T900] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.325643][  T900] bridge_slave_1: entered allmulticast mode
[  132.383140][  T900] bridge_slave_1: entered promiscuous mode
[  132.915480][  T893] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.922589][  T893] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.254118][  T893] bridge_slave_1: entered allmulticast mode
[  133.294531][  T893] bridge_slave_1: entered promiscuous mode
[  133.755111][  T889] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.762209][  T889] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.798117][  T889] bridge_slave_1: entered allmulticast mode
[  133.872874][    C0] net_ratelimit: 53073 callbacks suppressed
[  133.872892][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  133.890954][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  133.903173][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  133.905424][  T889] bridge_slave_1: entered promiscuous mode
[  133.915446][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  133.915554][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  133.915636][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  133.915731][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  133.915828][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  133.915942][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  133.916022][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.130344][  T922] =======================================================
[  134.130344][  T922] WARNING: The mand mount option has been deprecated and
[  134.130344][  T922]          and is ignored by this kernel. Remove the mand
[  134.130344][  T922]          option from the mount to silence this warning.
[  134.130344][  T922] =======================================================
[  138.882945][    C0] net_ratelimit: 59333 callbacks suppressed
[  138.882969][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  138.901116][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  138.913207][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  138.925416][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  138.937731][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  138.949770][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  138.963236][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  138.975269][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  138.987337][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  139.000648][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.892943][    C0] net_ratelimit: 59549 callbacks suppressed
[  143.892967][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.911327][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.923458][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.935557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.947711][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  143.959947][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  143.973219][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.985340][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  143.998043][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  144.010121][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  148.902932][    C0] net_ratelimit: 57837 callbacks suppressed
[  148.902956][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.921038][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.933104][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.945501][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.957522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  148.969586][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  148.982228][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  148.994342][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.006454][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.018543][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  153.912867][    C0] net_ratelimit: 61049 callbacks suppressed
[  153.912891][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  153.931044][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  153.943159][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.955178][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.967232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.979320][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.991514][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  154.003981][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  154.016547][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  154.028660][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.922867][    C0] net_ratelimit: 61274 callbacks suppressed
[  158.922892][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  158.941015][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  158.953343][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  158.965458][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.977580][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.990837][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  159.002933][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  159.015332][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  159.027453][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  159.040199][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.932935][    C0] net_ratelimit: 59971 callbacks suppressed
[  163.932959][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  163.950976][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  163.963097][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  163.975570][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  163.987796][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.000713][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.012980][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.025271][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.038473][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  164.051589][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.942886][    C0] net_ratelimit: 62054 callbacks suppressed
[  168.942910][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  168.960980][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  168.973091][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.985303][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.997582][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  169.010318][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  169.022855][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  169.035175][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.047968][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.060063][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.952880][    C0] net_ratelimit: 57945 callbacks suppressed
[  173.952903][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.971039][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.983696][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  173.995978][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  174.008158][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.020556][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.033506][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  174.045524][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.057580][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.069616][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.962897][    C0] net_ratelimit: 58074 callbacks suppressed
[  178.962922][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.982262][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.994623][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.006837][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.020444][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.033434][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.046236][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.058990][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.071455][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.083661][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  183.972925][    C0] net_ratelimit: 64755 callbacks suppressed
[  183.972949][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.990953][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  184.003062][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  184.015328][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.027388][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.039517][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.051764][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.063788][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.076101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.088342][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.982894][    C0] net_ratelimit: 59390 callbacks suppressed
[  188.982917][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.001294][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.013927][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.025960][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.038483][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  189.051233][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  189.063581][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.076053][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.088387][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.100471][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  193.992914][    C0] net_ratelimit: 64261 callbacks suppressed
[  193.992937][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.010968][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.023083][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.035207][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.047825][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.059994][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  194.072588][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  194.084900][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.097207][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.109410][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.002879][    C0] net_ratelimit: 59142 callbacks suppressed
[  199.002903][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.020911][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.033221][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.045625][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.058353][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.070484][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  199.082637][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  199.094805][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.106909][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.119112][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.012852][    C0] net_ratelimit: 62924 callbacks suppressed
[  204.012876][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  204.031101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.044424][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.056740][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.068818][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  204.080965][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  204.093108][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.105754][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.118550][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.131105][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.022903][    C0] net_ratelimit: 62346 callbacks suppressed
[  209.022927][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  209.041010][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  209.053277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.065669][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.078209][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.090320][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.102438][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.114468][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.126636][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.138662][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  212.756748][   T37] INFO: task syz.2.169:859 blocked for more than 122 seconds.
[  212.776315][   T37]       Not tainted 6.12.30-syzkaller-g1ccb219f8cda #0
[  212.837029][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  212.876121][   T36] audit: type=1400 audit(1750964602.770:379): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[1752]" dev="pipefs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  213.026046][   T37] task:syz.2.169       state:D stack:0     pid:859   tgid:859   ppid:289    flags:0x00004004
[  213.052758][   T37] Call Trace:
[  213.056139][   T37]  <TASK>
[  213.059193][   T37]  __schedule+0x145b/0x1f10
[  213.063860][   T37]  ? __sched_text_start+0x10/0x10
[  213.068919][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  213.074774][   T37]  ? wake_nocb_gp+0x120/0x1b0
[  213.079487][   T37]  ? rcu_barrier_entrain+0x35f/0x4d0
[  213.085008][   T37]  schedule+0xc6/0x240
[  213.089109][   T37]  schedule_timeout+0xb2/0x3a0
[  213.093949][   T37]  ? __cfi_schedule_timeout+0x10/0x10
[  213.099367][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  213.104985][   T37]  ? rcu_barrier_handler+0x9b/0xe0
[  213.110224][   T37]  ? generic_exec_single+0x20a/0x500
[  213.115609][   T37]  wait_for_common+0x359/0x630
[  213.120412][   T37]  ? wait_for_completion+0x40/0x40
[  213.125762][   T37]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  213.131454][   T37]  wait_for_completion+0x1c/0x40
[  213.136472][   T37]  rcu_barrier+0x415/0x530
[  213.140939][   T37]  netdev_run_todo+0x10e/0xcb0
[  213.145797][   T37]  ? kvfree+0x39/0x50
[  213.149815][   T37]  ? __cfi_netdev_run_todo+0x10/0x10
[  213.155200][   T37]  rtnl_unlock+0x12/0x20
[  213.159480][   T37]  tun_chr_close+0xc5/0x150
[  213.164044][   T37]  ? __cfi_tun_chr_close+0x10/0x10
[  213.169633][   T37]  __fput+0x1fe/0xa00
[  213.173697][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  213.179290][   T37]  ____fput+0x20/0x30
[  213.183329][   T37]  task_work_run+0x1e0/0x250
[  213.187993][   T37]  ? __cfi_task_work_run+0x10/0x10
[  213.193365][   T37]  ? __kasan_check_write+0x18/0x20
[  213.198520][   T37]  resume_user_mode_work+0x36/0x50
[  213.203709][   T37]  syscall_exit_to_user_mode+0x64/0xb0
[  213.209211][   T37]  do_syscall_64+0x64/0xf0
[  213.213691][   T37]  ? clear_bhb_loop+0x50/0xa0
[  213.218400][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  213.225135][   T37] RIP: 0033:0x7f52f558e929
[  213.230203][   T37] RSP: 002b:00007ffe3a6cd248 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.238768][   T37] RAX: 0000000000000000 RBX: 00007f52f57b7ba0 RCX: 00007f52f558e929
[  213.246794][   T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.254816][   T37] RBP: 00007f52f57b7ba0 R08: 0000000000000154 R09: 000000133a6cd53f
[  213.262840][   T37] R10: 00007f52f57b7ac0 R11: 0000000000000246 R12: 0000000000010c8f
[  213.271447][   T37] R13: 00007ffe3a6cd340 R14: ffffffffffffffff R15: 00007ffe3a6cd360
[  213.272573][  T935] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[  213.279827][   T37]  </TASK>
[  214.032906][    C0] net_ratelimit: 61780 callbacks suppressed
[  214.032931][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.051348][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.063470][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  214.075734][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  214.088721][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.101645][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.113736][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.125768][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.137797][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.149834][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.528992][   T37] NMI backtrace for cpu 1
[  214.529015][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g1ccb219f8cda #0 7a2e1ed1be67dd4e5f42c8044c2ea2ca0199c2ac
[  214.529047][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  214.529061][   T37] Call Trace:
[  214.529069][   T37]  <TASK>
[  214.529079][   T37]  __dump_stack+0x21/0x30
[  214.529111][   T37]  dump_stack_lvl+0x10c/0x190
[  214.529138][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  214.529166][   T37]  dump_stack+0x19/0x20
[  214.529191][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  214.529225][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  214.529248][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  214.529280][   T37]  ? sched_show_task+0x379/0x560
[  214.529305][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  214.529326][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  214.529350][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  214.529374][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  214.529409][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  214.529433][   T37]  watchdog+0xd8f/0xed0
[  214.529461][   T37]  ? __cfi_watchdog+0x10/0x10
[  214.529493][   T37]  ? __kasan_check_read+0x15/0x20
[  214.529520][   T37]  ? __kthread_parkme+0x138/0x180
[  214.529551][   T37]  ? schedule+0xc6/0x240
[  214.529573][   T37]  kthread+0x2ca/0x370
[  214.529606][   T37]  ? __cfi_watchdog+0x10/0x10
[  214.529631][   T37]  ? __cfi_kthread+0x10/0x10
[  214.529663][   T37]  ret_from_fork+0x64/0xa0
[  214.529690][   T37]  ? __cfi_kthread+0x10/0x10
[  214.529723][   T37]  ret_from_fork_asm+0x1a/0x30
[  214.529755][   T37]  </TASK>
[  214.529763][   T37] Sending NMI from CPU 1 to CPUs 0:
[  214.762280][    C0] NMI backtrace for cpu 0
[  214.762296][    C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted 6.12.30-syzkaller-g1ccb219f8cda #0 7a2e1ed1be67dd4e5f42c8044c2ea2ca0199c2ac
[  214.762319][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  214.762330][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x15/0x70
[  214.762356][    C0] Code: cc cc cc cc cc b8 b0 bf b6 ea 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0c 25 40 e9 04 00 <65> 8b 15 3c 47 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75
[  214.762370][    C0] RSP: 0018:ffffc90000007108 EFLAGS: 00000246
[  214.762385][    C0] RAX: ffffffff846885c0 RBX: 0000000000000000 RCX: ffff88810367df00
[  214.762398][    C0] RDX: 0000000000000100 RSI: 0000000000000a02 RDI: ffff8881f6e50e84
[  214.762409][    C0] RBP: ffffc90000007108 R08: 0000000000000003 R09: 0000000000000004
[  214.762420][    C0] R10: dffffc0000000000 R11: fffff52000000de0 R12: ffff88812f56a000
[  214.762432][    C0] R13: dffffc0000000000 R14: ffff88813ba20a00 R15: dffffc0000000000
[  214.762446][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  214.762460][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  214.762471][    C0] CR2: 00007f96f30e56e8 CR3: 0000000134fa2000 CR4: 00000000003526b0
[  214.762487][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  214.762496][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  214.762506][    C0] Call Trace:
[  214.762512][    C0]  <IRQ>
[  214.762519][    C0]  __netif_rx+0x30/0x230
[  214.762544][    C0]  veth_xmit+0x460/0x820
[  214.762567][    C0]  dev_hard_start_xmit+0x21b/0x770
[  214.762592][    C0]  __dev_queue_xmit+0x19cc/0x3790
[  214.762615][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  214.762637][    C0]  ? __dev_queue_xmit+0x24c/0x3790
[  214.762663][    C0]  ? kasan_save_track+0x4f/0x80
[  214.762690][    C0]  ? kasan_save_track+0x3e/0x80
[  214.762711][    C0]  ? kasan_save_alloc_info+0x40/0x50
[  214.762728][    C0]  ? __kasan_slab_alloc+0x73/0x90
[  214.762750][    C0]  ? __cfi___dev_queue_xmit+0x10/0x10
[  214.762773][    C0]  ? br_handle_frame+0x5a6/0xba0
[  214.762790][    C0]  ? __netif_receive_skb_core+0xf4b/0x3940
[  214.762821][    C0]  ? process_backlog+0x3e5/0xae0
[  214.762838][    C0]  ? __napi_poll+0xd0/0x610
[  214.762867][    C0]  ? net_rx_action+0x584/0xce0
[  214.762884][    C0]  ? handle_softirqs+0x1ae/0x630
[  214.762913][    C0]  ? __do_softirq+0xf/0x16
[  214.762933][    C0]  ? do_softirq+0xa6/0x100
[  214.762958][    C0]  ? __local_bh_enable_ip+0x74/0x80
[  214.762986][    C0]  ? rcu_do_batch+0x5c6/0xd20
[  214.763009][    C0]  ? rcu_nocb_cb_kthread+0x4dc/0xac0
[  214.763034][    C0]  ? kthread+0x2ca/0x370
[  214.763064][    C0]  ? ret_from_fork+0x64/0xa0
[  214.763089][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  214.763121][    C0]  ? __copy_skb_header+0x453/0x5e0
[  214.763142][    C0]  br_dev_queue_push_xmit+0x553/0x6d0
[  214.763163][    C0]  ? __copy_skb_header+0x453/0x5e0
[  214.763184][    C0]  ? __cfi_br_dev_queue_push_xmit+0x10/0x10
[  214.763204][    C0]  ? __skb_clone+0x47a/0x7a0
[  214.763226][    C0]  __br_forward+0x25c/0x390
[  214.763245][    C0]  br_flood+0x67e/0x730
[  214.763267][    C0]  br_handle_frame_finish+0x12bb/0x1720
[  214.763291][    C0]  ? __cfi_br_handle_frame_finish+0x10/0x10
[  214.763318][    C0]  br_handle_frame+0x5a6/0xba0
[  214.763340][    C0]  ? __cfi_br_handle_frame+0x10/0x10
[  214.763362][    C0]  __netif_receive_skb_core+0xf4b/0x3940
[  214.763394][    C0]  ? ip6_mc_input+0x4f3/0x670
[  214.763424][    C0]  ? ip6_mc_input+0x4f3/0x670
[  214.763453][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  214.763481][    C0]  ? qdisc_run_end+0x120/0x120
[  214.763512][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  214.763539][    C0]  ? ip6_rcv_finish+0x341/0x3c0
[  214.763567][    C0]  ? ipv6_rcv+0xed/0x220
[  214.763593][    C0]  ? __cfi_ipv6_rcv+0x10/0x10
[  214.763620][    C0]  ? __cfi_ip6_rcv_finish+0x10/0x10
[  214.763647][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  214.763680][    C0]  process_backlog+0x3e5/0xae0
[  214.763710][    C0]  __napi_poll+0xd0/0x610
[  214.763740][    C0]  net_rx_action+0x584/0xce0
[  214.763763][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  214.763782][    C0]  ? sched_clock+0x44/0x60
[  214.763804][    C0]  ? __cfi_sched_clock_cpu+0x10/0x10
[  214.763831][    C0]  ? irqtime_account_irq+0x51/0x1c0
[  214.763855][    C0]  handle_softirqs+0x1ae/0x630
[  214.763885][    C0]  __do_softirq+0xf/0x16
[  214.763905][    C0]  do_softirq+0xa6/0x100
[  214.763931][    C0]  </IRQ>
[  214.763937][    C0]  <TASK>
[  214.763945][    C0]  ? __cfi_do_softirq+0x10/0x10
[  214.763973][    C0]  ? kernfs_free_rcu+0xf1/0x110
[  214.764003][    C0]  ? __cfi_kernfs_free_rcu+0x10/0x10
[  214.764032][    C0]  __local_bh_enable_ip+0x74/0x80
[  214.764059][    C0]  rcu_do_batch+0x5c6/0xd20
[  214.764085][    C0]  ? rcu_core+0xd20/0xd20
[  214.764108][    C0]  ? __kasan_check_write+0x18/0x20
[  214.764134][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  214.764154][    C0]  ? __kasan_check_read+0x15/0x20
[  214.764178][    C0]  ? rcu_nocb_cb_kthread+0x4c7/0xac0
[  214.764205][    C0]  rcu_nocb_cb_kthread+0x4dc/0xac0
[  214.764233][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  214.764258][    C0]  ? __kasan_check_write+0x18/0x20
[  214.764283][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  214.764314][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  214.764345][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  214.764378][    C0]  ? set_cpus_allowed_ptr+0x93/0xe0
[  214.764409][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  214.764440][    C0]  ? __kasan_check_read+0x15/0x20
[  214.764464][    C0]  ? __kthread_parkme+0x138/0x180
[  214.764492][    C0]  ? schedule+0xc6/0x240
[  214.764512][    C0]  kthread+0x2ca/0x370
[  214.764541][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  214.764567][    C0]  ? __cfi_kthread+0x10/0x10
[  214.764598][    C0]  ret_from_fork+0x64/0xa0
[  214.764622][    C0]  ? __cfi_kthread+0x10/0x10
[  214.764653][    C0]  ret_from_fork_asm+0x1a/0x30
[  214.764682][    C0]  </TASK>
[  214.904348][  T935] ,cpuset=/,mems_allowed=0
[  217.069562][  T935] CPU: 1 UID: 0 PID: 935 Comm: syz-executor Not tainted 6.12.30-syzkaller-g1ccb219f8cda #0 7a2e1ed1be67dd4e5f42c8044c2ea2ca0199c2ac
[  217.069598][  T935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  217.069612][  T935] Call Trace:
[  217.069620][  T935]  <TASK>
[  217.069629][  T935]  __dump_stack+0x21/0x30
[  217.069662][  T935]  dump_stack_lvl+0x10c/0x190
[  217.069688][  T935]  ? __cfi_dump_stack_lvl+0x10/0x10
[  217.069717][  T935]  dump_stack+0x19/0x20
[  217.069742][  T935]  warn_alloc+0x1bc/0x2a0
[  217.069765][  T935]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  217.069791][  T935]  ? __cfi_warn_alloc+0x10/0x10
[  217.069814][  T935]  ? __get_vm_area_node+0x1dc/0x3a0
[  217.069838][  T935]  ? kcov_ioctl+0x5d/0x5c0
[  217.069863][  T935]  __vmalloc_node_range_noprof+0x68e/0x1420
[  217.069893][  T935]  ? locks_remove_posix+0x38b/0x580
[  217.069924][  T935]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  217.069950][  T935]  ? expand_files+0xd6/0x700
[  217.069986][  T935]  vmalloc_user_noprof+0x77/0x90
[  217.070011][  T935]  ? kcov_ioctl+0x5d/0x5c0
[  217.070034][  T935]  kcov_ioctl+0x5d/0x5c0
[  217.070057][  T935]  ? bpf_lsm_file_ioctl+0xd/0x20
[  217.070082][  T935]  ? security_file_ioctl+0x34/0xd0
[  217.070115][  T935]  ? __cfi_kcov_ioctl+0x10/0x10
[  217.070138][  T935]  __se_sys_ioctl+0x132/0x1b0
[  217.070171][  T935]  __x64_sys_ioctl+0x7f/0xa0
[  217.070203][  T935]  x64_sys_call+0x1878/0x2ee0
[  217.070232][  T935]  do_syscall_64+0x58/0xf0
[  217.070252][  T935]  ? clear_bhb_loop+0x50/0xa0
[  217.070277][  T935]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  217.070301][  T935] RIP: 0033:0x7f96f238e52b
[  217.070321][  T935] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  217.070341][  T935] RSP: 002b:00007fff5be298a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  217.070365][  T935] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f96f238e52b
[  217.070383][  T935] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8
[  217.070398][  T935] RBP: 00007f96f25b6038 R08: 0000000000000005 R09: 0000000000000000
[  217.070413][  T935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.070427][  T935] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  217.070444][  T935]  </TASK>
[  217.070453][  T935] Mem-Info:
[  218.484257][  T935] active_anon:3603 inactive_anon:0 isolated_anon:0
[  218.484257][  T935]  active_file:15967 inactive_file:2233 isolated_file:0
[  218.484257][  T935]  unevictable:0 dirty:0 writeback:0
[  218.484257][  T935]  slab_reclaimable:3733 slab_unreclaimable:83669
[  218.484257][  T935]  mapped:22830 shmem:162 pagetables:412
[  218.484257][  T935]  sec_pagetables:0 bounce:0
[  218.484257][  T935]  kernel_misc_reclaimable:0
[  218.484257][  T935]  free:1524920 free_pcp:6978 free_cma:0
[  218.593040][  T935] Node 0 active_anon:14412kB inactive_anon:0kB active_file:63868kB inactive_file:8932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91320kB dirty:0kB writeback:0kB shmem:648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4452kB pagetables:1648kB sec_pagetables:0kB all_unreclaimable? no
[  218.674379][  T935] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:5720kB free_cma:0kB
[  218.744790][  T935] lowmem_reserve[]: 0 3921 3921
[  218.749739][  T935] Normal free:3161820kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14412kB inactive_anon:0kB active_file:63868kB inactive_file:8932kB unevictable:0kB writepending:0kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4800kB local_pcp:1032kB free_cma:0kB
[  218.824610][  T935] lowmem_reserve[]: 0 0 0
[  218.829041][  T935] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  218.884485][  T935] Normal: 1263*4kB (UME) 1141*8kB (UME) 3298*16kB (UME) 2514*32kB (UME) 1935*64kB (UME) 890*128kB (UME) 434*256kB (UME) 160*512kB (UME) 37*1024kB (UM) 5*2048kB (UME) 620*4096kB (UM) = 3165828kB
[  218.925336][  T935] 18360 total pagecache pages
[  218.930070][  T935] 0 pages in swap cache
[  218.953652][  T935] Free swap  = 124996kB
[  218.957866][  T935] Total swap = 124996kB
[  218.962046][  T935] 2097051 pages RAM
[  218.993139][  T935] 0 pages HighMem/MovableOnly
[  218.998155][  T935] 351521 pages reserved
[  219.002411][  T935] 0 pages cma reserved
[  219.036407][  T935] Memory allocations:
[  219.040981][  T935]          0 B        0 init/main.c:1370 func:do_initcalls
[  219.049002][    C0] net_ratelimit: 63303 callbacks suppressed
[  219.049019][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.049124][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  219.049225][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:d4:98:03:b4:b5, vlan:0)
[  219.049316][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.049423][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.049498][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.049597][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.049687][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.049795][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.049877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.385150][  T935]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  219.413452][  T935]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  219.421766][  T935]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  219.455338][  T935]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  219.483850][  T935]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  219.492776][  T935]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  219.535078][  T935]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  219.548055][  T935]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  219.575369][  T935]          0 B        0 init/initramfs.c:101 func:find_link