last executing test programs:

6m4.302189975s ago: executing program 32 (id=2102):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4)
creat(&(0x7f0000000040)='./file0\x00', 0x9)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
close_range(r0, 0xffffffffffffffff, 0x0)

5m28.818704299s ago: executing program 33 (id=2394):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x82ce, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c)

5m25.22057122s ago: executing program 4 (id=2433):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x2ba, 0x5, 0x8, 0x1}, {0x3, 0x9, 0x80, 0x3}, {0x0, 0x8, 0x2, 0x2}, {0x5, 0xd, 0x1, 0x7}, {0x5, 0xc, 0x10, 0x7fffffff}, {0x0, 0x1, 0xf9, 0x9}, {0x2, 0x9, 0x2, 0x3979}, {0xb81, 0xf, 0x10, 0xffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r3, 0x2, 0x80000})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMIWAIT(r4, 0x545c, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x9)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=0x38)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r7 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x1, 0x9, 0x2}, 0x18)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000240)={<r8=>0x0, 0x800, 0x7, 0x1})
ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000640)={{r7}, {@val={r8}, @max}})
ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000000680))
ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000006c0)={{r6}, "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"})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000016c0)=@req={0x9, 0x4, 0xa, 0x1}, 0x10)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x20000, 0x0)
ioctl$FITHAW(r9, 0xc0045878)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x366412849fb5666f}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r10, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
wait4(r2, &(0x7f0000001880), 0x40000000, &(0x7f00000018c0))
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000001980)={0x80002, 0x0, [0x4, 0x1000, 0xfffffffffffffff8, 0x3, 0x724, 0x1, 0x7, 0x9]})
r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000001a00)={0x2, 0x0, [{0x206, 0x0, 0x1}, {0x9dc, 0x0, 0x80}]})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)

5m25.060895244s ago: executing program 4 (id=2435):
open(&(0x7f0000000380)='./file0\x00', 0x15080, 0x50) (async)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x15080, 0x50)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000400)={&(0x7f00000003c0)=""/32, 0x20})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
socket(0x18, 0x3, 0xa)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a00010d000000000000000004000080080005"], 0x1c}], 0x1}, 0x0)
flock(0xffffffffffffffff, 0x5d1f28f9a5fa22e3)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x65b00000000, 0x9765, 0x4, 0x0, 0x3, 0x4cee, 0x5, 0x100000001, 0x97, 0x2000, 0x7, 0x3ff, 0x20000000000, 0x7b92, 0x2], 0x8000000, 0x7cafbfba871eee14})
r5 = syz_open_pts(0xffffffffffffffff, 0x4a4b42)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000)) (async)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_STATFS(r6, &(0x7f0000000100)={0x60, 0xfffffffffffffffe, r7, {{0xabf, 0x800, 0x7, 0x80000001, 0x3, 0x81, 0x8, 0x7f}}}, 0x60)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setsig(0x4203, r8, 0x6, 0x0) (async)
ptrace$setsig(0x4203, r8, 0x6, 0x0)
ptrace$getregset(0x4204, r8, 0x200, &(0x7f0000000240)={&(0x7f00000002c0)=""/142, 0x8e}) (async)
ptrace$getregset(0x4204, r8, 0x200, &(0x7f0000000240)={&(0x7f00000002c0)=""/142, 0x8e})

5m24.947555073s ago: executing program 4 (id=2436):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cf", 0x3}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
ppoll(&(0x7f00000001c0)=[{r4, 0x100}], 0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/151, 0x97}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/167, 0xa7}], 0x5}, 0x2200)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_usb_connect(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x26, 0xa6, 0x9, 0x8, 0x7a6, 0x7c2, 0x3712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf9, 0x10, 0x4, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x6f, 0xaa, 0xd}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x16, &(0x7f0000001080)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x80, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x5aec}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvfrom(r6, 0x0, 0x0, 0x21, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/248, 0xf8, 0x2, 0x4}, @fda={0x66646185, 0x8, 0x1, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

5m21.589486545s ago: executing program 4 (id=2467):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2a83, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x102b23)
gettid()
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8a883, 0xf)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$BLKRRPART(r3, 0x125f, 0x0)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000580)={0x1, 0xd000, 0xffff5896, 0x1, 0xd7d})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = dup(r7)
ioctl$PTP_EXTTS_REQUEST2(r8, 0x3d13, &(0x7f0000000100))
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00')
syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x3d, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x2, 0x10}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x7, 0xb3, 0xdc, 0x10, 0x8}, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/12], 0x2, [{0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="3b03f2995d5355ff93f93b11c340db0168bbac319e4fa5464c0a5b94d016ee174d2ee720e36f906dda67ecbcfc76aaae7166f97668efb0ec42296a4c4af1fa5a07599eea6f8cbf1bab6a"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}]})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000480)=0x13, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@request_death, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2cbfdf89adff9ad28be6437aebb6c5e94f4fd20007e"})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0})

5m20.671709449s ago: executing program 1 (id=2477):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) (async, rerun: 64)
r1 = socket(0x2, 0x3, 0x6) (rerun: 64)
bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x1) (async)
r5 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000100)='^-{\x00', 0x0, r4) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10)
setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0x6, 0x4)
sendto$inet(r6, 0x0, 0x0, 0x4c8c0, &(0x7f0000000340), 0x10) (async)
ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x80a0000, 0xffffff75, 0x0, 0x6, 0x0, [{0x40, 0x7, 0x9, '\x00', 0x7}, {0x1, 0x6, 0x1, '\x00', 0x2}, {0xdc, 0x10, 0x6, '\x00', 0xb}, {0xf, 0x3, 0x1, '\x00', 0xc}, {0xa7, 0x40, 0x28, '\x00', 0x1}, {0xd0, 0x5, 0x5b, '\x00', 0x9}, {0x3, 0x0, 0x9, '\x00', 0x6}, {0x9, 0x8, 0x34, '\x00', 0x8}, {0x2, 0x0, 0x3, '\x00', 0x1}, {0x5, 0x1, 0x0, '\x00', 0x3}, {0xa, 0x1, 0x32, '\x00', 0xd}, {0x3, 0x4, 0xfc, '\x00', 0x7}, {0xce, 0x0, 0x6, '\x00', 0x3}, {0x3, 0xf2, 0x3, '\x00', 0x43}, {0x7, 0x29, 0x4, '\x00', 0x80}, {0x2, 0xfb, 0x8, '\x00', 0x94}, {0x9, 0x1e, 0x8, '\x00', 0x9}, {0x10, 0xa, 0x99, '\x00', 0x1}, {0x6, 0x2, 0x7d}, {0xb8, 0x17, 0x81, '\x00', 0x2}, {0x5, 0x5, 0x4, '\x00', 0x6}, {0x40, 0x3, 0xf8, '\x00', 0x1a}, {0x9, 0x6, 0x7, '\x00', 0x80}, {0x43, 0x7, 0x1, '\x00', 0x1}]}}) (async)
getsockname$tipc(r1, 0x0, &(0x7f0000000100)) (async, rerun: 64)
arch_prctl$ARCH_SET_GS(0x1001, 0x0) (async, rerun: 64)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) (async)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x4, 0x0, &(0x7f0000000000)) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1c, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (async)
ioctl(r1, 0xa6000000, &(0x7f0000000180)="76986befb9adba21c92639f086b37e05e4f4f98e271db604ee2eac4f3750251f99c5894f2991a032f2b6d61bea98cc71b7124da7e517dfad4d1509219425f1456c4357cad6a80029bffac45e735c49c3ca8208b237cc324ce3ecd292d9123db04a0f42b573e9a0c2fc6560b3e772c27731490b6a5124ba16cb1c10adf3be2d94b02b9f3b06456dedddd9b08a1310cf")

5m20.53708822s ago: executing program 4 (id=2479):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
epoll_create1(0x0) (async, rerun: 64)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 64)
read$eventfd(r2, &(0x7f0000000080), 0x8) (async, rerun: 64)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141a03, 0x0) (rerun: 64)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10", 0x5a, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x0, 0x3})
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32)
connect$unix(r6, &(0x7f0000000100)=@abs={0x27}, 0x6e) (async)
r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x9, 0xa900)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000a, 0x4000010, r7, 0x4000) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r8, 0x0, 0x0) (async)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

5m20.455662007s ago: executing program 1 (id=2480):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
getsockopt$inet_int(r2, 0x0, 0xd, 0x0, &(0x7f0000000400))
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0)
ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000540)={0x6, 0x18, 0xe, 0x4})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000002c0)={0x7, 0x4000, 0x0, 0xffffffffffffffff, 0x9})
setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000040), 0x50)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000140)="120000004300e7ef7f000000000000e100a197", 0x13, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='-!.\x00', &(0x7f00000004c0)='m/(:$,%%!!@+@+^\xd4-\x00', 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setreuid(0x0, r10)
setuid(r10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x3}, @enter_looper], 0x16, 0x0, &(0x7f0000000400)="20d8e9ad22c44732e36050954f6c274534fdf6c309d9"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

5m20.379489553s ago: executing program 4 (id=2481):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5e, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

5m20.372759143s ago: executing program 34 (id=2481):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5e, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

5m19.867854424s ago: executing program 1 (id=2483):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r0, 0x57789000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mount$overlay(0x0, 0x0, 0x0, 0x1001002, &(0x7f0000000080))
syz_clone3(0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

5m19.743875305s ago: executing program 1 (id=2484):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x7f, 0xff, 0x81, 0x80000000}, {0x9da, 0x80, 0x4a, 0x9}, {0x5, 0x8, 0x9, 0x7}, {0x7, 0x5, 0x9, 0x1ff}, {0xd82, 0x5, 0xef, 0x8}, {0x0, 0x5, 0xaf, 0xfffff656}, {0x9, 0xf7, 0x3, 0x400}, {0x0, 0x5, 0xdc, 0x9e69}, {0x9, 0x32, 0x7f, 0x2}, {0x2, 0x4, 0x7f}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
setxattr$security_selinux(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:hald_cache_t:s0\x00', 0x22, 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x60000009, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000002540))
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x7f, 0xff, 0x81, 0x80000000}, {0x9da, 0x80, 0x4a, 0x9}, {0x5, 0x8, 0x9, 0x7}, {0x7, 0x5, 0x9, 0x1ff}, {0xd82, 0x5, 0xef, 0x8}, {0x0, 0x5, 0xaf, 0xfffff656}, {0x9, 0xf7, 0x3, 0x400}, {0x0, 0x5, 0xdc, 0x9e69}, {0x9, 0x32, 0x7f, 0x2}, {0x2, 0x4, 0x7f}]}) (async)
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async)
setxattr$security_selinux(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:hald_cache_t:s0\x00', 0x22, 0x2) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async)
waitid(0x0, 0x0, 0x0, 0x60000009, 0x0) (async)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) (async)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000002540)) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

5m19.55372862s ago: executing program 1 (id=2485):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

5m18.993170825s ago: executing program 1 (id=2490):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r1=>0x0})
r2 = timerfd_create(0x9, 0x80000)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
timerfd_settime(r2, 0x3, &(0x7f0000000040)={{r3, r4+10000000}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r2, &(0x7f0000000c40))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="240000001d005f0214fffffffffffff8070000001800000004fff000080009000d000000", 0x24)
io_setup(0x2278, &(0x7f0000000300)=<r7=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
clock_gettime(0x2, &(0x7f0000000080)={<r9=>0x0, <r10=>0x0})
setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000000)={r9, r10/1000+60000}, 0x10)
io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r8, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}])
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r11, 0x10f, 0x85)
sendto$packet(r0, &(0x7f0000000180)="4d01000080000000002c00e50414", 0xe, 0x48080, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x12, r13, 0xa4840000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap(&(0x7f0000972000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x5bde8000)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0)
socket$packet(0x11, 0x3, 0x300)

5m18.953517988s ago: executing program 35 (id=2490):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r1=>0x0})
r2 = timerfd_create(0x9, 0x80000)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
timerfd_settime(r2, 0x3, &(0x7f0000000040)={{r3, r4+10000000}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r2, &(0x7f0000000c40))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="240000001d005f0214fffffffffffff8070000001800000004fff000080009000d000000", 0x24)
io_setup(0x2278, &(0x7f0000000300)=<r7=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
clock_gettime(0x2, &(0x7f0000000080)={<r9=>0x0, <r10=>0x0})
setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000000)={r9, r10/1000+60000}, 0x10)
io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r8, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}])
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r11, 0x10f, 0x85)
sendto$packet(r0, &(0x7f0000000180)="4d01000080000000002c00e50414", 0xe, 0x48080, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x12, r13, 0xa4840000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap(&(0x7f0000972000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x5bde8000)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0)
socket$packet(0x11, 0x3, 0x300)

5m3.782375937s ago: executing program 0 (id=2609):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x28)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000000c0)={0x4, {{0x2, 0x4e20, @private=0xa010101}}}, 0x88)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180))
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x974)
getcwd(&(0x7f0000000080)=""/56, 0x38)
ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "e8835cd59d65412b791752733ea02dcc"})

5m2.962936254s ago: executing program 0 (id=2620):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
ioctl$FIOCLEX(r0, 0x5451)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000740)={&(0x7f00000006c0)={0x3, 0x400, 0xfffeffff, {}, {}, {0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "6213c6468e518c86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x24040094)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f})
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
write(r5, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000)

5m1.839641605s ago: executing program 0 (id=2625):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r3 = dup(r1)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000088ffffff00000000000001"], 0xfdef)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000)

5m1.579587116s ago: executing program 0 (id=2629):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r1, 0xa)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000003c0)=0x101, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21a501b, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0x8)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0})

5m1.472260034s ago: executing program 0 (id=2630):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x10000, 0x140)
fchmodat(r2, &(0x7f0000002340)='./file1\x00', 0x50)
close(r1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x2b, 0x4, 0x208200, 0x9, 0x7, 0x7, 0x1}}, 0x50)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000040)=[@enter_looper, @exit_looper], 0x0, 0x0, 0x0})
close(r1)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000022c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r5}, {0x2, 0x3, r5}, {0x2, 0x5, r5}, {0x2, 0x5, r5}, {0x2, 0x2, r5}, {0x2, 0x2, r5}], {0x4, 0x2}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x54, 0x1)
ppoll(&(0x7f0000000240)=[{r6, 0xc4}], 0x1, 0x0, 0x0, 0x0)

5m1.237307984s ago: executing program 0 (id=2631):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x44000)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000200)={0xffffffffffffffbc, 0x4, 0xf}})
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="02050b020e00000026bd70000000000004fff600000000000a004e2300000003fc000000000000000000000000000001c4bb0000000000000200010000000700000000000000000000000000000046c5725e8e376625741735130000fe8000"/104], 0x70}}, 0x84) (async)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="02050b020e00000026bd70000000000004fff600000000000a004e2300000003fc000000000000000000000000000001c4bb0000000000000200010000000700000000000000000000000000000046c5725e8e376625741735130000fe8000"/104], 0x70}}, 0x84)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20080)
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0xfffffff4})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r2, 0x22e7c000) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r2, 0x22e7c000)

5m1.189194327s ago: executing program 36 (id=2631):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x44000)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000200)={0xffffffffffffffbc, 0x4, 0xf}})
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="02050b020e00000026bd70000000000004fff600000000000a004e2300000003fc000000000000000000000000000001c4bb0000000000000200010000000700000000000000000000000000000046c5725e8e376625741735130000fe8000"/104], 0x70}}, 0x84) (async)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="02050b020e00000026bd70000000000004fff600000000000a004e2300000003fc000000000000000000000000000001c4bb0000000000000200010000000700000000000000000000000000000046c5725e8e376625741735130000fe8000"/104], 0x70}}, 0x84)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20080)
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0xfffffff4})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r2, 0x22e7c000) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r2, 0x22e7c000)

2m55.019437684s ago: executing program 6 (id=3699):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r1], 0x0) (async, rerun: 64)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (rerun: 64)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) (async)
ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000000)={0x184a, 0x2, [{0x1, 0x1}, {0x2}]})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

2m54.958780979s ago: executing program 6 (id=3700):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2000000000009237, 0x12)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x1000000, r4}, 0x10) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) (async)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)

2m54.924549792s ago: executing program 6 (id=3701):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0)
setreuid(0x0, 0x0)
syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = dup(r1)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0)
signalfd4(r0, &(0x7f0000000080)={[0x4bf0]}, 0x8, 0x80800)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x38, 0x0, &(0x7f0000000040)=[@dead_binder_done, @exit_looper, @enter_looper, @acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x2}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539401848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0759b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c3294068600000000"})
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000300)={0x0, 0xcd, ""/205})

2m53.873262467s ago: executing program 6 (id=3711):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x180)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0)
recvmmsg(r1, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001540)=""/229, 0xe5}, {&(0x7f0000005200)=""/4116, 0x1014}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2cf}, {{0x0, 0x0, 0x0}, 0x4}], 0x6, 0x12040, 0x0)
syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'erspan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r6, @ANYBLOB="14000380"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044014)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x100003, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x40000008, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0xffffffff, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x4, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0x5, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r7, &(0x7f0000000100)='reno\x00', 0x5)
write$tcp_congestion(r7, &(0x7f0000000300)='reno\x00', 0x5)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0xc4c03d12, &(0x7f0000000040)={{0x4eb, 0x109003ff}, {0x4eb, 0x109003ff}, 0x9, 0x6})

2m53.675136693s ago: executing program 6 (id=3714):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000000c0)="4b0003000000", 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}})
setuid(0xee00)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10)
setsockopt$sock_linger(r2, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000400000000000000000000fc02000000000000000000000000000003000600ff00000002"], 0x80}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090)
r6 = getpgrp(0x0)
syz_pidfd_open(r6, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
r8 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r6, r8, 0x7, r7, &(0x7f0000000180)={0xffffffffffffffff, r7, 0xfffffffd})
r9 = syz_open_procfs(r8, &(0x7f0000000100)='uid_map\x00')
setsockopt(0xffffffffffffffff, 0x90, 0x1, 0x0, 0x0)
read$FUSE(r9, &(0x7f00000005c0)={0x2020}, 0x2020)

2m53.387106516s ago: executing program 6 (id=3716):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) (async)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40a200, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0xffffffffffffff86, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/48, 0x30, 0x2, 0x3c}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/237, 0xed, 0x2, 0x8000000000000035}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) (async)
close_range(r5, r1, 0x2) (async)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x11) (async)
read(r6, &(0x7f0000000300)=""/132, 0x84) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

2m53.235859828s ago: executing program 37 (id=3716):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) (async)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40a200, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0xffffffffffffff86, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/48, 0x30, 0x2, 0x3c}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/237, 0xed, 0x2, 0x8000000000000035}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) (async)
close_range(r5, r1, 0x2) (async)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x11) (async)
read(r6, &(0x7f0000000300)=""/132, 0x84) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

2m49.158558037s ago: executing program 9 (id=3780):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3})
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x3065a7505c571d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x6c, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x5, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/46, 0x2e, 0x2, 0x14}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/13, 0xd, 0x0, 0x27}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}, 0x40}, @acquire, @free_buffer={0x40086303, r2}, @register_looper], 0xf9, 0x0, &(0x7f0000000280)="27e07553b63a54e7ece5cef44ab916b6c8afdda432d8cb20fee68a005983df4ba62f92b21cf3bfa7076cb22ea9a39fc3c3bfa5b4abf93246ce9a82e053d5b5ae6ed6113deec6a82f3d87413e49abad598e7d9c25a35f9166399317a9848f7c4306221fe68db364ccb67640fe6a1f1a6701b0cf9e0eadab37ee6d0ea95856d30980fb6c44c21809dc5a72f44defd77ce12ce77d986a15b3c1f76aacffcb39efe74a778d58c742607a4b2b812a7ede3d013b1eaff02298621b3b7d15a411a717c910f49b7ee50665a385172222be2754088c667017f958c3af648bdeeee838b8a1c1b3b7e6b4d954382799080d85cb5ecc080499fb8ffe8e312f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m49.037692227s ago: executing program 9 (id=3784):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0xffffffff, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2m48.437144576s ago: executing program 9 (id=3792):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x32077f3f2d25a68c, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20024001}, 0x50)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
exit(0x8)
setpriority(0x2, 0xff, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\xda\xfb\x8c#\x8cI\x8d\xaa^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\x00\x00\x00\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\xe5\x8b\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9}\xf7\xa9\x96P\x920Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\xd3\xfc\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xce\x1c\xb5\x85maJ\x0f\xf7+Y\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+W\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xdb\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc2]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[')

2m47.489613692s ago: executing program 9 (id=3803):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
symlink(&(0x7f00000024c0)='./file0/file0\x00', &(0x7f0000002500)='./file1\x00')
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8'])
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
sendfile(r1, r0, 0x0, 0x80000000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', <r5=>0x0, 0x8000, 0x700, 0x9, 0x7, {{0x17, 0x4, 0x0, 0xa, 0x5c, 0x67, 0x0, 0x2b, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0xe8, [@multicast2]}, @lsrr={0x83, 0xb, 0xf6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0xd9, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0x8c, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @empty, @multicast2]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xb, 0x70, [@dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800)

2m47.359482092s ago: executing program 9 (id=3804):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000001080)=""/4095, &(0x7f0000001000)=0xfff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000001c0))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1b)
tkill(0x0, 0x13)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000001140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109023b00010104909c09040000030206004d05240600b4bafae479e6244c0f010900000006000900080905820210000e0107090503020002080b03"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x3, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@verity_require}, {@uuid_off}, {@redirect_dir_off}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000140)={'#! ', '', [{0x20, 'verity=require'}, {0x20, 'ove\x18\x00NO\x03c\xec\x9arla\x84\x00'}, {0x20, '#! '}, {0x20, '\x00'/13}, {0x20, 'cpuacct.usage_sys\x00'}, {0x20, '#! '}]}, 0x4d)
copy_file_range(r4, &(0x7f0000000080), r3, 0x0, 0xfffffffffffffff8, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
getpeername$inet6(r5, &(0x7f00000000c0), &(0x7f0000000240)=0x7a)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKOPENZONE(r5, 0x40101286, &(0x7f0000000080)={0x4, 0x5})
ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
close_range(0xffffffffffffffff, r0, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0)

2m47.322529255s ago: executing program 9 (id=3805):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600400, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10) (async)
ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

2m47.288620608s ago: executing program 38 (id=3805):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600400, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10) (async)
ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

1m37.868974391s ago: executing program 3 (id=4446):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async)

1m37.672009097s ago: executing program 3 (id=4449):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x251, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x22, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2) (async)
r4 = socket(0x1, 0x5, 0x0) (async)
write(0xffffffffffffffff, &(0x7f0000000000)="8adc6364", 0x4) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x80000002}) (async)
epoll_pwait(r5, &(0x7f0000000040), 0x6, 0x6, 0x0, 0x1e) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000480)=0x1) (async)
ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x4083fc, 0x2, 0x20, 0x10000, 0x1b, "44112e88b82c520f13fb2359029c2556c6b600"}) (async)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) (async)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10140, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async)
syz_usb_control_io(r2, &(0x7f0000000500)={0x2c, &(0x7f0000000cc0)={0x40, 0x1, 0xa1, {0xa1, 0x4, "a6a37d8704a78fd4271798f15cef3c7bedd0227592fee549789afa9f834b4ff28181e0b8246b76c2c9a66cc23f3e010a2af4ff0b1af61bff64b72997f58e252b87f1059e270b7dae612d9ceedcbd0953345d9d55fda0c991ff681b75d486aa844109b177194d31a1283f5049e91efad6ea8e4ff5f66fec9ec2ae4ae6fd2ce1b65ca5e78ae03e589f31cad709b89c5b3b5ff24284fc01d0388b84acef673c36"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "4d032d096a8a0a02b8f4a11e6fd9f245ba0266b5d24ef888cb1bde182eb32c26aec5933d7ffbdd964abd27c9efc5093615ea5b92319c2ab94ba751e1d6b219bd246a590c1b1f91b0fd60"}}, &(0x7f00000002c0)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x6, 0x6, 0x5, 0xb6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x0, 0x7, 0x9, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xff, 0xf, 0x3, [0x3f00]}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x80, 0x5, 0x4, "f99f5bd3", "16e0c092"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0x6d, 0x6, 0xff, 0x1, 0xfffc}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x20, 0xb, 0x89, "6327eebfb213aab06b32872896a12dc2643a7d82e2e77e43af42c9e7cb7d08212fd0941a2fae271e5550bc7d254d1cae22e333f38026bfe0122867bece8e0cbec6e814141ddf9e9136c701c54e9bbd22863d5d1f4edd07b6c9ebf9e5eb3acf3b1e72696e5c19d73465423c7683393530ca9bd4166553dd66cbf260c1fe94258add48c62c7c87245b78"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x200, 0x20, [0x780f]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xfd}, &(0x7f0000000780)={0x40, 0xb, 0x2, "8b14"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000880)={0x40, 0x19, 0x2, "56a1"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x50}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x4}})
r8 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKGETNRZONES(r8, 0x80041285, &(0x7f0000000040)=0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x14a, 0x0, &(0x7f0000000ac0)="0c230c49b5a42b243bd7b7b1904a4b8581244fe0f0f5014a86c0f3a9ff09918d8bdfd4356787dbc1f66b79285ef7aa4f9209f28084a27e7b96c158ba52242033097a1c2243c23874f3a26940f5f91f813ce61637a0abeedd836d1fbd9db3161c45132b4b03a4dd4fe5541d2df18f1cdb3995718771703c1f9980444eb19044be6ded14234c651672f4bb67f6641ec61775ed67fed50109dd9ae5251a04cd90c33a1761b014bae317b18d7f77936d6b5ccb52e13dad94a7912b168a5bd5d5dadaaef156e25ab41b2b3ced0226ef6c301a353c61e66b3cd98365c4b174437333f4123a45b9600dd2d332d0d9898676683941b48ea8be9256df0ec523eaf4dc15e7bfbc6c1b0b9f77c38e082c520d730d0f4eba7234f1035e6cb60b5188a9eb1a803d78e55926695873c82dbd49d4ba59d1004ee1e9e7b77bde2d5b69fd778e07e8a55b8f9199da0fc459a6"}) (async)
socket$can_bcm(0x1d, 0x2, 0x2)

1m36.579373055s ago: executing program 3 (id=4456):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = dup3(r0, r0, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000380)=0x14)
setresuid(0xee01, 0x0, 0x0)
setfsuid(0x0)
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(0x0, r4)
read$FUSE(r1, &(0x7f0000000680)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
mount$cgroup(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x40060, &(0x7f00000026c0)={[{@nofavordynmods}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x62, 0x37, 0x38, 0x65, 0x31, 0x32, 0x33], 0x2d, [0x65, 0x38, 0x36, 0x61], 0x2d, [0x33, 0x63, 0x31, 0x65], 0x2d, [0x63, 0x34, 0x64, 0x31], 0x2d, [0x36, 0x38, 0x32, 0x39, 0x30, 0x38, 0x33, 0x63]}}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}, {@euid_gt={'euid>', r4}}, {@uid_lt={'uid<', r5}}]})
r6 = syz_pidfd_open(r2, 0x0)
r7 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$P9_RGETLOCK(r8, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r8, 0x407, 0x7000000)
statx(r8, &(0x7f0000000000)='./file0\x00', 0x800, 0x2, &(0x7f0000000580))
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0xfffffffffffffbfa)
r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]})
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010102020000082505a1a440000102030109025c00020104c07f0904000001020d0000052406000105240050040d240f01070000003e5c08007e06241a0700200905810320006107ff090401e7ff010d00000904010102020d000009058202ff030600010905030210000302b9"], 0x0)
ioctl$EVIOCRMFF(r10, 0xc0085508, &(0x7f0000000500)=0x18)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0x28, 0x2, 0x4}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

1m35.637395791s ago: executing program 3 (id=4466):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x18e)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7)

1m35.574405736s ago: executing program 3 (id=4467):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4c, 0x0, 0x1, 0x3}, {0x16, 0x0, 0x0, 0xfffffffd}]}) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendfile(r0, r0, 0x0, 0x7ffff000)

1m35.423091228s ago: executing program 3 (id=4468):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000008000000", @ANYBLOB="18001280140002"], 0x38}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4)
io_setup(0x7f, &(0x7f0000000100)=<r3=>0x0)
r4 = eventfd(0x8e)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000180)=0x1, 0x4)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2}, {}, {r2, 0x2}, {r2, 0x479e}], 0x4, 0x0, 0x0, 0x0)

1m35.422490878s ago: executing program 39 (id=4468):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000008000000", @ANYBLOB="18001280140002"], 0x38}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4)
io_setup(0x7f, &(0x7f0000000100)=<r3=>0x0)
r4 = eventfd(0x8e)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000180)=0x1, 0x4)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2}, {}, {r2, 0x2}, {r2, 0x479e}], 0x4, 0x0, 0x0, 0x0)

43.821930423s ago: executing program 2 (id=4916):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) (async)
r1 = dup(r0)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$bt_hci(r1, 0x0, 0x6)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) (async)
prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) (async)
listen(0xffffffffffffffff, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r3=>0x0}, &(0x7f00000001c0)=0xc)
r4 = syz_open_procfs(r3, &(0x7f0000000040)='io\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) (async)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) (async)
writev(r2, &(0x7f0000000640)=[{&(0x7f00000000c0)="a6", 0x1}], 0x1)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RNDADDTOENTCNT(r7, 0x40045201, &(0x7f0000000000)=0x7) (async)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) (async)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r8, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

43.758564328s ago: executing program 8 (id=4918):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = dup2(r2, r2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) (async)
sendfile(r0, r0, 0x0, 0xd)

43.707059502s ago: executing program 8 (id=4919):
ftruncate(0xffffffffffffffff, 0x398a0bdb) (async)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0) (async)
r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_clone(0x1a254400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

43.6154286s ago: executing program 2 (id=4921):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0)
setresuid(0x0, 0x0, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
pipe2$9p(&(0x7f0000001900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000500)=@x86={0xfb, 0x5, 0x25, 0x0, 0xd99e, 0x7, 0xff, 0xa, 0x0, 0x6, 0x9, 0x81, 0x0, 0x65, 0xa, 0x80, 0x2, 0x7, 0x8, '\x00', 0x40})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0xfffffffffffffea4, {0x100000, 0xffff1000, 0x2}}, "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", "8e30814b88385af58b5dcabb93ae43360c33d1349190a122e36383209967553f233d0063a094cc419b89db51c47c409efaba18286ea899feb37aa2f9471b92e9e9b3b7b1d4a175087f6ff44cd120a2fd04ebe1d0259c96769612305a343cd7a59f07e9ff415f6515e998b4846d3eff38b59ddf2b50724fd9ec62fa5097704d8c887fa488ccfef200023f14be5ec35703db3cdeab2a4d7b577789a5f2249da5b084f916d1f3c557809a47b548464b046330dda580e66b916fade0a15f002e60e60e1afcc2050054a7d0cb3e659a824cce3f5b45f4aea079ad14ca9399116d6dc61091708ac2429cfb8094784a5b9ce788768b54fef389637874b87422b5cbebf72f1eb779e9dd3ad9ef617b7230e5ed7c58aa4d9260210828944a29e9b79bb82cc131bb13a2b97faf648b4e00744b8d2c4feda8bc0424b8c99414e0be9896e0c4f06e20f1a4db1f49d99c65fad15729ec72311413768f18d89161cb6137d4932507e849e50656798d191b041afb2c57eb64c019e4a28e8fd88b36657aa3321622a54a1ac9371a3561ff834ed4fab50d8546f368c91fc5aa1e2d40a63c16f44287b869ec34ee5188ab838941e963f7d70727b9bbb5c81d696ab3ba2c3a41c0202cab3f587a4e89556cf567e156a9582970c2e25a425edcaaf4992794e189ae6c408f0fe2b151ee42aa9b65f639eb2244b61df9cbe12547488be53c592b3fda5de2227f958570fd94f96cd1ef69800cb26d1413faabbbb68e4e11d19670ea0b1a696a77494169a92cf2887777ba6340c90e47d52a3af2f09f6b0647aa796babf0f76c75441deb0ff1c5c08ef1db155bff4e8a895d5745b95b513fa47bb49b1507b81df47d9c4cd184a4365b1c5e0f7b0ba058d91dda76a8785cf19c3c9e82516b7b296424ba796fcf2b6167882af6e3d111dcbe728972d019e9dca27c95ef8d9ff739fea53d6b94ce2a8d228d785db8f14773993912d185c7c7bdb4e475253a9c770f11b9fd152e335302683f997941f9d6ca8a6aa9ec9e6341ceefb779c7f6e5b2f0676b274150dcad34ade5f3a5e0b1487d6ebb0cfecc46b93440571ad791d2c8b034cbbfa77dc8e2d39b859f77433e8ec0c8007bf0026c42da0d31f098e0f2c01d76880cfd0f5e5f1a4f3731f236d95ac5af6cf8e1e35641bc1c118927d107da9fb85fed7c8eec1fff7e92051653346683c17338a74f87657d35b1a7a601522e6d4202473580934bb3ba17ab9989915f626a86ddbe54f919ee5f45d3f9c7a7cdd114ecbf93f557dde83f9db0e90f7dbb68d12128de3138643f422521c0d7a7c27ffdaf17649119f285419c4eed197911294d111bdb836d608b5883c54df1def92fbc7f40694a13e1e3c1cee0a27d26013729f55b8ba506be8a67e2e2cc90649e20e453a1c4220062c41dc3b22ed47c2ca658318aedec6e0aeddbeafce7e76869b16aa3aa5e8777c943752aba12ae99fa826cea93dd10e77b9dffd6c7609870e9ce19434f05466e62a9bb64db48c251b5a2e254345da803f787ae31c0df5f776969a761bde6238ef2a6b355fcac6c8824d36a998535c519d25c59aad2df743657e61846e4353b48f4376d9e31b3586e674267eebdfdc4cea41c4a2a01b7b3f3fcd7acacf087eb468290661aa914c3d5efa2fc4edfb032605d2592b9095cda07ea30acee0c37cff6f9f3311d3a7cc026324bdd55f4d1c0e3589700f53763f4d19705a7ea5eec5128a3bca8b69340589137d24c96f5e9e2a7047e205f50310ef84f665ce36fcb5bd068251291d9c69da2405c926dc572dd0bdd0541b2b33fcdccb62a4b969c1ebb16fb2d7b5348b5d82fdb03ea7c7430264f357d27eb50f5af26a90b3b69ffc21064e9e3dc995008596e3a7339c230ed68873d5161342bd12e74411d0e0a9585395538a56da1d6a190a7f4d825b45f8a2cddc233fecd2c8e7e3438589e2a4002fda7ed6ee2f922161d02f61fe69437e7a17d2302695d3612a618f77819e8eccd5c23e8f4547b1d38910db8ac44a48ed3de2c039ea1ef427a1b9e75a702e9cb6d9c5260dcb898cf5c91408aaba4e4955cbf35742fa4d8c33bcfef93744e248ac2280b9713aeac8fc0f55434018b84a9b2e66a1703017cb05be725634bbf0c29ea40c090441bd14960afc961208784c1a004c010aa4b3452b16e5f213e0ba9d2578cd0911ea18fa0ccb9def5033c6762208c1ca253b140a13993d15f97822be6be430732f64c078dcd1bb05ed20197f5a4c9cfee50c6bf65e16cf88f1ec7db8752eecb4c5a151363004e5b1a9a4f98f782f34443138f6988be09fa585e7bd012e702f620385db9e0db2779b7a442320751e97845ec44a959ba8606d00f6335997e550427df6744a6f9635cbbd9cd4e4594d154ab9626155b7daffb77600d028bb262d0d3b6f49e9bae034072e041871f90876faeba868a784393e827a2f2881ad1a5b46de1cdd58c1caa3631fb630c224e430928e13eb06342b3f12ce0ae7b0c94f968fb7d1daa907431d6c85f9a9ebc5c4b9ee522fd242e236799f90e0f94bb9197feb341c885923ae4679114d8f2959e50e49cee9a54b4482fd84a0a4480f9cacaa4ac2d7814c865488553569c399bc66b17bab67063517532f501e1a0860283ad55218c8d4d655ecbd08d0dc85331cc04856630ebb7b399ef72be67d71e61eee4fe43dbef00383637734723aeaf8f02d184f30e42f518b6d35c228595b2b329c17a09d293230206935588149216d56da57ac9e363d37fea09fa1838fcb6ec24a4d39c146d8cb88f2503d284202d1ae33c99110a828a1c3874dd90b3a8a1954589080d362a70bb4fc8b6d63f04e73235a1af4ae34fd97f722bfd7c5d5be8f4506c9d70853c4febc0fd069d6d5f25ac12a67eca49660b59aeac7a9ebbcd81bf64f2459df3a5f17bc70c2d571a8cc17f016b16f9231d75df9ed1f8163ea499e8e9d2526f21974d3a1e5f33d9c7bba0681f2d1663b857625588f58ca1259ffde864288c9f3e7811671185dc40353351f561a4eb61cb5ee4d936efea721dad940c10c208c1ce930b43cf3b4323ff0811b1334e7c806ec1ae4340692ebf4fb07ccb4060a341e55ae612ce52ee6a9c779365308840c962dbe5c7c42d1d8981c1bbc0e67d034e6d26548faeaf5e618b64fc55949be0dc4312d474957d61223a0c63289c16996b43d0a8c5c076a71d1be5fd4b8ff07b7c9829e3aad31dc22392b9d998efc7ccaa7210eeb2bc94b4fa3b090e29ec8586bf5268f692c95c660129331015a88b9437260d76962f34eefa2da6a86cb633677905456bb8e8c7b336c6a1e64dd915b200eb2e2b46a319dd5084572fd13fe88db00275b4aef36e188ac653c365825e369c34fa09a865c5c7a4c6e64629960ca37e6146f11fbe9e81ff4b1042325df45ff65c22475473a7864e687f02db7cd7faaaf8838a148bc6bc845c884c4236571a59f6ef555df0dca505c268edf9cc01da6ccf32bf45dd9fe0fb32efa86069b5ef70b4198e7eb636ec8461a022a9a5e4c1df3d6d5f8ac621f7810f3af3fe26198eef1e382a8a47f1a0e7b7ecc08de917206cff66d3ae5915febbb032bb6bf109ba5fdf6ca8ceb3cd36fb2048a5fd3cc364e017ffc87ed7bf66381b6923f16585969141dc852f07a6ed19aacac9569eb099cb6196c9c65ee50a2dff15d9dd0e667d4ac8dec4dee3e5431092ae9636b97786373d3b19ec44aab64ab0aa044278bdb3d6160dcf625a6e0dd45748132857c7fc2a412575d0b4921ce13187664795ac05c79cd72590f1b6b4c0a3e4f82c04b064818ea95d66b4a6814e0908e82209923bb3015bd8130a1867e2245971b16bc3f759d2075666e2cd1ddb39145d4e9eb862a6cbb30cf535c811fda9c7fcb9227277bd04c05d5ebafa5aeb8d725156f821652fa1ecb09ff3f4e147328c05345ec99f1af306f7112e6b1482d22d0b6c46c95805c6e579a10047809a324397ebf431d21c3ac5336cfbd057b8bcdb098c7b4011d1076c8e762e3521f29d18beb88c4661d9a315501aad69c828260ef3656d371cdc9b0a5c893c05032613fd6069ce89e21673ac8998fba609d6ca6b4786fe8521f9482cedd581f8a5f253bed3f0c8fe7d053f0da098bfc0703607675dbbb4ebff2337b8bba505a28d4a88d9f41d7afc250a0c078f0d57a4ec7a628a31d142b7b050afbaf0007f91f706a539da270a96423d29b50acc8223a22e35e8bff410a15f2c53dbb0bc2baa72e3c17f3df35a4237c4ecbdd3ca93b6c85c0decf959ad8269d3df4b15d0064148c26b8f4ece2ef2cb5eb32b003c66b0793dcf7fcf3c8c792396094863e7eed471d7ebbf27d86d21352738862b5740e042b28adba300a1e3a18736c943eaa2e855b958df85ae713c1f4f3e66f6549825b7312d9116e4d11b358012ce9f980c4d508015e69cdc7c8da31b436fb8b59e3bc1b358ce68527289e9c2831c7a3c6532a1291f6f698349626539f810aac595e831c05b77af38755e90bfe2c43da83fadda1a01d0befb6c4eb761ba007e1a8b0fd08d5f62b70283f847ede9d1e673f301807e29f9c0eb48c8eeee8bc9a735ab36dba7b0a97c52e5bd6d594bf818643b8f654f488ca36b28c7d39f6009d39b114dc48148766b410618fe091203f77d3db1c976878f52cb53b2586069a6cdba8b3f0a54cd929e9741303aff83d2f59d60af46b40bb0aaeb480ec590cfc701db447c601f52deec7a8694c67318a0a5479327fee4fcd4e22caa357dd0d66cc13bef06ea49796deabd33c575ae7035288609e0ce0320d022ae2052e2a5d5936a01bd10b902000000f7efb95c8344a52487b688760dbdea5d0528fbe4c45b346ca68687d9fbb7dacfd9192f3c7ed73833d432dfea1108d50029f4362b33882b536b178abb208e36e38ac0cb868c650fbb9a7269e119fc717fe9707fbf706ac1371a799f282d50282f65839a445162c3ad67eb91d725abc5fe61d305c502bb3003590d6eb108dc93157c5f4542cfc56b15db2b1fa4686ec3d9f673d85ab6ba62b3b26e3e315b6e8e358ba67bbcefa3a6cf83c458c12df7fbc886563540db5eaf26d14e1ddbf026ee722a293c6907c794b3beae0f1017e7afecd874e04248dcec80f15c632d402dbf3f727a7863709b351fec3b2c6c9ac3b73c698c6f51eed1073f71e9f1cea375f7bbe2d5f9c003dbfdcbf02c14519a40d160cf9bf05a3f25ccdbedcba02b5f6376433d8ad76d20e4aa72d39cdb1fffb3e80760effe0157b4574a0274cbeb386188eae7c5d0b3b8d7a46fc224cc28f7e1428eb2f2123e0f752892d714afce143e35105f1184a615bc10a2e121a572a493d08500c6c6cf1fcf7114b91cea03d827fac1d86af2773462c83b17b255e6c19e13401eecedd2b65e2123a5a9ee7d59a3e96737153edf08f8607a5dfdf1c89b29935125f07211976cf14da7ff01f07eb46c247dca599af2fcdcc9119b2fc50b7391588e53f1f2f172ea544cd469bda326dab5cf7f8b9324d3d9cd1769efab2c46813a2d614f7e9ac66fd5c1c7a4a0202fa6da531fe304f19a8a8fcbdcd9106c8d33a4782c4ce764616373e0cb136f15ca85283346a2ed7308a7448da5e562d98625996c9da63a2665ac728ddddd54e243cf0b0884360b3aa876894c41a62cd3ddc947cdd5397e6c4f9682b59ab049608bbd8bff192bb9eb37b92555434a40cf9e3aeceb2eea9ed6513be7da15f6d8518ea4d85a01f0bb064a03fa3f0c00"})
close_range(r0, 0xffffffffffffffff, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="73fa0f"])

43.455536723s ago: executing program 2 (id=4924):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x20000, 0x88)
read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

43.427233235s ago: executing program 2 (id=4926):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000380), 0x10) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x3}, @acquire_done={0x40106309, 0x100}], 0x0, 0x0, 0x0}) (async)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r2 = gettid() (async)
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6})
r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
read(r4, &(0x7f0000000740)=""/384, 0x200008c0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x1}, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0xffffffff}, @acquire_done], 0x87, 0x0, &(0x7f0000000ac0)="0c230c49b5a42b243bd7b7b1904a4b8581244fe0f0f5014a86c0f3a9ff09918d8bdfd4356787dbc1f66b79285ef7aa4f9209f28084a27e7b96c158ba52242033097a1c2243c23874f3a26940f5f91f813ce61637a0abeedd836d1fbd9db3161c45132b4b03a4dd4fe5541d2df18f1cdb3995718771703c1f9980444eb19044be6ded14234c6516"})
r5 = socket(0x31, 0x5, 0xfffffffc)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000001480)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '^^-&\'-,-I{%\'/)'}, {0x20, '-'}], 0xa, "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"}, 0x101e)
r6 = socket$unix(0x1, 0x2, 0x0)
getsockname$unix(r6, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r5) (async)
r7 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x200200, 0x16, 0x12}, 0x18)
ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000340)) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async)
ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000580)={{{0x7, 0x1}}, 0x32, 0xd, &(0x7f0000000540)="a155b947b9c3d4887203a2c53786e85b366be87abc95395ef9261c6c95347fbbbe7de9908a948f134582f4249acf76ab4a1f"}) (async)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x800) (async)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close_range(r0, r9, 0x0) (async)
ioctl$KVM_GET_DEVICE_ATTR_vm(r8, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0xf84, 0xffff0001}}) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r11, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x4000}) (async)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

43.333193793s ago: executing program 2 (id=4927):
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000280))
r1 = socket(0x2, 0x1, 0x101)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000140)={0x12c, 0x16, &(0x7f00000002c0)="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"})
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000080)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
accept4(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x800)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt(r4, 0x0, 0x8001, &(0x7f0000000e00)="129a0a6b6b536e123c359b237855b367813fa23269bdead37faf05634e5a88cbaeb2dd64a5fb4abe697b606b31ed53351d5b4a673f03f859c0e71939c04db89bb7c090", 0x43)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

43.138025919s ago: executing program 8 (id=4929):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11)
syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r1, r1, 0x0)

42.531425848s ago: executing program 8 (id=4931):
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) (async)
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x3a8, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdfc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x27, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe402}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xccf0}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "1cd0948f1076429ece64adde0b4260b9a228223bba9682a1d3773f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c3d}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "f8d7ef7517ce1e5e3bc229a7c42284e60d0f0c5776"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d71f88fec2ad991e6602f7183b3e54c044738c05fe6432"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "024012bfef9b43eca61a1d4d8e4d02ed46e78981b60192a7b1713f99813471"}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4008082}, 0x4000044) (async)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)

42.527629948s ago: executing program 8 (id=4932):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}}], 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x8, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000040))
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

42.358869451s ago: executing program 8 (id=4933):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@release], 0x0, 0x0, 0x0}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x70, 0x1, [@m_ipt={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "a3ff72cc5ea43a7b017ad2530e095a3d5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async, rerun: 64)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4)
sendto$packet(r2, &(0x7f00000003c0)="3f032b00eee8140006001e0089e9aaa911d7c2290f0088f71327c9167c643c4a1b7880610cc96655b1b141ab2a416be6ce1ee73c4690cb466ebf", 0x3a, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) (async, rerun: 64)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12008000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00nlR^', @ANYRES16=r6, @ANYBLOB="10002abd7000fedbdf25520000000400cf0006004800090000000800cb00000100000400cf00050089008000000006004800420000000800cb00030000000a00060008021100000100000400cf000500880004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x22080084}, 0x44040) (rerun: 64)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) (rerun: 64)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x24) (async)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req={0x4000, 0x93fb, 0x8, 0x5}, 0x10) (async)
bind$tipc(r10, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000480)={0x3, 'wg1\x00', {0xea97}, 0x2}) (async)
read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) (async, rerun: 64)
openat$cgroup_int(r8, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) (async, rerun: 64)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')

41.659528978s ago: executing program 5 (id=4935):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x361081, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x361081, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/137)

41.654356178s ago: executing program 5 (id=4936):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x167982, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x10ac, 0x10004, 0x7, 0x82, 0x6, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) (async)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2d, 0x12, 0x1, {0x2, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @tcp_ip4_spec={@empty, @loopback, 0x4e23, 0x4e24, 0x7f}, {0x0, @local, 0xb289, 0x3, [0x401]}, 0xfffffffffffff200, 0xe}}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000600)=[@release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/81, 0x51, 0x1, 0x2c}, @flat=@handle={0x73682a85, 0x1001, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x3}], 0xf4, 0x0, &(0x7f0000000300)="8b0b4c404981a6ef39f577efb9c2c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490a7a70bc561639b136ecae6c156d049529c0e63c6e089b955747c3edac15700990f017016cbcfc0692516c1b24ba79c86ea068371871ab97a17b58531c55a12480385d342e158e34a882a5a0cff95053fdb72f98a4b2757f955a135439288c6360e592f4a0fccf15d649567eb9f49d4109f403aec4c575785c160ba2b3a0b9b41ac1744ab8093fb6a46e0c9f979783d7f1629e892fd64e8c99f271eedceb3ed017502166b850aaa99075f2b261d87f37d8f62bfae2686641f9b2fcd8f0dc1acf24236b3253b21143e"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

41.619553351s ago: executing program 5 (id=4937):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000080)={[{@max={'max', 0x3d, 0x20000000000}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x7}}]})

41.582336814s ago: executing program 5 (id=4938):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0xa)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000100)={0x0, 0x5}) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={0x0, "4bd9b757cf69a34efdd7322468efe82e"}) (async)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x8, 0x2, &(0x7f0000000180)=0x1}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
unshare(0x40400) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x4a)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000080)=[{&(0x7f0000000400)}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000c) (async)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000080)={0x6})
ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x3, 0x5})

41.495173771s ago: executing program 5 (id=4939):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x400000000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0xb00}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
listen(r1, 0x1)
recvmmsg(r3, &(0x7f0000003900)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/157, 0x9d}], 0x1, &(0x7f0000000640)=""/126, 0x7e}, 0x9}, {{&(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/97, 0x61}, {&(0x7f0000002ec0)=""/199, 0xc7}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000b00)=""/183, 0xb7}, {&(0x7f0000000bc0)=""/156, 0x9c}, {&(0x7f0000000c80)=""/114, 0x72}], 0xa, &(0x7f0000000dc0)=""/81, 0x51}, 0xfffffff7}, {{&(0x7f0000000e40)=@nfc, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000f40)=""/15, 0xf}, {&(0x7f0000000f80)=""/185, 0xb9}], 0x3}, 0x1fffe00}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001080)=""/117, 0x75}, {&(0x7f0000001100)=""/207, 0xcf}, {&(0x7f0000001200)=""/178, 0xb2}, {&(0x7f0000000980)=""/8, 0x8}, {&(0x7f0000001300)=""/247, 0xf7}, {&(0x7f0000001400)=""/82, 0x52}, {&(0x7f0000003bc0)=""/133, 0x85}], 0x7, &(0x7f0000001580)}, 0x1}, {{&(0x7f00000015c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000002a80)=""/213, 0xd5}, 0x4}, {{&(0x7f0000002b80), 0x80, &(0x7f0000003100)=[{&(0x7f0000002c00)=""/244, 0xf4}, {&(0x7f0000001640)=""/95, 0x5f}, {&(0x7f0000000a40)=""/19, 0x13}, {&(0x7f0000003d80)=""/212, 0xd4}, {&(0x7f0000003c80)=""/214, 0xd6}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/194, 0xc2}], 0x7}}, {{&(0x7f0000003180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000003e80), 0x0, &(0x7f00000034c0)=""/246, 0xf6}, 0x2}, {{&(0x7f00000035c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003640)=""/112, 0x70}], 0x1}, 0x3}, {{&(0x7f0000003700)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003780)=""/19, 0x13}], 0x1, &(0x7f0000003800)=""/238, 0xee}}], 0x9, 0x2, 0x0)
accept4(r2, &(0x7f0000003b40)=@qipcrtr, &(0x7f0000002fc0)=0x80, 0x8aa30554d51441e2)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001580)={0x6, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0xfffffb4b}, @calipso={0x7, 0x20, {0x1, 0x6, 0xb7, 0x8, [0x4, 0x30, 0x7]}}]}, 0x38)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
listen(r1, 0x0) (async)
accept4(r1, 0x0, 0x0, 0x400000000000000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0xb00}, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
listen(r1, 0x1) (async)
recvmmsg(r3, &(0x7f0000003900)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/157, 0x9d}], 0x1, &(0x7f0000000640)=""/126, 0x7e}, 0x9}, {{&(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/97, 0x61}, {&(0x7f0000002ec0)=""/199, 0xc7}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000b00)=""/183, 0xb7}, {&(0x7f0000000bc0)=""/156, 0x9c}, {&(0x7f0000000c80)=""/114, 0x72}], 0xa, &(0x7f0000000dc0)=""/81, 0x51}, 0xfffffff7}, {{&(0x7f0000000e40)=@nfc, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000f40)=""/15, 0xf}, {&(0x7f0000000f80)=""/185, 0xb9}], 0x3}, 0x1fffe00}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001080)=""/117, 0x75}, {&(0x7f0000001100)=""/207, 0xcf}, {&(0x7f0000001200)=""/178, 0xb2}, {&(0x7f0000000980)=""/8, 0x8}, {&(0x7f0000001300)=""/247, 0xf7}, {&(0x7f0000001400)=""/82, 0x52}, {&(0x7f0000003bc0)=""/133, 0x85}], 0x7, &(0x7f0000001580)}, 0x1}, {{&(0x7f00000015c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000002a80)=""/213, 0xd5}, 0x4}, {{&(0x7f0000002b80), 0x80, &(0x7f0000003100)=[{&(0x7f0000002c00)=""/244, 0xf4}, {&(0x7f0000001640)=""/95, 0x5f}, {&(0x7f0000000a40)=""/19, 0x13}, {&(0x7f0000003d80)=""/212, 0xd4}, {&(0x7f0000003c80)=""/214, 0xd6}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/194, 0xc2}], 0x7}}, {{&(0x7f0000003180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000003e80), 0x0, &(0x7f00000034c0)=""/246, 0xf6}, 0x2}, {{&(0x7f00000035c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003640)=""/112, 0x70}], 0x1}, 0x3}, {{&(0x7f0000003700)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003780)=""/19, 0x13}], 0x1, &(0x7f0000003800)=""/238, 0xee}}], 0x9, 0x2, 0x0) (async)
accept4(r2, &(0x7f0000003b40)=@qipcrtr, &(0x7f0000002fc0)=0x80, 0x8aa30554d51441e2) (async)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001580)={0x6, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0xfffffb4b}, @calipso={0x7, 0x20, {0x1, 0x6, 0xb7, 0x8, [0x4, 0x30, 0x7]}}]}, 0x38) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async)

41.37842206s ago: executing program 5 (id=4940):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x28a0c1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet_msfilter(r2, 0x0, 0x1a, &(0x7f0000000080)=ANY=[], 0x18)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000000140)="b7f29622ed4d5de27273b3ca3a0557ad90f330efb7badf1334fc9ca18991083e6afe16ce96e2267206e74b63fa0760ba8d7e13ce4e37564d", 0x38, 0x20000000, &(0x7f0000000180)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x1094, r5, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x107d, 0x2a, [@measure_req={0x26, 0x1003, {0xdc, 0x1, 0x6, "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"}}, @supported_rates={0x1, 0x7, [{0x6, 0x1}, {0x48, 0x1}, {0x1c, 0x1}, {0xd}, {0x57, 0x1}, {0x46, 0x1}, {0x4, 0x1}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x40, 0x1, @broadcast, 0x6, @value=@broadcast, 0x93, 0xff, @device_a, 0x4}}, @random={0xfe, 0x20, "4f44270345d99b2ae14c740625825a8506f07d6fd0914f9427ef5447df861bd2"}, @sec_chan_ofs={0x3e, 0x1}, @rann={0x7e, 0x15, {{0x1}, 0x7, 0x7, @broadcast, 0x4, 0xffffffff, 0x5}}, @peer_mgmt={0x75, 0x6, {0x1, 0xff, @void, @val=0x3e, @void}}]}]}, 0x1094}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000004)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x14, r6, 0x333, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x1000, {0x205c2, 0x3, 0x3, 0xfec, 0xfffffffa}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240))
socket$tipc(0x1e, 0x5, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d0c2600c, 0x11, r0, 0xb085c000)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x3, [@private=0xa010102, @multicast1, @multicast1]}, 0x1c)
r9 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x100)
sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001680)={0x2b4, 0x1, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_PAYLOAD={0x70, 0xa, "21d267527543c2b8ac171fc45efacf367c3955784efe1fdb496e027110ddcaafd26ca22b372f3df9244c8f6be2a46ebd98b0a9bc7e93d46e2ec13af67615e7978a2540c83b5567a01f8e98daf40cfcdfc08663c3402c832101c83b9814d82c74ccaed9fefed8581f5c9e923b"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xffffffff}}, @NFQA_PAYLOAD={0x3f, 0xa, "31bcb46963353fe4b43ad5f1a85650fb01de897a220ac79d97ee43640476bfe97fcf40852d0cf838a5d618ffee902db02b5081baef3e3eb84ac2c0"}, @NFQA_PAYLOAD={0xa6, 0xa, "295fefa5d10b34bc6fd6eaa5e39ac2fa6fd7a5205b19b7aab9393e16f9f103c67dde91f897ca3a94227bcd3e15dab8d10838c5ce9ca025c2956cfb09c235a285cb4766d477428506d1f2427cd9a7f1659df78ebaadd59a941ae91eae9349dedca91fcf1188c97887d3093f2a2e5519a44f73d82097dd00bb8c8904904ca922fbb24d93db9fa393faf38d72b64aec14d3b0bef53c96a20fddfa7651b9084b382f0ee7"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x200}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x100, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4ce5}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x45b}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)

41.25992279s ago: executing program 7 (id=4942):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000140)) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x1, 0x2, {0x1f}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) (async)
madvise(&(0x7f0000851000/0x3000)=nil, 0x3000, 0x64) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x20) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x4, 0x7f, 0x8000, 0x5, 0x2, 0x4, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x800, 0x8000000000000000, 0x81, 0x3, 0x2, 0x8], 0x10000, 0x40800})

41.042385268s ago: executing program 7 (id=4943):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='E', 0x1)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0xd, 0x5, 0x0, 0xffff, 0x80, 0x0, 0x2, 0xf2, 0x4, 0x7, 0x4, 0x0, 0x3, 0x7, 0x0, 0x8, 0x8, 0x7, '\x00', 0xc, 0x2})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000680)=ANY=[])
r5 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r5, 0x3a, 0x1, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000240))
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f00000002c0)={0xa4, 0x0, 0x1})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/670], 0x29e})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00')
exit(0xfffffffffffffff7)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
r8 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r8, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200)

40.979490363s ago: executing program 2 (id=4944):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x20010, r0, 0x158c000) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x80000)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

40.017314681s ago: executing program 7 (id=4945):
syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc010000190001000000000010000000fe8000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000001000000000000000000000000000000000000010000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000300ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000008000000000000ff020000000000000100000000000001000000003200000000000000e00000010000000000000000000000000335000003000100000000000000000000000000ff0100000000000000000000000000010000000032"], 0x1fc}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r2 = geteuid()
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="f4229931ffec9366643d818c56e123cbc9dca2d637cd36cd924678750b3e94563453c8492f54757441bf468ec50c15ec3d6998c7bfd882581411031b9f974b0ab212c7e82faa3121ae2bc33eaae2138aefa2e093de7d1c9623126bb14fbe295c383e94fb3f777e9a9afcd7d941f30e51714c66b233777a85c572fdfa0c86a86eb8a0bcd9f2e345e9df42c0", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,max_read=0x0000000000000004,\x00'])
socket(0x10, 0x3, 0x0)
read$FUSE(r1, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1)

39.739147362s ago: executing program 7 (id=4946):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x16, 0x3, "24172c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0xb, 0x2, "a4c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000340)={0x40, 0x5, 0x74, {0x74, 0x8, "d46472afb1975d4e51ea89e5e2440f0e4d9b6b5b20d7c16e4a4b4e361947514401b86dd1e034976c34793c0de1101eb7d8031d109f05cdf84dab5b7e70e1161d679b4cd0e001e30a6a94eaca3d64a77915758b2e25b584dd58753623da30a75437f70bf0993fdacd9a46097acdaa2415c56f"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)={0x20, 0x10, 0x5d, "c460409b0d6073050363219ee5aa95ca071b6fc45181182de08fa7f02efbac304beeeda1e5ab828189073af78b25c47c6aac837dc28642f722f61966819a683985cef9a99115b74110ff580d58b9571e354fd5f48f644d4e8f3be05ff1"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0xed, {0xeb, "69cc6d2eeca1c203ab3139641b2f9160776c7fb92de211ed79d99138ad7c3ad66f76d8375362b320f01a840e6cc9497fda7b34c71eba0d1beaeeec563392e7f6041c4b1d18ddeba1a74984896630a5a80d7e2bafd57d794f2809499a9018e9d9e6e0ea97d931c2bcf3c22d4a82a80e1219226c389c3f247f57cf55c0487337cb07fbac335c08990907f3e3b66908710eefc5893137733d2ebdcd73f20217a26544fc309adba9b916f6049d2c3fffe09d9cb4bdb48369f4e49578fbb64139c39ed1b4a7c94f789ffe625b026347cef22b9493439f70617895a5867b99e5421ca2da29443137913c970586e9"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0xfa}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0xe}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})

30.168250825s ago: executing program 7 (id=4947):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r1 = syz_usb_connect$cdc_ecm(0x3, 0x91, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x10, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "449b54"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x87d, 0x9, 0x4}, [@mdlm_detail={0x2a, 0x24, 0x13, 0x6, "66373cc64ffc0794964c367eb5303373ed579aa951032aa84794a39328b7c59e83f9b85d1529"}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x3, [0x8, 0xff, 0xa, 0x81]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd5, 0x10, 0xf2}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0xf8, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0xdc, 0x4, 0x20, 0x7}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x5, 0xf000, 0x6, [0x0]}]}, 0x1555555555555905, [{0xf2, &(0x7f0000000640)=@string={0xf2, 0x3, "242262da250bc7330a61947e0750122196787cc91e7ec6cfb0240c53b21c0cdf29fabc0b1c61ece6f2b78a66b3ded71d3815797e80258b86a40dcf912f86cb3a5676e4ccce49ead50107eba56e48186031235e3eb9b925de45718c0aff076e60f76db0364f373a19e31d5e13c654104e2f3433d112dd537a549e3db434200af06336f9f1531f84054ee6acdac2b194603058a6309368c1b5fdb2e489068a1e7a3770c17e1398592f1dd8fbb4d0da49b8c8fd99d48e989d99201d5f4f4f1a594ccab177c0602087939e17b04e28baa511953f1d38f1aa44b0de7e5574f91459ad8f8a15858bd9102b8732b8f281a60016"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x422}}, {0xb7, &(0x7f0000000740)=@string={0xb7, 0x3, "95e8f025baa0497f7a7c70ff57dc5cd5e5c4d63c446ea0c0ad8016ea398c8c92f4ba35bcd839f9cb829916efaec620ddbe82ee9daf80ba874bea25c9a1dca1a29db68dba200bcb9dfbdde2b0c0719c1bdc36975520251845c2cf4479154b32d6e9b6cdd9b69b0d621de3bfbd18f3b82a6836bb4f9a5cb30fbb077a8c99279f7b6c094c9f1026209f1012966d3ac4615685e9503c6bfdf0569a72c0405027199c9b1c2a90f3e5084e88f3508196926afc925677b2bd"}}, {0x17, &(0x7f00000001c0)=@string={0x17, 0x3, "281e943d5ddb784cdc494ae0be61ca702da9dd86df"}}, {0x8d, &(0x7f0000000800)=@string={0x8d, 0x3, "e797b4a0f4466c850898d03011e2a44e65b7f2d2a8a08067eaa56fa97ba3d72b9b28473180918cd17e5013d7a61895a94b5a91111b0635542c267be3154f7897ac94d46469dbc358228ded791384c10ac2fcc58a66099db58058014149585cdafa4fb3a916867176ae63d99bcad15a54dde4ca0115f65750b0c2d6a75cd4068d7242d0dee27290cee0babf"}}, {0x58, &(0x7f00000008c0)=@string={0x58, 0x3, "c1e2337f2f493ba89cf54f404856946b68be1decd73185dfe6023e84e7a4dc37bbe8d75c7985adcbc624db787f195706d3bc2b772d5f36188e93bbf9c0696e251718d707a554673a6741092b25282088418b72a85416"}}]})
syz_usb_control_io(r1, &(0x7f0000000c40)={0x2c, &(0x7f0000000400)={0x20, 0x22, 0xb, {0xb, 0x9, "ce5741f9d65fa29e5b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f00000009c0)={0x0, 0xf, 0x1cc, {0x5, 0xf, 0x1cc, 0x4, [@generic={0xb2, 0x10, 0x0, "07a1a5032b405ed8281dd57ef78e7f11174c52030147b1fa526624a62e8761322647c168f0530be516a942f47f144a7a25a349d918a00ae2c5c4150432afc7e7c7ed212e1b5284b9421581182b3510327da2d620a627d5a72b9cb11fc7add0d30fa86138a19cf60187730422fd894dd683e5e14aa7e2a2d90dac736ff1bcf6b22ce3195d5dee01cd37971c6bb2500afd26a120eff7bbbe862edccdda4a4fa1259756e6a2b41ef6d5b004a4c4625f26"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8fc6b81a22b60e948ddd3642cb5a14fa"}, @ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0x5, 0xf01e, 0x4f3c, [0xffffff, 0xf0]}, @generic={0xed, 0x10, 0x3, "009e294f36721a13b80f04fc54a08cf4973291e5d1203984ff14ef7504bf9818719f227485ba415b5e955ae405144a4649e769a47bfef4ee965e9c67e2689ba05b1d89732663bd799ac7254f4a77a10d117b16d41754f7f349f91b4028f3c5731a46145f1a1db8a6d5a7689500e780fb0fc854f1c1c3e889698a87904df421b6118fbbb1aaa12cbc1307c3b1072a8cac3c1788702525362549f0d9406d6d132acc59ae4ccf761fb73c0a23996d0d582149b2666d15ee284480d75dbb19b45c28f4b5ffeaf8220f0787efec67465a93b22ccf219fabf26779957207183f3b971a11aa09aca03cd6fbfa1b"}]}}, &(0x7f0000000bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x2, 0xfc, 0x5, "50a83ab6", "584ee801"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x5, 0x8, 0x4, 0xfffc}}}, &(0x7f0000001140)={0x84, &(0x7f0000000c80)={0x20, 0x11, 0xdc, "a1fefcf189d39b138c85d1186bd9d22499de9e00416b0da8f979833a5ff11ef13c8ab11378534cbf520864e13b7b45db59256f40dca91946d05930ef565399310321fb4bb26f19888aded48d69f6f472af713078a9be6847a56f54a53cc9d5d63def90a99ad1ad51625467b33990edd307f858993a790f090a2c54cdb36ecc006c8dc0ef04e315effafa575fdadd07ab1ff7acba761976a35ef62b4d1b55ab731a05ad900d573d1651395bacee7af641099e2cc9edbbf4598df0c2afae71039bfc5492735f6b321ae8591dbe86b34dd46e0f9d84b9ab7ec6e1cd917c"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x40, 0x2, [0x88]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "32a9"}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001000)={0x40, 0x19, 0x2, "db6e"}, &(0x7f0000001040)={0x40, 0x1a, 0x2}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x5e}})

24.317215968s ago: executing program 40 (id=4933):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@release], 0x0, 0x0, 0x0}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x70, 0x1, [@m_ipt={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "a3ff72cc5ea43a7b017ad2530e095a3d5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async, rerun: 64)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4)
sendto$packet(r2, &(0x7f00000003c0)="3f032b00eee8140006001e0089e9aaa911d7c2290f0088f71327c9167c643c4a1b7880610cc96655b1b141ab2a416be6ce1ee73c4690cb466ebf", 0x3a, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) (async, rerun: 64)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12008000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00nlR^', @ANYRES16=r6, @ANYBLOB="10002abd7000fedbdf25520000000400cf0006004800090000000800cb00000100000400cf00050089008000000006004800420000000800cb00030000000a00060008021100000100000400cf000500880004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x22080084}, 0x44040) (rerun: 64)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) (rerun: 64)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x24) (async)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req={0x4000, 0x93fb, 0x8, 0x5}, 0x10) (async)
bind$tipc(r10, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000480)={0x3, 'wg1\x00', {0xea97}, 0x2}) (async)
read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) (async, rerun: 64)
openat$cgroup_int(r8, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) (async, rerun: 64)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')

19.197387881s ago: executing program 41 (id=4944):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x20010, r0, 0x158c000) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x80000)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

17.647817886s ago: executing program 7 (id=4950):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
splice(r0, &(0x7f0000000040)=0x200, r0, &(0x7f0000000100)=0x8, 0x9, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
readahead(r2, 0xa, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4623, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 42 (id=4950):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
splice(r0, &(0x7f0000000040)=0x200, r0, &(0x7f0000000100)=0x8, 0x9, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
readahead(r2, 0xa, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4623, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff})
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

_t tclass=blk_file permissive=1
[  491.382440][   T36] audit: type=1400 audit(2000000133.737:74222): avc:  denied  { read write open } for  pid=15002 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  491.429741][T15080] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  491.475593][T15083] rust_binder: Write failure EFAULT in pid:27
[  491.749888][T15099] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  491.874237][T15099] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  491.902301][   T65] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  492.063340][   T65] usb 3-1: Using ep0 maxpacket: 16
[  492.082464][   T65] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  492.115853][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.135565][   T65] usb 3-1: config 0 descriptor??
[  492.148869][   T65] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  492.364695][   T65] usb 3-1: Detected FT232B
[  492.721288][T15134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1804783195 (14438265560 ns) > initial count (11128346936 ns). Using initial count to start timer.
[  492.759109][T15134] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  492.805540][   T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  492.824258][   T65] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  492.842442][   T65] usb 3-1: USB disconnect, device number 30
[  492.846845][T15134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1481
[  492.857943][   T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  492.901027][   T65] ftdi_sio 3-1:0.0: device disconnected
[  493.238604][T15152] rust_binder: Failed copying remainder into alloc: EFAULT
[  493.238632][T15152] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  493.247029][T15152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  493.256308][T15152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1485
[  493.344430][T15154] KVM: debugfs: duplicate directory 15154-7
[  493.536690][T15167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  493.578955][T15170] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  493.597141][T15168] rust_binder: 15167 RLIMIT_NICE not set
[  493.613028][ T1392] rust_binder: 15166: removing orphan mapping 0:4248
[  493.637959][T15170] rust_binder: Write failure EINVAL in pid:47
[  493.746917][T15179] /dev/rnullb0: Can't lookup blockdev
[  493.858698][T15183] overlayfs: failed to resolve './file1': -2
[  494.169046][   T65] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  494.194793][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4531'.
[  494.325254][T15209] overlayfs: failed to clone upperpath
[  494.340233][   T65] usb 6-1: Using ep0 maxpacket: 16
[  494.355869][   T65] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  494.382587][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.394933][T15216] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  494.406313][   T65] usb 6-1: config 0 descriptor??
[  494.413600][T15216] rust_binder: Write failure EINVAL in pid:58
[  494.448946][   T65] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  494.631040][   T65] usb 6-1: Detected FT232B
[  494.662900][ T1392] rust_binder: 15221: removing orphan mapping 0:4120
[  494.862204][T15239] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  494.883928][T15239] rust_binder: Write failure EINVAL in pid:69
[  495.043492][T15241] rust_binder: Error while translating object.
[  495.049948][T15241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  495.056352][T15241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71
[  495.072501][   T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  495.107496][T15243] fuse: Unknown parameter 'ÿÿÿÿÿ00000000000000000000'
[  495.141008][   T65] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  495.160939][   T65] usb 6-1: USB disconnect, device number 81
[  495.188526][   T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  495.216996][   T65] ftdi_sio 6-1:0.0: device disconnected
[  495.588463][T15261] SELinux: failed to load policy
[  495.847711][T15269] rust_binder: Write failure EINVAL in pid:1498
[  495.886443][   T36] kauditd_printk_skb: 699 callbacks suppressed
[  495.886464][   T36] audit: type=1400 audit(2000000138.002:74922): avc:  denied  { read write } for  pid=8043 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  495.954464][   T36] audit: type=1400 audit(2000000138.039:74923): avc:  denied  { read write open } for  pid=8043 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  495.986144][   T36] audit: type=1400 audit(2000000138.039:74924): avc:  denied  { ioctl } for  pid=8043 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  496.017165][T15279] input: syz1 as /devices/virtual/input/input73
[  496.035006][   T36] audit: type=1400 audit(2000000138.124:74925): avc:  denied  { read write } for  pid=15274 comm="syz.5.4557" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  496.067711][   T36] audit: type=1400 audit(2000000138.124:74926): avc:  denied  { read write open } for  pid=15274 comm="syz.5.4557" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  496.098279][   T36] audit: type=1400 audit(2000000138.124:74927): avc:  denied  { read write } for  pid=15274 comm="syz.5.4557" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  496.124790][   T36] audit: type=1400 audit(2000000138.124:74928): avc:  denied  { read write open } for  pid=15274 comm="syz.5.4557" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  496.151141][   T36] audit: type=1400 audit(2000000138.124:74929): avc:  denied  { ioctl } for  pid=15274 comm="syz.5.4557" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  496.183811][   T36] audit: type=1400 audit(2000000138.142:74930): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=1019 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  496.207581][   T36] audit: type=1400 audit(2000000138.142:74931): avc:  denied  { read open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1019 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  496.820648][T14318] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  496.959609][T14318] usb 3-1: device descriptor read/64, error -71
[  497.130691][    T9] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  497.216250][T14318] usb 3-1: device descriptor read/64, error -71
[  497.293266][    T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  497.304751][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  497.311465][    T9] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  497.320911][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.333919][    T9] usb 6-1: config 0 descriptor??
[  497.472843][T14318] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  497.516092][T15313] netlink: 'syz.8.4568': attribute type 25 has an invalid length.
[  497.622506][T14318] usb 3-1: device descriptor read/64, error -71
[  497.782071][    T9] ntrig 0003:1B96:0004.002C: hidraw0: USB HID v0.06 Device [HID 1b96:0004] on usb-dummy_hcd.5-1/input0
[  497.889857][T14318] usb 3-1: device descriptor read/64, error -71
[  497.993203][T15307] rust_binder: Write failure EINVAL in pid:1505
[  498.018197][T14318] usb usb3-port1: attempt power cycle
[  498.392389][T14318] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  498.416192][T14318] usb 3-1: device descriptor read/8, error -71
[  498.547984][    T9] usb 6-1: USB disconnect, device number 82
[  498.568807][T14318] usb 3-1: device descriptor read/8, error -71
[  498.681008][T15351] rust_binder: 1509: no such ref 2
[  498.852087][T14318] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  498.882439][T14318] usb 3-1: device descriptor read/8, error -71
[  499.025912][T14318] usb 3-1: device descriptor read/8, error -71
[  499.085282][T15387] netlink: 'syz.8.4588': attribute type 4 has an invalid length.
[  499.141692][T14318] usb usb3-port1: unable to enumerate USB device
[  510.694075][   T36] kauditd_printk_skb: 288 callbacks suppressed
[  510.694098][   T36] audit: type=1400 audit(2000000151.853:75220): avc:  denied  { create } for  pid=15396 comm="syz.5.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  510.738477][   T36] audit: type=1400 audit(2000000151.853:75221): avc:  denied  { create } for  pid=15398 comm="syz.2.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  510.789166][   T36] audit: type=1400 audit(2000000151.863:75222): avc:  denied  { read } for  pid=15398 comm="syz.2.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  510.848648][   T36] audit: type=1400 audit(2000000151.881:75223): avc:  denied  { bind } for  pid=15396 comm="syz.5.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  510.923310][   T36] audit: type=1400 audit(2000000151.881:75224): avc:  denied  { create } for  pid=15396 comm="syz.5.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  510.980725][   T36] audit: type=1400 audit(2000000151.881:75225): avc:  denied  { create } for  pid=15394 comm="syz.8.4591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  511.046347][   T36] audit: type=1400 audit(2000000151.881:75226): avc:  denied  { setopt } for  pid=15396 comm="syz.5.4593" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  511.111644][   T36] audit: type=1400 audit(2000000151.891:75227): avc:  denied  { connect } for  pid=15396 comm="syz.5.4593" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  511.132407][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4599'.
[  511.142379][   T36] audit: type=1400 audit(2000000151.891:75228): avc:  denied  { ioctl } for  pid=15394 comm="syz.8.4591" path="socket:[81010]" dev="sockfs" ino=81010 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  511.181350][   T36] audit: type=1400 audit(2000000151.891:75229): avc:  denied  { setopt } for  pid=15394 comm="syz.8.4591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  511.219355][   T65] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  511.393798][   T65] usb 3-1: Using ep0 maxpacket: 8
[  511.407388][   T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  511.432433][   T65] usb 3-1: New USB device found, idVendor=0596, idProduct=0502, bcdDevice= 0.00
[  511.445596][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.468252][   T65] usb 3-1: config 0 descriptor??
[  511.526520][T15441] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT
[  511.526558][T15441] rust_binder: Error in use_page_slow: EFAULT
[  511.544216][T15441] rust_binder: use_range failure EFAULT
[  511.550703][T15441] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  511.556771][T15441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  511.565567][T15441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1529
[  511.996740][T15459] syz.5.4608: attempt to access beyond end of device
[  511.996740][T15459] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  512.020680][T15459] exFAT-fs (loop5): unable to read boot sector
[  512.027128][T15459] exFAT-fs (loop5): failed to read boot sector
[  512.042686][T15459] exFAT-fs (loop5): failed to recognize exfat type
[  512.347886][T15477] rust_binder: Write failure EFAULT in pid:1195
[  512.350621][T15477] rust_binder: Write failure EFAULT in pid:1195
[  513.061363][T15500] rust_binder: Error while translating object.
[  513.068327][T15500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  513.076529][T15500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1541
[  513.091721][T15500] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4621'.
[  513.425263][    T9] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  513.585618][    T9] usb 6-1: Using ep0 maxpacket: 32
[  513.593603][    T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  513.602236][    T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  513.611639][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  513.621393][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  513.631672][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  513.641756][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  513.655567][    T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  513.665218][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.676290][    T9] usb 6-1: config 0 descriptor??
[  513.903194][    T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  513.919172][    T9] usb 6-1: USB disconnect, device number 83
[  513.929509][    T9] usblp0: removed
[  514.162989][   T65] usb 3-1: string descriptor 0 read error: -71
[  514.185552][   T65] usbhid 3-1:0.0: can't add hid device: -71
[  514.191637][   T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  514.211571][   T65] usb 3-1: USB disconnect, device number 35
[  514.376826][    T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  514.547879][    T9] usb 6-1: Using ep0 maxpacket: 32
[  514.559764][    T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  514.574269][    T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  514.584503][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  514.594581][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  514.616179][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  514.629346][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  514.644808][    T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  514.654271][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.693261][    T9] usb 6-1: config 0 descriptor??
[  514.961354][    T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  515.090785][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4635'.
[  515.177924][ T1906] usb 6-1: USB disconnect, device number 84
[  515.186687][ T1906] usblp0: removed
[  515.200117][   T65] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  515.373528][   T65] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  515.382820][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.394875][   T65] usb 3-1: config 0 descriptor??
[  515.404033][   T65] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  515.412377][   T65] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  515.960352][T15581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1565
[  515.962713][T15581] rust_binder: got new transaction with bad transaction stack
[  515.972736][T15581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1565
[  516.057619][   T36] kauditd_printk_skb: 871 callbacks suppressed
[  516.057641][   T36] audit: type=1400 audit(2000000156.867:76101): avc:  denied  { read } for  pid=15582 comm="syz.5.4650" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  516.063375][T15583] /dev/rnullb0: Can't lookup blockdev
[  516.078373][   T36] audit: type=1400 audit(2000000156.867:76102): avc:  denied  { read open } for  pid=15582 comm="syz.5.4650" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  516.171595][   T36] audit: type=1400 audit(2000000156.867:76103): avc:  denied  { ioctl } for  pid=15582 comm="syz.5.4650" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  516.226520][   T36] audit: type=1400 audit(2000000156.867:76104): avc:  denied  { mounton } for  pid=15582 comm="syz.5.4650" path="/syzcgroup/unified/syz5" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1
[  516.279979][   T36] audit: type=1400 audit(2000000156.951:76105): avc:  denied  { read write } for  pid=8346 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  516.311675][   T36] audit: type=1400 audit(2000000156.951:76106): avc:  denied  { read write open } for  pid=8346 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  516.359459][   T36] audit: type=1400 audit(2000000156.951:76107): avc:  denied  { ioctl } for  pid=8346 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  516.397609][   T36] audit: type=1400 audit(2000000156.979:76108): avc:  denied  { read write } for  pid=8043 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  516.440458][   T36] audit: type=1400 audit(2000000156.979:76109): avc:  denied  { read write open } for  pid=8043 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  516.490918][   T36] audit: type=1400 audit(2000000156.979:76110): avc:  denied  { ioctl } for  pid=8043 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  516.542592][T15589] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4652'.
[  516.553808][T15589] netlink: 'syz.5.4652': attribute type 6 has an invalid length.
[  516.563907][T15589] netlink: 'syz.5.4652': attribute type 5 has an invalid length.
[  516.573230][T15589] netlink: 'syz.5.4652': attribute type 4 has an invalid length.
[  517.056385][T15629] can0: slcan on ptm0.
[  517.445434][    T9] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  517.616493][    T9] usb 6-1: Using ep0 maxpacket: 16
[  517.625783][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  517.639276][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  517.665564][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  517.675828][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  517.684536][    T9] usb 6-1: SerialNumber: syz
[  517.695048][    T9] usb 6-1: bad CDC descriptors
[  517.718238][T15653] overlayfs: failed to clone upperpath
[  517.916146][T15633] rust_binder: Failed copying remainder into alloc: EFAULT
[  517.916170][T15633] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  517.924128][T15633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  517.932854][T15633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1583
[  517.944812][ T1392] usb 6-1: USB disconnect, device number 85
[  518.015515][    T9] usb 3-1: USB disconnect, device number 36
[  518.022402][    T9] ftdi_sio 3-1:0.0: device disconnected
[  518.583124][ T1392] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  518.641997][T15667] overlayfs: failed to resolve './file1': -2
[  518.763279][ T1392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.784698][ T1392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.796663][ T1392] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  518.809202][ T1392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.820921][ T1392] usb 3-1: config 0 descriptor??
[  518.830537][ T1392] usbhid 3-1:0.0: can't add hid device: -22
[  518.846146][ T1392] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  518.888102][T15676] rust_binder: Failed copying into alloc: EFAULT
[  518.888128][T15676] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  518.895333][T15676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  518.904867][T15676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1597
[  519.455525][ T1392] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[  519.615944][ T1392] usb 6-1: device descriptor read/64, error -71
[  519.872519][ T1392] usb 6-1: device descriptor read/64, error -71
[  520.055352][T15697] overlayfs: failed to clone upperpath
[  520.129151][ T1392] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[  520.279995][ T1392] usb 6-1: device descriptor read/64, error -71
[  520.303010][T15629] can0 (unregistered): slcan off ptm0.
[  520.370059][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4689'.
[  520.546095][ T1392] usb 6-1: device descriptor read/64, error -71
[  520.665367][ T1392] usb usb6-port1: attempt power cycle
[  520.914424][T15748] fuse: Invalid rootmode
[  521.051083][ T1392] usb 6-1: new full-speed USB device number 88 using dummy_hcd
[  521.105629][ T1392] usb 6-1: device descriptor read/8, error -71
[  521.224966][T15768] 9pnet_fd: Insufficient options for proto=fd
[  521.250647][ T1392] usb 6-1: device descriptor read/8, error -71
[  521.432019][   T36] kauditd_printk_skb: 1149 callbacks suppressed
[  521.432071][   T36] audit: type=1400 audit(2000000161.889:77260): avc:  denied  { create } for  pid=15775 comm="syz.7.4704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  521.485018][   T36] audit: type=1400 audit(2000000161.898:77261): avc:  denied  { connect } for  pid=15775 comm="syz.7.4704" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  521.519678][ T1392] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[  521.528050][   T36] audit: type=1400 audit(2000000161.908:77262): avc:  denied  { create } for  pid=15775 comm="syz.7.4704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  521.556744][T14318] usb 3-1: USB disconnect, device number 37
[  521.584634][ T1392] usb 6-1: device descriptor read/8, error -71
[  521.612841][   T36] audit: type=1400 audit(2000000161.917:77263): avc:  denied  { ioctl } for  pid=15682 comm="syz.5.4679" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  521.664806][T15792] audit: audit_backlog=65 > audit_backlog_limit=64
[  521.674479][   T36] audit: type=1400 audit(2000000161.926:77264): avc:  denied  { search } for  pid=15782 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  521.700882][T15792] audit: audit_lost=553 audit_rate_limit=0 audit_backlog_limit=64
[  521.710603][T15792] audit: backlog limit exceeded
[  521.726140][T15795] audit: audit_backlog=65 > audit_backlog_limit=64
[  521.733975][T15792] audit: audit_backlog=65 > audit_backlog_limit=64
[  521.747622][ T1392] usb 6-1: device descriptor read/8, error -71
[  521.770029][T15796] netlink: 'syz.8.4710': attribute type 64 has an invalid length.
[  521.885225][ T1392] usb usb6-port1: unable to enumerate USB device
[  522.085724][T14318] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  522.169536][T15822] 9pnet: Could not find request transport: unix-privport
[  522.179701][T15822] overlayfs: failed to resolve './file1': -2
[  522.259203][T14318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  522.270968][T14318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  522.285046][T14318] usb 3-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00
[  522.296997][T14318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.308336][T14318] usb 3-1: config 0 descriptor??
[  522.315772][T15792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  522.468224][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4719'.
[  522.563562][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4722'.
[  522.771169][T14318] usbhid 3-1:0.0: can't add hid device: -71
[  522.777579][T14318] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  522.792365][T14318] usb 3-1: USB disconnect, device number 38
[  522.855497][   T65] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  523.061164][   T65] usb 6-1: Using ep0 maxpacket: 32
[  523.078407][   T65] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  523.101416][   T65] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  523.132062][   T65] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  523.165567][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  523.187471][   T65] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  523.197196][   T65] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  523.218984][   T65] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  523.239143][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.253426][   T65] usb 6-1: config 0 descriptor??
[  523.497080][   T65] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  523.527389][   T65] usb 6-1: USB disconnect, device number 90
[  523.545285][   T65] usblp0: removed
[  523.649683][T15886] rust_binder: Write failure EFAULT in pid:164
[  523.712201][T15843] overlayfs: conflicting options: userxattr,redirect_dir=on
[  524.010105][T14318] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  524.107339][T15907] rust_binder: Got transaction with invalid offset.
[  524.107392][T15907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  524.114134][T15907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175
[  524.159789][T14318] usb 6-1: device descriptor read/64, error -71
[  524.437722][T14318] usb 6-1: device descriptor read/64, error -71
[  524.694354][T14318] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  524.705674][ T1184] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  524.833297][T14318] usb 6-1: device descriptor read/64, error -71
[  524.865353][ T1184] usb 3-1: Using ep0 maxpacket: 16
[  524.874405][ T1184] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  524.885407][ T1184] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  524.898526][ T1184] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  524.907919][ T1184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.917415][ T1184] usb 3-1: Product: syz
[  524.923130][ T1184] usb 3-1: Manufacturer: syz
[  524.927863][ T1184] usb 3-1: SerialNumber: syz
[  525.089904][T14318] usb 6-1: device descriptor read/64, error -71
[  525.166518][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.190379][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.211857][T14318] usb usb6-port1: attempt power cycle
[  525.218779][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.227814][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.309328][ T1184] usb 3-1: 0:2 : does not exist
[  525.321181][ T1184] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  525.349505][ T1184] usb 3-1: USB disconnect, device number 39
[  525.411180][T15632] udevd[15632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  525.458836][T15940] netlink: 5820 bytes leftover after parsing attributes in process `syz.7.4759'.
[  525.473396][T15940] bridge0: port 3(veth0_to_bridge) entered blocking state
[  525.481325][T15940] bridge0: port 3(veth0_to_bridge) entered disabled state
[  525.488941][T15940] veth0_to_bridge: entered allmulticast mode
[  525.495704][T15940] veth0_to_bridge: entered promiscuous mode
[  525.501888][T15940] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  525.514995][T15940] bridge0: port 3(veth0_to_bridge) entered blocking state
[  525.522473][T15940] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  525.592310][T14318] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  525.616606][T14318] usb 6-1: device descriptor read/8, error -71
[  525.760682][T14318] usb 6-1: device descriptor read/8, error -71
[  526.061658][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4769'.
[  526.372759][T13587] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  526.535628][T13587] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  526.547016][T13587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.558470][T13587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.568603][T13587] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  526.584090][T13587] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  526.593779][T13587] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  526.601982][T13587] usb 3-1: Manufacturer: syz
[  526.608215][T13587] usb 3-1: config 0 descriptor??
[  526.795730][   T36] kauditd_printk_skb: 853 callbacks suppressed
[  526.795751][   T36] audit: type=1400 audit(2000000422.909:78084): avc:  denied  { write } for  pid=15976 comm="syz.5.4772" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  526.826251][   T36] audit: type=1400 audit(2000000422.909:78085): avc:  denied  { write open } for  pid=15976 comm="syz.5.4772" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  526.852003][   T36] audit: type=1400 audit(2000000422.909:78086): avc:  denied  { create } for  pid=15976 comm="syz.5.4772" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  526.881500][   T36] audit: type=1400 audit(2000000422.909:78087): avc:  denied  { create } for  pid=15976 comm="syz.5.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  526.905996][T13587] usbhid 3-1:0.0: can't add hid device: -71
[  526.924561][   T36] audit: type=1400 audit(2000000422.909:78088): avc:  denied  { map } for  pid=15976 comm="syz.5.4772" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=82638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  526.932023][T13587] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  526.981289][   T36] audit: type=1400 audit(2000000422.909:78089): avc:  denied  { read } for  pid=15976 comm="syz.5.4772" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=82638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  527.012918][T15990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.014603][T13587] usb 3-1: USB disconnect, device number 40
[  527.048813][T15990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.068675][   T36] audit: type=1400 audit(2000000422.918:78090): avc:  denied  { execmem } for  pid=15976 comm="syz.5.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  527.099389][T15990] /dev/rnullb0: Can't lookup blockdev
[  527.123810][T15990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.136949][T15990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.153110][   T36] audit: type=1400 audit(2000000422.918:78091): avc:  denied  { ioctl } for  pid=15976 comm="syz.5.4772" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  527.196486][   T36] audit: type=1400 audit(2000000422.918:78092): avc:  denied  { create } for  pid=15976 comm="syz.5.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  527.260973][   T36] audit: type=1400 audit(2000000422.918:78093): avc:  denied  { setopt } for  pid=15976 comm="syz.5.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  527.334157][T16003] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  527.337565][T16003] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  527.377687][T13587] usb 3-1: new low-speed USB device number 41 using dummy_hcd
[  527.556249][T13587] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  527.579680][T13587] usb 3-1: config 179 has no interface number 0
[  527.593801][T13587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  527.620852][T13587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  527.655255][T13587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  527.679544][T13587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  527.696693][T13587] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  527.711405][T13587] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  527.721010][T13587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.744226][T15989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  527.754323][T13587] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  527.779610][T13587] xpad 3-1:179.65: probe with driver xpad failed with error -5
[  527.977212][    T9] usb 3-1: USB disconnect, device number 41
[  528.293651][T16033] binder: Unknown parameter 'defcontext01777777777777777777777Ø\u˜“Kç3AgÌò´V“¸�×xýt†õDlx%àÈ£6’¡�m*�øÁ]Ÿw–òQ£6½ÜˆVAé]]/д!«‡ãåªYYžç”Naxf‰-“±^|š�R‡!àú°”ÂRɲ½{9„zP†»È7OãYßø'
[  529.522408][T16083] can0: slcan on ptm0.
[  529.793724][T13587] usb 3-1: new low-speed USB device number 42 using dummy_hcd
[  529.957454][T13587] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.968048][T13587] usb 3-1: config 0 has no interfaces?
[  529.973710][T13587] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  529.983370][T13587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.993263][T13587] usb 3-1: config 0 descriptor??
[  530.220521][T13587] usb 3-1: USB disconnect, device number 42
[  530.347675][T16083] can0 (unregistered): slcan off ptm0.
[  530.438458][T16110] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4814'.
[  530.460934][T16112] netlink: 'syz.8.4814': attribute type 5 has an invalid length.
[  530.469346][T16110] netlink: 'syz.8.4814': attribute type 5 has an invalid length.
[  532.163557][   T36] kauditd_printk_skb: 1126 callbacks suppressed
[  532.163579][   T36] audit: type=1400 audit(2000000427.932:79220): avc:  denied  { read } for  pid=16204 comm="syz.7.4837" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  532.200387][   T36] audit: type=1400 audit(2000000427.932:79221): avc:  denied  { read open } for  pid=16204 comm="syz.7.4837" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  532.243444][   T36] audit: type=1400 audit(2000000427.960:79222): avc:  denied  { read write } for  pid=16206 comm="syz.2.4838" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  532.268243][   T36] audit: type=1400 audit(2000000427.960:79223): avc:  denied  { read write open } for  pid=16206 comm="syz.2.4838" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  532.269830][T16205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  532.295939][   T36] audit: type=1400 audit(2000000427.969:79224): avc:  denied  { ioctl } for  pid=16204 comm="syz.7.4837" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  532.332165][   T36] audit: type=1400 audit(2000000427.988:79225): avc:  denied  { create } for  pid=16206 comm="syz.2.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  532.352953][   T36] audit: type=1400 audit(2000000427.997:79226): avc:  denied  { bind } for  pid=16206 comm="syz.2.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  532.374400][   T36] audit: type=1400 audit(2000000427.997:79227): avc:  denied  { listen } for  pid=16206 comm="syz.2.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  532.399996][   T36] audit: type=1400 audit(2000000427.997:79228): avc:  denied  { create } for  pid=16206 comm="syz.2.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  532.420610][   T36] audit: type=1400 audit(2000000427.997:79229): avc:  denied  { connect } for  pid=16206 comm="syz.2.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  532.474107][T16211] KVM: debugfs: duplicate directory 16211-12
[  532.837068][T16215] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  532.844617][T16215] rust_binder: Write failure EINVAL in pid:233
[  533.158959][T16242] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT
[  533.165431][T16242] rust_binder: Error in use_page_slow: EFAULT
[  533.176726][T16242] rust_binder: use_range failure EFAULT
[  533.183238][T16242] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  533.189127][T16242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  533.197430][T16242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:241
[  533.744439][T16256] rust_binder: Error while translating object.
[  533.765403][T16256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  533.774657][T16256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1313
[  533.956549][T16267] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4855'.
[  533.977682][T16267] x_tables: unsorted underflow at hook 4
[  535.160429][   T65] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  535.323971][   T65] usb 3-1: unable to get BOS descriptor or descriptor too short
[  535.333627][   T65] usb 3-1: not running at top speed; connect to a high speed hub
[  535.343579][   T65] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  535.351857][   T65] usb 3-1: config 0 has no interface number 0
[  535.358272][   T65] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[  535.369790][   T65] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  535.379870][   T65] usb 3-1: config 0 interface 88 has no altsetting 0
[  535.395652][   T65] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  535.405170][   T65] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  535.415378][   T65] usb 3-1: Product: syz
[  535.420754][   T65] usb 3-1: Manufacturer: syz
[  535.425388][   T65] usb 3-1: SerialNumber: syz
[  535.434229][   T65] usb 3-1: config 0 descriptor??
[  535.674218][T16286] rust_binder: Read failure Err(EAGAIN) in pid:252
[  535.682856][   T65] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input75
[  535.725914][   T65] usb 3-1: USB disconnect, device number 43
[  536.119620][T16311] overlay: Unknown parameter 'fowner>18446744073709551615'
[  536.320232][T16318] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  536.327497][T16318] rust_binder: 254: no such ref 2
[  537.119140][T16355] __vm_enough_memory: pid: 16355, comm: syz.5.4890, bytes: 21200302862336 not enough memory for the allocation
[  537.132094][T16355] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  537.181644][T16359] netlink: 'syz.5.4891': attribute type 16 has an invalid length.
[  537.189777][T16359] netlink: 'syz.5.4891': attribute type 3 has an invalid length.
[  537.198110][T16359] netlink: 'syz.5.4891': attribute type 1 has an invalid length.
[  537.206144][T16359] netlink: 64030 bytes leftover after parsing attributes in process `syz.5.4891'.
[  537.245075][T13587] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  537.405464][T13587] usb 3-1: Using ep0 maxpacket: 32
[  537.424165][T13587] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  537.435027][T13587] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  537.445811][T13587] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  537.455875][T13587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  537.467269][T13587] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  537.479622][T13587] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  537.494137][T13587] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  537.505681][T13587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.515410][   T36] kauditd_printk_skb: 603 callbacks suppressed
[  537.515429][   T36] audit: type=1400 audit(2000000432.946:79833): avc:  denied  { write } for  pid=16385 comm="syz.8.4901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  537.516998][T13587] usb 3-1: config 0 descriptor??
[  537.541153][   T36] audit: type=1400 audit(2000000432.946:79834): avc:  denied  { create } for  pid=16390 comm="syz.5.4902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  537.594793][   T36] audit: type=1400 audit(2000000432.974:79835): avc:  denied  { ioctl } for  pid=16352 comm="syz.2.4889" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  537.621878][   T36] audit: type=1400 audit(2000000432.974:79836): avc:  denied  { ioctl } for  pid=16352 comm="syz.2.4889" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  537.648790][   T36] audit: type=1400 audit(2000000432.974:79837): avc:  denied  { ioctl } for  pid=16352 comm="syz.2.4889" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  537.682280][   T36] audit: type=1400 audit(2000000432.974:79838): avc:  denied  { ioctl } for  pid=16352 comm="syz.2.4889" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  537.710154][   T36] audit: type=1400 audit(2000000432.974:79839): avc:  denied  { ioctl } for  pid=16352 comm="syz.2.4889" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  537.735881][   T36] audit: type=1400 audit(2000000433.002:79840): avc:  denied  { connect } for  pid=16390 comm="syz.5.4902" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  537.759047][   T36] audit: type=1400 audit(2000000433.011:79841): avc:  denied  { sys_module } for  pid=16390 comm="syz.5.4902" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  537.792078][T13587] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  537.811647][   T36] audit: type=1400 audit(2000000433.011:79842): avc:  denied  { create } for  pid=16390 comm="syz.5.4902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  537.837924][T13587] usb 3-1: USB disconnect, device number 44
[  537.847145][T13587] usblp0: removed
[  538.335533][T13587] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  538.495862][T13587] usb 3-1: Using ep0 maxpacket: 32
[  538.503339][T13587] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  538.511797][T13587] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  538.520653][T13587] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  538.530724][T13587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  538.541291][T13587] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  538.551733][T13587] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  538.567784][T13587] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  538.577923][T13587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.592116][T13587] usb 3-1: config 0 descriptor??
[  538.828084][T16353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.846137][T16353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.858891][T13587] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  538.871632][T13587] usb 3-1: USB disconnect, device number 45
[  538.882493][T13587] usblp0: removed
[  539.470421][T16445] input: syz1 as /devices/virtual/input/input76
[  539.717753][T16456] binder: Unknown parameter 'sú'
[  539.831376][T16474] rust_binder: 271: no such ref 3
[  539.836738][T16475] rust_binder: 271: no such ref 1
[  539.841928][T16475] rust_binder: 271: no such ref 3
[  539.848523][T16475] rust_binder: 271: no such ref 4294967295
[  539.921349][T16479] syz.2.4927: attempt to access beyond end of device
[  539.921349][T16479] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  539.935119][T16479] FAT-fs (loop2): unable to read boot sector
[  539.955761][  T667] Bluetooth: hci0: Frame reassembly failed (-84)
[  540.186613][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.199233][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.211868][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.224137][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.236884][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.249369][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.262232][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.274751][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.286914][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.299197][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  542.173491][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  542.179838][  T745] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  542.320462][  T671] tipc: Subscription rejected, illegal request
[  542.690559][T16534] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.698730][T16534] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.706626][T16534] bridge_slave_0: entered allmulticast mode
[  542.715547][T16534] bridge_slave_0: entered promiscuous mode
[  542.726303][T16534] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.735325][T16534] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.743452][T16534] bridge_slave_1: entered allmulticast mode
[  542.750061][T16534] bridge_slave_1: entered promiscuous mode
[  542.885343][   T36] kauditd_printk_skb: 301 callbacks suppressed
[  542.885364][   T36] audit: type=1400 audit(2000000437.959:80144): avc:  denied  { create } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  542.928583][   T36] audit: type=1400 audit(2000000437.987:80145): avc:  denied  { write } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  542.961543][T16534] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.969272][T16534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.976809][T16534] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.984030][T16534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.994021][   T36] audit: type=1400 audit(2000000437.987:80146): avc:  denied  { read } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.019986][   T36] audit: type=1400 audit(2000000437.987:80147): avc:  denied  { read } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.066037][   T36] audit: type=1400 audit(2000000437.987:80148): avc:  denied  { write } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.108972][   T36] audit: type=1400 audit(2000000437.987:80149): avc:  denied  { read } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.151480][T16537] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.158994][   T36] audit: type=1400 audit(2000000437.987:80150): avc:  denied  { write } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.180999][T16537] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.219752][T16537] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.227781][T16537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.258288][   T36] audit: type=1400 audit(2000000437.987:80151): avc:  denied  { read } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.322718][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.329869][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.361340][   T36] audit: type=1400 audit(2000000437.987:80152): avc:  denied  { write } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.393229][T16549] fuse: Unknown parameter 'ô"™1ÿì“fd'
[  543.467733][   T36] audit: type=1400 audit(2000000437.997:80153): avc:  denied  { read } for  pid=16534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  543.651383][T16534] veth0_vlan: entered promiscuous mode
[  543.701487][T16534] veth1_macvtap: entered promiscuous mode
[  545.284358][    C0] sched: DL replenish lagged too much
[  545.540978][    C0] net_ratelimit: 76131 callbacks suppressed
[  545.541002][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.560053][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.573102][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.585877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.598657][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.611303][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.623740][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.636042][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.648394][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.660767][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.897033][    C0] net_ratelimit: 62831 callbacks suppressed
[  550.897056][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.897150][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  550.903228][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.916065][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  550.928051][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.940797][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  550.953049][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.966229][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  550.978404][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.991155][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  554.630234][   T36] kauditd_printk_skb: 93 callbacks suppressed
[  554.630257][   T36] audit: type=1400 audit(2000000448.941:80247): avc:  denied  { read write } for  pid=8346 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  555.207777][   T36] audit: type=1400 audit(2000000448.941:80248): avc:  denied  { read write open } for  pid=8346 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  555.923320][   T36] audit: type=1400 audit(2000000448.941:80249): avc:  denied  { ioctl } for  pid=8346 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  556.252931][    C0] net_ratelimit: 61481 callbacks suppressed
[  556.252955][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  556.253008][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  556.259161][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  556.272308][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  556.284505][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  556.297035][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  556.316616][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  556.321553][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  556.334193][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  556.346724][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  561.609004][    C0] net_ratelimit: 61331 callbacks suppressed
[  561.609038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.609154][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  561.615260][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.627481][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  561.639731][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.652005][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  561.663820][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.676093][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  561.688385][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.701132][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  564.494104][   T36] audit: type=1400 audit(2000000458.173:80250): avc:  denied  { execmem } for  pid=16558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  564.641898][   T36] audit: type=1400 audit(2000000458.314:80251): avc:  denied  { execmem } for  pid=16560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  565.770835][   T36] audit: type=1400 audit(2000000458.417:80252): avc:  denied  { read write } for  pid=8346 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  566.314671][   T36] audit: type=1400 audit(2000000458.417:80253): avc:  denied  { read write open } for  pid=8346 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  566.964973][    C0] net_ratelimit: 59678 callbacks suppressed
[  566.964997][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  566.965272][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  566.971077][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  566.983512][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  566.995966][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.008690][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  567.020943][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.033672][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  567.045599][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.058120][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  567.387401][   T36] audit: type=1400 audit(2000000458.417:80254): avc:  denied  { ioctl } for  pid=8346 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  572.320917][    C0] net_ratelimit: 60097 callbacks suppressed
[  572.320942][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.321157][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  572.326969][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.339609][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  572.351833][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.364471][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  572.376567][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.388957][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  572.400818][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.412940][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  577.677004][    C1] net_ratelimit: 63359 callbacks suppressed
[  577.677026][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  577.677092][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.683371][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  577.695357][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.707838][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  577.719833][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.732559][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  577.744560][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.757169][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  577.769529][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  583.032962][    C0] net_ratelimit: 63131 callbacks suppressed
[  583.032986][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  583.033060][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  583.039271][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  583.051925][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  583.064042][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  583.076532][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  583.088541][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  583.101201][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  583.113232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  583.125779][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  586.515942][   T36] audit: type=1400 audit(2000000478.752:80255): avc:  denied  { read } for  pid=16561 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  587.231529][   T36] audit: type=1400 audit(2000000478.752:80256): avc:  denied  { read open } for  pid=16561 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  588.388926][    C0] net_ratelimit: 62850 callbacks suppressed
[  588.388950][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  588.389197][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  588.395417][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  588.408555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  588.420837][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  588.433606][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  588.446225][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  588.460417][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  588.475094][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  588.487821][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  589.454963][   T36] audit: type=1400 audit(2000000481.493:80257): avc:  denied  { read } for  pid=16562 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  589.928798][   T36] audit: type=1400 audit(2000000481.493:80258): avc:  denied  { read open } for  pid=16562 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  590.701252][   T36] audit: type=1400 audit(2000000482.681:80259): avc:  denied  { mounton } for  pid=16561 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  591.149925][   T36] audit: type=1400 audit(2000000482.887:80260): avc:  denied  { sys_module } for  pid=16561 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  593.744943][    C0] net_ratelimit: 68486 callbacks suppressed
[  593.744967][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  593.745081][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  593.751364][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  593.764101][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  593.776615][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  593.788811][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  593.801060][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  593.814131][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  593.826095][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  593.838524][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  594.729572][   T36] audit: type=1400 audit(2000000482.905:80261): avc:  denied  { execmem } for  pid=16563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  595.276643][   T36] audit: type=1400 audit(2000000482.924:80262): avc:  denied  { mounton } for  pid=16562 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  596.409040][   T36] audit: type=1400 audit(2000000482.971:80263): avc:  denied  { sys_module } for  pid=16562 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  599.100947][    C0] net_ratelimit: 69199 callbacks suppressed
[  599.100971][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  599.101004][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  599.107234][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  599.119708][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  599.131819][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  599.143972][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  599.155996][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  599.168456][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  599.180689][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  599.192867][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  604.456978][    C0] net_ratelimit: 78636 callbacks suppressed
[  604.457003][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  604.457125][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  604.463675][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  604.476411][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  604.488650][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  604.500939][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  604.513644][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  604.526067][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  604.538350][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  604.550555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  609.812966][    C0] net_ratelimit: 82234 callbacks suppressed
[  609.812990][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  609.813117][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  609.819093][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  609.831580][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  609.843578][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  609.855774][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  609.867834][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  609.880243][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  609.892254][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  609.904563][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  615.168917][    C0] net_ratelimit: 85093 callbacks suppressed
[  615.168940][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  615.169088][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  615.175141][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  615.188229][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  615.200581][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  615.213029][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  615.224858][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  615.237183][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  615.249110][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  615.261572][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  617.876533][   T36] audit: type=1400 audit(2000000508.096:80264): avc:  denied  { execmem } for  pid=16567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  619.890509][   T36] audit: type=1400 audit(2000000509.985:80265): avc:  denied  { read } for  pid=16568 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  620.206695][   T36] audit: type=1400 audit(2000000510.041:80266): avc:  denied  { read open } for  pid=16568 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  620.524900][    C0] net_ratelimit: 81411 callbacks suppressed
[  620.524924][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  620.524982][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  620.531103][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  620.543628][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  620.555519][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  620.567857][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  620.579868][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  620.592457][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  620.604432][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  620.616806][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  622.247991][   T36] audit: type=1400 audit(2000000512.183:80267): avc:  denied  { mounton } for  pid=16568 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  624.175600][   T36] audit: type=1400 audit(2000000513.998:80268): avc:  denied  { sys_module } for  pid=16568 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  624.360266][   T36] audit: type=1400 audit(2000000514.092:80269): avc:  denied  { sys_module } for  pid=16562 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  625.491762][   T36] audit: type=1400 audit(2000000514.110:80270): avc:  denied  { sys_module } for  pid=16562 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  625.880909][    C0] net_ratelimit: 77840 callbacks suppressed
[  625.880933][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  625.880957][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  625.887315][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  625.899825][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  625.912040][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  625.924310][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  625.937244][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  625.949828][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  625.962098][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  625.974555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  626.246517][   T36] audit: type=1400 audit(2000000515.925:80271): avc:  denied  { read } for  pid=16570 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  627.007882][   T36] audit: type=1400 audit(2000000515.925:80272): avc:  denied  { read open } for  pid=16570 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  628.928573][   T36] audit: type=1400 audit(2000000515.925:80273): avc:  denied  { mounton } for  pid=16570 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  628.984322][   T36] audit: type=1400 audit(2000000516.093:80274): avc:  denied  { sys_module } for  pid=16570 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  629.337396][   T36] audit: type=1400 audit(2000000516.149:80275): avc:  denied  { execmem } for  pid=16571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  631.236900][    C1] net_ratelimit: 79048 callbacks suppressed
[  631.236926][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  631.236994][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  631.243240][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  631.255122][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  631.267447][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  631.279675][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  631.291919][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  631.304121][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  631.316485][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  631.328532][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  636.592857][    C0] net_ratelimit: 81829 callbacks suppressed
[  636.592883][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  636.592935][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  636.599121][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  636.611637][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  636.623825][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  636.636344][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  636.648221][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  636.660733][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  636.672696][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  636.685123][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  638.669050][   T36] audit: type=1400 audit(2000000527.561:80276): avc:  denied  { execmem } for  pid=16572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  640.822668][   T36] audit: type=1400 audit(2000000529.572:80277): avc:  denied  { sys_module } for  pid=16568 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  641.948943][    C0] net_ratelimit: 82911 callbacks suppressed
[  641.948980][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  641.949024][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  641.955153][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  641.967533][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  641.979829][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  641.992106][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  642.003949][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  642.016447][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  642.028832][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  642.041439][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  642.239971][   T36] audit: type=1400 audit(2000000530.255:80278): avc:  denied  { sys_module } for  pid=16570 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  643.673341][   T36] audit: type=1400 audit(2000000531.574:80279): avc:  denied  { sys_module } for  pid=16570 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  644.752586][   T36] audit: type=1400 audit(2000000532.164:80280): avc:  denied  { sys_module } for  pid=16568 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  645.406147][   T36] audit: type=1400 audit(2000000532.631:80281): avc:  denied  { sys_module } for  pid=16570 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  646.037636][   T36] audit: type=1400 audit(2000000533.417:80282): avc:  denied  { sys_module } for  pid=16568 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  646.890210][   T36] audit: type=1400 audit(2000000534.698:80283): avc:  denied  { read } for  pid=16573 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  647.304854][    C1] net_ratelimit: 80558 callbacks suppressed
[  647.304879][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  647.304909][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.311399][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  647.323673][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.336154][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  647.348111][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.360615][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  647.372823][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.385397][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  647.397932][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  648.076656][   T36] audit: type=1400 audit(2000000534.698:80284): avc:  denied  { read open } for  pid=16573 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  649.413774][   T36] audit: type=1400 audit(2000000534.698:80285): avc:  denied  { mounton } for  pid=16573 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  649.807467][   T36] audit: type=1400 audit(2000000536.158:80286): avc:  denied  { sys_module } for  pid=16573 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  650.770425][   T36] audit: type=1400 audit(2000000536.560:80287): avc:  denied  { sys_module } for  pid=16573 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  651.022494][   T36] audit: type=1400 audit(2000000536.569:80288): avc:  denied  { sys_module } for  pid=16573 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  651.262619][   T36] audit: type=1400 audit(2000000537.888:80289): avc:  denied  { sys_module } for  pid=16573 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  652.471028][   T36] audit: type=1400 audit(2000000539.329:80290): avc:  denied  { read } for  pid=16574 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  652.660927][    C0] net_ratelimit: 83367 callbacks suppressed
[  652.660952][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.661177][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  652.666958][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.679612][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  652.691531][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.703880][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  652.716022][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.728608][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  652.740704][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.752847][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  653.922529][   T36] audit: type=1400 audit(2000000539.329:80291): avc:  denied  { read open } for  pid=16574 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  654.352706][   T36] audit: type=1400 audit(2000000539.329:80292): avc:  denied  { mounton } for  pid=16574 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  655.600996][   T36] audit: type=1400 audit(2000000540.498:80293): avc:  denied  { sys_module } for  pid=16574 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  655.890617][   T36] audit: type=1400 audit(2000000541.976:80294): avc:  denied  { sys_module } for  pid=16574 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  655.932475][   T36] audit: type=1400 audit(2000000541.985:80295): avc:  denied  { sys_module } for  pid=16574 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  656.136762][   T36] audit: type=1400 audit(2000000542.004:80296): avc:  denied  { sys_module } for  pid=16574 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  656.693544][   T36] audit: type=1400 audit(2000000544.006:80297): avc:  denied  { execmem } for  pid=16575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  658.016842][    C0] net_ratelimit: 78379 callbacks suppressed
[  658.016867][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  658.017000][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  658.023058][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  658.035987][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  658.048062][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  658.060449][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  658.072426][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  658.085040][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  658.097207][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  658.109482][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  663.372839][    C1] net_ratelimit: 84145 callbacks suppressed
[  663.372863][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  663.372908][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  663.379060][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  663.391043][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  663.403429][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  663.415775][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  663.428077][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  663.440146][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  663.452912][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  663.464837][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.934108][   T36] audit: type=1400 audit(2000000554.922:80298): avc:  denied  { read } for  pid=16576 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  668.483687][   T36] audit: type=1400 audit(2000000554.959:80299): avc:  denied  { read open } for  pid=16576 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  668.728850][    C0] net_ratelimit: 84088 callbacks suppressed
[  668.728875][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  668.729031][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  668.734994][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  668.747168][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  668.759311][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  668.771843][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  668.783744][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  668.796088][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  668.808142][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  668.820414][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  671.050849][   T36] audit: type=1400 audit(2000000557.812:80300): avc:  denied  { mounton } for  pid=16576 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  674.084904][    C0] net_ratelimit: 82714 callbacks suppressed
[  674.084927][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  674.084979][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  674.091027][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  674.103397][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  674.115319][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  674.127447][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  674.139346][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  674.151677][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  674.163772][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  674.175901][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  677.650254][   T36] audit: type=1400 audit(2000000563.967:80301): avc:  denied  { sys_module } for  pid=16576 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  679.440893][    C0] net_ratelimit: 84809 callbacks suppressed
[  679.440918][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  679.440948][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  679.447268][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  679.460458][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  679.472430][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  679.484622][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  679.496539][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  679.509018][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  679.520994][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  679.533513][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  684.796849][    C1] net_ratelimit: 81327 callbacks suppressed
[  684.796874][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  684.796887][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  684.796958][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  684.803641][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  684.815786][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  684.828368][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  684.840187][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  684.852720][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  684.865370][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  684.878336][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  689.099387][   T36] audit: type=1400 audit(2000000574.734:80302): avc:  denied  { execmem } for  pid=16577 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  690.152813][    C0] net_ratelimit: 85065 callbacks suppressed
[  690.152836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  690.152877][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  690.159135][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  690.172124][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  690.184232][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  690.197125][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  690.209194][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  690.221832][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  690.233760][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  690.246220][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  695.508846][    C0] net_ratelimit: 82411 callbacks suppressed
[  695.508871][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  695.509096][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  695.515215][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  695.527824][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  695.540300][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  695.552604][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  695.564657][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  695.577176][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  695.589183][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  695.601302][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  695.918667][   T36] audit: type=1400 audit(2000000580.982:80303): avc:  denied  { execmem } for  pid=16578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  698.411139][   T36] audit: type=1400 audit(2000000583.442:80304): avc:  denied  { read } for  pid=16580 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  698.623309][   T36] audit: type=1400 audit(2000000583.480:80305): avc:  denied  { execmem } for  pid=16579 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  699.736150][   T36] audit: type=1400 audit(2000000583.480:80306): avc:  denied  { read open } for  pid=16580 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  700.864821][    C0] net_ratelimit: 75068 callbacks suppressed
[  700.864844][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  700.864863][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  700.871072][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  700.883375][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  700.895576][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  700.908571][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  700.920695][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  700.932895][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  700.945338][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  700.957851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  702.738626][   T36] audit: type=1400 audit(2000000583.489:80307): avc:  denied  { mounton } for  pid=16580 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  705.994777][   T36] audit: type=1400 audit(2000000583.592:80308): avc:  denied  { sys_module } for  pid=16580 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  706.220849][    C0] net_ratelimit: 82323 callbacks suppressed
[  706.220873][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.221012][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  706.227081][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.239598][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  706.252024][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.264697][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  706.276975][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.289200][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  706.301356][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.313996][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  709.577769][   T36] audit: type=1400 audit(2000000583.611:80309): avc:  denied  { sys_module } for  pid=16580 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  711.576885][    C0] net_ratelimit: 85381 callbacks suppressed
[  711.576909][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.576946][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  711.583079][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.595532][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  711.607734][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.620246][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  711.632125][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.644375][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  711.656632][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.669196][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  713.033723][   T36] audit: type=1400 audit(2000000583.741:80310): avc:  denied  { read } for  pid=16581 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  713.933879][   T36] audit: type=1400 audit(2000000583.741:80311): avc:  denied  { read open } for  pid=16581 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  715.886551][   T36] audit: type=1400 audit(2000000583.741:80312): avc:  denied  { mounton } for  pid=16581 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  716.932828][    C1] net_ratelimit: 84009 callbacks suppressed
[  716.932849][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  716.932858][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.932927][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.939833][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  716.951913][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.964476][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  716.976463][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.989167][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  717.001387][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  717.014040][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  717.074890][   T36] audit: type=1400 audit(2000000594.686:80313): avc:  denied  { sys_module } for  pid=16581 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  717.948694][   T36] audit: type=1400 audit(2000000601.009:80314): avc:  denied  { sys_module } for  pid=16576 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  720.636306][   T36] audit: type=1400 audit(2000000604.227:80315): avc:  denied  { read } for  pid=16582 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  721.746668][   T36] audit: type=1400 audit(2000000604.255:80316): avc:  denied  { read open } for  pid=16582 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  722.288838][    C0] net_ratelimit: 83465 callbacks suppressed
[  722.288862][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  722.289024][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  722.295082][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  722.307620][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  722.319769][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  722.332348][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  722.344737][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  722.356993][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  722.369257][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  722.381934][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  722.490093][   T36] audit: type=1400 audit(2000000605.957:80317): avc:  denied  { mounton } for  pid=16582 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  723.191849][   T36] audit: type=1400 audit(2000000606.612:80318): avc:  denied  { sys_module } for  pid=16581 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  724.042141][   T36] audit: type=1400 audit(2000000606.621:80319): avc:  denied  { sys_module } for  pid=16581 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  724.461847][   T36] audit: type=1400 audit(2000000606.621:80320): avc:  denied  { execmem } for  pid=16583 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  724.824768][   T36] audit: type=1400 audit(2000000606.659:80321): avc:  denied  { sys_module } for  pid=16580 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  725.091296][   T36] audit: type=1400 audit(2000000606.659:80322): avc:  denied  { sys_module } for  pid=16581 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  725.560886][   T36] audit: type=1400 audit(2000000606.734:80323): avc:  denied  { sys_module } for  pid=16582 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  725.878617][   T36] audit: type=1400 audit(2000000606.790:80324): avc:  denied  { sys_module } for  pid=16580 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  726.098365][   T36] audit: type=1400 audit(2000000607.201:80325): avc:  denied  { sys_module } for  pid=16582 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  727.102668][   T36] audit: type=1400 audit(2000000607.211:80326): avc:  denied  { sys_module } for  pid=16582 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  727.644800][    C0] net_ratelimit: 81115 callbacks suppressed
[  727.644824][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  727.645043][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  727.650961][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  727.663101][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  727.675002][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  727.688039][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  727.699942][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  727.712442][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  727.724392][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  727.737204][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  727.978376][   T36] audit: type=1400 audit(2000000607.220:80327): avc:  denied  { sys_module } for  pid=16582 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  729.315294][   T36] audit: type=1400 audit(2000000608.661:80328): avc:  denied  { read } for  pid=16584 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  730.388702][   T36] audit: type=1400 audit(2000000608.661:80329): avc:  denied  { read open } for  pid=16584 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  730.777591][   T36] audit: type=1400 audit(2000000608.969:80330): avc:  denied  { mounton } for  pid=16584 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  731.007102][   T36] audit: type=1400 audit(2000000609.138:80331): avc:  denied  { sys_module } for  pid=16584 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  731.494637][   T36] audit: type=1400 audit(2000000609.287:80332): avc:  denied  { sys_module } for  pid=16584 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  732.648870][   T36] audit: type=1400 audit(2000000609.297:80333): avc:  denied  { sys_module } for  pid=16584 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  732.788132][   T36] audit: type=1400 audit(2000000614.076:80334): avc:  denied  { sys_module } for  pid=16584 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  733.000831][    C0] net_ratelimit: 84266 callbacks suppressed
[  733.000856][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.000898][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  733.006855][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.019334][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  733.031614][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.044084][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  733.056302][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.068656][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  733.080625][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.093281][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  738.356763][    C0] net_ratelimit: 83149 callbacks suppressed
[  738.356787][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.356918][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  738.363312][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.375625][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  738.387625][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.400174][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  738.412430][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.424740][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  738.437721][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.450575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  739.303572][   T37] INFO: task syz.7.3442:11364 blocked for more than 122 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  739.896996][   T37]       Not tainted 6.12.38-syzkaller-g125206b4d7d6 #0
[  739.904272][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  739.936967][   T36] audit: type=1400 audit(2000000621.906:80335): avc:  denied  { write } for  pid=282 comm="syz-executor" path="pipe:[2647]" dev="pipefs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  740.509554][   T37] task:syz.7.3442      state:D stack:0     pid:11364 tgid:11364 ppid:8346   flags:0x00004006
[  740.581228][   T36] audit: type=1400 audit(2000000621.906:80336): avc:  denied  { write } for  pid=282 comm="syz-executor" path="pipe:[2647]" dev="pipefs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  740.623548][   T37] Call Trace:
[  740.626986][   T37]  <TASK>
[  740.629952][   T37]  __schedule+0x1322/0x1df0
[  740.956021][   T37]  ? __sched_text_start+0x10/0x10
[  740.961329][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  740.987728][   T36] audit: type=1400 audit(2000000621.906:80337): avc:  denied  { write } for  pid=282 comm="syz-executor" path="pipe:[2647]" dev="pipefs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  741.019117][   T37]  ? __kasan_check_write+0x18/0x20
[  741.024317][   T37]  ? trace_contention_begin+0xc0/0xc0
[  741.052262][   T37]  schedule+0xc6/0x240
[  741.056571][   T37]  schedule_preempt_disabled+0x14/0x30
[  741.342105][   T37]  __mutex_lock+0x81e/0x1b50
[  741.346798][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  741.557609][   T37]  ? preempt_schedule_thunk+0x1a/0x40
[  741.563062][   T37]  ? _raw_spin_unlock_irq+0x45/0x70
[  741.573168][   T37]  ? wait_for_common+0x551/0x630
[  741.578489][   T37]  ? xas_start+0x31e/0x3e0
[  741.583161][   T37]  ? xas_load+0x394/0x3d0
[  741.587576][   T37]  __mutex_lock_slowpath+0xe/0x20
[  741.592810][   T37]  mutex_lock+0x102/0x1c0
[  741.597207][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  741.602362][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  741.609040][   T37]  ? xa_find+0x145/0x170
[  741.613604][   T37]  rcu_barrier+0x4d/0x530
[  741.617979][   T37]  ? __kasan_check_write+0x18/0x20
[  741.624085][   T37]  ? kvm_destroy_vcpus+0x1c0/0x250
[  741.629340][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  741.634739][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  741.639641][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  741.644875][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  741.650835][   T37]  ? __kasan_check_write+0x18/0x20
[  741.656072][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  741.661842][   T37]  ? free_pages+0x86/0x90
[  741.666397][   T37]  kvm_put_kvm+0xb04/0x12b0
[  741.671132][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  741.676441][   T37]  ? percpu_counter_add_batch+0xfc/0x1b0
[  741.682238][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  741.687580][   T37]  kvm_vm_release+0x47/0x70
[  741.692277][   T37]  __fput+0x1fb/0xa00
[  741.696294][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  741.701956][   T37]  ____fput+0x20/0x30
[  741.705993][   T37]  task_work_run+0x1e0/0x250
[  741.710625][   T37]  ? __cfi_task_work_run+0x10/0x10
[  741.716074][   T37]  ? __kasan_check_write+0x18/0x20
[  741.721482][   T37]  do_exit+0x9bc/0x2630
[  741.725786][   T37]  ? __sched_text_start+0x10/0x10
[  741.731383][   T37]  ? __cfi_do_exit+0x10/0x10
[  741.736418][   T37]  ? __kasan_check_write+0x18/0x20
[  741.741671][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  741.747034][   T37]  ? __kasan_check_read+0x15/0x20
[  741.752384][   T37]  ? cgroup_update_frozen+0x160/0x990
[  741.757997][   T37]  do_group_exit+0x22a/0x300
[  741.762720][   T37]  ? cgroup_leave_frozen+0x16c/0x2b0
[  741.768165][   T37]  get_signal+0x139d/0x14f0
[  741.772975][   T37]  arch_do_signal_or_restart+0x96/0x720
[  741.778772][   T37]  ? common_nsleep+0x93/0xb0
[  741.783571][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  741.789865][   T37]  ? __se_sys_clock_nanosleep+0x300/0x390
[  741.795624][   T37]  ? __kasan_check_read+0x15/0x20
[  741.800885][   T37]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  741.807064][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  741.812578][   T37]  do_syscall_64+0x64/0xf0
[  741.817196][   T37]  ? clear_bhb_loop+0x50/0xa0
[  741.822033][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  741.827980][   T37] RIP: 0033:0x7ff898dc14a5
[  741.832709][   T37] RSP: 002b:00007ff899c18f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  741.841414][   T37] RAX: fffffffffffffdfc RBX: 00007ff898fb5fa0 RCX: 00007ff898dc14a5
[  741.849633][   T37] RDX: 00007ff899c18fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  741.858097][   T37] RBP: 00007ff898e11e19 R08: 0000000000000000 R09: 0000000000000000
[  741.866129][   T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  741.874147][   T37] R13: 00007ff898fb6038 R14: 00007ff898fb5fa0 R15: 00007ffc45adb538
[  741.882251][   T37]  </TASK>
[  741.967390][   T37] INFO: task syz.5.4363:14689 blocked for more than 125 seconds.
[  742.010965][   T37]       Not tainted 6.12.38-syzkaller-g125206b4d7d6 #0
[  742.018099][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  742.026833][   T37] task:syz.5.4363      state:D stack:0     pid:14689 tgid:14689 ppid:8043   flags:0x00004006
[  742.037757][   T37] Call Trace:
[  742.041062][   T37]  <TASK>
[  742.044351][   T37]  __schedule+0x1322/0x1df0
[  742.049123][   T37]  ? __sched_text_start+0x10/0x10
[  742.054399][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  742.059833][   T37]  ? __kasan_check_write+0x18/0x20
[  742.065152][   T37]  ? trace_contention_begin+0xc0/0xc0
[  742.070682][   T37]  schedule+0xc6/0x240
[  742.074785][   T37]  schedule_preempt_disabled+0x14/0x30
[  742.080385][   T37]  __mutex_lock+0x81e/0x1b50
[  742.085095][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  742.092101][   T37]  ? kvm_vm_release+0x47/0x70
[  742.096901][   T37]  ? call_rcu_hurry+0x30/0x30
[  742.101735][   T37]  ? __kasan_check_write+0x18/0x20
[  742.107069][   T37]  ? xas_clear_mark+0x1e8/0x430
[  742.111981][   T37]  __mutex_lock_slowpath+0xe/0x20
[  742.117138][   T37]  mutex_lock+0x102/0x1c0
[  742.121606][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  742.126488][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  742.133395][   T37]  rcu_barrier+0x4d/0x530
[  742.137927][   T37]  ? __kasan_check_write+0x18/0x20
[  742.143273][   T37]  ? kvm_destroy_vcpus+0x1c0/0x250
[  742.148506][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  742.154025][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  742.158821][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  742.164173][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  742.170022][   T37]  ? __kasan_check_write+0x18/0x20
[  742.175305][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  742.180964][   T37]  ? free_pages+0x86/0x90
[  742.185530][   T37]  kvm_put_kvm+0xb04/0x12b0
[  742.190069][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  742.195387][   T37]  ? percpu_counter_add_batch+0xfc/0x1b0
[  742.201144][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  742.206396][   T37]  kvm_vm_release+0x47/0x70
[  742.211102][   T37]  __fput+0x1fb/0xa00
[  742.215304][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  742.220934][   T37]  ____fput+0x20/0x30
[  742.225039][   T37]  task_work_run+0x1e0/0x250
[  742.229716][   T37]  ? __cfi_task_work_run+0x10/0x10
[  742.235036][   T37]  ? __kasan_check_write+0x18/0x20
[  742.240566][   T37]  do_exit+0x9bc/0x2630
[  742.245024][   T37]  ? __sched_text_start+0x10/0x10
[  742.250222][   T37]  ? __cfi_do_exit+0x10/0x10
[  742.254893][   T37]  ? __kasan_check_write+0x18/0x20
[  742.260081][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  742.265403][   T37]  ? __kasan_check_read+0x15/0x20
[  742.270485][   T37]  ? cgroup_update_frozen+0x160/0x990
[  742.275891][   T37]  do_group_exit+0x22a/0x300
[  742.280653][   T37]  ? cgroup_leave_frozen+0x16c/0x2b0
[  742.286154][   T37]  get_signal+0x139d/0x14f0
[  742.290928][   T37]  arch_do_signal_or_restart+0x96/0x720
[  742.296937][   T37]  ? common_nsleep+0x93/0xb0
[  742.301775][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  742.307977][   T37]  ? __se_sys_clock_nanosleep+0x300/0x390
[  742.313938][   T37]  ? __kasan_check_read+0x15/0x20
[  742.319350][   T37]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  742.325669][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  742.331590][   T37]  do_syscall_64+0x64/0xf0
[  742.336319][   T37]  ? clear_bhb_loop+0x50/0xa0
[  742.341119][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  742.347100][   T37] RIP: 0033:0x7f95c05c14a5
[  742.351552][   T37] RSP: 002b:00007f95c1358f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  742.360591][   T37] RAX: fffffffffffffdfc RBX: 00007f95c07b5fa0 RCX: 00007f95c05c14a5
[  742.368801][   T37] RDX: 00007f95c1358fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  742.376921][   T37] RBP: 00007f95c0611e19 R08: 0000000000000000 R09: 0000000000000000
[  742.385253][   T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  742.393575][   T37] R13: 00007f95c07b6038 R14: 00007f95c07b5fa0 R15: 00007fff1bc92a08
[  742.401780][   T37]  </TASK>
[  742.462666][   T37] INFO: task syz.8.4591:15406 blocked for more than 125 seconds.
[  742.485617][   T37]       Not tainted 6.12.38-syzkaller-g125206b4d7d6 #0
[  742.500032][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  742.508785][   T37] task:syz.8.4591      state:D stack:0     pid:15406 tgid:15406 ppid:13608  flags:0x00004006
[  742.519517][   T37] Call Trace:
[  742.522963][   T37]  <TASK>
[  742.526121][   T37]  __schedule+0x1322/0x1df0
[  742.530663][   T37]  ? __sched_text_start+0x10/0x10
[  742.535799][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  742.541163][   T37]  ? __kasan_check_write+0x18/0x20
[  742.546399][   T37]  ? trace_contention_begin+0xc0/0xc0
[  742.551824][   T37]  schedule+0xc6/0x240
[  742.555926][   T37]  schedule_preempt_disabled+0x14/0x30
[  742.561452][   T37]  __mutex_lock+0x81e/0x1b50
[  742.566154][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  742.572980][   T37]  ? __kasan_check_write+0x18/0x20
[  742.578218][   T37]  ? __kasan_check_write+0x18/0x20
[  742.583386][   T37]  ? wake_up_q+0x10f/0x1c0
[  742.588047][   T37]  ? __mutex_unlock_slowpath+0x48a/0x740
[  742.593852][   T37]  ? mutex_unlock+0x240/0x240
[  742.598777][   T37]  __mutex_lock_slowpath+0xe/0x20
[  742.604138][   T37]  mutex_lock+0x102/0x1c0
[  742.608614][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  742.613794][   T37]  rcu_barrier+0x4d/0x530
[  742.618597][   T37]  ? __kasan_slab_free+0x6a/0x80
[  742.623851][   T37]  netdev_run_todo+0x10e/0xcb0
[  742.628990][   T37]  ? kvfree+0x39/0x50
[  742.633105][   T37]  ? __cfi_netdev_run_todo+0x10/0x10
[  742.638501][   T37]  rtnl_unlock+0x12/0x20
[  742.642855][   T37]  tun_chr_close+0xc5/0x150
[  742.647534][   T37]  ? __cfi_tun_chr_close+0x10/0x10
[  742.653026][   T37]  __fput+0x1fb/0xa00
[  742.657058][   T37]  ? call_rcu+0x14/0x20
[  742.661258][   T37]  ____fput+0x20/0x30
[  742.665275][   T37]  task_work_run+0x1e0/0x250
[  742.669975][   T37]  ? __cfi_task_work_run+0x10/0x10
[  742.675116][   T37]  ? free_nsproxy+0x223/0x290
[  742.679874][   T37]  do_exit+0x9bc/0x2630
[  742.684152][   T37]  ? __sched_text_start+0x10/0x10
[  742.689327][   T37]  ? __cfi_do_exit+0x10/0x10
[  742.693950][   T37]  ? __kasan_check_write+0x18/0x20
[  742.699103][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  742.704940][   T37]  ? __kasan_check_read+0x15/0x20
[  742.710746][   T37]  ? cgroup_update_frozen+0x160/0x990
[  742.716418][   T37]  do_group_exit+0x22a/0x300
[  742.721055][   T37]  ? cgroup_leave_frozen+0x16c/0x2b0
[  742.726796][   T37]  get_signal+0x139d/0x14f0
[  742.731432][   T37]  arch_do_signal_or_restart+0x96/0x720
[  742.737188][   T37]  ? common_nsleep+0x93/0xb0
[  742.741830][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  742.748016][   T37]  ? __se_sys_clock_nanosleep+0x300/0x390
[  742.754128][   T37]  ? __kasan_check_read+0x15/0x20
[  742.759235][   T37]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  742.765706][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  742.771452][   T37]  do_syscall_64+0x64/0xf0
[  742.776254][   T37]  ? clear_bhb_loop+0x50/0xa0
[  742.780963][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  742.787014][   T37] RIP: 0033:0x7fa5871c14a5
[  742.791838][   T37] RSP: 002b:00007fa588024f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  742.800390][   T37] RAX: fffffffffffffdfc RBX: 00007fa5873b5fa0 RCX: 00007fa5871c14a5
[  742.808493][   T37] RDX: 00007fa588024fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  742.816872][   T37] RBP: 00007fa587211e19 R08: 0000000000000000 R09: 0000000000000000
[  742.824966][   T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  742.833077][   T37] R13: 00007fa5873b6038 R14: 00007fa5873b5fa0 R15: 00007ffd7bec0888
[  742.841295][   T37]  </TASK>
[  742.890765][   T37] NMI backtrace for cpu 1
[  742.890789][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g125206b4d7d6 #0 b4183df40fdd555480841fc2136fdfcd4e3aa3fe
[  742.890821][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  742.890835][   T37] Call Trace:
[  742.890843][   T37]  <TASK>
[  742.890851][   T37]  __dump_stack+0x21/0x30
[  742.890885][   T37]  dump_stack_lvl+0x10c/0x190
[  742.890913][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  742.890942][   T37]  dump_stack+0x19/0x20
[  742.890967][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  742.891009][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  742.891035][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  742.891058][   T37]  ? sched_show_task+0x379/0x560
[  742.891085][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  742.891110][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  742.891136][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  742.891162][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  742.891188][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  742.891214][   T37]  watchdog+0xd8f/0xed0
[  742.891242][   T37]  ? __cfi_watchdog+0x10/0x10
[  742.891269][   T37]  ? __kasan_check_read+0x15/0x20
[  742.891298][   T37]  ? __kthread_parkme+0x138/0x180
[  742.891318][   T37]  ? schedule+0xc6/0x240
[  742.891344][   T37]  kthread+0x2ca/0x370
[  742.891365][   T37]  ? __cfi_watchdog+0x10/0x10
[  742.891391][   T37]  ? __cfi_kthread+0x10/0x10
[  742.891412][   T37]  ret_from_fork+0x67/0xa0
[  742.891439][   T37]  ? __cfi_kthread+0x10/0x10
[  742.891460][   T37]  ret_from_fork_asm+0x1a/0x30
[  742.891491][   T37]  </TASK>
[  742.891500][   T37] Sending NMI from CPU 1 to CPUs 0:
[  743.122248][    C0] NMI backtrace for cpu 0
[  743.122266][    C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted 6.12.38-syzkaller-g125206b4d7d6 #0 b4183df40fdd555480841fc2136fdfcd4e3aa3fe
[  743.122290][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  743.122300][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  743.122327][    C0] Code: 70 05 48 89 de e8 e0 22 52 00 5b 5d e9 49 2d 08 04 cc cc cc cc cc cc cc cc cc b8 dc 83 5d 73 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0c 25 00 eb 04 00 65
[  743.122341][    C0] RSP: 0018:ffffc90000007660 EFLAGS: 00000287
[  743.122358][    C0] RAX: ffffffff84ff2e0d RBX: ffff888120ef3c80 RCX: 0000000000000100
[  743.122371][    C0] RDX: ffff888103678000 RSI: 0000000000000000 RDI: 0000000000000040
[  743.122382][    C0] RBP: ffffc90000007690 R08: ffff88811740c523 R09: 1ffff11022e818a4
[  743.122395][    C0] R10: dffffc0000000000 R11: ffffed1022e818a5 R12: 1ffff110241de7a0
[  743.122407][    C0] R13: 0000000000000002 R14: ffff888120ef3d00 R15: 0000000000000000
[  743.122418][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  743.122432][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  743.122445][    C0] CR2: 0000556712b39b98 CR3: 000000010b78a000 CR4: 00000000003526b0
[  743.122462][    C0] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000
[  743.122473][    C0] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  743.122485][    C0] Call Trace:
[  743.122490][    C0]  <IRQ>
[  743.122497][    C0]  ? __br_forward+0x1bd/0x390
[  743.122519][    C0]  br_flood+0x67e/0x730
[  743.122539][    C0]  br_handle_frame_finish+0x12bb/0x1720
[  743.122561][    C0]  ? __cfi_br_handle_frame_finish+0x10/0x10
[  743.122583][    C0]  br_handle_frame+0x5a6/0xba0
[  743.122604][    C0]  ? __cfi_br_handle_frame+0x10/0x10
[  743.122624][    C0]  __netif_receive_skb_core+0xf48/0x3940
[  743.122643][    C0]  ? ip6_mc_input+0x4f3/0x670
[  743.122659][    C0]  ? ip6_mc_input+0x4f3/0x670
[  743.122675][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  743.122691][    C0]  ? update_curr+0xdc/0xaa0
[  743.122706][    C0]  ? qdisc_run_end+0x120/0x120
[  743.122732][    C0]  ? __cfi_ip6_mc_input+0x10/0x10
[  743.122747][    C0]  ? ip6_rcv_finish+0x344/0x3c0
[  743.122763][    C0]  ? ipv6_rcv+0xed/0x220
[  743.122777][    C0]  ? arch_scale_cpu_capacity+0x1c/0xb0
[  743.122799][    C0]  ? __kasan_check_write+0x18/0x20
[  743.122820][    C0]  ? _raw_spin_lock_irq+0x8d/0x120
[  743.122839][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  743.122856][    C0]  ? check_preempt_wakeup_fair+0x886/0xae0
[  743.122879][    C0]  process_backlog+0x3e5/0xae0
[  743.122900][    C0]  __napi_poll+0xd0/0x610
[  743.122917][    C0]  net_rx_action+0x584/0xce0
[  743.122937][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  743.122955][    C0]  ? sched_clock+0x44/0x60
[  743.122974][    C0]  ? __cfi_sched_clock_cpu+0x10/0x10
[  743.122994][    C0]  ? try_to_wake_up+0xdfb/0x1b00
[  743.123012][    C0]  ? irqtime_account_irq+0x51/0x1c0
[  743.123042][    C0]  handle_softirqs+0x1ab/0x630
[  743.123066][    C0]  __do_softirq+0xf/0x16
[  743.123085][    C0]  do_softirq+0xa6/0x100
[  743.123106][    C0]  </IRQ>
[  743.123112][    C0]  <TASK>
[  743.123118][    C0]  ? __cfi_do_softirq+0x10/0x10
[  743.123139][    C0]  ? __cfi_shmem_free_in_core_inode+0x10/0x10
[  743.123158][    C0]  ? __cfi_i_callback+0x10/0x10
[  743.123179][    C0]  __local_bh_enable_ip+0x74/0x80
[  743.123200][    C0]  rcu_do_batch+0x5c6/0xd20
[  743.123222][    C0]  ? rcu_core+0xd20/0xd20
[  743.123241][    C0]  ? __kasan_check_write+0x18/0x20
[  743.123262][    C0]  ? _raw_spin_lock+0x8c/0x120
[  743.123280][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  743.123299][    C0]  ? __kasan_check_read+0x15/0x20
[  743.123319][    C0]  ? rcu_nocb_cb_kthread+0x4c7/0xac0
[  743.123341][    C0]  rcu_nocb_cb_kthread+0x4dc/0xac0
[  743.123363][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  743.123384][    C0]  ? __kasan_check_write+0x18/0x20
[  743.123404][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  743.123422][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  743.123440][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  743.123459][    C0]  ? set_cpus_allowed_ptr+0x93/0xe0
[  743.123474][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  743.123491][    C0]  ? __kasan_check_read+0x15/0x20
[  743.123511][    C0]  ? __kthread_parkme+0x138/0x180
[  743.123525][    C0]  ? schedule+0xc6/0x240
[  743.123545][    C0]  kthread+0x2ca/0x370
[  743.123560][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  743.123581][    C0]  ? __cfi_kthread+0x10/0x10
[  743.123597][    C0]  ret_from_fork+0x67/0xa0
[  743.123617][    C0]  ? __cfi_kthread+0x10/0x10
[  743.123633][    C0]  ret_from_fork_asm+0x1a/0x30
[  743.123657][    C0]  </TASK>
[  743.712774][    C0] net_ratelimit: 61536 callbacks suppressed
[  743.712798][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.712978][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  743.718908][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.731384][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  743.743561][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.756437][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  743.768968][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.781298][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  743.793305][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.805554][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  749.068770][    C0] net_ratelimit: 85095 callbacks suppressed
[  749.068794][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  749.068936][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  749.075080][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  749.087698][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  749.099687][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  749.112293][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  749.124412][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  749.136707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)
[  749.148495][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  749.160802][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:e6:88:57:9b:a3, vlan:0)