last executing test programs:

33.582621623s ago: executing program 2 (id=2148):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @fda={0x66646185, 0x8, 0x80000000000400, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/224, 0xe0, 0x1, 0xc}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0})

33.582351733s ago: executing program 2 (id=2149):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00')
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
close(r3)
r4 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
close(r4)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x36, 0x0, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
close_range(r0, 0xffffffffffffffff, 0x0)

33.538827414s ago: executing program 2 (id=2151):
socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) (rerun: 64)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

33.507865434s ago: executing program 2 (id=2152):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xffff0001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}, 0x1c)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r2=>0x0}, &(0x7f0000000140)=0xc)
fcntl$setown(r1, 0x8, r2)
r3 = socket$inet6(0xa, 0xa, 0x7)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000180)={0x87, 0x16, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xcc, 0x81, "dd243830ebc5445a87740453586c5ece304f5266dfaaffaa9e351265553bb15da0b99aa2a2640579f07887df659156b74048647dd26c60abef62d2b0e26c3e33b250f22198ad9f6f7ee44db738f3443ba6a2c2421ccdb59678cb81378833c643b58d708069868f3e15a583840d4a95c7f09ddd2170c7652cadbdc07aa68981aea9"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x8, 0x1ff, [0xc19e, 0x1]}}]}, 0xc0)
setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000240)="6c662841398138ff4fa6fe39e548ade1626a6890352aaeb2b802ae0a441f5a055f8ffe76487f8843b99b302a4dad9d37826d53d3517bf6d9f589e4d85069eada2ea3efb93e85975b101c6d8e1fe0ab4760b1f8575f8022d3dc7ac5f8f57a1be2bae06713f7b482e61bba8f61", 0x6c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000405}, 0x800)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
read(r4, &(0x7f0000000500)=""/94, 0x5e)
pipe(&(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="ee76b5c11767751da24113f07c0594b7a3c181b2510c526bf93ac19258ee8e3fe3a88b0c81cf9759f9ffbe2296bd648994cd20e565fadd7b812a918a5479b06bbcb5d3adca7784812e6d423692bae4baf9e714f0e455c8d5c22d", 0x5a}], 0x1, &(0x7f0000000680)=[{0x60, 0x0, 0x9, "ddcdec72e5c292b2a4d66704d8f624ba5082fdd7a07064ea49634492d9b38dfeb653822de88b9cf91c7aab6734611c38ec49cae307c8a9638be68b3dd61b2f9c577cb632ac81c12f05257a"}], 0x60}, 0x80)
fcntl$setsig(r1, 0xa, 0x7)
write$binfmt_script(r5, &(0x7f0000000740)={'#! ', './file0', [{0x20, 'macvtap0\x00'}], 0xa, "9f42b98b2e5c4faae84f9cb66bc3"}, 0x23)
r7 = eventfd(0x7)
mkdirat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r5)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x840)
timer_create(0x3, &(0x7f0000000900)={0x0, 0x10, 0x2, @tid=r2}, &(0x7f0000000940))
shutdown(r6, 0x1)
connect$inet(r5, &(0x7f0000000980)={0x2, 0x4e24, @empty}, 0x10)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000009c0)={[0x6, 0xffffffff7fffffff, 0x2, 0x1400, 0x3ff, 0x8, 0x5, 0x2, 0x401, 0x3, 0x1, 0x2, 0x7, 0x3, 0x7d8, 0xffffffffffffffff], 0xeeee0000, 0x14})
setsockopt$inet6_buf(r5, 0x29, 0x45, &(0x7f0000000a80)="8914926de0dbe2f103413c231add4d31381fef697c18f5198df1622cadf59f0111057a466cc63c038af9d88d485de4cad5b5405f7781829a121d", 0x3a)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000b00)=@arm64_fw={0x6030000000140003, &(0x7f0000000ac0)=0x80000000})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r6)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, r9, 0x402, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e80dc53ad60599d4182e3f13c86b5d3b13ad20915e6d63e5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d94958fc8f415e14f5e67500488ecbb5ba900b931fc4be9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x148, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8000}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9a}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2b}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x543dc04d}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0)

32.54450975s ago: executing program 2 (id=2157):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r5 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000bc0)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001180))
pread64(0xffffffffffffffff, &(0x7f0000001380)=""/147, 0x93, 0x5)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000206a0593004000010203010902240001010070260904000001030101060921090006012200000905810340000704073693dbaf86e7a78c15017a0f8ccbf354bfff31b66ae56f555206b562bb79bcc32dc108641efd5f7259f135af26f6db2d9a9e8d2f9015c435d021604cd3e7307d548306d593b4227223f80c3b29cccb3812c743cc678d97"], &(0x7f00000017c0)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x300, 0x1, 0x1d, 0x6, 0x10, 0x7}, 0x0, 0x0})
syz_usb_control_io$hid(r7, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000001f00)={'binder0\x00'})
r8 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88)
preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000002040)=""/4112, 0x1010}, {&(0x7f0000000300)=""/117, 0xfffffffffffffff6}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000380)=""/77, 0x4d}], 0x4, 0x0, 0x6, 0x71)
write$cgroup_type(r8, &(0x7f0000000000), 0x9)
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x4)

30.532001903s ago: executing program 1 (id=2184):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x8)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000040)={0x0, 0x2, [0x8001, 0x7fffffffffffffff, 0x8, 0xef, 0x5]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x38, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1000}, @flat=@weak_binder, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3ff, 0x6, 0x8080000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

30.531644793s ago: executing program 1 (id=2185):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
fadvise64(r0, 0x2, 0x378, 0x1)
r1 = fcntl$dupfd(r0, 0x406, r0)
connect$inet(r1, 0x0, 0x0) (async)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x89, 0xfffffffffffffe7a) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) (async)
r3 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r3) (async)
ptrace(0x8, r3) (async)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
readv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r5 = gettid()
rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180))
tkill(r5, 0x16)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async)
read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020)

30.384917195s ago: executing program 0 (id=2187):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1)
mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2000005, 0x12, r0, 0xfffff000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0x0, 0x30012, r0, 0xca71d000)

30.320727356s ago: executing program 3 (id=2188):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
syz_usb_connect(0x0, 0x5d, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0xfffffffffffffc95}], 0x1) (async)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000400430000000200000000000006040000000000f93132", 0x39}], 0x1) (async, rerun: 64)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async)
listen(r1, 0xfffffbeb)
syz_clone3(0x0, 0x0) (async, rerun: 32)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
close_range(r2, 0xffffffffffffffff, 0x0)

30.228136997s ago: executing program 0 (id=2189):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2000000000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0})
fcntl$setown(r0, 0x8, 0x0)

30.209841998s ago: executing program 0 (id=2190):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00')
exit(0x3) (async)
read$FUSE(r0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) (async)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x6}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5)
ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, 0x0) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])

30.144941159s ago: executing program 0 (id=2191):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902440001010000000904"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

29.677575296s ago: executing program 3 (id=2192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x70bd28, 0xfffffffe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000c0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
mremap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1000, 0x5850dacc4e5078d6, &(0x7f0000ff3000/0x1000)=nil)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x6)

29.658969247s ago: executing program 3 (id=2193):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000)
mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil)
r1 = fsopen(&(0x7f0000000280)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}]})
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0)

29.599596528s ago: executing program 1 (id=2194):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902440001010000000904"], 0x0)
syz_usb_connect(0x3, 0x520, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xe2, 0x65, 0xc5, 0x40, 0x41e, 0x4017, 0x995, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50e, 0x4, 0xc9, 0x5, 0x80, 0x7, [{{0x9, 0x4, 0xe4, 0xf, 0x5, 0x18, 0xa9, 0x21, 0x83, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe, 0xd, 0x40}, {0x6, 0x24, 0x1a, 0x0, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @acm={0x4, 0x24, 0x2, 0xc}, @dmm={0x7, 0x24, 0x14, 0x1, 0x101}]}, @uac_control={{0xa, 0x24, 0x1, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x3, 0x2, 0x7}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x8ff, 0x8, "6ec3c8563b"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x4, 0x0, "7e3a16bcee9f"}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x6, 0x3, "8eb3ea1e"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x9, "f327379bdb"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x8], 0x9}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x3, 0x30, 0x5}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x48, 0x66, 0x66, [@generic={0x67, 0x24, "78e08b2ad7ccd27ae3ff9f486996c4f6e569215a50484510d8ac47c73704ff030e9f83da40e881760c1c31e3696d4b42a2d9bdb29de677cdb72743299ee5407c622098aed756b00879dc0a8d64e378e622a8de8d14676117f2f18b588922d202b6ed351a22"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x9, 0x3, 0x5, [@generic={0x1e, 0x11, "157e88eb31be809e407710a7d6c0ab61f598349e3793f6cdbbb631da"}]}}, {{0x9, 0x5, 0x2, 0x8, 0xd4a67884e4d2e58a, 0x5e, 0x2, 0xe, [@generic={0x71, 0x21, "4a6ad38ea0c097f5dd0bc2911b4262effc4ce90b3acb078f762501e8844ac9f687097451ac3d2758d933d16634a7395a9a63c3b2ddecef85d992e98397550609bdcd34fa768fc01eeb67741186273c392bfeead6ccf3c7415eff34625bedb608501f1f6c101cc8ef7e01eb984acce2"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x7f, 0x33, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff}]}}]}}, {{0x9, 0x4, 0xdf, 0xd, 0x3, 0x8e, 0xe4, 0x4d, 0xf7, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "cda68e6fd2"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7ff, 0x23, 0x5}, {0x6, 0x24, 0x1a, 0x5, 0x8e4ca7882420747e}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x8}, @obex={0x5, 0x24, 0x15, 0x4f}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x9, [0x7]}, @acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x200}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x23, 0x2}]}], [{{0x9, 0x5, 0x7, 0x1, 0x10, 0x0, 0x10, 0x4, [@generic={0x61, 0xc, "3e93f837564e2c7f532584383a1ecc1e349198fa6b78e00806bc97242bb0321b9f588281b260fc0a2ae75d13c592b22e8429677b4d93f671541d936aa257155c7aa824e24994b1738d1e02f92705ac60387b16bab160ab6cc33a66b2b1f3ff"}, @generic={0x8f, 0xe, "4581ea35d68295add85ec26c6725839109c58e44f0cfdc556db8db9f35ef63e9137261ef6cbcc1aaede363bcd33761afafaa739e05409f4ce349f3e2fd7d9ac12ab55674347da14189b06a4d28c5229fec4fef4518a771313f6d084428afaf9e7035279ce6bc334f092f80e8c0fd8af34f6ab3e75306279a4f322f925f7eb906bad63467e2e260de69c68f5cf8"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x9, 0x0, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe9, 0x80}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xa, 0x3, 0x0, [@generic={0x57, 0x6, "a2e45e0d487f873f81e6445727390fbc26321f0ad080187de0025630b3de97ab13825fa0b8d996c52b3472a999c78b1f04a9fa81c0393465d5be4a08e31402df1f3ca81164bdb2efd01bea672c0684af85deb1c22c"}]}}]}}, {{0x9, 0x4, 0x9b, 0x3, 0x5, 0x8, 0x32, 0xe3, 0x1, [@hid_hid={0x9, 0x21, 0xd08, 0x8, 0x1, {0x22, 0xafe}}], [{{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xd, 0xb, 0x3, [@generic={0xbe, 0xc, "a257be478da92043b9363bbf3f827d988e26e962985c1d7ee3c33c304a8961cacd12b3667c9a8c71b74636c184b0cdfd7119e6e474d3c1d524746dc733ab914f01bf6152739b2ab5fb2019a4f78f7bae5fa852b1cbceadfbae0ee8b909680c0eaf3388ae45d66888cfbd2b16b00ab9dbd93bac3ac8d3adc3b9216224456ea054209d98ebd986d514042e0663ce7eef2d9434c09dc2037e223ef9055bc74bb5867ff68e77318d51f94061a11d3f8faa0401863dc2d74bd0f2c942ef13"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x3}]}}, {{0x9, 0x5, 0x9, 0xf, 0x20, 0xcd, 0x1, 0x0, [@generic={0x6, 0xe, "5d9371f3"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x5, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x7, 0xf, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4895}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xe}]}}]}}, {{0x9, 0x4, 0x4, 0xf3, 0x2, 0x26, 0x11, 0x68, 0x9, [], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xd7, 0x4, 0x0, [@generic={0x34, 0x30, "8f620fcfbd4a17cdb736216a2922496532e64b5f928716dc72977ef92443a056498f1de98dcc5676efbc957c19ee9c4f94f2"}]}}, {{0x9, 0x5, 0xdb3be1ab96ecd1bb, 0x1, 0x10, 0x10, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xdd, 0x40, 0x1, 0x10, 0x5}, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="050f13000203100b0b100102a000040008000367b50ff14b4835ff6f6b3ca60b1c9275a4b9f41966d248c1da963e138f01acc2199ef4bc1a1f080000591c1e9886be8128e30552c7e41530e42d27dde668b4d89bc8340756aba07ee13b4282d28a871b879cd810f5c79e7196c181e5840e30727093883dd35dbfff331d893a65aca1af08d4a2a1899a44fc73754bfb2c822d41e18c52e44c87c3afa24301c6a052bf78c4e43562b1608da334432224dc5fd69760cdd373348686375822ae939f4e659783ad0c94"], 0x2, [{0xad, &(0x7f0000000400)=@string={0xad, 0x3, "452fb42e6a38f0ba44f486224744c6d91ea7841877cd252a5d6216b3f9a6c864eee55ae99d9dd4178067562dd0a141eed7ac1b77fcfe0bcb0f4a9790f8da86d89945b098c39e86d07e3639195c2be1a09ee1c8a333cdeb7e50baab914a78b5e9c1f04465a323ce8b81a8dc556ec6005614a261dca00f61c3cbf3bc9007c812b35f171b466ec9bd74101a72bed265f57b26b78c2be3b1c4a3c418f610d3f20dc7e7d804032a8693386d46e4"}}, {0x69, &(0x7f00000004c0)=@string={0x69, 0x3, "3c5e3d16c75494a6259cd18099d7d44a3242fe78ea7f35e5469810d9b4de61345230c426212b4044599b4a8efb56b7798a47461a347f8589f5a789af748ae7c2b0cfda16d3383bb43cba23fe2909559dc425d0ba7417fac13de93744ae6f4580cde149f1a18c21"}}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 64)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xfffffffffffffffc) (async)
readv(r2, &(0x7f0000002540)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1)
dup2(r2, r3)
r4 = fsmount(r1, 0x0, 0x0)
fchdir(r4) (async)
setsockopt$inet6_int(r4, 0x29, 0x41, &(0x7f0000000000)=0x4, 0x4) (async)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000202505a8a440000102030109021b0001010500010904000703070101ba09050102f7030704074524863da44ddffc57a7eb5133b5be04ae7c33405de41c05008d6dd9d612a635ed51bfaeb0f210ebdc6d8b"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

29.593469848s ago: executing program 3 (id=2195):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
removexattr(0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000500)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="20095900000059067f96d365c5ae0dfb52da99a9cb36dbec4d0b37715c430aa6a85bab5da2952b8142bd10a0b4cb9e791842953398f6e548f0ec9d80c362b1a2faa99ca285570b510c272be00d8dce809bc2aa6deeb7b58eab9a4a35c30000"], &(0x7f00000003c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "90c1fea18788274c23016635f7239b8c9941e2a50d7336403f16d3739a592962d8384794fad85f553c716ad1d57d1e372e312160e2ab3cbe1d6da24e"}}, &(0x7f0000000440)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x8, 0xf, 0x17, [0xf0, 0xff000f, 0xc0f8, 0xffc0]}, @ext_cap={0x7, 0x10, 0x2, 0x1d94eb3476356726, 0xf, 0xe}, @wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x1, 0x3, 0x6, 0x3}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4c, 0x655dd03253e20786, 0x6, 0x8, "83832ca6", "62d55bc0"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x8, 0x6, 0x3, 0x5, 0x10}}}, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x20, 0x15, 0x6f, "e4cb093d2229e11aeb594bea06eafa6697ebd2e8758e4bf98604ed2e795e5ef4aacdc490d1ded88e1b92b7d415074bba37f2462c5956344a4d9c13cf05c89622da518ceddeb74f8059427dbce2d3e113441cb65d488c175c2732946306737b413ac537f8e4966d32ab5b5ad6e7188d"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000140)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0xb, 0x2, "a0d0"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "0901"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x1, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x5)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000800)='.dead\x00', 0x0, 0xfffffffffffffffc)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
mmap(&(0x7f0000630000/0x2000)=nil, 0x2000, 0xb635773f06ebbeed, 0x4000010, 0xffffffffffffffff, 0xf6d0a000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x15)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x10, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

29.583314458s ago: executing program 0 (id=2196):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000)
lseek(r0, 0x40000000000003, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0])
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xc5f5, 0x4)
read$msr(0xffffffffffffffff, &(0x7f00000000c0)=""/190, 0xbe)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4)

29.49663688s ago: executing program 0 (id=2197):
r0 = socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0xfffffffb)
clock_settime(0xa, 0x0)
socket$netlink(0x10, 0x3, 0x12) (async)
socket$netlink(0x10, 0x3, 0x12)
creat(&(0x7f00000001c0)='./bus\x00', 0x11f) (async)
creat(&(0x7f00000001c0)='./bus\x00', 0x11f)
syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00')
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1}, {0x8, 0x5, 0x0, '\x00', 0x10}, {0x6, 0x1, 0x9, '\x00', 0x9}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0xc, 0x6, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x7f}, {0x74, 0x80, 0x4, '\x00', 0x81}, {0xfc, 0x4}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0x6, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x2, 0x9, 0x5, '\x00', 0x5}, {0xa, 0x5, 0x9, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x7, 0x3, 0x6, '\x00', 0x3}, {0x8, 0xff, 0x8e, '\x00', 0xd1}, {0x2, 0x7, 0x1, '\x00', 0x5}, {0x4, 0x1, 0x5, '\x00', 0xff}, {0x5, 0x4, 0xc, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000b0000040"])
openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, 0x0)
fsopen(0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall() (async)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
write$evdev(r2, &(0x7f0000000040), 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1ff) (async)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1ff)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)

28.259837309s ago: executing program 1 (id=2198):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7fffefff)

24.654800229s ago: executing program 1 (id=2199):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil)

24.595161369s ago: executing program 1 (id=2200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0)
getgroups(0xfffffffffffffdc5, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0)
write$uinput_user_dev(r1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x2, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@mcast1, {0x4, 0x7, 0x1, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'generic-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x30, 0x1, 0x202, r4, 0x0, 0x0, 0x8800000}])
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'bridge_slave_0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xcc62)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000007c0)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})

24.591524159s ago: executing program 3 (id=2201):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=T'])
socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4c20, 0x3, @mcast2, 0x1}, 0x1c)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000180)="efd8", 0x2}], 0x2}}], 0x1, 0x4400c800)
syz_usb_connect$cdc_ncm(0x1, 0x70, &(0x7f00000023c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x7, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b447"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x1, 0x100, 0x88}, {0x6, 0x24, 0x1a, 0x259, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xf9, 0x98, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x9, 0xdf}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfe, 0x4, 0x7}}}}}}}]}}, &(0x7f0000002700)={0x0, 0x0, 0xf, &(0x7f00000024c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf8, 0x0, 0x2}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
socket$nl_route(0x10, 0x3, 0x0)
r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000000))
sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
r6 = dup(r5)
fsetxattr$system_posix_acl(r6, &(0x7f0000000cc0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000000)=0xc46, 0x4)
r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r8, r0, 0x0, 0x80000000)
sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000280)=@un=@file={0x1, './file1\x00'}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="719575b527e893df0aa7846481050971087863191e42e423a9681ecf184cbd58c34a34d5dbae0464f40e07d062ab870a99fc7fbfaa0be8cc8347439df7702d1672c5fc8560fbeafb94e1529b90532d78fea69bf318d9c416b06bb606f52e6266f9d3366245a249f61dd1f0cf13ab1497dd31af2149f9fc662bb45629e140ab10799d7a926c93e0d2764f6c657854dfa5a8ffe2a059479963173115c459dcc7b3bd735d6ead4f2b", 0xa7}], 0x1, &(0x7f0000000500)=[{0x1010, 0x117, 0x2, "9d58ef38babffa216f837fef2eb27f47ebf2d54fbddbf0aa578464a0b530bd916546f230d0a617f5e1c06fb6dc4c4a64df561952d0c760a397dfc645f38ca9a28ff6ae3e464398b8f3f474ceb291849917c318bfb60cd5de35221c0b0b1fdcccdbc313120bdb39b0132ae2997597685845f19f600d96c2030678975486de9c28d4bed5a8f257373e24562c9ba069288804fb9feb2c1e1a5be1b512baf30b3df734e24e4f9063029f7af939bc7b9f0aa5d86b94990154bf57fba068235c2ba9dc830284ffed0dc599d2b93cb27a008bcb1574941c50d2fb7306d9529fc6ef03a94f7f59a6680068e4adc3a1b3aaa87f217daf9a2d138a64a2106c7936d089004fa0a8dfc7c0b01399aae68f437e2eb37ba8e3b2ae20fd1bdf738ebd72deff8a0997a2f3fb0eceae31fbc8090c7821ba965c6f9672317dc04be7da10da5b1d74a7b5b06a31da7eea5ff4f8459d649dae1a9c1d4d78a94ece2ca205c7003fc57e665bb9f21ef061076c1fb4e751abe762da5932957003ae124080219f9d7ddf07b7799dc9f0a70068e5fd820abc87a6ea55dd2eee3e94ac6d1cc405432aecb899a3626d9288f477553d713d5d845069c164e0c7c259f615c784a4846b4134deb829e7bc8f3e011f23d7a4b9f92c6d9101858b8767790ef5dd27445ac3d5aefabf36d7fd4017639470f2e434f0c464c37564a43a7aed87bb9bf837da3ca059469b97fa42c64a99c99159d072d2720906ec45f1e99efc99b07f2744be7d6d752d4ffd74a44ade637626fd201e9e37105891f69c78756a4a7b332686da6eb20c5ac214def6d3aea346421a27af8ecd4eb88c21f6e1052d8da4eb740fcf248a5e390d4b738b550837a46f3daf22f4f6b3bf0c69593109affae10b5ff183549c816878c7214c6266171aa4f400efd77beac843e70d93f09ab708a400c5c3c8fe483148794b8c6d34812d65601138d3f5bc7152b1667b2d4895ca568a5f8d4868a42c359c27f4dace3530c5dbaf871ee0d89d36fd1b871d9cd4c4232a4f3b0e800b0ab9d64361305ad14534027d71f5633fd682c43276e86d367eef51a8f6efe4d0a1baa947f3890b518a5a16f17096b83f63eb74038fdcc89e59218cfa39962f9eb3e3704876e98c095e4a51e08070f86d01f9657108c09bb05eea2dd772bd64271401e076f61edd6ab25fe1ea288d195b8b7b40c47824e63808e95287a1e55e574e072ccad6a9c5dea13d955a9f13a3b812b4b52f263a75055384e2cb6d94d2f53dc8a40b4d2c187ea8120628fb90ccbd3bffd537b7be93e3d7668cce11ca33985e6ff99778c4ca19a26798f90a612d9bf74be4979804178350590765d83913ba3ad8ae6b589a1ea99d37753f47def34f06078fcfbd65dd7c487146fc4e259cbfe054b09be577c59d3daa21ad5af79526f5609604319fc4063e62f807c19be21cd879e532c4ffdde58bbb608e057b3f4d91069b70094c8020180eff9b5cb2cb96f78dd33193cddee7c230c546f36604c0a0386ff8b0eff782e7868eaca4561ef22d37d162b220242f2050ce62c73721289c78a61af0e4a69806ab97bb27c8e75ff62376828ac3bdb0c961bac45913ef654494f91668d342765dc88153d80c88d1080f295a79049dec2b51a4016aa5a52a8634651d81b87793b2cf99e196ad9c268050ddcb0a6562da25f28e3b5cdf18eb248066da9ca5526f051777681d94c066a943bf6feca03bbbf28d092959ceecd2c7a432df750894ffb5fc28f993e35f5cc8ce29db31237cf8213c7136d4c90f6403c761438c7f2fcd423e6fe4755840c76e6eab23726621f26b9e7331dbb758546f8ae0605f0d95a83b161bedd76e206c832e2d904bd781b0e6f4bd86ba3d8b68cdf5a85a4f30a2a20bed80015473720f79767cd0280ac03db6e904ffa10895f575f26a484b1f56a21e71f9c551ab07c3e345bf9aa4fb3530f31d9c0752df074b4a6b27055e526217d1565cf45b88b2a248b4dd6f00f5dda1c0afa902c4d07989cb6d81311b15b4fbd6592816bfcfccb92c66aa5b3b5e2229f293b9c16faf0828a2c01456f0f19d6ac378792f21bb3767f3514a3d846284f3ac9b71167bc14dd31a5e73e5aa62a68f40d55976be2bc3299b6cb07f0c8d873c12bb25238a60a19b5c9d05e09ac507545ead0b830007616dd4fc5ed9085799d135db377946a2f437125205442789e9714b73034b6aee71932d1df639fa7db732dfb15562cccbbe267412feebf52854c9212cf10bab56fc6bbc7e918dd214cedf4d2c9adaf9ea99676f107aae6fed11ff9faff1c59b84256e6f5a242e472904e15e7f00ff4191f899c97eb6c9e6241b4e3ef2b8f9ba1e76ffd81d9dbad33c3a2547979c4f5b604952dbb7ac8d5ff777c4274e5b4e58e2c3a7c09cd033524044d54ca5bbef4ee1f76831d3819b3fe2f729d5894fe089560fff4c19429e19aea167cc7d3cd24310207bfbed68b310c6d8e2bc2eef4a22039355e343b8ece9484fd2e0e4d6c41c6356495d008931378320390bab9cbbd1268721ec39691046fc9f2d46ece9676218f386ee3bd7fb7f5ac69ee8ad43550e07089d7bd2c2f2e56344dcff549d5d1a56c039375ffd6b428e7d6c2f07aae9462c2886f59dee2f0f722175069362c5d4baba00331ec21d0c01e2101ebc11103339b107d61b34ec1591df7d9d13e0cc7cf3d894f84fbb843cdcd140f77a6dd86d61fd7cc8f70f01a168d50242fc797236458644f58078eceb75df4512c898f0c2cd6fc3c85887d59820342eae2b4efd56eed739992be41b53a8e26347456a0d9b55a4daaef16d25967512eb467191a2c091a1596b731fa1f17bc573bd2872985bf5b36830d85d68a9ee6899916630b31b9c8c5ec36475d4019e44262b08fb9594e81d83b0085cc5905aad12cdc56d0b6bda4f29e100905901e46662a5bf1b0a239a80e7d839785b5d034e73395ac3bf165cda23fceeb76d558bf285b159cb5c89dd805ba6e8df09f8c9cb9028542b3549e8c88424fa7e88f417c67f23111762cd36288efd92f8ca74a6d318eb553657b22871c45adc605b75ff032af0a15f4bbaee8706b1ee89b502f30fb0f14ddd39a32c87728ec6e2052af532f62e330725c833b143c2870e4a01b9552c72aca391da5c34dfd44306f7c2a91fd4dd9ff1e9827b5c4794be5a2c44578a41e24744ab9e94ef6d5964bb534ab2c351defe6b4bc036917a77092ef2de2ca00c0b5977cdf8a5478e20dd66bc5f20b28fe8edb48995de444dfa9397c714467490cbe6f749778c514e5632a39ca78884829c1da6f6627ada9b43249fa907a34b32e0e2925e1b43157bd440ed892236e50ba128a4e6c2a9b1be66b5dba1b5a45dd269871ee7c0e027de5c2f19178c1803d73bc510fd5bd009b4be8d0bc48594450c6b0c79797bc0bd17c9d48d78253b44bbc52faa455fbbc6ec961ccf45bebadb037f8eff79a27b28bf65ae5acb447f5f3fb89c362366ccb37d0f7df6f1774b6b388a91f9dbe08233e46284a41b4be3ca73e983bcd6cb8b640bfb082f1c88a226bde7be6c6ddd5a0f55974f429609169882bb501fb20c9c10b86469655cbc1fb5054d5771a190477a86faeff51968be72b3d5a34a3a9a686810e6a8b2fedd944f61bb36eb0b776d18de79dfafea70f7a9bbd636f4939f1b67ff40c3583a11ba73caf42dbf668804d4460f62c69125cc17095b527bed54ceac455431a996778bcf7771d2dcc0834f087522db89dd40f9ca89da651db3d0dd63d8e6b9f5a971392bd09ca9d17cd8abfaebb44ee60da8ebf6ebcc87169c14fba895504130eb7c73ae7e1689eec1a139dec2da4e8924d1b13f8c5c4aea885722d7cea744b752950f0f8894e4d17f0b2e51d7788d05ea093eca8e4aa1f4c612081030765a4f19c11efcb5c81fdb6fff3c4fbee75c63a51b8ccd175f460a265c6460c1442004448a18c689cf988ac3de940e9f7e476e8f52ef16e338547c39d5418a3d0e0839f7d3bdeae45f78352597cf483c53eda075a8fc682d01ac1f6d87d4b4ac9cd30bf442fb388c031ae192278f88c163fc17a2edd50c51c95f78809c197e4b4f3e54a4bdc6d92263d32074939c5dcd22baee09b62a1bb765265c719fc89d0208baa39e23b58a9670d2af943f222cb90b89569d31f5bbc7ed439f33f6b2473d1054f8eeb1f41ed7ce5ee632df29777cd63dcb5321627f50a7bb70b16a52f74577b6ef3fc92f83a9147b32aa687f0034fec05b436b98e74b4da4e12d5015e20f6483518a7e4e4b369ac31b6f87cf20da0503d2745406dac1e573643a2bc529e6dbb6a12260f78f4ca65ebfaca28423c66f9eec49c3e9587f2506bcf09091111d1c7539e6dabe28a07432305dbc0826ecc2b22384db9d31d3671c4f00b0fbda4445830a2817ceba4feb6d1afcc896294bfbde69140ada7df4dc23cdee2f3747ed2ac959d3c2a2da59a93a0109c717a0783a4557bc622f79aec6ad0dbaddfbac4375d5b9cb9d058bd6ed5032d4dfb7a616e2b8a51495cc7060cc64654eb0a6226c7c63c36858a5c0b0f4ada92837caf9569fd6e51dbbc8fd7a2a494c3a008c6fcbae7fd342def0d9f123837bf30173c81a210193303894b85e0e322e0388cb58e6edf36acd7d966884f41e21bad84a01975e4b90fa76753917bdb1602f6b2f64711c35ef4ee70384f14ad43405740a87043464db73d4a083eb9790e717ce7953cb0b27f18158d372ec63f685c71ee1688aab225f4224a44c724169f84365cd399c4711cce5a3d753faf3428c4e3d00b9c1a0a82926b4e4e61995f694776128586d6c0022f32dd1644d8c66e7ab833dd7c6349858abc2d98613ae2673d64b5255ae81733c2b7a4d13d927fbd2a48926380031154a61c806338c830cbdb9a8936342e9edace80fce58747aadf78dde396785699306b13d64f6890f6d2d4641b5154894f47aa2e394ea604d4abedfd65d5992859d888a6cf9a83e177ff51abb9e75d0d4c59fb6e5c22a2831bec76d25b485637043919cc3395e56c79451176d1f8811eb563941ee954d0776a3e44058e2ac3aaee78810b066532cacba859f586b4fffba24a3a4a3584a9867c93b4f96cfad518b676b5c1a401ebf914523d6dd01f0cd0dfcadde906fdbe7365cd87f1286a73fa0198521eb7d98386d577cb71467e6957842cb8a1d44308d7755a236fc85efc70c5849e6dd855189534857773d955bf33b6d7f3269ea79fb45df8330df713f1761a5f817c8ab217bf676fc83a0636a7d843c3e613082551efa9e098550d1df5f205301b7c28cc23497489c26c52526924fc267c95317be9fc31077f55ee22e508decb1ddd25d43b00e5a059bdb83a1ce673f692590f8cf958f4953d4d261b557887ad934825622f68c970c7714472101c634abe94183e9530371bc88e2667627e7d074f50aeb0f7751c2dde4ccc8ae5ab9822a66018a5876af28ae8612208670004d54dc385bb659cb95ccc31beeb69b45f634e8f282c413ddb2fffc20de984f189ef72454ca879899978c44ae77f7c3748f686d246f6ee30ca15df0c19b6b1bfa53b5a02ba12fc71e5f6c71af4f50faeefddaa2b95072b480d9107658a61f06169bb0a3d7b65dbb643e22e9fd190e86282d8b9bee1ba514bd82c53a845a250b26ad62f345179ceb148e156aaea83f4b6043472f8826da4f9b7ff31f639cec5b2ba76d29a2d92b6cc637e7c348b391b0c3ca172c2ae5366bace1ff8fc11383d3e4b2a0312bc38553a24d03fb6836a49e453562e802dbcb9da38424eab07ccd8a95cde5e84d370df8c031b7fe3ef7af0a1c6273"}, {0x58, 0x88, 0x9, "255a34f8420d9660a9c96ff5a5436a2588f15b369f033a9f6284e7179203f278a15126ded692f82151d98ba72eca6d1ca9ef84a652e0e5b9a2d2fd3c7dd7e5265b"}], 0x1068}, 0x40041)
ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000480)=0x10000)

20.741869972s ago: executing program 3 (id=2202):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) (async, rerun: 32)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
ptrace(0x10, r0) (async)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
r1 = socket$packet(0x11, 0x3, 0x300) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async, rerun: 32)
listen(r2, 0x204) (async, rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) (async)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000002c0)=0x7fff, 0x4) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}]}}) (async, rerun: 64)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (rerun: 64)
read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020)

18.742142475s ago: executing program 2 (id=2203):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x2, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@generic="579d06ab3d77bdea0c5872b296a14470992a821be6ffdbf32c5366d1e30fbdf4979f70e209020724c90325a8f94f1c8d11dd08335526a4f561b8df1fc39ae9311177a9ba01fbcf916493691b8d325fe6f58df14d663c15c1f7d39b145a4dffc7b06a7436e1860dd3e79f9219f29924203db97abdd9640c62b8"]}]}, 0x24}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x1, 0x3})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40043d14, &(0x7f0000000040)={{0x200000000000003, 0xfffffff8}, {0x0, 0x109002ff}, 0xc, 0x6})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20)
madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x5b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000380)="6766c7442400005014cb6766c74424024c3400006766c744240600000000670f011c240f20e06635080000000f22e065f2a4bad10466edd07222b819000f00d870ad0fc79c08000f01d1f2f20f00990000", 0x51}], 0x1, 0x9, &(0x7f0000000400)=[@cstype3={0x5, 0x6}], 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r8, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
poll(&(0x7f0000000080)=[{r1, 0x8180}, {r2, 0xb000}, {r0, 0x4000}, {r0, 0x1}, {r0, 0x408}, {r0, 0xf002}], 0x6, 0xc3bd)
setuid(0xee00)
ioctl$TIOCCONS(r0, 0x541d)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r9, &(0x7f0000000f00)={0x2020}, 0x2020)
openat(r9, &(0x7f0000000000)='./file0\x00', 0x397140, 0x0)

10.925549302s ago: executing program 32 (id=2197):
r0 = socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0xfffffffb)
clock_settime(0xa, 0x0)
socket$netlink(0x10, 0x3, 0x12) (async)
socket$netlink(0x10, 0x3, 0x12)
creat(&(0x7f00000001c0)='./bus\x00', 0x11f) (async)
creat(&(0x7f00000001c0)='./bus\x00', 0x11f)
syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00')
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1}, {0x8, 0x5, 0x0, '\x00', 0x10}, {0x6, 0x1, 0x9, '\x00', 0x9}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0xc, 0x6, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x7f}, {0x74, 0x80, 0x4, '\x00', 0x81}, {0xfc, 0x4}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0x6, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x2, 0x9, 0x5, '\x00', 0x5}, {0xa, 0x5, 0x9, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x7, 0x3, 0x6, '\x00', 0x3}, {0x8, 0xff, 0x8e, '\x00', 0xd1}, {0x2, 0x7, 0x1, '\x00', 0x5}, {0x4, 0x1, 0x5, '\x00', 0xff}, {0x5, 0x4, 0xc, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000b0000040"])
openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, 0x0)
fsopen(0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall() (async)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
write$evdev(r2, &(0x7f0000000040), 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1ff) (async)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1ff)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)

713.105428ms ago: executing program 33 (id=2200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0)
getgroups(0xfffffffffffffdc5, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0)
write$uinput_user_dev(r1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x2, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@mcast1, {0x4, 0x7, 0x1, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'generic-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x30, 0x1, 0x202, r4, 0x0, 0x0, 0x8800000}])
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'bridge_slave_0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xcc62)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000007c0)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})

172.893177ms ago: executing program 34 (id=2203):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x2, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@generic="579d06ab3d77bdea0c5872b296a14470992a821be6ffdbf32c5366d1e30fbdf4979f70e209020724c90325a8f94f1c8d11dd08335526a4f561b8df1fc39ae9311177a9ba01fbcf916493691b8d325fe6f58df14d663c15c1f7d39b145a4dffc7b06a7436e1860dd3e79f9219f29924203db97abdd9640c62b8"]}]}, 0x24}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x1, 0x3})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40043d14, &(0x7f0000000040)={{0x200000000000003, 0xfffffff8}, {0x0, 0x109002ff}, 0xc, 0x6})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20)
madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x5b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000380)="6766c7442400005014cb6766c74424024c3400006766c744240600000000670f011c240f20e06635080000000f22e065f2a4bad10466edd07222b819000f00d870ad0fc79c08000f01d1f2f20f00990000", 0x51}], 0x1, 0x9, &(0x7f0000000400)=[@cstype3={0x5, 0x6}], 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r8, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
poll(&(0x7f0000000080)=[{r1, 0x8180}, {r2, 0xb000}, {r0, 0x4000}, {r0, 0x1}, {r0, 0x408}, {r0, 0xf002}], 0x6, 0xc3bd)
setuid(0xee00)
ioctl$TIOCCONS(r0, 0x541d)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r9, &(0x7f0000000f00)={0x2020}, 0x2020)
openat(r9, &(0x7f0000000000)='./file0\x00', 0x397140, 0x0)

0s ago: executing program 35 (id=2202):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) (async, rerun: 32)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
ptrace(0x10, r0) (async)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
r1 = socket$packet(0x11, 0x3, 0x300) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async, rerun: 32)
listen(r2, 0x204) (async, rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) (async)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000002c0)=0x7fff, 0x4) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}]}}) (async, rerun: 64)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (rerun: 64)
read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

 attempt power cycle
[   75.842114][   T36] audit: type=1400 audit(2000000006.010:61514): avc:  denied  { map } for  pid=3239 comm="syz.0.930" path="socket:[14220]" dev="sockfs" ino=14220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   75.985949][  T545] usb 4-1: USB disconnect, device number 35
[   76.160720][  T330] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[   76.181636][  T330] usb 3-1: device descriptor read/8, error -71
[   76.311708][  T330] usb 3-1: device descriptor read/8, error -71
[   76.330666][  T545] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[   76.480663][  T545] usb 4-1: Using ep0 maxpacket: 8
[   76.489137][  T545] usb 4-1: unable to get BOS descriptor or descriptor too short
[   76.498897][  T545] usb 4-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 12592, setting to 1024
[   76.510130][  T545] usb 4-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024
[   76.520282][  T545] usb 4-1: config 12 interface 0 has no altsetting 0
[   76.528584][  T545] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[   76.537657][  T545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.545644][  T545] usb 4-1: Product: syz
[   76.549781][  T545] usb 4-1: Manufacturer: syz
[   76.554533][  T545] usb 4-1: SerialNumber: syz
[   76.560075][ T3274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   76.567395][  T330] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[   76.595363][  T330] usb 3-1: device descriptor read/8, error -71
[   76.609366][ T3293] 9pnet_fd: Insufficient options for proto=fd
[   76.618687][ T3293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.947'.
[   76.689305][ T3308] netlink: 'syz.1.952': attribute type 46 has an invalid length.
[   76.721288][ T3312] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   76.732044][  T330] usb 3-1: device descriptor read/8, error -71
[   76.742719][   T36] audit: type=1400 audit(2000000006.910:61515): avc:  denied  { create } for  pid=3313 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   76.769447][ T3274] binder: Unknown parameter 'contextÀ'
[   76.779258][  T545] usb 4-1: selecting invalid altsetting 0
[   76.790873][  T545] usb 4-1: USB disconnect, device number 36
[   76.829163][ T3332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=3332 comm=syz.1.961
[   76.841845][  T330] usb usb3-port1: unable to enumerate USB device
[   76.859237][   T36] audit: type=1400 audit(2000000007.020:61516): avc:  denied  { create } for  pid=3335 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   77.469086][ T3388] 9pnet_fd: Insufficient options for proto=fd
[   77.483586][ T3390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'.
[   77.580197][ T3412] overlayfs: conflicting options: userxattr,verity=require
[   77.591494][   T36] audit: type=1400 audit(2000000007.760:61517): avc:  denied  { map } for  pid=3411 comm="syz.0.989" path="socket:[15508]" dev="sockfs" ino=15508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   77.628581][   T36] audit: type=1400 audit(2000000007.790:61518): avc:  denied  { name_bind } for  pid=3413 comm="syz.1.990" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[   77.890711][  T545] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[   78.043009][  T545] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   78.052103][  T545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.060076][  T545] usb 3-1: Product: syz
[   78.064242][  T545] usb 3-1: Manufacturer: syz
[   78.068826][  T545] usb 3-1: SerialNumber: syz
[   78.713805][ T3449] overlayfs: failed to clone lowerpath
[   78.763005][ T3490] tmpfs: Unknown parameter '01777777777777777777777'
[   78.795870][ T3499] netlink: 'syz.1.1009': attribute type 4 has an invalid length.
[   78.805106][ T3499] netlink: 'syz.1.1009': attribute type 17 has an invalid length.
[   78.814377][ T3499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[   79.037063][ T3522] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1016'.
[   79.046280][ T3523] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1016'.
[   79.310659][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   79.310723][  T472] Bluetooth: hci0: command 0x1003 tx timeout
[   79.572658][ T3542] incfs: Options parsing error. -22
[   79.578011][ T3542] incfs: mount failed -22
[   80.261080][ T3561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'.
[   80.325268][ T3574] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1030'.
[   80.656257][  T330] usb 3-1: USB disconnect, device number 37
[   80.682110][ T3600] FAT-fs (rnullb0): bogus number of reserved sectors
[   80.688928][ T3600] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   80.707710][ T3604] 9p: Unknown access argument : -22
[   80.851096][ T3611] fuse: Unknown parameter 'default_permissioBú'
[   80.959523][ T3621] batadv_slave_0: entered promiscuous mode
[   80.966361][ T3620] batadv_slave_0: left promiscuous mode
[   81.203193][   T36] audit: type=1400 audit(2000000011.370:61519): avc:  denied  { setopt } for  pid=3664 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.261582][ T3670] 9pnet_fd: Insufficient options for proto=fd
[   81.440664][  T545] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[   81.590679][  T545] usb 4-1: device descriptor read/64, error -71
[   81.717104][ T3672] netlink: 'syz.0.1067': attribute type 4 has an invalid length.
[   81.757890][   T36] audit: type=1400 audit(2000000011.920:61520): avc:  denied  { create } for  pid=3675 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   81.830667][  T545] usb 4-1: device descriptor read/64, error -71
[   82.041476][   T36] audit: type=1326 audit(2000000012.210:61521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3036f8e9a9 code=0x7ffc0000
[   82.065160][   T36] audit: type=1326 audit(2000000012.210:61522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3036f8e9a9 code=0x7ffc0000
[   82.068183][  T330] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[   82.088995][   T36] audit: type=1326 audit(2000000012.230:61523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f3036f8e9a9 code=0x7ffc0000
[   82.120244][  T545] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[   82.128311][   T36] audit: type=1326 audit(2000000012.230:61524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3036f8e9a9 code=0x7ffc0000
[   82.152018][   T36] audit: type=1326 audit(2000000012.230:61525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3036f8e9a9 code=0x7ffc0000
[   82.175565][   T36] audit: type=1326 audit(2000000012.270:61526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3036f8e9a9 code=0x7ffc0000
[   82.199194][   T36] audit: type=1326 audit(2000000012.270:61527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3036f8e9a9 code=0x7ffc0000
[   82.222727][   T36] audit: type=1400 audit(2000000012.290:61528): avc:  denied  { create } for  pid=3688 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   82.260863][  T330] usb 3-1: device descriptor read/64, error -71
[   82.370673][  T545] usb 4-1: device descriptor read/64, error -71
[   82.500694][  T330] usb 3-1: device descriptor read/64, error -71
[   82.611132][  T545] usb 4-1: device descriptor read/64, error -71
[   82.720751][  T545] usb usb4-port1: attempt power cycle
[   82.740665][  T330] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[   82.823616][ T3709] syz.0.1079 uses obsolete (PF_INET,SOCK_PACKET)
[   82.875506][  T330] usb 3-1: device descriptor read/64, error -71
[   83.080774][  T545] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[   83.101757][  T545] usb 4-1: device descriptor read/8, error -71
[   83.120693][  T330] usb 3-1: device descriptor read/64, error -71
[   83.230807][  T330] usb usb3-port1: attempt power cycle
[   83.231919][  T545] usb 4-1: device descriptor read/8, error -71
[   83.401320][ T3724] netlink: 'syz.0.1083': attribute type 4 has an invalid length.
[   83.490698][  T545] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[   83.511627][  T545] usb 4-1: device descriptor read/8, error -71
[   83.570719][  T330] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[   83.591718][  T330] usb 3-1: device descriptor read/8, error -71
[   83.641685][  T545] usb 4-1: device descriptor read/8, error -71
[   83.721747][  T330] usb 3-1: device descriptor read/8, error -71
[   83.750793][  T545] usb usb4-port1: unable to enumerate USB device
[   83.960717][  T330] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[   83.981751][  T330] usb 3-1: device descriptor read/8, error -71
[   84.111827][  T330] usb 3-1: device descriptor read/8, error -71
[   84.221260][  T330] usb usb3-port1: unable to enumerate USB device
[   84.225172][ T3751] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   84.875916][ T3767] netlink: 1619 bytes leftover after parsing attributes in process `syz.2.1101'.
[   84.897692][ T3767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   85.020472][ T3775] batadv_slave_0: entered promiscuous mode
[   85.028366][ T3775] netlink: 1351 bytes leftover after parsing attributes in process `syz.2.1103'.
[   85.236892][ T3800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1112'.
[   85.246909][ T3801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1112'.
[   85.266283][ T3804] 9pnet_fd: Insufficient options for proto=fd
[   86.030864][ T3832] 9pnet_fd: Insufficient options for proto=fd
[   87.375386][ T3877] fuse: Unknown parameter 'ÿÿ0xffffffffffffffff'
[   87.969699][ T3775] batadv_slave_0: left promiscuous mode
[   88.031932][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   88.031949][   T36] audit: type=1400 audit(2000000018.200:61537): avc:  denied  { relabelfrom } for  pid=3918 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.057990][   T36] audit: type=1400 audit(2000000018.200:61538): avc:  denied  { relabelto } for  pid=3918 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.311100][   T36] audit: type=1400 audit(2000000018.480:61539): avc:  denied  { read } for  pid=3925 comm="syz.1.1154" path="socket:[16343]" dev="sockfs" ino=16343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   88.668310][ T3949] 9pnet_fd: Insufficient options for proto=fd
[   88.990665][ T2640] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[   89.130652][ T2640] usb 3-1: device descriptor read/64, error -71
[   89.341486][ T3989] overlayfs: failed to clone upperpath
[   89.351164][ T3989] fuse: blksize only supported for fuseblk
[   89.370894][ T2640] usb 3-1: device descriptor read/64, error -71
[   89.408286][ T4011] netlink: 'syz.1.1182': attribute type 27 has an invalid length.
[   89.418196][ T4011] gretap0: left allmulticast mode
[   89.438981][ T4011] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.446237][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.505240][ T4027] netlink: 'syz.1.1186': attribute type 4 has an invalid length.
[   89.620888][ T2640] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[   89.633874][   T36] audit: type=1400 audit(2000000019.800:61540): avc:  denied  { create } for  pid=4050 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   89.656379][ T4053] 9pnet_fd: Insufficient options for proto=fd
[   89.760687][ T2640] usb 3-1: device descriptor read/64, error -71
[   90.000674][ T2640] usb 3-1: device descriptor read/64, error -71
[   90.110778][ T2640] usb usb3-port1: attempt power cycle
[   90.194899][ T4073] netlink: 393 bytes leftover after parsing attributes in process `syz.1.1202'.
[   90.450691][ T2640] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[   90.471649][ T2640] usb 3-1: device descriptor read/8, error -71
[   90.601789][ T2640] usb 3-1: device descriptor read/8, error -71
[   90.721433][   T36] audit: type=1400 audit(2000000020.890:61541): avc:  denied  { create } for  pid=4077 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   90.840680][ T2640] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[   90.861631][ T2640] usb 3-1: device descriptor read/8, error -71
[   90.889306][ T4099] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1212'.
[   90.993141][ T2640] usb 3-1: device descriptor read/8, error -71
[   91.025577][ T4112] 9pnet_fd: Insufficient options for proto=fd
[   91.040645][   T36] audit: type=1400 audit(2000000021.200:61542): avc:  denied  { create } for  pid=4113 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   91.060670][   T36] audit: type=1400 audit(2000000021.210:61543): avc:  denied  { ioctl } for  pid=4115 comm="syz.3.1219" path="socket:[17585]" dev="sockfs" ino=17585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   91.087295][   T36] audit: type=1400 audit(2000000021.230:61544): avc:  denied  { sys_admin } for  pid=4113 comm="syz.0.1218" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   91.110495][   T36] audit: type=1400 audit(2000000021.230:61545): avc:  denied  { mounton } for  pid=4113 comm="syz.0.1218" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   91.115339][ T2640] usb usb3-port1: unable to enumerate USB device
[   91.638236][ T4134] SELinux:  Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped).
[   91.650826][   T36] audit: type=1400 audit(2000000021.808:61546): avc:  denied  { relabelto } for  pid=4133 comm="syz.0.1225" name="file0" dev="tmpfs" ino=2366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0"
[   91.656917][ T4141] overlayfs: failed to clone lowerpath
[   91.846866][ T4157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:616
[   91.856062][ T3481] Bluetooth: hci0: Frame reassembly failed (-84)
[   92.797797][ T4186] bpf: Bad value for 'uid'
[   92.806928][ T4190] fuse: Bad value for 'group_id'
[   92.823998][ T4190] fuse: Bad value for 'group_id'
[   92.883095][ T4199] overlayfs: failed to resolve './bus': -2
[   92.911666][ T4208] fuse: Bad value for 'fd'
[   92.917454][ T4208] fuse: Bad value for 'fd'
[   93.277421][ T4269] netlink: 'syz.3.1270': attribute type 1 has an invalid length.
[   93.296148][ T4269] netlink: 416 bytes leftover after parsing attributes in process `syz.3.1270'.
[   93.333454][ T4271] 9pnet_fd: Insufficient options for proto=fd
[   93.558702][ T4281] batadv_slave_0: mtu less than device minimum
[   93.789837][ T4291] devpts: called with bogus options
[   93.997544][   T36] kauditd_printk_skb: 75 callbacks suppressed
[   94.003809][   T36] audit: type=1400 audit(2000000024.006:61622): avc:  denied  { create } for  pid=4296 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   94.027246][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   94.028851][  T472] Bluetooth: hci0: command 0x1003 tx timeout
[   94.313823][ T4304] batadv_slave_1: entered promiscuous mode
[   94.320610][ T4304] batadv_slave_1: left promiscuous mode
[   94.369342][ T2640] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[   94.410057][ T4312] 9pnet_fd: Insufficient options for proto=fd
[   94.433436][   T36] audit: type=1400 audit(2000000024.408:61623): avc:  denied  { execute } for  pid=4313 comm="syz.3.1285" name="file1" dev="tmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   94.475054][   T36] audit: type=1400 audit(2000000024.463:61624): avc:  denied  { read } for  pid=4325 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   94.516840][ T4341] 9pnet_fd: Insufficient options for proto=fd
[   94.551002][ T2640] usb 3-1: Using ep0 maxpacket: 16
[   94.557652][ T4302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.567113][ T4302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.587704][ T2640] usb 3-1: unable to get BOS descriptor or descriptor too short
[   94.595976][ T2640] usb 3-1: unable to read config index 0 descriptor/start: -71
[   94.603792][ T2640] usb 3-1: can't read configurations, error -71
[   95.064655][ T4402] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1315'.
[   95.155921][   T36] audit: type=1326 audit(2000000025.090:61625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.2.1321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca6ef8e9a9 code=0x0
[   95.201413][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'.
[   95.210464][ T4425] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   95.213133][ T4422] overlayfs: failed to clone upperpath
[   95.223642][ T4425] cgroup: Bad value for 'name'
[   95.253233][ T4434] netlink: 'syz.1.1325': attribute type 30 has an invalid length.
[   95.985509][ T4479] tipc: Started in network mode
[   95.990394][ T4479] tipc: Node identity ac14140f, cluster identity 4711
[   95.997341][ T4479] tipc: New replicast peer: 255.255.255.255
[   96.003420][ T4479] tipc: Enabled bearer <udp:syz2>, priority 10
[   96.049923][   T36] audit: type=1400 audit(2000000025.932:61626): avc:  denied  { read } for  pid=4486 comm="syz.2.1344" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   96.073071][   T36] audit: type=1400 audit(2000000025.932:61627): avc:  denied  { open } for  pid=4486 comm="syz.2.1344" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   96.096957][   T36] audit: type=1400 audit(2000000025.969:61628): avc:  denied  { ioctl } for  pid=4486 comm="syz.2.1344" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   96.137573][ T4490] !@ÿ000000000: renamed from xfrm0 (while UP)
[   96.203477][ T4495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'.
[   96.367152][ T4492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.375716][ T4492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.991046][   T36] audit: type=1400 audit(2000000026.811:61629): avc:  denied  { shutdown } for  pid=4526 comm="syz.0.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   97.017378][ T4533] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   97.040538][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1362'.
[   97.049703][ T4535] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1362'.
[   97.058890][ T4535] netlink: 'syz.3.1362': attribute type 6 has an invalid length.
[   97.069679][ T4535] netlink: 'syz.3.1362': attribute type 5 has an invalid length.
[   97.077800][ T4535] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1362'.
[   97.083358][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'.
[   97.087005][ T4531] fuse: Unknown parameter '00000000000000000000004ÿÿ0xffffffffffffffff00000000000000000000ÿÿÿÿÿÿ'
[   97.193243][   T36] audit: type=1400 audit(2000000026.998:61630): avc:  denied  { getattr } for  pid=4562 comm="syz.2.1371" path="pid:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   97.216852][   T64] tipc: Node number set to 2886997007
[   97.247245][   T36] audit: type=1400 audit(2000000027.054:61631): avc:  denied  { ioctl } for  pid=4562 comm="syz.2.1371" path="pid:[4026532303]" dev="nsfs" ino=4026532303 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   97.278474][ T4589] cgroup: Bad value for 'name'
[   97.332443][ T4595] tipc: Enabled bearer <udp:s>, priority 10
[   97.370444][ T4612] overlayfs: failed to clone upperpath
[   98.342266][ T4676] 9pnet_fd: Insufficient options for proto=fd
[   98.660503][ T4699] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   98.661046][ T4700] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.934185][  T545] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[   99.105223][  T545] usb 3-1: Using ep0 maxpacket: 16
[   99.179660][ T4703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.188193][ T4703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.216304][  T545] usb 3-1: unable to get BOS descriptor or descriptor too short
[   99.224535][  T545] usb 3-1: unable to read config index 0 descriptor/start: -71
[   99.232097][  T545] usb 3-1: can't read configurations, error -71
[   99.260179][ T4726] netlink: 'syz.0.1425': attribute type 13 has an invalid length.
[   99.268323][ T4726] erspan0: refused to change device tx_queue_len
[   99.301051][ T4734] netlink: 'syz.0.1428': attribute type 1 has an invalid length.
[   99.308830][ T4734] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1428'.
[   99.810410][ T4757] tipc: Enabling of bearer <ib:geneve0> rejected, media not registered
[   99.829843][ T4759] rust_binder: Error while translating object.
[   99.829874][ T4759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   99.836218][ T4759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:700
[   99.854559][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   99.854575][ T4761] random: crng reseeded on system resumption
[   99.854576][   T36] audit: type=1400 audit(2000000029.486:61635): avc:  denied  { append } for  pid=4760 comm="syz.2.1438" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   99.908779][ T4762] cgroup2: Unknown parameter 'memory_ecursiveprot'
[  100.279873][   T36] audit: type=1400 audit(2000000029.879:61636): avc:  denied  { create } for  pid=4763 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  100.316602][ T4766] overlayfs: failed to resolve './file1': -2
[  100.356050][  T545] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  100.517504][  T545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.529277][  T545] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  100.538530][  T545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.546521][  T545] usb 3-1: Product: syz
[  100.550856][  T545] usb 3-1: Manufacturer: syz
[  100.555443][  T545] usb 3-1: SerialNumber: syz
[  100.560794][  T545] usb 3-1: config 0 descriptor??
[  100.567388][  T545] usb 3-1: bad CDC descriptors
[  100.572444][  T545] cdc_acm 3-1:0.0: Control and data interfaces are not separated!
[  100.580262][  T545] cdc_acm 3-1:0.0: This needs exactly 3 endpoints
[  100.586977][  T545] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22
[  100.786425][  T331] usb 3-1: USB disconnect, device number 50
[  101.227480][   T36] audit: type=1400 audit(2000000030.768:61637): avc:  denied  { create } for  pid=4833 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  101.311368][ T4853] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1469'.
[  101.349315][   T36] audit: type=1400 audit(2000000030.880:61638): avc:  denied  { accept } for  pid=4858 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  101.492525][ T4872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:712
[  101.493127][   T36] audit: type=1400 audit(2000000031.021:61639): avc:  denied  { execute_no_trans } for  pid=4871 comm="syz.2.1477" path="/205/file0" dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.548692][ T4874] rust_binder: Error while translating object.
[  101.548730][ T4874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  101.555113][ T4874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:712
[  101.802182][   T36] audit: type=1400 audit(2000000031.311:61640): avc:  denied  { associate } for  pid=4894 comm="syz.3.1485" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  101.886398][   T36] audit: type=1400 audit(2000000031.395:61641): avc:  denied  { create } for  pid=4901 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.907147][   T36] audit: type=1400 audit(2000000031.395:61642): avc:  denied  { write } for  pid=4901 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.927597][   T36] audit: type=1400 audit(2000000031.395:61643): avc:  denied  { nlmsg_write } for  pid=4901 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  102.034417][   T36] audit: type=1400 audit(2000000031.516:61644): avc:  denied  { execmem } for  pid=4919 comm="syz.0.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  102.146391][ T4928] 9pnet_fd: Insufficient options for proto=fd
[  102.246953][ T4946] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1503'.
[  102.294246][ T4959] overlayfs: failed to clone lowerpath
[  102.586635][ T4973] rust_binder: Error while translating object.
[  102.586664][ T4973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  102.592873][ T4973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:721
[  102.612711][ T4975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:723
[  102.836780][ T4993] rust_binder: Error while translating object.
[  102.845979][ T4993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  102.852186][ T4993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:735
[  102.969705][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'.
[  103.001483][ T5031] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  103.291707][ T5049] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1535'.
[  103.382600][ T5058] rust_binder: Read failure Err(EFAULT) in pid:752
[  103.672158][ T5078] overlayfs: failed to clone upperpath
[  104.539096][ T5118] 9pnet_fd: Insufficient options for proto=fd
[  104.820956][ T5139] netlink: 'syz.1.1570': attribute type 27 has an invalid length.
[  104.889949][ T5157] 9pnet_fd: Insufficient options for proto=fd
[  105.166652][ T5199] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  105.174059][ T5199] rust_binder: Write failure EINVAL in pid:773
[  105.413869][ T5209] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.420869][ T5209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  105.427343][ T5209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783
[  105.437312][ T5209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783
[  105.542794][ T5215] overlayfs: failed to clone upperpath
[  105.573698][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  105.573713][   T36] audit: type=1400 audit(2000000034.837:61651): avc:  denied  { create } for  pid=5216 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  105.599415][   T36] audit: type=1400 audit(2000000034.837:61650): avc:  denied  { create } for  pid=5216 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  105.698468][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'.
[  105.711453][ T5240] 9pnet_fd: Insufficient options for proto=fd
[  105.817238][ T3478] tipc: Subscription rejected, illegal request
[  106.164581][ T5269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1613'.
[  106.185703][   T36] audit: type=1400 audit(2000000035.408:61652): avc:  denied  { name_bind } for  pid=5270 comm="syz.1.1614" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  106.255935][ T5284] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  106.272710][   T36] audit: type=1400 audit(2000000035.492:61653): avc:  denied  { mounton } for  pid=5285 comm="syz.2.1619" path="/229/file0" dev="tmpfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  106.300565][ T5286] random: crng reseeded on system resumption
[  106.758954][ T5323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1632'.
[  106.759093][ T5324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1632'.
[  106.768112][   T36] audit: type=1400 audit(2000000035.941:61654): avc:  denied  { nlmsg_read } for  pid=5322 comm="syz.0.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  107.004506][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.016258][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.033138][ T5332] bridge_slave_0: entered allmulticast mode
[  107.049042][ T5332] bridge_slave_0: entered promiscuous mode
[  107.059726][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.069751][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.076903][ T5332] bridge_slave_1: entered allmulticast mode
[  107.083345][ T5332] bridge_slave_1: entered promiscuous mode
[  107.177105][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.184182][ T5332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.191496][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.198558][ T5332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.227219][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.235862][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.252813][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.259889][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.267823][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.274876][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.301340][ T5358] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  107.315848][ T5332] veth0_vlan: entered promiscuous mode
[  107.328959][ T5332] veth1_macvtap: entered promiscuous mode
[  107.353659][   T36] audit: type=1400 audit(2000000036.502:61655): avc:  denied  { mounton } for  pid=5332 comm="syz-executor" path="/root/syzkaller.kiukhO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  107.425872][ T5371] fuse: Unknown parameter 'roo´ãtmde}0:080000000fG‘$µQO00000040000'
[  107.648331][ T5384] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[  107.745319][   T36] audit: type=1400 audit(2000000036.867:61656): avc:  denied  { watch watch_reads } for  pid=5391 comm="syz.3.1650" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  107.801169][   T36] audit: type=1400 audit(2000000036.923:61657): avc:  denied  { accept } for  pid=5401 comm="syz.3.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  107.935674][ T2640] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  107.970948][   T36] audit: type=1400 audit(2000000037.082:61658): avc:  denied  { bind } for  pid=5418 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  108.014273][ T5428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:804
[  108.034330][   T36] audit: type=1400 audit(2000000037.138:61659): avc:  denied  { ioctl } for  pid=5435 comm="syz.0.1665" path="socket:[21057]" dev="sockfs" ino=21057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  108.096089][ T2640] usb 2-1: Using ep0 maxpacket: 16
[  108.102609][ T2640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.113012][ T2640] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  108.126802][ T2640] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.135900][ T2640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  108.144722][ T2640] usb 2-1: SerialNumber: syz
[  108.152997][ T2640] usb 2-1: bad CDC descriptors
[  108.277794][  T331] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  108.381519][  T330] usb 2-1: USB disconnect, device number 2
[  108.439615][  T331] usb 3-1: not running at top speed; connect to a high speed hub
[  108.448133][  T331] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  108.459389][  T331] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  108.470381][  T331] usb 3-1: config 1 interface 0 has no altsetting 0
[  108.478468][  T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  108.487843][  T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.496371][  T331] usb 3-1: Product: syz
[  108.500578][  T331] usb 3-1: Manufacturer: syz
[  108.505396][  T331] usb 3-1: SerialNumber: syz
[  108.511070][ T5432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  108.518560][ T5432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  108.958749][  T331] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 6 proto 3 vid 0x0525 pid 0xA4A8
[  108.972378][  T331] usb 3-1: USB disconnect, device number 51
[  108.986358][  T331] usblp0: removed
[  109.349982][ T5519] fuse: Unknown parameter 'group_’›IÊœ3›6ªmQ\ÌM¥µ%…3w¶ˆ„ðÅg
ïéêÌh»È}†Ý€'
[  109.416822][ T5518] TCP: out of memory -- consider tuning tcp_mem
[  109.499978][ T5551] rust_binder: Error while translating object.
[  109.500003][ T5551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  109.506181][ T5551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:810
[  109.519789][ T3483] bridge_slave_1: left allmulticast mode
[  109.535495][ T3483] bridge_slave_1: left promiscuous mode
[  109.541339][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.548974][ T3483] bridge_slave_0: left allmulticast mode
[  109.555743][ T3483] bridge_slave_0: left promiscuous mode
[  109.561623][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.614095][   T64] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.639553][ T5553] rust_binder: 5559 RLIMIT_NICE not set
[  109.643532][  T545] rust_binder: 5552: removing orphan mapping 0:40
[  109.658870][ T3483] tipc: Disabling bearer <udp:syz2>
[  109.664214][ T3483] tipc: Disabling bearer <udp:s>
[  109.669561][ T3483] tipc: Left network mode
[  109.774451][   T64] usb 2-1: Using ep0 maxpacket: 8
[  109.785854][   T64] usb 2-1: config 6 has an invalid interface number: 171 but max is 0
[  109.794041][   T64] usb 2-1: config 6 has no interface number 0
[  109.817444][   T64] usb 2-1: config 6 interface 171 has no altsetting 0
[  109.825824][   T64] usb 2-1: Dual-Role OTG device on HNP port
[  109.831965][   T64] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e
[  109.841333][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.849799][   T64] usb 2-1: Product: syz
[  109.854005][   T64] usb 2-1: Manufacturer: syz
[  109.858602][   T64] usb 2-1: SerialNumber: syz
[  110.076646][ T5575] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4294967295
[  110.300043][   T64] usb_ehset_test 2-1:6.171: probe with driver usb_ehset_test failed with error -32
[  110.516875][  T330] usb 2-1: USB disconnect, device number 3
[  110.529478][ T5583] futex_wake_op: syz.3.1712 tries to shift op by -1; fix this program
[  111.328296][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  111.328312][   T36] audit: type=1400 audit(2000000040.216:61663): avc:  denied  { getopt } for  pid=5622 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  111.340303][ T5625] 9pnet_fd: Insufficient options for proto=fd
[  111.397377][ T5632] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1727'.
[  111.406798][ T5634] netlink: 'syz.3.1728': attribute type 13 has an invalid length.
[  111.415214][ T5634] erspan0: refused to change device tx_queue_len
[  111.468690][ T5649] fuse: Unknown parameter 'wd'
[  111.477122][ T5649] batadv_slave_1: entered promiscuous mode
[  111.486533][ T5648] batadv_slave_1: left promiscuous mode
[  111.650928][ T5698] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  111.738052][ T5718] overlayfs: failed to clone upperpath
[  111.877455][ T5743] sock: sock_timestamping_bind_phc: sock not bind to device
[  112.068909][   T36] audit: type=1400 audit(2000000040.908:61664): avc:  denied  { write } for  pid=5752 comm="syz.1.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  112.069097][ T5753] binder: Unknown parameter 'contextÀ073709551615'
[  112.232309][ T5760] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  112.232326][ T5760] rust_binder: Read failure Err(EFAULT) in pid:48
[  112.240887][   T36] audit: type=1400 audit(2000000041.067:61665): avc:  denied  { read write } for  pid=5759 comm="syz.1.1771" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.270941][   T36] audit: type=1400 audit(2000000041.067:61666): avc:  denied  { open } for  pid=5759 comm="syz.1.1771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.671801][  T331] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  112.814797][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'.
[  112.824148][   T36] audit: type=1400 audit(2000000041.619:61667): avc:  denied  { map } for  pid=5780 comm="syz.1.1780" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.853359][  T331] usb 3-1: Using ep0 maxpacket: 16
[  112.860094][  T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.875198][  T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  112.884524][  T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  112.892593][  T331] usb 3-1: SerialNumber: syz
[  112.898610][  T331] hub 3-1:1.0: bad descriptor, ignoring hub
[  112.904560][  T331] hub 3-1:1.0: probe with driver hub failed with error -5
[  112.927753][ T5800] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  112.927810][ T5800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53
[  113.030582][   T36] audit: type=1400 audit(2000000041.806:61668): avc:  denied  { accept } for  pid=5811 comm="syz.3.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  113.052440][ T5816] fuse: Bad value for 'user_id'
[  113.064943][ T5816] fuse: Bad value for 'user_id'
[  113.088746][ T5823] rust_binder: Write failure EFAULT in pid:65
[  113.129105][ T5829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42756 sclass=netlink_route_socket pid=5829 comm=syz.3.1795
[  113.255875][ T5847] overlayfs: failed to clone upperpath
[  113.387888][   T31] usb 3-1: reset high-speed USB device number 52 using dummy_hcd
[  113.396676][   T31] usb 3-1: device reset changed ep0 maxpacket size!
[  113.403706][   T31] usb 3-1: USB disconnect, device number 52
[  113.740685][   T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  113.854803][   T36] audit: type=1326 audit(2000000042.582:61669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.1807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96b358e9a9 code=0x7ffe0000
[  113.901068][   T31] usb 3-1: Using ep0 maxpacket: 32
[  113.909520][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  113.918054][   T31] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015
[  113.937677][   T31] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  113.951046][   T31] usb 3-1: config 1 interface 0 has no altsetting 0
[  113.959892][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  113.979590][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.987732][   T31] usb 3-1: Product: syz
[  113.993369][   T31] usb 3-1: Manufacturer: syz
[  113.998886][   T31] usb 3-1: SerialNumber: syz
[  114.004459][   T36] audit: type=1400 audit(2000000042.722:61670): avc:  denied  { watch } for  pid=5867 comm="syz.1.1810" path="/27/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  114.027641][ T5775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  114.036479][ T3478] Bluetooth: hci0: Frame reassembly failed (-84)
[  114.243541][ T5875] sit0: entered promiscuous mode
[  114.251296][   T31] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8
[  114.254670][ T5875] netlink: 'syz.3.1811': attribute type 1 has an invalid length.
[  114.265590][   T31] usb 3-1: USB disconnect, device number 53
[  114.286293][   T31] usblp0: removed
[  114.296615][ T5875] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1811'.
[  114.799204][   T36] audit: type=1400 audit(2000000043.471:61671): avc:  denied  { read } for  pid=5928 comm="syz.2.1831" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  114.851141][ T5932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  114.851178][ T5932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:852
[  114.875302][   T36] audit: type=1400 audit(2000000043.536:61672): avc:  denied  { load_policy } for  pid=5933 comm="syz.2.1833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  114.879035][ T5934] SELinux: ebitmap: truncated map
[  114.911523][ T5934] SELinux: failed to load policy
[  114.925753][ T5939] cgroup2: Unknown parameter 'net_cls'
[  114.936331][ T5939] __vm_enough_memory: pid: 5939, comm: syz.2.1834, bytes: 18014402804453376 not enough memory for the allocation
[  115.590156][   T31] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  115.739814][   T31] usb 3-1: device descriptor read/64, error -71
[  115.817734][ T6001] 9pnet_fd: Insufficient options for proto=fd
[  115.852840][ T6008] syz.3.1857 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  115.906506][ T6019] overlayfs: failed to clone upperpath
[  115.913605][ T6020] overlay: ./file0 is not a directory
[  116.007086][   T31] usb 3-1: device descriptor read/64, error -71
[  116.178177][  T472] Bluetooth: hci0: command 0x1003 tx timeout
[  116.178208][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  116.263734][   T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  116.402649][   T31] usb 3-1: device descriptor read/64, error -71
[  116.659232][   T31] usb 3-1: device descriptor read/64, error -71
[  116.776883][   T31] usb usb3-port1: attempt power cycle
[  117.101905][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  117.101920][   T36] audit: type=1400 audit(2000000045.622:61675): avc:  denied  { read } for  pid=6054 comm="syz.1.1871" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.131699][   T36] audit: type=1400 audit(2000000045.622:61676): avc:  denied  { open } for  pid=6054 comm="syz.1.1871" path="/29/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.156250][   T36] audit: type=1400 audit(2000000045.650:61677): avc:  denied  { ioctl } for  pid=6054 comm="syz.1.1871" path=2F32392F66696C65302F2E70656E64696E675F7265616473202864656C6574656429 dev="incremental-fs" ino=2 ioctlcmd=0xae67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.186444][   T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  117.216204][   T31] usb 3-1: device descriptor read/8, error -71
[  117.249427][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.256868][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.265059][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.272660][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.280080][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.287456][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.294850][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.302358][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.309739][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.317194][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.324610][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.332465][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.339900][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.347309][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.354732][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.362127][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.369585][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.377216][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.377662][   T31] usb 3-1: device descriptor read/8, error -71
[  117.384783][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.403744][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.411447][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.418929][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.431395][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.438805][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.447626][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.455780][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.463386][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.470872][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.478485][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.486039][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.493595][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.501042][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.508626][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.516302][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.523742][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.531330][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.538868][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.546272][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.553818][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.561290][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.568713][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.576082][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.583495][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.590894][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.598263][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.605689][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.613128][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.620513][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.627946][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.635383][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.642887][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.650364][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.657803][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.664137][   T31] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  117.665432][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.680246][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.687059][ T6096] x_tables: duplicate underflow at hook 2
[  117.687677][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.697232][   T31] usb 3-1: device descriptor read/8, error -71
[  117.700821][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.714529][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.722401][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.730305][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.737704][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.745098][   T64] hid-generic 0006:0E57:0008.0006: unknown main item tag 0x0
[  117.755702][   T64] hid-generic 0006:0E57:0008.0006: hidraw0: VIRTUAL HID v1.ff Device [syz0] on syz1
[  117.769419][ T6102] fido_id[6102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  117.825596][ T6114] overlayfs: failed to clone upperpath
[  117.846968][   T31] usb 3-1: device descriptor read/8, error -71
[  117.848131][ T6120] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  117.864164][   T36] audit: type=1400 audit(2000000046.333:61678): avc:  denied  { relabelto } for  pid=6119 comm="syz.3.1892" name="file0" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  117.891254][   T36] audit: type=1400 audit(2000000046.333:61679): avc:  denied  { associate } for  pid=6119 comm="syz.3.1892" name="file0" dev="tmpfs" ino=2328 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  117.919378][   T36] audit: type=1400 audit(2000000046.333:61680): avc:  denied  { ioctl } for  pid=6119 comm="syz.3.1892" path="/423/file0" dev="tmpfs" ino=2328 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  117.948073][   T36] audit: type=1400 audit(2000000046.389:61681): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  117.974810][   T31] usb usb3-port1: unable to enumerate USB device
[  118.198687][   T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  118.359005][   T64] usb 2-1: Using ep0 maxpacket: 16
[  118.365663][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.374400][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.384469][   T64] usb 2-1: unable to get BOS descriptor or descriptor too short
[  118.394277][   T64] usb 2-1: unable to read config index 0 descriptor/start: -71
[  118.402018][   T64] usb 2-1: can't read configurations, error -71
[  118.457981][ T6142] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1899'.
[  118.494675][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'.
[  118.508436][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'.
[  118.548708][ T6170] ªªªªª2ϯIÐÝ‚áå: renamed from lo (while UP)
[  118.563313][ T6169] random: crng reseeded on system resumption
[  118.684572][ T6174] can: request_module (can-proto-0) failed.
[  118.947024][   T31] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  119.005047][   T36] audit: type=1326 audit(2000000047.399:61682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1258e9a9 code=0x7ffc0000
[  119.021196][ T6180] 9pnet_fd: Insufficient options for proto=fd
[  119.028658][   T36] audit: type=1326 audit(2000000047.399:61683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1258e9a9 code=0x7ffc0000
[  119.058162][   T36] audit: type=1326 audit(2000000047.409:61684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0d1258e9a9 code=0x7ffc0000
[  119.096669][   T31] usb 3-1: device descriptor read/64, error -71
[  119.144867][ T6187] rust_binder: 6184 RLIMIT_NICE not set
[  119.236131][  T331] rust_binder: 6183: removing orphan mapping 0:40
[  119.304714][ T6190] rust_binder: 6189 RLIMIT_NICE not set
[  119.304996][ T6189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118
[  119.315800][  T546] rust_binder: 0: removing orphan mapping 0:1048
[  119.353266][   T31] usb 3-1: device descriptor read/64, error -71
[  119.609827][   T31] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  119.664920][   T64] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  119.759478][   T31] usb 3-1: device descriptor read/64, error -71
[  119.824738][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.835974][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.845728][   T64] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  119.854770][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.863362][   T64] usb 2-1: config 0 descriptor??
[  120.016069][   T31] usb 3-1: device descriptor read/64, error -71
[  120.133778][   T31] usb usb3-port1: attempt power cycle
[  120.250660][ T6206] netlink: 'syz.3.1925': attribute type 13 has an invalid length.
[  120.272790][ T6208] 9pnet_fd: Insufficient options for proto=fd
[  120.497145][   T31] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  120.511775][   T64] usb 2-1: language id specifier not provided by device, defaulting to English
[  120.519573][   T31] usb 3-1: device descriptor read/8, error -71
[  120.658633][   T31] usb 3-1: device descriptor read/8, error -71
[  120.914084][   T31] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  120.936500][   T31] usb 3-1: device descriptor read/8, error -71
[  121.075438][   T31] usb 3-1: device descriptor read/8, error -71
[  121.192127][   T31] usb usb3-port1: unable to enumerate USB device
[  121.322749][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1935'.
[  121.849139][ T6254] netlink: 'syz.0.1941': attribute type 27 has an invalid length.
[  121.876967][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.884104][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.972044][ T6256] cgroup: fork rejected by pids controller in /syz0
[  122.160081][ T6310] 9pnet_fd: Insufficient options for proto=fd
[  122.496302][ T6289] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  122.561879][   T64] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71
[  122.570953][   T64] uclogic 0003:256C:006D.0007: failed probing parameters: -71
[  122.581133][   T64] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71
[  122.595044][   T64] usb 2-1: USB disconnect, device number 6
[  122.603517][ T6365] 9pnet_fd: Insufficient options for proto=fd
[  122.656698][ T6289] usb 3-1: Using ep0 maxpacket: 8
[  122.669554][ T6289] usb 3-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.40
[  122.678817][ T6289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.687911][ T6289] usb 3-1: Product: à°�
[  122.692713][ T6289] usb 3-1: Manufacturer: з
[  122.697242][ T6289] usb 3-1: SerialNumber: ꣵ�疯判婅�ꇅ�∳䛖➩�ヽ潊ე脬⩔僀᯿Ἶﲉ虆ꑴ楿⺞׉ⶼ諗嗊쌴츗㣼㨮�ⅇ香熮�覮挸㰻᫫酟栙梋衃餵B�蓉᭦虾⎡ꎂ騬⒂ꮹ�걽�ᩜ簨澥︻纊⮱籄�촊ᓎ䵱�@⵹钃ϔ宿楉⩄ŋ온䗞�꼘᪸⮻絨��
[  122.736556][ T6382] input: syz1 as /devices/virtual/input/input15
[  122.839367][ T6385] rust_binder: 6384 RLIMIT_NICE not set
[  122.866722][ T6287] rust_binder: 6383: removing orphan mapping 0:1048
[  122.878371][ T6390] rust_binder: Error while translating object.
[  122.878980][ T6390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  122.885495][ T6390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:151
[  122.948503][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.969488][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.983274][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  122.983290][   T36] audit: type=1400 audit(2000000051.122:61700): avc:  granted  { setsecparam } for  pid=6327 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  123.014366][ T6289] usbhid 3-1:1.0: can't add hid device: -71
[  123.030819][ T6289] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  123.043974][ T6289] usb 3-1: USB disconnect, device number 62
[  123.108133][   T36] audit: type=1326 audit(2000000051.244:61701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.1974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f149cd8e9a9 code=0x0
[  123.854521][  T331] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  123.907719][ T6428] fuse: Unknown parameter 'ÿyKnCHÅZ妟a£l„IJ»æÛu'
[  124.015379][  T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  124.026551][  T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  124.037745][  T331] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  124.046846][  T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.058498][  T331] usb 3-1: config 0 descriptor??
[  124.495183][  T331] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  124.504691][  T331] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input16
[  124.577478][  T331] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  124.711133][    C1] usb 3-1: input irq status -75 received
[  124.826001][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.833151][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.840324][ T6448] bridge_slave_0: entered allmulticast mode
[  124.848062][ T6448] bridge_slave_0: entered promiscuous mode
[  124.854845][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.862222][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.869294][ T6448] bridge_slave_1: entered allmulticast mode
[  124.875736][ T6448] bridge_slave_1: entered promiscuous mode
[  124.931093][ T6416] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[  124.968660][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.971651][ T6476] rust_binder: Error while translating object.
[  124.975726][ T6476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  124.975734][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.975820][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.982365][ T6476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:179
[  124.991234][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.036655][ T6448] veth0_vlan: entered promiscuous mode
[  125.050435][ T6448] veth1_macvtap: entered promiscuous mode
[  125.063987][ T6478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=77 sclass=netlink_route_socket pid=6478 comm=syz.1.1995
[  125.350676][  T331] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  125.419734][ T6485] kvm: pic: non byte write
[  125.511022][  T331] usb 2-1: Using ep0 maxpacket: 16
[  125.526921][  T331] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  125.542490][  T331] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16
[  125.564863][  T331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.573981][  T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  125.582023][  T331] usb 2-1: SerialNumber: syz
[  125.593610][ T6480] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  125.810412][   T64] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.973232][   T64] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  125.982400][   T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.990458][   T64] usb 1-1: Product: syz
[  125.994705][   T64] usb 1-1: Manufacturer: syz
[  125.999297][   T64] usb 1-1: SerialNumber: syz
[  126.368981][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'.
[  126.558456][   T36] audit: type=1400 audit(2000000054.462:61702): avc:  denied  { accept } for  pid=6520 comm="syz.2.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  126.583476][   T36] audit: type=1400 audit(2000000054.490:61703): avc:  denied  { setcurrent } for  pid=6522 comm="syz.2.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  126.654855][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.663460][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.019421][   T36] audit: type=1400 audit(2000000054.901:61704): avc:  denied  { bind } for  pid=6542 comm="syz.3.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  127.073809][ T6549] 9pnet_fd: Insufficient options for proto=fd
[  127.227073][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'.
[  127.238387][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'.
[  127.444506][ T6556] bridge0: port 3(veth0_to_bridge) entered blocking state
[  127.451678][ T6556] bridge0: port 3(veth0_to_bridge) entered disabled state
[  127.458924][ T6556] veth0_to_bridge: entered allmulticast mode
[  127.465241][ T6556] veth0_to_bridge: entered promiscuous mode
[  127.471307][ T6556] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.483636][ T6556] bridge0: port 3(veth0_to_bridge) entered blocking state
[  127.490775][ T6556] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  127.690023][ T6572] netlink: 'syz.3.2027': attribute type 1 has an invalid length.
[  127.708965][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'.
[  127.980969][  T331] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  127.990479][  T331] usb 2-1: USB disconnect, device number 7
[  128.285180][ T6587] netlink: 'syz.3.2031': attribute type 12 has an invalid length.
[  128.354297][ T6592] tipc: Can't bind to reserved service type 2
[  128.417301][ T6592] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2033'.
[  128.505441][   T64] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  128.519072][   T64] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  128.774681][  T331] usb 1-1: USB disconnect, device number 6
[  128.785947][ T6605] rust_binder: Error while translating object.
[  128.785988][ T6605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  128.792246][ T6605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[  128.935510][ T6612] rust_binder: 21: no such ref 3
[  128.949586][ T6612] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  129.191787][ T6616] incfs: ino conflict with backing FS 1
[  129.198197][   T36] audit: type=1400 audit(2000000056.931:61705): avc:  denied  { getattr } for  pid=6614 comm="syz.2.2040" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  129.222632][ T6616] incfs: Unexpected inode type
[  129.230859][ T6616] rust_binder: 6615 RLIMIT_NICE not set
[  129.235664][   T64] rust_binder: 6614: removing orphan mapping 0:1048
[  129.272996][ T6623] 9pnet_fd: Insufficient options for proto=fd
[  129.295210][ T6626] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  129.381064][ T6633] rust_binder: Read failure Err(EAGAIN) in pid:958
[  129.389458][ T6633] rust_binder: Write failure EFAULT in pid:958
[  129.460876][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.475691][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.484461][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.494171][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.714824][   T36] audit: type=1326 audit(2000000057.418:61706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638e9a9 code=0x7fc00000
[  129.738464][   T36] audit: type=1326 audit(2000000057.418:61707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f124638e9a9 code=0x7fc00000
[  129.754694][ T6640] exFAT-fs (rnullb0): invalid boot record signature
[  129.761968][   T36] audit: type=1326 audit(2000000057.418:61708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124638e9a9 code=0x7fc00000
[  129.768988][ T6640] exFAT-fs (rnullb0): failed to read boot sector
[  129.798377][ T6640] exFAT-fs (rnullb0): failed to recognize exfat type
[  129.809453][   T36] audit: type=1400 audit(2000000057.511:61709): avc:  denied  { append } for  pid=6639 comm="syz.0.2049" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.861338][   T36] audit: type=1400 audit(2000000057.548:61710): avc:  denied  { create } for  pid=6644 comm="syz.0.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  129.876584][ T6647] batadv_slave_1: entered promiscuous mode
[  129.890533][ T6648] batadv_slave_1: left promiscuous mode
[  130.382723][   T36] audit: type=1400 audit(2000000058.044:61711): avc:  denied  { sys_module } for  pid=6672 comm="syz.1.2060" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  130.412247][ T6288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6288 comm=kworker/0:12
[  130.532458][ T6678] rust_binder: Error while translating object.
[  130.532497][ T6678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  130.538780][ T6678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197
[  131.338187][ T6288] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  131.508459][ T6288] usb 1-1: Using ep0 maxpacket: 8
[  131.515061][ T6288] usb 1-1: unable to get BOS descriptor or descriptor too short
[  131.523721][ T6288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.533845][ T6288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.542747][ T6288] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  131.556989][ T6288] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.566063][ T6288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.574083][ T6288] usb 1-1: Product: syz
[  131.578244][ T6288] usb 1-1: Manufacturer: syz
[  131.582930][ T6288] usb 1-1: SerialNumber: syz
[  131.818363][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.828805][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.914997][ T6720] netlink: 'syz.3.2077': attribute type 16 has an invalid length.
[  131.923019][ T6720] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2077'.
[  131.950582][ T6726] netlink: 'syz.3.2078': attribute type 46 has an invalid length.
[  131.983479][   T36] audit: type=1400 audit(2000000059.541:61712): avc:  denied  { map } for  pid=6727 comm="syz.3.2079" path="socket:[26431]" dev="sockfs" ino=26431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  132.012594][   T36] audit: type=1400 audit(2000000059.541:61713): avc:  denied  { accept } for  pid=6727 comm="syz.3.2079" path="socket:[26431]" dev="sockfs" ino=26431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  132.089620][ T6733] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2081'.
[  132.146902][ T6743] fuse: Unknown parameter ''
[  132.510840][ T6764] /dev/nbd0: Can't lookup blockdev
[  132.589971][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.599741][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.608131][ T6768] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2093'.
[  132.618320][ T6768] rust_binder: 6767 RLIMIT_NICE not set
[  132.727435][ T6774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.742458][ T6774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.080062][   T36] audit: type=1400 audit(2000000060.560:61714): avc:  denied  { execute } for  pid=6808 comm="syz.1.2107" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  133.336561][ T6289] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  133.428984][ T6818] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  133.453250][ T6820] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[  133.497981][ T6289] usb 2-1: config 0 has an invalid interface number: 118 but max is 0
[  133.506285][ T6289] usb 2-1: config 0 has no interface number 0
[  133.514100][ T6289] usb 2-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=62.0b
[  133.523237][ T6289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.531520][ T6289] usb 2-1: Product: syz
[  133.542672][ T6289] usb 2-1: Manufacturer: syz
[  133.549581][ T6289] usb 2-1: SerialNumber: syz
[  133.559484][ T6289] usb 2-1: config 0 descriptor??
[  133.567940][ T6289] usb 2-1: NDI device with a latency value of 1
[  133.783796][ T6289] ftdi_sio 2-1:0.118: FTDI USB Serial Device converter detected
[  133.792020][ T6289] ftdi_sio ttyUSB0: unknown device type: 0x620b
[  133.799644][ T6289] usb 2-1: USB disconnect, device number 8
[  133.806209][ T6289] ftdi_sio 2-1:0.118: device disconnected
[  134.062746][ T6289] rust_binder: 6810: removing orphan mapping 0:1048
[  134.087007][ T6840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[  134.114513][ T6845] fuse: Unknown parameter 'gr/up_id-Òc‡oW\îf²e²eÏ@ÉÀßÝ$ˆWH.ÆŸýF"~òYTÑ'
[  134.348994][ T6853] rust_binder: Error while translating object.
[  134.349049][ T6853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  134.355449][ T6853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225
[  134.377662][ T6855] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2124'.
[  134.378535][ T6856] rust_binder: Write failure EFAULT in pid:227
[  134.411064][ T6859] input: syz0 as /devices/virtual/input/input18
[  134.509509][ T6871] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  134.521220][ T3483] Bluetooth: hci0: Frame reassembly failed (-84)
[  134.527671][ T3483] Bluetooth: hci0: Frame reassembly failed (-84)
[  134.534525][ T3483] Bluetooth: hci0: Frame reassembly failed (-84)
[  134.549212][ T6874] rust_binder: Error while translating object.
[  134.549240][ T6874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  134.555509][ T6874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:983
[  134.565380][ T6875] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  134.597455][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2131'.
[  134.662647][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.672060][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.609521][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.621752][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.631042][ T6912] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  135.633899][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.657403][ T6912] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  135.657455][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.665896][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  135.665910][   T36] audit: type=1400 audit(2000000063.948:61719): avc:  denied  { mounton } for  pid=6909 comm="syz.3.2141" path="/bus" dev="rootfs" ino=4685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  135.677831][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.718184][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.730315][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.742473][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.754609][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.766725][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  135.875528][ T6924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1006
[  135.875694][   T36] audit: type=1400 audit(2000000064.182:61720): avc:  denied  { accept } for  pid=6923 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  136.705242][  T472] Bluetooth: hci0: command 0x1003 tx timeout
[  136.711493][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  136.751194][ T6929] rust_binder: Error while translating object.
[  136.751257][ T6929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  136.757451][ T6929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1008
[  136.872776][ T6940] rust_binder: 6935 RLIMIT_NICE not set
[  136.892496][ T6935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.965164][ T6288] usb 1-1: 0:2 : does not exist
[  137.067715][ T6951] input: syz1 as /devices/virtual/input/input19
[  137.674151][  T331] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  137.817592][ T6957] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[  137.831022][ T6957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  137.913065][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.950405][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.066241][ T6970] random: crng reseeded on system resumption
[  138.117890][ T6970] Unrecognized hibernate image header format!
[  138.124142][ T6970] PM: hibernation: Image mismatch: architecture specific data
[  138.132938][ T6970] 9pnet_fd: Insufficient options for proto=fd
[  138.183669][   T36] audit: type=1400 audit(2000000066.343:61721): avc:  denied  { read } for  pid=6976 comm="syz.1.2164" dev="sockfs" ino=28188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  138.231892][ T6983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251
[  139.337841][ T6993] binder: Unknown parameter 'fscontext?}'
[  139.354610][ T6994] 9pnet_fd: p9_fd_create_unix (6994): problem connecting socket: ./file0: -111
[  139.374425][ T6993] binder: Unknown parameter 'fscontext?}'
[  139.444231][ T7000] binder: Bad value for 'max'
[  139.451394][ T7002] binder: Bad value for 'max'
[  139.460398][ T7000] random: crng reseeded on system resumption
[  139.815914][ T7034] rust_binder: Write failure EFAULT in pid:277
[  139.825382][ T7032] tmpfs: Unknown parameter 'ny_inD²¢ÙkxqÁ©P›¦Sö蕾õ›î'
[  139.845303][ T7032] tipc: Trying to set illegal importance in message
[  139.854509][ T7032] bridge0: port 3(veth1_to_team) entered blocking state
[  139.861788][ T7032] bridge0: port 3(veth1_to_team) entered disabled state
[  139.869226][ T7032] veth1_to_team: entered allmulticast mode
[  139.876790][ T7032] veth1_to_team: entered promiscuous mode
[  140.018754][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.033997][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.042399][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.050624][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.066123][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.074297][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.097766][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.105908][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.114680][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.122597][ T7047] netlink: 'syz.3.2188': attribute type 4 has an invalid length.
[  140.206220][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.218432][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.229075][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.238963][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.729698][ T7062] overlay: filesystem on ./bus is read-only
[  140.730092][   T36] audit: type=1400 audit(2000000068.719:61722): avc:  denied  { mounton } for  pid=7061 comm="syz.3.2193" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  140.814609][ T7068] binder: Unknown parameter '0x0000000000000003'
[  140.821590][ T7068] sock: sock_timestamping_bind_phc: sock not bind to device
[  140.958981][    C1] net_ratelimit: 61456 callbacks suppressed
[  140.959004][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  140.977034][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  140.989189][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.001359][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.013506][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.025657][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.037763][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.044494][ T6288] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  141.050028][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.069654][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.081774][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  141.215551][ T6288] usb 2-1: Using ep0 maxpacket: 16
[  141.222235][ T6288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.233383][ T6288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.242500][ T6288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  141.250801][ T6288] usb 2-1: SerialNumber: syz
[  141.258990][ T6288] hub 2-1:1.0: bad descriptor, ignoring hub
[  141.265161][ T6288] hub 2-1:1.0: probe with driver hub failed with error -5
[  141.475489][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.484092][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.612016][ T6288] usb 2-1: USB disconnect, device number 10
[  145.755328][ T7084] rust_binder: 296: no such ref 3
[  146.314944][    C1] net_ratelimit: 98454 callbacks suppressed
[  146.314965][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  146.315011][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.321059][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  146.333030][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.345038][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  146.356993][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.368867][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  146.380812][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.392783][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  146.404738][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.450931][ T7085] sched: DL replenish lagged too much
[  151.670950][    C1] net_ratelimit: 150729 callbacks suppressed
[  151.670972][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  151.671022][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.677108][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  151.689078][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.701069][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  151.713092][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  151.724979][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  151.736925][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.748800][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  151.760738][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.026928][    C0] net_ratelimit: 155215 callbacks suppressed
[  157.026951][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.026967][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  157.027032][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  157.033025][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.044925][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  157.056949][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.068888][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  157.080744][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.092744][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  157.104770][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.382973][    C0] net_ratelimit: 150948 callbacks suppressed
[  162.382996][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.383059][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  162.389075][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.401129][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  162.412961][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.424981][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  162.436782][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.448885][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  162.460688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.472821][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  167.738945][    C0] net_ratelimit: 98410 callbacks suppressed
[  167.738966][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.739043][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  167.744943][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.757097][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  167.768886][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  167.780928][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  167.792820][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.804875][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  167.816624][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.828778][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  169.857482][ T7099] validate_nla: 55 callbacks suppressed
[  169.857500][ T7099] netlink: 'syz.2.2203': attribute type 28 has an invalid length.
[  170.448270][ T6285] usb 3-1: USB disconnect, device number 63
[  173.094927][    C0] net_ratelimit: 99363 callbacks suppressed
[  173.094948][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.095054][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  173.100945][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.113015][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  173.124813][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.136954][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  173.148737][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.160807][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  173.172774][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.184630][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  178.450920][    C1] net_ratelimit: 147746 callbacks suppressed
[  178.450941][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  178.450960][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  178.457132][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  178.468979][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.481015][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  178.492805][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.504936][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  178.516746][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  178.528765][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  178.540616][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.806949][    C1] net_ratelimit: 142766 callbacks suppressed
[  183.806970][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  183.806993][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.813186][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  183.825036][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.837019][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  183.848849][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.860957][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  183.872868][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.884861][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  183.896716][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.162925][    C1] net_ratelimit: 147697 callbacks suppressed
[  189.162946][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  189.162964][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.169116][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  189.180987][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.192984][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  189.204803][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.216908][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  189.228736][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.240761][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  189.252591][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.518906][    C0] net_ratelimit: 149250 callbacks suppressed
[  194.518927][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.519049][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  194.525001][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.537018][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  194.548858][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.560959][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  194.572788][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.584785][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  194.596666][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.608634][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  199.874922][    C0] net_ratelimit: 148469 callbacks suppressed
[  199.874943][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.874988][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  199.880986][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.893116][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  199.904923][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.916910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  199.928767][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.940744][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  199.952568][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.964839][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  205.230901][    C0] net_ratelimit: 147504 callbacks suppressed
[  205.230922][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  205.231054][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  205.237021][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.249023][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  205.260846][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.273012][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  205.284811][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  205.296821][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  205.308670][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.320661][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  210.586912][    C0] net_ratelimit: 149734 callbacks suppressed
[  210.586934][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.587008][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  210.593011][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.605124][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  210.616955][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  210.628963][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  210.640808][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.652804][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  210.664617][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  210.676781][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  215.942906][    C1] net_ratelimit: 149779 callbacks suppressed
[  215.942929][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  215.942974][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  215.949117][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  215.961035][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  215.973122][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  215.984988][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  215.997082][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  216.008878][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.020920][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  216.032703][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.298930][    C0] net_ratelimit: 145157 callbacks suppressed
[  221.298950][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.298970][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  221.305004][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.317166][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  221.328961][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.340992][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  221.352827][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.367177][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  221.376701][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.388833][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  226.654923][    C0] net_ratelimit: 148071 callbacks suppressed
[  226.654943][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.655013][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  226.661002][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.673186][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  226.685025][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  226.696992][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  226.708847][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.720865][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  226.732689][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.744774][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  232.010903][    C0] net_ratelimit: 149510 callbacks suppressed
[  232.010925][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.010982][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  232.017054][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  232.029010][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  232.040872][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.052887][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  232.064687][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  232.076898][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  232.088741][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  232.100730][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  237.366891][    C0] net_ratelimit: 148911 callbacks suppressed
[  237.366911][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  237.366921][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  237.367118][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  237.372995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.385003][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  237.396836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  237.408931][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  237.420877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  237.432957][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  237.444744][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.722902][    C0] net_ratelimit: 148078 callbacks suppressed
[  242.722932][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.722952][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  242.729002][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  242.741045][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  242.752889][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.764980][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  242.776791][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  242.788971][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  242.800808][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  242.812812][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  243.607982][ T7108] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  248.078911][    C0] net_ratelimit: 140219 callbacks suppressed
[  248.078933][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.078999][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  248.087837][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.093846][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  248.105806][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.118004][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  248.129741][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.141696][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  248.153544][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.165677][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  253.434909][    C0] net_ratelimit: 160477 callbacks suppressed
[  253.434931][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.435010][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  253.440975][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.452984][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  253.464949][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.476974][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  253.488820][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.500688][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  253.512638][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.525532][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  258.790892][    C0] net_ratelimit: 170169 callbacks suppressed
[  258.790913][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.790972][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  258.796984][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.808936][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  258.820817][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.832932][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  258.844749][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.856724][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  258.868779][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.880812][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  264.146882][    C0] net_ratelimit: 166913 callbacks suppressed
[  264.146903][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.147080][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  264.152986][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  264.164889][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  264.176853][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.188864][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  264.200639][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.212665][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  264.224597][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  264.236718][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  269.502896][    C0] net_ratelimit: 162203 callbacks suppressed
[  269.502918][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.502961][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  269.508962][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.520976][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  269.532943][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  269.544964][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  269.556775][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.568649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  269.580581][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.592718][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  274.858889][    C1] net_ratelimit: 160225 callbacks suppressed
[  274.858912][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  274.858926][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  274.858984][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.865032][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  274.876988][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.889007][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  274.900826][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  274.912869][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  274.924763][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.936869][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  280.214889][    C1] net_ratelimit: 159426 callbacks suppressed
[  280.214910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  280.214941][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  280.221084][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  280.232989][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  280.244847][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  280.256792][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  280.268891][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  280.280720][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  280.292592][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  280.304572][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.570890][    C0] net_ratelimit: 161104 callbacks suppressed
[  285.570913][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.570927][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  285.570978][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  285.576988][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.589020][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  285.600854][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.612870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  285.624825][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  285.636947][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  285.648711][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.926859][    C0] net_ratelimit: 165529 callbacks suppressed
[  290.926880][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.926946][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  290.933014][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.945018][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  290.957005][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.969007][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  290.980778][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.992786][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  291.004712][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.016733][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  296.282910][    C0] net_ratelimit: 149354 callbacks suppressed
[  296.282932][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.282955][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  296.288995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.300994][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  296.312839][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.324804][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  296.336791][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.348787][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  296.360577][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.372556][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  301.638900][    C0] net_ratelimit: 158082 callbacks suppressed
[  301.638921][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.638959][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  301.644956][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.656950][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  301.668915][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  301.680927][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  301.692753][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.704690][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  301.716590][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.728704][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  304.271263][   T37] INFO: task syz.1.1780:5782 blocked for more than 123 seconds.
[  304.505149][   T36] audit: type=1400 audit(2000000221.834:61723): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[2842]" dev="pipefs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  304.561559][   T37]       Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0
[  304.568478][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  304.577140][   T37] task:syz.1.1780      state:D stack:0     pid:5782  tgid:5782  ppid:5332   flags:0x00004006
[  304.587374][   T37] Call Trace:
[  304.590676][   T37]  <TASK>
[  304.593611][   T37]  __schedule+0x1322/0x1df0
[  304.598139][   T37]  ? __sched_text_start+0x10/0x10
[  304.603198][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  304.608314][   T37]  ? __kasan_check_write+0x18/0x20
[  304.613442][   T37]  ? trace_contention_begin+0xc0/0xc0
[  304.618816][   T37]  schedule+0xc6/0x240
[  304.622901][   T37]  schedule_preempt_disabled+0x14/0x30
[  304.628361][   T37]  __mutex_lock+0x81e/0x1b50
[  304.633019][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  304.639788][   T37]  ? preempt_schedule_thunk+0x1a/0x40
[  304.645187][   T37]  ? _raw_spin_unlock_irq+0x45/0x70
[  304.650387][   T37]  ? wait_for_common+0x551/0x630
[  304.911252][   T37]  ? xas_start+0x31e/0x3e0
[  304.915719][   T37]  ? xas_load+0x394/0x3d0
[  304.920056][   T37]  __mutex_lock_slowpath+0xe/0x20
[  304.925121][   T37]  mutex_lock+0x102/0x1c0
[  304.929464][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  304.934337][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  304.940845][   T37]  ? xa_find+0x145/0x170
[  304.945111][   T37]  rcu_barrier+0x4d/0x530
[  304.949449][   T37]  ? __kasan_check_write+0x18/0x20
[  304.954580][   T37]  ? kvm_destroy_vcpus+0x1c0/0x250
[  304.959699][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  304.965088][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  304.969852][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  304.974980][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  304.980616][   T37]  ? __kasan_check_write+0x18/0x20
[  304.985753][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  304.991390][   T37]  ? free_pages+0x86/0x90
[  304.995734][   T37]  kvm_put_kvm+0xb04/0x12b0
[  305.000244][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  305.005363][   T37]  ? percpu_counter_add_batch+0xfc/0x1b0
[  305.011018][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  305.016220][   T37]  kvm_vm_release+0x47/0x70
[  305.020738][   T37]  __fput+0x1fe/0xa00
[  305.024718][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  305.030278][   T37]  ____fput+0x20/0x30
[  305.034258][   T37]  task_work_run+0x1e0/0x250
[  305.038857][   T37]  ? __cfi_task_work_run+0x10/0x10
[  305.043968][   T37]  ? __kasan_check_write+0x18/0x20
[  305.049093][   T37]  do_exit+0x9bc/0x2630
[  305.053303][   T37]  ? __sched_text_start+0x10/0x10
[  305.058333][   T37]  ? __cfi_do_exit+0x10/0x10
[  305.062941][   T37]  ? __kasan_check_write+0x18/0x20
[  305.068142][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  305.073270][   T37]  ? __kasan_check_read+0x15/0x20
[  305.078299][   T37]  ? cgroup_update_frozen+0x160/0x990
[  305.083691][   T37]  do_group_exit+0x22a/0x300
[  305.088283][   T37]  ? cgroup_leave_frozen+0x16c/0x2b0
[  305.093586][   T37]  get_signal+0x139d/0x14f0
[  305.098090][   T37]  arch_do_signal_or_restart+0x96/0x720
[  305.103653][   T37]  ? common_nsleep+0x93/0xb0
[  305.108249][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  305.114433][   T37]  ? __se_sys_clock_nanosleep+0x300/0x390
[  305.120158][   T37]  ? __kasan_check_read+0x15/0x20
[  305.125200][   T37]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  305.131281][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  305.136754][   T37]  do_syscall_64+0x64/0xf0
[  305.141173][   T37]  ? clear_bhb_loop+0x50/0xa0
[  305.145865][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  305.151768][   T37] RIP: 0033:0x7f0d125c1265
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  305.156205][   T37] RSP: 002b:00007f0d13350f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  305.164618][   T37] RAX: fffffffffffffdfc RBX: 00007f0d127b5fa0 RCX: 00007f0d125c1265
[  305.172604][   T37] RDX: 00007f0d13350fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  305.180599][   T37] RBP: 00007f0d12610d69 R08: 0000000000000000 R09: 0000000000000000
[  305.188587][   T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  305.196557][   T37] R13: 0000000000000000 R14: 00007f0d127b5fa0 R15: 00007ffe14922078
[  305.204545][   T37]  </TASK>
[  305.207623][   T37] INFO: task syz.2.1976:6468 blocked for more than 124 seconds.
[  305.258676][   T37]       Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0
[  305.265574][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  305.274284][   T37] task:syz.2.1976      state:D stack:0     pid:6468  tgid:6468  ppid:290    flags:0x00004006
[  305.284465][   T37] Call Trace:
[  305.287745][   T37]  <TASK>
[  305.290672][   T37]  __schedule+0x1322/0x1df0
[  305.295207][   T37]  ? __sched_text_start+0x10/0x10
[  305.300237][   T37]  ? __kasan_record_aux_stack+0xb2/0xd0
[  305.305849][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  305.310966][   T37]  ? __kasan_check_write+0x18/0x20
[  305.316090][   T37]  ? trace_contention_begin+0xc0/0xc0
[  305.321492][   T37]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  305.327584][   T37]  schedule+0xc6/0x240
[  305.331653][   T37]  schedule_preempt_disabled+0x14/0x30
[  305.337112][   T37]  __mutex_lock+0x81e/0x1b50
[  305.341756][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  305.348558][   T37]  ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10
[  305.355068][   T37]  ? __call_rcu_common+0x41f/0x700
[  305.360237][   T37]  __mutex_lock_slowpath+0xe/0x20
[  305.365270][   T37]  mutex_lock+0x102/0x1c0
[  305.369615][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  305.374499][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  305.381028][   T37]  rcu_barrier+0x4d/0x530
[  305.385368][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  305.390755][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  305.395541][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  305.400656][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  305.406318][   T37]  ? __kasan_check_write+0x18/0x20
[  305.411443][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  305.417100][   T37]  ? free_pages+0x86/0x90
[  305.421438][   T37]  kvm_put_kvm+0xb04/0x12b0
[  305.425968][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  305.431168][   T37]  kvm_vm_release+0x47/0x70
[  305.435693][   T37]  __fput+0x1fe/0xa00
[  305.439674][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  305.445245][   T37]  ____fput+0x20/0x30
[  305.449227][   T37]  task_work_run+0x1e0/0x250
[  305.453814][   T37]  ? __cfi_task_work_run+0x10/0x10
[  305.458947][   T37]  ? __kasan_check_write+0x18/0x20
[  305.464061][   T37]  do_exit+0x9bc/0x2630
[  305.468246][   T37]  ? __sched_text_start+0x10/0x10
[  305.473272][   T37]  ? __cfi_do_exit+0x10/0x10
[  305.477879][   T37]  ? __kasan_check_write+0x18/0x20
[  305.482992][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  305.488131][   T37]  ? __kasan_check_read+0x15/0x20
[  305.493160][   T37]  ? cgroup_update_frozen+0x160/0x990
[  305.498554][   T37]  do_group_exit+0x22a/0x300
[  305.503151][   T37]  ? cgroup_leave_frozen+0x16c/0x2b0
[  305.508532][   T37]  get_signal+0x139d/0x14f0
[  305.513058][   T37]  arch_do_signal_or_restart+0x96/0x720
[  305.518607][   T37]  ? common_nsleep+0x93/0xb0
[  305.523218][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  305.529376][   T37]  ? __se_sys_clock_nanosleep+0x300/0x390
[  305.535136][   T37]  ? __kasan_check_read+0x15/0x20
[  305.540169][   T37]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  305.546256][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  305.551729][   T37]  do_syscall_64+0x64/0xf0
[  305.556150][   T37]  ? clear_bhb_loop+0x50/0xa0
[  305.560830][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  305.566745][   T37] RIP: 0033:0x7fca6efc1265
[  305.571156][   T37] RSP: 002b:00007fca6fd37f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  305.579584][   T37] RAX: fffffffffffffdfc RBX: 00007fca6f1b5fa0 RCX: 00007fca6efc1265
[  305.587584][   T37] RDX: 00007fca6fd37fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  305.595581][   T37] RBP: 00007fca6f010d69 R08: 0000000000000000 R09: 0000000000000000
[  305.603555][   T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  305.611544][   T37] R13: 0000000000000000 R14: 00007fca6f1b5fa0 R15: 00007ffd17c52d18
[  305.619541][   T37]  </TASK>
[  305.981300][   T37] INFO: task syz.0.2065:6712 blocked for more than 125 seconds.
[  305.988976][   T37]       Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0
[  306.055956][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  306.064672][   T37] task:syz.0.2065      state:D stack:0     pid:6712  tgid:6712  ppid:6448   flags:0x00004006
[  306.074876][   T37] Call Trace:
[  306.078181][   T37]  <TASK>
[  306.081113][   T37]  __schedule+0x1322/0x1df0
[  306.085670][   T37]  ? __sched_text_start+0x10/0x10
[  306.090723][   T37]  ? __kasan_record_aux_stack+0xb2/0xd0
[  306.096278][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  306.101407][   T37]  ? __kasan_check_write+0x18/0x20
[  306.106523][   T37]  ? trace_contention_begin+0xc0/0xc0
[  306.111938][   T37]  ? ret_from_fork_asm+0x1a/0x30
[  306.116979][   T37]  schedule+0xc6/0x240
[  306.121129][   T37]  schedule_preempt_disabled+0x14/0x30
[  306.126594][   T37]  __mutex_lock+0x81e/0x1b50
[  306.131203][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  306.137971][   T37]  ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10
[  306.144413][   T37]  ? __call_rcu_common+0x41f/0x700
[  306.149540][   T37]  __mutex_lock_slowpath+0xe/0x20
[  306.154587][   T37]  mutex_lock+0x102/0x1c0
[  306.158923][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  306.163966][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  306.170643][   T37]  rcu_barrier+0x4d/0x530
[  306.174994][   T37]  ? __kasan_check_write+0x18/0x20
[  306.180117][   T37]  ? kvm_destroy_vcpus+0x1c0/0x250
[  306.185255][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  306.190635][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  306.195420][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  306.200533][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  306.206191][   T37]  ? __kasan_check_write+0x18/0x20
[  306.211308][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  306.216959][   T37]  ? free_pages+0x86/0x90
[  306.221292][   T37]  kvm_put_kvm+0xb04/0x12b0
[  306.225814][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  306.230931][   T37]  ? percpu_counter_add_batch+0xfc/0x1b0
[  306.236582][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  306.241780][   T37]  kvm_vm_release+0x47/0x70
[  306.246293][   T37]  __fput+0x1fe/0xa00
[  306.250289][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  306.255835][   T37]  ____fput+0x20/0x30
[  306.259829][   T37]  task_work_run+0x1e0/0x250
[  306.264477][   T37]  ? __cfi_task_work_run+0x10/0x10
[  306.269610][   T37]  ? __kasan_check_write+0x18/0x20
[  306.274725][   T37]  do_exit+0x9bc/0x2630
[  306.278893][   T37]  ? __sched_text_start+0x10/0x10
[  306.283923][   T37]  ? __cfi_do_exit+0x10/0x10
[  306.288511][   T37]  ? __kasan_check_write+0x18/0x20
[  306.293642][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  306.298756][   T37]  ? __kasan_check_read+0x15/0x20
[  306.303800][   T37]  ? cgroup_update_frozen+0x160/0x990
[  306.309179][   T37]  do_group_exit+0x22a/0x300
[  306.313846][   T37]  ? cgroup_leave_frozen+0x16c/0x2b0
[  306.319137][   T37]  get_signal+0x139d/0x14f0
[  306.323669][   T37]  arch_do_signal_or_restart+0x96/0x720
[  306.329219][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  306.335400][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  306.340520][   T37]  ? __kasan_check_write+0x18/0x20
[  306.345658][   T37]  ? recalc_sigpending+0x185/0x1d0
[  306.350784][   T37]  ? _raw_spin_unlock_irq+0x45/0x70
[  306.355999][   T37]  ? calculate_sigpending+0x81/0x90
[  306.361212][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  306.366690][   T37]  ret_from_fork+0x3a/0xa0
[  306.371111][   T37]  ret_from_fork_asm+0x1a/0x30
[  306.375895][   T37] RIP: 0033:0x7f124638e9a9
[  306.380308][   T37] RSP: 002b:00007f12472befe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  306.388737][   T37] RAX: 0000000000000000 RBX: 00007f12465b5fa0 RCX: 00007f124638e9a9
[  306.396728][   T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  306.404699][   T37] RBP: 00007f1246410d69 R08: 0000000000000000 R09: 0000000000000000
[  306.412689][   T37] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  306.420673][   T37] R13: 0000000000000000 R14: 00007f12465b5fa0 R15: 00007ffdd1a190b8
[  306.428663][   T37]  </TASK>
[  306.450497][   T37] INFO: task syz.0.2197:7069 blocked for more than 125 seconds.
[  306.458160][   T37]       Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0
[  306.497148][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  306.505874][   T37] task:syz.0.2197      state:D stack:0     pid:7069  tgid:7069  ppid:6448   flags:0x00004004
[  306.516076][   T37] Call Trace:
[  306.519358][   T37]  <TASK>
[  306.522283][   T37]  __schedule+0x1322/0x1df0
[  306.526823][   T37]  ? __sched_text_start+0x10/0x10
[  306.531850][   T37]  ? rcu_segcblist_entrain+0x69/0x2b0
[  306.537251][   T37]  ? __kasan_check_write+0x18/0x20
[  306.542365][   T37]  ? llist_add_batch+0x109/0x1e0
[  306.547328][   T37]  schedule+0xc6/0x240
[  306.551405][   T37]  schedule_timeout+0xb2/0x3a0
[  306.556174][   T37]  ? __cfi_schedule_timeout+0x10/0x10
[  306.561600][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  306.567154][   T37]  ? generic_exec_single+0x201/0x500
[  306.572461][   T37]  ? __cfi_rcu_barrier_handler+0x10/0x10
[  306.578114][   T37]  wait_for_common+0x359/0x630
[  306.582896][   T37]  ? wait_for_completion+0x40/0x40
[  306.588019][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  306.594552][   T37]  wait_for_completion+0x1c/0x40
[  306.599510][   T37]  rcu_barrier+0x415/0x530
[  306.604020][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  306.609398][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  306.614182][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  306.619297][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  306.624959][   T37]  ? __kasan_check_write+0x18/0x20
[  306.630090][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  306.635750][   T37]  kvm_put_kvm+0xb04/0x12b0
[  306.640256][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  306.645481][   T37]  ? percpu_counter_add_batch+0xfc/0x1b0
[  306.651116][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  306.656339][   T37]  kvm_vm_release+0x47/0x70
[  306.660844][   T37]  __fput+0x1fe/0xa00
[  306.664880][   T37]  ____fput+0x20/0x30
[  306.668877][   T37]  task_work_run+0x1e0/0x250
[  306.673476][   T37]  ? __cfi_task_work_run+0x10/0x10
[  306.678623][   T37]  ? __kasan_check_write+0x18/0x20
[  306.683752][   T37]  resume_user_mode_work+0x36/0x50
[  306.688897][   T37]  syscall_exit_to_user_mode+0x64/0xb0
[  306.694363][   T37]  do_syscall_64+0x64/0xf0
[  306.698810][   T37]  ? clear_bhb_loop+0x50/0xa0
[  306.703498][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  306.709488][   T37] RIP: 0033:0x7f124638e9a9
[  306.713913][   T37] RSP: 002b:00007ffdd1a19218 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  306.722387][   T37] RAX: 0000000000000000 RBX: 00000000000219b6 RCX: 00007f124638e9a9
[  306.730398][   T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  306.738400][   T37] RBP: 00007f12465b7ba0 R08: 0000000000000001 R09: 00000025d1a1950f
[  306.746379][   T37] R10: 00007f1246200000 R11: 0000000000000246 R12: 00007f12465b616c
[  306.754384][   T37] R13: 00007f12465b6160 R14: ffffffffffffffff R15: 00007ffdd1a19330
[  306.762391][   T37]  </TASK>
[  306.994856][    C0] net_ratelimit: 140169 callbacks suppressed
[  306.994875][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.994910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  307.000930][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  307.012962][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  307.024786][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.036675][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  307.048597][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.060696][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  307.072512][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  307.084385][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  307.230097][   T37] INFO: task syz.1.2200:7083 blocked for more than 126 seconds.
[  307.237767][   T37]       Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0
[  307.329322][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.338074][   T37] task:syz.1.2200      state:D stack:0     pid:7083  tgid:7083  ppid:5332   flags:0x00004004
[  307.348281][   T37] Call Trace:
[  307.351560][   T37]  <TASK>
[  307.354490][   T37]  __schedule+0x1322/0x1df0
[  307.359020][   T37]  ? __sched_text_start+0x10/0x10
[  307.364045][   T37]  ? __kasan_check_write+0x18/0x20
[  307.369203][   T37]  ? __mutex_add_waiter+0x17f/0x290
[  307.374404][   T37]  ? __kasan_check_write+0x18/0x20
[  307.379528][   T37]  ? trace_contention_begin+0xc0/0xc0
[  307.384953][   T37]  schedule+0xc6/0x240
[  307.389036][   T37]  schedule_preempt_disabled+0x14/0x30
[  307.394547][   T37]  __mutex_lock+0x81e/0x1b50
[  307.399156][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  307.405979][   T37]  ? __kasan_check_write+0x18/0x20
[  307.411103][   T37]  ? __kasan_check_write+0x18/0x20
[  307.416245][   T37]  ? wake_up_q+0x10f/0x1c0
[  307.420674][   T37]  ? __mutex_unlock_slowpath+0x48a/0x740
[  307.426340][   T37]  ? mutex_unlock+0x240/0x240
[  307.431025][   T37]  __mutex_lock_slowpath+0xe/0x20
[  307.436076][   T37]  mutex_lock+0x102/0x1c0
[  307.440414][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  307.445285][   T37]  rcu_barrier+0x4d/0x530
[  307.449621][   T37]  ? __kasan_slab_free+0x6a/0x80
[  307.454587][   T37]  netdev_run_todo+0x10e/0xcb0
[  307.459353][   T37]  ? kvfree+0x39/0x50
[  307.463339][   T37]  ? __cfi_netdev_run_todo+0x10/0x10
[  307.468660][   T37]  rtnl_unlock+0x12/0x20
[  307.472914][   T37]  tun_chr_close+0xc5/0x150
[  307.477523][   T37]  ? __cfi_tun_chr_close+0x10/0x10
[  307.482645][   T37]  __fput+0x1fe/0xa00
[  307.486656][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  307.492215][   T37]  ____fput+0x20/0x30
[  307.496198][   T37]  task_work_run+0x1e0/0x250
[  307.500811][   T37]  ? __cfi_task_work_run+0x10/0x10
[  307.505925][   T37]  ? __kasan_check_write+0x18/0x20
[  307.511063][   T37]  resume_user_mode_work+0x36/0x50
[  307.516178][   T37]  syscall_exit_to_user_mode+0x64/0xb0
[  307.521656][   T37]  do_syscall_64+0x64/0xf0
[  307.526077][   T37]  ? clear_bhb_loop+0x50/0xa0
[  307.530788][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  307.536686][   T37] RIP: 0033:0x7f0d1258e9a9
[  307.541112][   T37] RSP: 002b:00007ffe149221d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  307.549523][   T37] RAX: 0000000000000000 RBX: 0000000000022b8f RCX: 00007f0d1258e9a9
[  307.557530][   T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  307.565516][   T37] RBP: 00007f0d127b7ba0 R08: 0000000000000001 R09: 00000010149224cf
[  307.573507][   T37] R10: 00007f0d12400000 R11: 0000000000000246 R12: 00007f0d127b5fac
[  307.581481][   T37] R13: 00007f0d127b5fa0 R14: ffffffffffffffff R15: 00007ffe149222f0
[  307.589536][   T37]  </TASK>
[  307.754381][   T37] INFO: task syz.2.2203:7099 blocked for more than 127 seconds.
[  307.762053][   T37]       Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0
[  307.786240][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.794938][   T37] task:syz.2.2203      state:D stack:0     pid:7099  tgid:7097  ppid:290    flags:0x00004006
[  307.805154][   T37] Call Trace:
[  307.808448][   T37]  <TASK>
[  307.811376][   T37]  __schedule+0x1322/0x1df0
[  307.816002][   T37]  ? __sched_text_start+0x10/0x10
[  307.821067][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  307.826191][   T37]  ? __kasan_check_write+0x18/0x20
[  307.831353][   T37]  ? trace_contention_begin+0xc0/0xc0
[  307.836730][   T37]  schedule+0xc6/0x240
[  307.840828][   T37]  schedule_preempt_disabled+0x14/0x30
[  307.846302][   T37]  __mutex_lock+0x81e/0x1b50
[  307.850920][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  307.857691][   T37]  ? _raw_spin_unlock_irq+0x45/0x70
[  307.862924][   T37]  ? wait_for_common+0x551/0x630
[  307.867872][   T37]  ? xas_start+0x31e/0x3e0
[  307.872310][   T37]  ? xas_load+0x394/0x3d0
[  307.876641][   T37]  __mutex_lock_slowpath+0xe/0x20
[  307.881685][   T37]  mutex_lock+0x102/0x1c0
[  307.886038][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  307.890895][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  307.897417][   T37]  ? xa_find+0x145/0x170
[  307.901666][   T37]  rcu_barrier+0x4d/0x530
[  307.906013][   T37]  ? __kasan_check_write+0x18/0x20
[  307.911132][   T37]  ? kvm_destroy_vcpus+0x1c0/0x250
[  307.916260][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  307.921636][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  307.926440][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  307.931560][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  307.937208][   T37]  ? __kasan_check_write+0x18/0x20
[  307.942321][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  307.947984][   T37]  ? free_pages+0x86/0x90
[  307.952324][   T37]  kvm_put_kvm+0xb04/0x12b0
[  307.956852][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  307.961994][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  307.967201][   T37]  kvm_vm_release+0x47/0x70
[  307.971727][   T37]  __fput+0x1fe/0xa00
[  307.975716][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  307.981283][   T37]  ____fput+0x20/0x30
[  307.985268][   T37]  task_work_run+0x1e0/0x250
[  307.989884][   T37]  ? __cfi_task_work_run+0x10/0x10
[  307.994998][   T37]  ? __kasan_check_write+0x18/0x20
[  308.000128][   T37]  do_exit+0x9bc/0x2630
[  308.004282][   T37]  ? __kasan_check_write+0x18/0x20
[  308.009402][   T37]  ? __cfi_do_exit+0x10/0x10
[  308.014035][   T37]  ? futex_wake+0x63a/0x900
[  308.018541][   T37]  ? __kasan_check_write+0x18/0x20
[  308.023669][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  308.028787][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  308.034357][   T37]  do_group_exit+0x22a/0x300
[  308.038952][   T37]  ? __kasan_check_write+0x18/0x20
[  308.044086][   T37]  get_signal+0x139d/0x14f0
[  308.048686][   T37]  ? anon_inode_getfile+0xfb/0x190
[  308.053832][   T37]  arch_do_signal_or_restart+0x96/0x720
[  308.059390][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  308.065563][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  308.071024][   T37]  do_syscall_64+0x64/0xf0
[  308.075458][   T37]  ? clear_bhb_loop+0x50/0xa0
[  308.080144][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  308.086054][   T37] RIP: 0033:0x7fca6ef8e9a9
[  308.090475][   T37] RSP: 002b:00007fca6fd380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  308.098928][   T37] RAX: 0000000000000001 RBX: 00007fca6f1b5fa8 RCX: 00007fca6ef8e9a9
[  308.106920][   T37] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca6f1b5fac
[  308.114892][   T37] RBP: 00007fca6f1b5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  308.122891][   T37] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fca6f1b5fac
[  308.130880][   T37] R13: 0000000000000000 R14: 00007ffd17c52c30 R15: 00007ffd17c52d18
[  308.138867][   T37]  </TASK>
[  308.697116][   T37] NMI backtrace for cpu 1
[  308.697139][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b
[  308.697164][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  308.697175][   T37] Call Trace:
[  308.697181][   T37]  <TASK>
[  308.697189][   T37]  __dump_stack+0x21/0x30
[  308.697216][   T37]  dump_stack_lvl+0x10c/0x190
[  308.697236][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  308.697258][   T37]  dump_stack+0x19/0x20
[  308.697277][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  308.697298][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  308.697318][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  308.697337][   T37]  ? sched_show_task+0x379/0x560
[  308.697357][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  308.697375][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  308.697395][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  308.697415][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  308.697436][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  308.697456][   T37]  watchdog+0xd8f/0xed0
[  308.697478][   T37]  ? __cfi_watchdog+0x10/0x10
[  308.697497][   T37]  ? __kasan_check_read+0x15/0x20
[  308.697527][   T37]  ? __kthread_parkme+0x138/0x180
[  308.697551][   T37]  ? schedule+0xc6/0x240
[  308.697573][   T37]  kthread+0x2ca/0x370
[  308.697588][   T37]  ? __cfi_watchdog+0x10/0x10
[  308.697608][   T37]  ? __cfi_kthread+0x10/0x10
[  308.697623][   T37]  ret_from_fork+0x67/0xa0
[  308.697644][   T37]  ? __cfi_kthread+0x10/0x10
[  308.697661][   T37]  ret_from_fork_asm+0x1a/0x30
[  308.697685][   T37]  </TASK>
[  308.697692][   T37] Sending NMI from CPU 1 to CPUs 0:
[  308.893879][    C0] NMI backtrace for cpu 0
[  308.893892][    C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b
[  308.893912][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  308.893921][    C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0xc/0x90
[  308.893943][    C0] Code: 48 89 44 11 20 5d e9 c3 0f 03 04 cc 66 90 b8 89 d4 29 27 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 <65> 48 8b 14 25 80 e9 04 00 65 8b 0d bc 1c 7f 7e 81 e1 00 01 ff 00
[  308.893954][    C0] RSP: 0018:ffffc90000007148 EFLAGS: 00000246
[  308.893968][    C0] RAX: ffffffff84df8ed3 RBX: 0000000000000017 RCX: dffffc0000000000
[  308.893978][    C0] RDX: ffff88810367a600 RSI: 0000000000000017 RDI: 000000000000002c
[  308.893988][    C0] RBP: ffffc90000007148 R08: ffffc90000007540 R09: ffffc90000007550
[  308.893999][    C0] R10: ffffc900000076b0 R11: fffff52000000eda R12: 000000000000002c
[  308.894009][    C0] R13: ffff88810bf514c0 R14: 0000000000000003 R15: 0000000000000001
[  308.894018][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  308.894030][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.894040][    C0] CR2: 00007ffe99208fc8 CR3: 000000013bc22000 CR4: 00000000003526b0
[  308.894053][    C0] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000
[  308.894062][    C0] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  308.894071][    C0] Call Trace:
[  308.894076][    C0]  <IRQ>
[  308.894083][    C0]  rt6_score_route+0x83/0x8a0
[  308.894096][    C0]  ? __napi_poll+0xd0/0x610
[  308.894111][    C0]  ? net_rx_action+0x584/0xce0
[  308.894125][    C0]  ? handle_softirqs+0x1ab/0x630
[  308.894142][    C0]  ? __do_softirq+0xf/0x16
[  308.894160][    C0]  ? do_softirq+0xa6/0x100
[  308.894175][    C0]  ? __local_bh_enable_ip+0x74/0x80
[  308.894192][    C0]  ? rcu_do_batch+0x5c6/0xd20
[  308.894206][    C0]  ? rcu_nocb_cb_kthread+0x4dc/0xac0
[  308.894222][    C0]  ? kthread+0x2ca/0x370
[  308.894234][    C0]  ? ret_from_fork+0x67/0xa0
[  308.894250][    C0]  find_match+0x176/0x10f0
[  308.894268][    C0]  __find_rr_leaf+0x23c/0x790
[  308.894286][    C0]  ? rt6_check_expired+0x250/0x250
[  308.894306][    C0]  ? __siphash_unaligned+0x26e/0x3c0
[  308.894326][    C0]  fib6_table_lookup+0x2c5/0x9b0
[  308.894339][    C0]  ? __cfi_flow_hash_from_keys+0x10/0x10
[  308.894357][    C0]  ? __cfi_fib6_table_lookup+0x10/0x10
[  308.894369][    C0]  ? ipv6_rcv+0xed/0x220
[  308.894382][    C0]  ip6_pol_route+0x167/0x12c0
[  308.894395][    C0]  ? __cfi_br_dev_queue_push_xmit+0x10/0x10
[  308.894412][    C0]  ? __cfi_ip6_pol_route+0x10/0x10
[  308.894424][    C0]  ? netif_receive_skb+0x161/0x7b0
[  308.894440][    C0]  ? __cfi_netif_receive_skb+0x10/0x10
[  308.894456][    C0]  ? br_flood+0x67e/0x730
[  308.894471][    C0]  ? br_pass_frame_up+0x126/0x1c0
[  308.894488][    C0]  ip6_pol_route_input+0x5a/0x80
[  308.894501][    C0]  fib6_rule_lookup+0x4cc/0x6b0
[  308.894519][    C0]  ? __cfi_ip6_pol_route_input+0x10/0x10
[  308.894533][    C0]  ? __cfi_fib6_rule_lookup+0x10/0x10
[  308.894551][    C0]  ? ip6t_do_table+0x1dc/0x14d0
[  308.894567][    C0]  ip6_route_input+0x59f/0x8d0
[  308.894580][    C0]  ? __cfi_ip6_route_input+0x10/0x10
[  308.894594][    C0]  ? __cfi_ip6t_do_table+0x10/0x10
[  308.894608][    C0]  ? ip6_mc_input+0x4f3/0x670
[  308.894622][    C0]  ? __cfi_ip6table_mangle_hook+0x10/0x10
[  308.894638][    C0]  ip6_rcv_finish+0x15a/0x3c0
[  308.894651][    C0]  ipv6_rcv+0xed/0x220
[  308.894663][    C0]  ? __cfi_ipv6_rcv+0x10/0x10
[  308.894676][    C0]  ? __cfi_ip6_rcv_finish+0x10/0x10
[  308.894688][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  308.894704][    C0]  process_backlog+0x44b/0xae0
[  308.894722][    C0]  __napi_poll+0xd0/0x610
[  308.894736][    C0]  net_rx_action+0x584/0xce0
[  308.894752][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  308.894767][    C0]  ? sched_clock+0x44/0x60
[  308.894789][    C0]  ? __cfi_sched_clock_cpu+0x10/0x10
[  308.894805][    C0]  ? try_to_wake_up+0xdfb/0x1b00
[  308.894818][    C0]  ? irqtime_account_irq+0x51/0x1c0
[  308.894834][    C0]  handle_softirqs+0x1ab/0x630
[  308.894852][    C0]  __do_softirq+0xf/0x16
[  308.894867][    C0]  do_softirq+0xa6/0x100
[  308.894884][    C0]  </IRQ>
[  308.894888][    C0]  <TASK>
[  308.894893][    C0]  ? __cfi_do_softirq+0x10/0x10
[  308.894910][    C0]  ? __kasan_slab_free+0x6a/0x80
[  308.894929][    C0]  ? __cfi_slab_free_after_rcu_debug+0x10/0x10
[  308.894943][    C0]  __local_bh_enable_ip+0x74/0x80
[  308.894959][    C0]  rcu_do_batch+0x5c6/0xd20
[  308.894976][    C0]  ? rcu_core+0xd20/0xd20
[  308.894990][    C0]  ? __kasan_check_write+0x18/0x20
[  308.895006][    C0]  ? _raw_spin_lock+0x8c/0x120
[  308.895020][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  308.895036][    C0]  ? __kasan_check_read+0x15/0x20
[  308.895051][    C0]  ? rcu_nocb_cb_kthread+0x4c7/0xac0
[  308.895067][    C0]  rcu_nocb_cb_kthread+0x4dc/0xac0
[  308.895085][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  308.895105][    C0]  ? __kasan_check_write+0x18/0x20
[  308.895120][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  308.895135][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  308.895150][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  308.895165][    C0]  ? set_cpus_allowed_ptr+0x93/0xe0
[  308.895183][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  308.895201][    C0]  ? __kasan_check_read+0x15/0x20
[  308.895217][    C0]  ? __kthread_parkme+0x138/0x180
[  308.895234][    C0]  ? schedule+0xc6/0x240
[  308.895250][    C0]  kthread+0x2ca/0x370
[  308.895262][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  308.895278][    C0]  ? __cfi_kthread+0x10/0x10
[  308.895289][    C0]  ret_from_fork+0x67/0xa0
[  308.895304][    C0]  ? __cfi_kthread+0x10/0x10
[  308.895315][    C0]  ret_from_fork_asm+0x1a/0x30
[  308.895334][    C0]  </TASK>
[  312.350872][    C0] net_ratelimit: 133957 callbacks suppressed
[  312.350894][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.350897][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  312.351096][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  312.356951][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  312.368953][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  312.380805][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.392866][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  312.404611][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.416707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:89:25:fa:cd:26, vlan:0)
[  312.428534][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)