last executing test programs:

2m49.933107463s ago: executing program 0 (id=1059):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}})
fadvise64(r0, 0x1003, 0x9, 0x5)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r0, 0x7dfff000)
socket$unix(0x1, 0x2, 0x0)

2m49.900465973s ago: executing program 0 (id=1060):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

2m49.832405154s ago: executing program 0 (id=1061):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f00000000c0))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c001e001e00012b26bd70000024139e07"], 0x40}}, 0x90)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000540)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a\x00\xf8\xff\xff\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\t\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a0%QO\xfd{\xa4\x18\xd06\xa9\xdb3\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1\a\x00\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fFe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4ZU\xcc9\xbf\x82\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe5\x9c\xc5\xa3\x9d\xdc\xd7@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t\xbc\x15D\x0f\x11\xbe\xf8\n\t\xff\x88\xa8\xf9\x99\xaeg\xdcn\xe0g\x00\xb7\xees\xcf\xeeU\x98\x12\xed7')
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)

2m49.832096334s ago: executing program 0 (id=1062):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close_range(r0, r0, 0x2) (async)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80700a, 0x0) (async)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')

2m49.810543645s ago: executing program 0 (id=1063):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r0, &(0x7f0000000380)='./file1\x00', r0, &(0x7f0000000480)='./file0\x00', 0x400)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740), 0x0)

2m49.727121596s ago: executing program 0 (id=1064):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40)
shutdown(0xffffffffffffffff, 0x1)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0xb00, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(&(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r4, 0x8, 0x80000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001)
recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xeb}], 0x1, 0x2001, 0x0)
write$binfmt_misc(r1, &(0x7f00000002c0), 0x15)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x185040, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="d73d1f7dddcd491bdd043190bc5e0102030109020b0001025317f1d8f3910601020a00a309050810100091fd03167835d72a18a60cfdda00658d2f494e1b7c4387f3935d79c063de417730193d444e91756deb46a4de645048a99fd2b5feb02a828a06c9f8dba9659a3016ebd8ee821e4d0f579a289c3536005f65adf1e4c98eac0d5584fc285949ee9a151cd3d2e4ca96d100351d5f98dc8fcf90d998fd6f5e85d6187fd2f2d44812c3217d14e3633944177ffd4a793250d476847e9d0add960cb1d1f139b73d28452c8e6c3434bfa5d9676c1e839fda1b67b99fee6a03f83f2a108407352be31e7e17a614e3"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)

2m49.683071337s ago: executing program 32 (id=1064):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40)
shutdown(0xffffffffffffffff, 0x1)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0xb00, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(&(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r4, 0x8, 0x80000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001)
recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xeb}], 0x1, 0x2001, 0x0)
write$binfmt_misc(r1, &(0x7f00000002c0), 0x15)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x185040, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="d73d1f7dddcd491bdd043190bc5e0102030109020b0001025317f1d8f3910601020a00a309050810100091fd03167835d72a18a60cfdda00658d2f494e1b7c4387f3935d79c063de417730193d444e91756deb46a4de645048a99fd2b5feb02a828a06c9f8dba9659a3016ebd8ee821e4d0f579a289c3536005f65adf1e4c98eac0d5584fc285949ee9a151cd3d2e4ca96d100351d5f98dc8fcf90d998fd6f5e85d6187fd2f2d44812c3217d14e3633944177ffd4a793250d476847e9d0add960cb1d1f139b73d28452c8e6c3434bfa5d9676c1e839fda1b67b99fee6a03f83f2a108407352be31e7e17a614e3"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)

1m55.126989707s ago: executing program 4 (id=1845):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x4140)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00')

1m53.652357189s ago: executing program 4 (id=1860):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004})
epoll_wait(r4, &(0x7f0000004140)=[{}], 0x1, 0x4000005)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000005c0)={0x2})

1m53.651470529s ago: executing program 4 (id=1861):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x1)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000002c0)={'\x00', 0xb6f, 0x1, 0x0, 0x0, 0x9, 0x4000, 0x0, '\x00', 0xa})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="847a98af50df1c726f2753728222ee470ae058841b019aeab402060c", 0x1c}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r3, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x2100}, @flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

1m53.57931506s ago: executing program 4 (id=1862):
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ppoll(&(0x7f0000000580)=[{r1, 0x2000}, {r1, 0xa120}], 0x2, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e000101000000000000000008004100", @ANYRES32=0x0, @ANYBLOB="0400e50088106f25e34f22b08a14723f1e9853817955950a66ec8a0df2b1e4f29d5ee5fa416ca26b06587c8e1124b2daa95910a900d56df72ea93843d5f6dbd5365ae6"], 0x1c}], 0x1}, 0x4)
syz_open_procfs$userns(r0, &(0x7f0000000000))
setns(0xffffffffffffffff, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
close(r4)
mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000c00)=ANY=[@ANYBLOB="01000000000000003a000200000000000200000000000000"])
fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000001c0), &(0x7f00000002c0)='./file0/file0\x00', 0xe, 0x2)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m53.506657731s ago: executing program 4 (id=1863):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000040))
ppoll(&(0x7f0000000080)=[{r2, 0x1000}, {r1}], 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x100000000]}, 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x26a100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002"], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$get_keyring_id(0x0, r7, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m53.328353774s ago: executing program 4 (id=1864):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0)
mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000280), 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=unix'])
pread64(r1, &(0x7f0000000340)=""/242, 0xf2, 0x3ff)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r3, 0x7dfff000)

1m53.294510284s ago: executing program 33 (id=1864):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0)
mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000280), 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=unix'])
pread64(r1, &(0x7f0000000340)=""/242, 0xf2, 0x3ff)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r3, 0x7dfff000)

37.125464798s ago: executing program 2 (id=2509):
mlockall(0x2)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x400000ffc000)
brk(0x400000ffc020)
brk(0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2)

36.570988027s ago: executing program 2 (id=2510):
io_setup(0x8, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = eventfd(0x6)
io_submit(r0, 0x2, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x6, 0x2, r1, 0x0, 0x0, 0x1, 0x0, 0x2, r2}, 0x0])
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r4 = socket$inet(0x2, 0x3, 0x9)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x11}}], 0x2, 0x880)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x20, 0x0, &(0x7f00000008c0))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, 0x0, &(0x7f00000000c0))
preadv(r8, &(0x7f0000000780)=[{&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000700)=""/90, 0x5a}], 0x6, 0x2, 0x3)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="e214932b09e1065736d85c6c21cb714b4ca264ecabedc0fdfb2ce22f581ef2f8e9be6ab6fb8c41bed6f3c0c1e543f2ef8ae64426b407ce7b28e765598bd091180be9ab3f26aa58f7423d7ec3e4126944be9cdaba0ed11de4110f1482db8949737f24f3bcd412b9bdc6fd16993a5677e4459b9b4fb34f7db2a8652726226238aea3200ba2a58e9182d89a9b723fbfba2d3e8c83a370a91abc1ce6d0eed73bacb19805a907f527d3b0cdb560b8b23753e26875639204f858e976616f77f4b1e758b8e39f4340e6afa8418307f10305ef0d", @ANYRES16=r5, @ANYBLOB="010026bd70000000000027000000"], 0x14}}, 0x20040000)
r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140))
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
pipe2(&(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x220880, 0x0)
splice(r10, 0x0, r12, &(0x7f0000000140), 0x4, 0x0)
r13 = fcntl$dupfd(r11, 0x0, r10)
write$cgroup_pid(r13, &(0x7f0000001140), 0x12)
r14 = socket(0x8000000010, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=<r15=>0x0)
ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000340)={r15, 0x0, 0x2})
io_setup(0xffffffff, &(0x7f0000000100))
write(r14, &(0x7f0000000000)="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", 0xfd)
lseek(r9, 0x8000003, 0x0)

36.35476065s ago: executing program 2 (id=2511):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)=0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'veth1_to_hsr\x00', {}, 0x6})
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8000, 0xfffffffd, 0x7, 0x400, 0x25240927]}, &(0x7f0000000140)=0x54)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x8}, @mss={0x2, 0x8}, @timestamp, @sack_perm], 0x4)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='dummy0\x00', 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x408000, 0x58)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'veth1_to_bond\x00', &(0x7f0000000240)=@ethtool_regs={0x4, 0x7, 0xdd, "b81a0c011ecb49a0b9cde7b74cd3f9afebfd18486ef9f94160ad53d9368a7528d17dfa93f34508e5cbc15227f1f5fcfb3892510154bbc5a684ace72f469003ce9c3e0340ee1fa3996bb3cbd82f420209a8fe857df6ce79417df19b638815bf9042c0fb8e324655bfe730eb303862641460f8817bd79f0d599abc3d6eede32209b2d0b44e1cbbe034ff0f1b2eb2107cce09a707fa2669d9096f0d247b9b7d35ca4b5a38e9f65c59321aace77e43c36c7de7397bfa01dd791ecc3b961a8a5fc01558fdc9230a3f4c3957ee73f8bf3863fe5f3841e05fc0287b49117f14c0"}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
socketpair(0x3, 0x4, 0xfffffff8, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x128, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x40, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x180}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x4001}, 0x20040080)
sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x2, 0x11, 0x9, 0x3, 0xb, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x2b, 0x20, 0x10}, @sadb_lifetime={0x4, 0x3, 0xffffffd7, 0x4, 0xb, 0x271f}]}, 0x58}}, 0x4040)
syz_clone(0x40000, &(0x7f0000000840)="7b8b1da7576457ab3901f248445802b9ba50ff330c6d78f2e05d9400b8c2b2307e69337e9d266386b0307abf1bbb6b409e01cf2a1e76ef8c12bda0d769376cd41507eeb7e6ba557f7bee67bcc28e970c2dfd6c364e257a631a1f18c112b2c11968a5d009405fd6d327f2f5ae8b2dcfcb153ba4db723766deb0622c3439fa88a84440e16b9f9469ee52128f9a91ef0de286afb20464f98478c5001cd9bfb35e4a7479115763296e65481abbc10c9075672316cf0a14f4970fee", 0xb9, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="d2f9e1aa0e22143f9bdb175c0d9b156b29cdf05be8963c0cf04dcc8492693ef2b2a537b0e3f19adf47c6ae56e7aa84835c53b13af668af1d36c36cf58f55d1c1c68df7a7f1e3521b74a5195dc263059bbfabd571bf4b2974bba7579fd7001b80d6c503f7f30a20d4fd433439ad4d246ac94d")
socket$inet_tcp(0x2, 0x1, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, &(0x7f0000000a00)="c463f5790b64f30fc7b0020000000f782a66b85d008ee866b86f008ee067266666470faebb0000000066baf80cb880388882ef66bafc0c66b8050066ef0f788000000000b9fe030000b804000000ba000000000f300fc75e01", 0x59}], 0x1, 0x4, &(0x7f0000000ac0)=[@cr4={0x1, 0x200120}, @dstype3={0x7, 0x7}], 0x2)
socket$inet6(0xa, 0x0, 0x5)
fspick(r3, &(0x7f0000000b00)='./file0\x00', 0x1)
connect$tipc(r4, &(0x7f0000000b40)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x4, 0x1}}, 0x10)
socket(0x9, 0x4, 0x5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r8, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000040)

36.250866802s ago: executing program 2 (id=2513):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
stat(0x0, &(0x7f0000000300)) (async)
stat(0x0, &(0x7f0000000300))
r4 = getpid()
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0)
syz_pidfd_open(r4, 0x0) (async)
r6 = syz_pidfd_open(r4, 0x0)
setns(r6, 0x24020000)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x210)
close_range(r0, 0xffffffffffffffff, 0x0)

34.128084044s ago: executing program 3 (id=2526):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0xf, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0xa, 0x4, "e3393045"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000700)={0x40, 0x9, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
close(r1)
request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=']!\x00', 0xfffffffffffffffc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x2, 0x4f, {0x4f, 0x8, "2fc8134e128387a215145e8a0bb0f79a53c500b47e9ddd3f039b0a2639106da7163ee21573f810fa5574a11a8e13ada5036ea8008c646924fedc4178c1fab810fd1f7697482f3fa95af71f3839"}}, &(0x7f0000000400)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "3e475fdc31f8c9231bc0e9023744996c5612adec8956480ca3b02dec4ef6ff8232554d96ad01c1d719358b56b4ba62740eb8aca9e01ebee32c42864430834dd638c78d5398c1326769a2606c545cba9605481e95d4a81f8561f45b87b8c4d0211580b5a04fc00190eb5d92dda09fc0ee6467ac2470cfe35261b74aa6b7147e8f0577e1e26c903084d825449526ff0ef92cec5a8bc79d0cb4bcc923e6d6d25c22a887c5f555e837ff815d9ba5f55f114f8f2f0e6cb9ab816253c96706ae4f31b7a7b6c184158fe88705c27d32e12369ec9888c5ef07cf358be019141f7c6b1c5392"}}, &(0x7f0000000740)={0x0, 0xf, 0x126, {0x5, 0xf, 0x126, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x10, 0xf, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x1c00}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "61e676a01aa7789fd0dc0bc219c07a4b"}, @generic={0xe6, 0x10, 0xb, "90872f447e2721395c88c02cfc424430929c8a6f42cbc9eb2aaa92468ba7da13f7fb734ba884723d8dc00191d22ac5e70820a00c0a8d52b5d61080241871241967c1b0073abee3c3b775c3f0ae9861b65f3df2a06e4489958189a07b3c49851eeac4a4d1b2ff508ced1b301daf62f13249b581d598970df90e40c465f98a50d6dfe50b2518cc171ce24f71f573ed404ccda695686df6a00d2cb8e68f1c0b978e4d8d57af5d25280d270bdde131b5073cd24bda343cd535dbb51c380849f927203ab0eeabb4a9b3ce1eaccb2a2b13b743fd1239b1f722ba6e735a7a3bc9238564e7f929"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6966434a03dd6ff8dfde2d1b782558b5"}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x8, 0x2, "8e6370bd", "495aa837"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x98, 0x4, 0x7, 0x3, 0x7f, 0x0, 0x5}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000600)={0x0, 0x17, 0xeb, "7a6607d21b2999c93cc615977e19e9d2a95a4241d51d201fe2f488ba18ce60d842ca9d1edf1d2b0d73136ba5e9a8b13565cef8c5db683ae2c9f41ec5bede61dae5ae2aa096e176f683aba9b8bca33ed65d1f11b11bb0f9f71fb79d5722aa48eb06feed031f7e1130d4a1bb4e0c350509cd8b40cfd9dfff97fe5fbb0cae123ee18f0eef7d0971af6f08504fa92e2ffc5b59398071ee7e748d7b5f2869bea41121f28aa89af4cf812e4103464a192cedb9aeec586e137f8ebd880cff5b9837ccb73e6139528b8251a7580145aa4b6e3e918376e622c21c4824baf3834c8c72d5b939a1895699f8e89d62a4a3"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x8a}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x1c0, 0x4, [0xfff]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, 'K\n'}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @random="93ec6fbed671"}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "1ee1"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000c80)={0x40, 0x1e, 0x1}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0xa}})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000004503"])
syz_usb_ep_write(r0, 0x7, 0x10, &(0x7f0000000040)="c7d51f6590f429b977441c7f76e2430a")
request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='binder\x00', 0xfffffffffffffffb)

31.619154761s ago: executing program 3 (id=2534):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
read(r0, &(0x7f0000000000)=""/175, 0xfffffe14)

31.363596435s ago: executing program 3 (id=2539):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400010000100009044300020202"], 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000440)={0x20, 0x1, 0xab, {0xab, 0xb, "19a3ba5ea6548ff16359a8584f4d64c8936e13d93ff703b7c5e17c161cbc917d9923f7d101f54526d62bcc40496563ad14e5742a1eeb56c4eb6a8f7b6956f538a59501b05077b056d416ffce388373f571dbfc696364f6d599502216cf797b5dbe02a61552cdc45101047eed750d303a2f805c13525ba3ea0f9cc3971742fe84980847849e16d16b5c523ab7e94178e9b5f3a359e80ee12c1cbd8621016b75e4cf4832a96e9574d5be"}}, &(0x7f0000000640)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "e43fdcc3178c7f9fba95abe39ee1a814528f581672a51f135f043d13ff24d63cfcefa03a69685dc092d564f9af7b5f9881efc304646376f3237c864da43597c74d509897f14a57bb80c68fd2fb55668560a54e3d6fd6eecdfbcc87d1e61d4c9f9506250c0b612133bfa0394b07b436dff867f92cc220e89fd1526596aac45153fe9faaf50c3ef6b61368418be99310aa1fab821eba0680eea760f1cd8523bba7ae1f00e0f2bb4cb0a851cb197e32969a2910f35a896dafb3ae3fc8cdbdc7de84457feae8eb036754dae66a1c44b30c3d54d67739d85c36f01969f25c4950ea4c416a3c"}}, &(0x7f0000000740)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xf, 0xe4a8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x4, 0x40, 0xf, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xff, 0xf, 0xdff, [0x30, 0x3f0f, 0xc03f, 0x3f00]}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x99, 0x0, 0x5, 0xd, "40bf954e", "8350e9ce"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0x0, 0x7, 0xa8, 0xfffd, 0x8000}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000840)={0x8c4025dc16c40c5e, 0xa, 0x18, "62bc7f0633c964b26a732144e3da836f01dea3e2b9ecf8ad"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x200}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x85}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'UO'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "65de"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0xff62}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x3}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x7c, 0x0, &(0x7f0000000340)=[@dead_binder_done, @acquire_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/179, 0xb3, 0x1, 0x19}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1101, 0x1}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @request_death, @acquire={0x40046305, 0x3}], 0x44, 0x0, &(0x7f00000003c0)="4addbceab3f8e628f6c1f22ffe1f48baf1a0923d46ccb99f7a26420ba018f4b518a5fea1dd328f7cbcc3b53e4c342df32a03ecb9fd7d7a147e9eacaf69803ceca5257c2b"})

28.519898538s ago: executing program 1 (id=2563):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x7050c0, 0x0)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWSETELEM={0x12c, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10c, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb0d2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x97}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x39}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xf}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x188}, 0x1, 0x0, 0x0, 0x24008010}, 0x4040) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000001030000000000000000000a0000003c0001802c00018014000300fe800000aa14000400ff0100000000000000000000000000010c000280050001000000d4f247e40000000000000000008602df3a9f61d70f43c25b56bb52964a39682e60886255dd615e5b2328b4c4500c0f543fda5134b688a9c1b35723e0520eae307b96a6e228e2a17a567b9bfde7e7b9ebc52f0a683e52016d3292ef34dc1eb6c646c822e9ec1f7f46bb61a339fd9b5861b978fe169152340a5a2b1e9fd37bf8e8e2b820"], 0x50}}, 0x0) (async)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) (async)
listen(r1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623)

28.471319579s ago: executing program 2 (id=2546):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^')
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0xf, 0x1b, {0x1b, 0x23, "345f5502f2ccb1ee802ae0db76a798cd3eb9d4d70b25e88572"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r2 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000080)=',^\x00', &(0x7f00000000c0)='./file0\x00', r3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

28.425178009s ago: executing program 1 (id=2564):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

28.328211361s ago: executing program 1 (id=2565):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0})
ppoll(&(0x7f0000000180)=[{r0, 0x4010}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0)

28.321282781s ago: executing program 3 (id=2566):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v2={0x2000000, [{0x8, 0x8}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x1)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e1c, 0x0, @mcast1, 0x2}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r3, 0x0)
accept4$unix(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0003}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20200)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800008)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x40814, &(0x7f0000000340)={0x2, 0xfffe, @private=0xa010100}, 0x10)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

27.776079999s ago: executing program 5 (id=2568):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@multicast1, 0x1, 0x0, 0x10, 0x0, [{@private}]}})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40000010})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_user(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d5f753a6f358ffe50745f723a7661725f6c6f636b5f743a73302075"], 0x2d)
setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4be}, 0x1c)
listen(r3, 0x0)
listen(r5, 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r7 = openat$incfs(r6, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x40106726, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000c40)={0x2000000b})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="c744240019000000c744240206000000c7442406000000000f01142467f30f2d6700660f4d74fe54ea090000001d010f32b98c080000b85d4c0000ba000000000f30ea00000000c0000fc79cf7005000003636360f01c466baf80cb8e8e83688ef66bafc0cb883f4d9d5ef", 0x6b}], 0x1, 0x10, &(0x7f00000001c0), 0x0)

27.725013009s ago: executing program 5 (id=2569):
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3eb, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x4810)
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = gettid()
r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000030018"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31300400000000000e0001006e657464657673696d0000000f0002006e657464257673696d300000"], 0xf0}, 0x1, 0x0, 0x0, 0x890}, 0x4000004)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x50)
close_range(r6, 0xffffffffffffffff, 0x0)
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x9250)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r8, 0x0)

27.576202412s ago: executing program 5 (id=2570):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x20000)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0xf}, 0x4)
r3 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4)
sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/204, 0xcc}, 0xfff}], 0x1, 0x162, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)

27.435973874s ago: executing program 1 (id=2571):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
rt_sigprocmask(0x1, &(0x7f0000000000)={[0x7]}, &(0x7f0000000040), 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

27.434735294s ago: executing program 5 (id=2572):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x0, 0x6}]) (async)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x0, 0x6}])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$UHID_INPUT2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0c7a77837558044bf5c63a5e650000000000"], 0x6) (async)
write$UHID_INPUT2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0c7a77837558044bf5c63a5e650000000000"], 0x6)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffffffffffef1, {0xf000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c0f000000c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576648eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af095a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0714b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb6ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b40867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d0400000000000000a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f710100ab8d0b545c334014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b57fe072d3218983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0xffffffffffffffb7, 0x7}, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0xffffffffffffffb7, 0x7}, 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000004c0)="b9400200000f3266baa00066b86b4266ef66ba4200430f0866ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b41400fb9f80f075bb8ac00f400000000014e4e033921820f47a753fd", 0x4f}], 0x1, 0x42, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000004c0)="b9400200000f3266baa00066b86b4266ef66ba4200430f0866ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b41400fb9f80f075bb8ac00f400000000014e4e033921820f47a753fd", 0x4f}], 0x1, 0x42, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0xd, 0x0, 0x10, 0xfd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xff, 0xff})
mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
userfaultfd(0x1) (async)
r8 = userfaultfd(0x1)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff8000/0x7000)=nil, 0x7000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000003c0)="1c681411f7a496a8ee281cdde27a9b716f64b4c06ec665771cb24cb800ff00001a00002000000000000000070000988e2c7900", 0x0, 0x32)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x1090002, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x1090002, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"])

27.400422405s ago: executing program 3 (id=2573):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)={[], [{@subj_role}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x3c00000000000000)
write$char_usb(r0, &(0x7f0000000180)="3ff07e4abd6e988a02fe485ab265c647116b3f026c933e2d3847a0b50253df38ae508ea8b245d878b86efc7f3de594530b00380eccc727b02a09bccb55f06fb8745a623ba5adebd6918be506f0f07862dc4464548241da67a09c890e9e9fa32fb7aaf8a3c282952916294341647abfcaf470e96e0b1d5e079c3fb803fb964ef18b09", 0x82)

27.315135606s ago: executing program 2 (id=2574):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0x10, 0x29, 0x0, @multicast2, @remote}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

27.164042498s ago: executing program 5 (id=2575):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x3, &(0x7f0000000300)={0x0, 0x35, 0x2, @thr={&(0x7f0000000380)="6301c9cd51a2db0ac54fecc94117b6c0b3a5ccc872cc3f9f35de1b90c1730857285ced2fb9c13bb9489c65d5c5e9ce856555f33e3440a264e5fe0567ebc43700f203def672e6ff7c71959df8d2947b499ee642c55a15984b2173c9fa03ea830045cf706856803ee1fb425b998dab6b034233e70623dd05f520be4d74c2c3c8880772af6e235963857f2103bfde8324233c1fb701175e7678e3996df43012f733c21465700e9fcd277ed253a0bf2a46f8ecb1ed111187e3b9c0c6352367dbb039d322e869d84bb18ea60a8bf9", &(0x7f00000002c0)="3baa0493fa908b1b0bc8d734880a45b2ee31"}}, &(0x7f0000000480))
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000780)="e37e", 0x2}, {&(0x7f0000000340)="4080392929d4", 0x6}, {&(0x7f0000000800)="7d17", 0x2}], 0x3, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0)
setns(r3, 0x2000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2003)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}})
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0119000000000000040140040109c2047fffffffc910ff010000000000000000000000000001963dbc7c0745e7b3131076aca56225545b5de8f1ee9384f0d278ca4c161389e245e9eca9f70acd69a17ba14321ab6cb19e98f49fe551a8a92a37d2b0dd1542419ecfc5bdb44d6345137cf20523b6d308833dfcf711cd175d03342f07000000000000039d5c466deff4c76fc4b7b448b20710000000020281030002000000000000000728000000010806000000000000000000000900000000000000ffffffffffffffffff0100000000000005fa0001"], 0xd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f000014e000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

27.163244288s ago: executing program 1 (id=2576):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
getsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x1a, 0x0, 0x0) (async)
syz_open_procfs(0x0, 0x0) (async)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendfile(r0, r0, 0x0, 0x7ffff000) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x1, 0x0, 0x2226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) (async)
write$FUSE_INIT(r4, 0x0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066)
ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

27.160815358s ago: executing program 3 (id=2577):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = epoll_create1(0x0)
r3 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x50)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
recvfrom$inet6(r4, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0)
shutdown(r4, 0x0)
ptrace(0x10, r3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7c0cab82ab03d1fc, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r3, 0x0, 0x0)
ptrace$peeksig(0x4209, r3, &(0x7f0000000040)={0x100000001, 0x1, 0x1}, &(0x7f0000000100)=[{}])
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000640)=<r6=>0x0)
r7 = eventfd(0x6)
io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x4, r5, &(0x7f0000000680), 0x0, 0x9, 0x0, 0x1, r7}])
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0)
r9 = syz_clone(0x20000000, &(0x7f0000000180)="b0017fc9022bdaad3ca56475fad12f17a5760ff0419fbf01", 0x18, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000001980)="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")
ptrace$cont(0xb681990e5d50e087, r9, 0x5, 0x9)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7ffffffb)

23.751342599s ago: executing program 5 (id=2578):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002a00004000000000040000001cb49ca8"])
gettid()
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
keyctl$set_timeout(0xf, 0x0, 0x8)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/79, 0x80a0000})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x100000000000000, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x52250})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x8, 0x100, 0x8000, 0x8, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x9, 0x7fffffffffffffff, 0x0, 0x1, 0x3, 0xe, 0x8000000000000000, 0xff], 0x0, 0x41097})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"})
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)

19.971295416s ago: executing program 1 (id=2579):
futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (rerun: 32)
lseek(r1, 0x2808, 0x0) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x1, 0x7, 0x1, 0x3c83}, 0x10) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000800)={0x0, r3}) (async)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000300)) (async)
mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r4, 0x7dfff000)

10.230467192s ago: executing program 34 (id=2574):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0x10, 0x29, 0x0, @multicast2, @remote}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

2.838941975s ago: executing program 35 (id=2577):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = epoll_create1(0x0)
r3 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x50)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
recvfrom$inet6(r4, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0)
shutdown(r4, 0x0)
ptrace(0x10, r3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7c0cab82ab03d1fc, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r3, 0x0, 0x0)
ptrace$peeksig(0x4209, r3, &(0x7f0000000040)={0x100000001, 0x1, 0x1}, &(0x7f0000000100)=[{}])
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000640)=<r6=>0x0)
r7 = eventfd(0x6)
io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x4, r5, &(0x7f0000000680), 0x0, 0x9, 0x0, 0x1, r7}])
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0)
r9 = syz_clone(0x20000000, &(0x7f0000000180)="b0017fc9022bdaad3ca56475fad12f17a5760ff0419fbf01", 0x18, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000001980)="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")
ptrace$cont(0xb681990e5d50e087, r9, 0x5, 0x9)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7ffffffb)

792.771237ms ago: executing program 36 (id=2578):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002a00004000000000040000001cb49ca8"])
gettid()
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
keyctl$set_timeout(0xf, 0x0, 0x8)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/79, 0x80a0000})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x100000000000000, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x52250})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x8, 0x100, 0x8000, 0x8, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x9, 0x7fffffffffffffff, 0x0, 0x1, 0x3, 0xe, 0x8000000000000000, 0xff], 0x0, 0x41097})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"})
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)

0s ago: executing program 37 (id=2579):
futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (rerun: 32)
lseek(r1, 0x2808, 0x0) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x1, 0x7, 0x1, 0x3c83}, 0x10) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000800)={0x0, r3}) (async)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000300)) (async)
mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r4, 0x7dfff000)

kernel console output (not intermixed with test programs):

ting 0
[  146.014502][   T10] usb 6-1: config 220 interface 1 has no altsetting 0
[  146.033140][   T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  146.048687][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.066947][   T10] usb 6-1: Product: syz
[  146.071337][   T10] usb 6-1: Manufacturer: syz
[  146.075972][   T10] usb 6-1: SerialNumber: syz
[  146.306833][   T10] usb 6-1: selecting invalid altsetting 0
[  146.328690][   T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  146.335098][   T10] usb 6-1: No valid video chain found.
[  146.351018][   T10] usb 6-1: USB disconnect, device number 4
[  146.571567][   T36] audit: type=1400 audit(2000000265.758:680): avc:  denied  { map } for  pid=5981 comm="syz.1.1960" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  146.838653][ T5991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32
[  147.830709][ T5987] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  147.998620][   T49] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  148.149715][   T49] usb 6-1: config 0 has too many interfaces: 202, using maximum allowed: 32
[  148.158672][   T49] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.169166][   T49] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 202
[  148.179894][   T49] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  148.189619][   T49] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  148.197727][   T49] usb 6-1: Product: syz
[  148.202315][   T49] usb 6-1: Manufacturer: syz
[  148.206932][   T49] usb 6-1: SerialNumber: syz
[  148.208630][  T306] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  148.226893][   T49] usb 6-1: config 0 descriptor??
[  148.378594][  T306] usb 2-1: Using ep0 maxpacket: 32
[  148.389334][  T306] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  148.397573][  T306] usb 2-1: config 0 has no interface number 0
[  148.416049][  T306] usb 2-1: config 0 interface 184 has no altsetting 0
[  148.430368][  T306] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  148.448591][  T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.456634][  T306] usb 2-1: Product: syz
[  148.478591][  T306] usb 2-1: Manufacturer: syz
[  148.483247][  T306] usb 2-1: SerialNumber: syz
[  148.498962][  T306] usb 2-1: config 0 descriptor??
[  148.509576][  T306] smsc75xx v1.0.0
[  148.526772][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'.
[  149.105551][   T49] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2
[  149.122247][ T4739] udevd[4739]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  149.139379][   T49] usb 6-1: USB disconnect, device number 5
[  149.939835][  T306] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  149.950975][  T306] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  149.960381][  T306] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  149.971246][  T306] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  149.980925][  T306] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  149.991695][  T306] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  150.001335][  T306] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  150.011233][  T306] usb 2-1: USB disconnect, device number 3
[  150.463110][ T6048] can0: slcan on ttyS3.
[  150.488691][   T49] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  150.498274][ T6048] can0 (unregistered): slcan off ttyS3.
[  150.535368][ T6057] SELinux: security policydb version 17 (MLS) not backwards compatible
[  150.548711][ T6057] SELinux: failed to load policy
[  150.628925][   T49] usb 6-1: device descriptor read/64, error -71
[  150.661740][ T6072] rust_binder: Got transaction with invalid offset.
[  150.661794][ T6072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  150.668800][ T6072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56
[  150.768301][ T6083] kvm: pic: non byte write
[  150.783201][ T6083] random: crng reseeded on system resumption
[  150.878616][   T49] usb 6-1: device descriptor read/64, error -71
[  151.112902][   T36] audit: type=1400 audit(2000000270.298:681): avc:  denied  { map } for  pid=6100 comm="syz.3.1998" path="socket:[25612]" dev="sockfs" ino=25612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  151.136157][   T49] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  151.168901][   T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  151.269412][   T49] usb 6-1: device descriptor read/64, error -71
[  151.318605][   T64] usb 2-1: Using ep0 maxpacket: 32
[  151.324873][   T64] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  151.333188][   T64] usb 2-1: config 0 has no interface number 0
[  151.339335][   T64] usb 2-1: config 0 interface 184 has no altsetting 0
[  151.347660][   T64] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  151.356811][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.364836][   T64] usb 2-1: Product: syz
[  151.369044][   T64] usb 2-1: Manufacturer: syz
[  151.373660][   T64] usb 2-1: SerialNumber: syz
[  151.379475][   T64] usb 2-1: config 0 descriptor??
[  151.385326][   T64] smsc75xx v1.0.0
[  151.508602][   T49] usb 6-1: device descriptor read/64, error -71
[  151.618694][   T49] usb usb6-port1: attempt power cycle
[  151.680491][ T6109] tipc: Trying to set illegal importance in message
[  151.705587][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'.
[  151.715532][ T6115] overlay: ./file0 is not a directory
[  151.958610][   T49] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  151.979671][   T49] usb 6-1: device descriptor read/8, error -71
[  152.109645][   T49] usb 6-1: device descriptor read/8, error -71
[  152.358592][   T49] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  152.379684][   T49] usb 6-1: device descriptor read/8, error -71
[  152.519665][   T49] usb 6-1: device descriptor read/8, error -71
[  152.638694][   T49] usb usb6-port1: unable to enumerate USB device
[  154.107704][   T36] audit: type=1326 audit(2000000273.288:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.3.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ba38e929 code=0x7fc00000
[  155.795972][   T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  155.808777][   T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  155.818979][   T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  155.830852][   T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  155.840731][   T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  155.851182][   T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  155.862610][   T64] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  155.873532][   T64] usb 2-1: USB disconnect, device number 4
[  156.739005][ T6152] cgroup: subsys name conflicts with all
[  157.364167][ T6171] SELinux:  Context system_u:object_r:public_content_t:s0 is not valid (left unmapped).
[  157.390069][   T36] audit: type=1400 audit(2000000276.568:683): avc:  denied  { relabelto } for  pid=6170 comm="syz.1.2022" name="file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0"
[  157.462910][   T36] audit: type=1400 audit(2000000276.568:684): avc:  denied  { associate } for  pid=6170 comm="syz.1.2022" name="file0" dev="tmpfs" ino=156 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:public_content_t:s0"
[  157.500356][   T36] audit: type=1400 audit(2000000276.618:685): avc:  denied  { unlink } for  pid=5865 comm="syz-executor" name="file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0"
[  157.528092][ T6183] netlink: 'syz.5.2024': attribute type 4 has an invalid length.
[  157.660602][ T6193] binder: Unknown parameter 's
ats'
[  157.965680][ T6218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  157.965719][ T6218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:92
[  158.007045][   T36] audit: type=1400 audit(2000000277.188:686): avc:  denied  { execute } for  pid=6221 comm="syz.1.2040" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  158.092081][ T6227] random: crng reseeded on system resumption
[  158.312609][ T6230] /dev/rnullb0: Can't lookup blockdev
[  158.403195][   T36] audit: type=1400 audit(2000000277.588:687): avc:  denied  { setopt } for  pid=6233 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.483325][   T36] audit: type=1400 audit(2000000277.668:688): avc:  denied  { watch watch_reads } for  pid=6244 comm="syz.5.2048" path="/38/bus" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  158.976962][   T36] audit: type=1400 audit(2000000278.158:689): avc:  denied  { setopt } for  pid=6252 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  159.024683][   T36] audit: type=1400 audit(2000000278.208:690): avc:  denied  { write } for  pid=6258 comm="syz.1.2054" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  159.031960][ T6259] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  159.047982][ T6259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  159.057589][ T6259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:108
[  159.297113][ T6319] overlay: Unknown parameter 'subj_user'
[  159.330078][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.339020][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.347737][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.356537][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.365261][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.373970][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.382666][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.391437][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.400177][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.408907][ T6317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.426597][ T6317] lo: entered promiscuous mode
[  159.436149][   T36] audit: type=1400 audit(2000000278.618:691): avc:  denied  { read } for  pid=6313 comm="syz.1.2073" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  159.464999][   T36] audit: type=1400 audit(2000000278.618:692): avc:  denied  { open } for  pid=6313 comm="syz.1.2073" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  159.466901][ T6313] lo: left promiscuous mode
[  159.673279][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.680425][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.687505][ T6330] bridge_slave_0: entered allmulticast mode
[  159.693870][ T6330] bridge_slave_0: entered promiscuous mode
[  159.700457][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.707521][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.714846][ T6330] bridge_slave_1: entered allmulticast mode
[  159.721513][ T6330] bridge_slave_1: entered promiscuous mode
[  159.735326][ T4194] bridge_slave_1: left allmulticast mode
[  159.741081][ T4194] bridge_slave_1: left promiscuous mode
[  159.746786][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.754724][ T4194] bridge_slave_0: left allmulticast mode
[  159.760635][ T4194] bridge_slave_0: left promiscuous mode
[  159.766510][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.860715][ T4194] tipc: Left network mode
[  159.866297][ T4194] veth1_macvtap: left promiscuous mode
[  159.871852][ T4194] veth0_vlan: left promiscuous mode
[  159.888605][   T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  159.915777][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.922891][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.930242][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.937293][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.960967][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.968418][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.978684][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.985758][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.995045][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.002135][ T4191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.030100][ T6330] veth0_vlan: entered promiscuous mode
[  160.041319][   T49] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  160.042483][ T6330] veth1_macvtap: entered promiscuous mode
[  160.052969][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  160.070229][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  160.080119][   T49] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.093086][   T49] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.103009][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.113422][   T49] usb 2-1: config 0 descriptor??
[  160.146118][ T6338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[  160.147533][ T6338] binder: Unknown parameter 'defcontextdf'
[  160.326198][   T49] plantronics 0003:047F:FFFF.0003: report_id 16904 is invalid
[  160.333776][   T49] plantronics 0003:047F:FFFF.0003: item 0 2 1 8 parsing failed
[  160.341604][   T49] plantronics 0003:047F:FFFF.0003: parse failed
[  160.347934][   T49] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22
[  160.359711][   T49] usb 2-1: USB disconnect, device number 5
[  160.834597][ T6368] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  160.843719][ T6368] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  160.872369][ T6370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15
[  160.873704][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.892721][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.108872][   T64] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  161.218664][   T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  161.258608][   T64] usb 4-1: Invalid ep0 maxpacket: 32
[  161.368631][   T49] usb 2-1: Using ep0 maxpacket: 8
[  161.375115][   T49] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  161.384311][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.392751][   T64] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  161.400458][   T49] usb 2-1: config 0 descriptor??
[  161.548651][   T64] usb 4-1: Invalid ep0 maxpacket: 32
[  161.555779][   T64] usb usb4-port1: attempt power cycle
[  161.605230][ T6413] fuse: Unknown parameter '-è�ÐÅk·(¦Ã'
[  161.909431][   T64] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  161.938938][   T64] usb 4-1: Invalid ep0 maxpacket: 32
[  162.078659][   T64] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  162.098958][   T64] usb 4-1: Invalid ep0 maxpacket: 32
[  162.104538][   T64] usb usb4-port1: unable to enumerate USB device
[  162.215771][ T6434] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2112'.
[  163.882614][   T49] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  163.906293][   T49] asix 2-1:0.0: probe with driver asix failed with error -71
[  163.914051][ T6440] overlayfs: failed to resolve './bus': -2
[  163.931869][   T49] usb 2-1: USB disconnect, device number 6
[  163.973889][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  163.973906][   T36] audit: type=1400 audit(2000000283.158:696): avc:  denied  { setcheckreqprot } for  pid=6444 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  164.026647][ T6450] binder: Unknown parameter 'con·ext'
[  164.035982][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2117'.
[  164.368610][   T49] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  164.529690][   T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.540022][   T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  164.549282][   T49] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  164.558808][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.572358][   T49] usb 2-1: config 0 descriptor??
[  164.785630][   T10] usb 2-1: USB disconnect, device number 7
[  165.128632][   T10] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  165.279806][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  165.291755][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.301913][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  165.311330][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.320474][   T10] usb 2-1: config 0 descriptor??
[  166.047431][ T6457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:150
[  166.047789][ T6473] rust_binder: Write failure EFAULT in pid:150
[  166.057877][  T306] usb 2-1: USB disconnect, device number 8
[  166.088598][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  166.248602][    T9] usb 4-1: Using ep0 maxpacket: 32
[  166.258980][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  166.267222][    T9] usb 4-1: config 0 has no interface number 0
[  166.274775][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  166.283961][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.294246][    T9] usb 4-1: Product: syz
[  166.298456][    T9] usb 4-1: Manufacturer: syz
[  166.308830][    T9] usb 4-1: SerialNumber: syz
[  166.317790][    T9] usb 4-1: config 0 descriptor??
[  166.333164][    T9] smsc95xx v2.0.0
[  166.350374][ T6483] tipc: Failed to remove unknown binding: 66,3,3/0:3920688724/3920688725
[  166.575473][ T6486] netlink: 'syz.1.2128': attribute type 4 has an invalid length.
[  166.698569][   T36] audit: type=1400 audit(2000000285.878:697): avc:  denied  { mounton } for  pid=6489 comm="syz.1.2130" path="/49/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  166.753215][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  166.789820][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  166.997919][ T6500] rust_binder: Error while translating object.
[  166.997988][ T6500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  167.008575][ T6500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168
[  167.268366][ T6509] netlink: 'syz.5.2135': attribute type 1 has an invalid length.
[  167.368591][ T1724] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  167.398215][ T6508] 9p: Unknown access argument Š: -22
[  167.538340][ T1724] usb 2-1: unable to get BOS descriptor or descriptor too short
[  167.547698][ T1724] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  167.562596][ T1724] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  167.586659][ T1724] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.609970][ T1724] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.638587][ T1724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.657781][ T1724] usb 2-1: Product: syz
[  167.667782][ T1724] usb 2-1: Manufacturer: syz
[  167.677834][ T1724] usb 2-1: SerialNumber: syz
[  167.911234][ T1724] usb 2-1: 0:2 : does not exist
[  167.936296][ T1724] usb 2-1: USB disconnect, device number 9
[  167.952488][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  168.026756][   T36] audit: type=1326 audit(2000000287.208:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.2.2137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faddc58e929 code=0x0
[  168.064626][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  168.076361][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  168.089615][    T9] usb 4-1: USB disconnect, device number 6
[  168.207300][ T6520] overlayfs: failed to clone upperpath
[  168.436389][ T6526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175
[  168.708650][   T49] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  168.839734][ T6550] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.868641][   T49] usb 2-1: Using ep0 maxpacket: 32
[  168.875196][   T49] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  168.883579][   T49] usb 2-1: config 0 has no interface number 0
[  168.889952][   T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  168.897507][   T49] usb 2-1: config 0 interface 184 has no altsetting 0
[  168.906128][   T49] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  168.915569][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.923880][   T49] usb 2-1: Product: syz
[  168.928297][   T49] usb 2-1: Manufacturer: syz
[  168.932953][   T49] usb 2-1: SerialNumber: syz
[  168.938276][   T49] usb 2-1: config 0 descriptor??
[  168.944103][   T49] smsc75xx v1.0.0
[  169.048988][   T31] usb 4-1: no configurations
[  169.053729][   T31] usb 4-1: can't read configurations, error -22
[  169.189044][   T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  169.338956][   T31] usb 4-1: no configurations
[  169.343696][   T31] usb 4-1: can't read configurations, error -22
[  169.350407][   T31] usb usb4-port1: attempt power cycle
[  169.688652][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  169.719429][   T31] usb 4-1: no configurations
[  169.724121][   T31] usb 4-1: can't read configurations, error -22
[  169.753119][ T6582] bridge0: entered promiscuous mode
[  169.760264][ T6582] bridge0: left promiscuous mode
[  169.773322][   T36] audit: type=1400 audit(2000000288.958:699): avc:  denied  { ioctl } for  pid=6584 comm="syz.5.2163" path="socket:[26623]" dev="sockfs" ino=26623 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  169.858621][   T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  169.881106][   T31] usb 4-1: no configurations
[  169.885801][   T31] usb 4-1: can't read configurations, error -22
[  169.892354][   T31] usb usb4-port1: unable to enumerate USB device
[  170.400495][   T49] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  170.411565][   T49] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  170.420980][   T49] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  170.431889][   T49] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  170.441590][   T49] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  170.451925][   T49] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  170.461476][   T49] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  170.471211][   T49] usb 2-1: USB disconnect, device number 10
[  170.950643][ T6622] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2175'.
[  171.188630][   T49] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  171.338639][   T49] usb 2-1: Using ep0 maxpacket: 32
[  171.344983][   T49] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  171.353128][   T49] usb 2-1: config 0 has no interface number 0
[  171.360659][   T49] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  171.369780][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.377787][   T49] usb 2-1: Product: syz
[  171.381993][   T49] usb 2-1: Manufacturer: syz
[  171.386612][   T49] usb 2-1: SerialNumber: syz
[  171.392425][   T49] usb 2-1: config 0 descriptor??
[  171.398236][   T49] smsc95xx v2.0.0
[  171.798842][   T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  171.809634][   T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  173.022391][   T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  173.034196][   T49] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  173.043776][   T49] usb 2-1: USB disconnect, device number 11
[  184.334838][ T6635] input: syz0 as /devices/virtual/input/input7
[  184.486689][ T6648] sit0: entered promiscuous mode
[  184.493152][ T6648] netlink: 'syz.1.2180': attribute type 1 has an invalid length.
[  184.501026][ T6648] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2180'.
[  184.648602][ T1724] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  184.798639][ T1724] usb 4-1: Using ep0 maxpacket: 16
[  184.805033][ T1724] usb 4-1: config 0 interface 0 has no altsetting 0
[  184.811738][ T1724] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  184.820843][ T1724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.829567][ T1724] usb 4-1: config 0 descriptor??
[  185.209456][ T6661] block device autoloading is deprecated and will be removed.
[  185.218731][ T6663] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  185.242197][ T1724] hid (null): bogus close delimiter
[  185.250439][ T1724] hid (null): unknown global tag 0xc
[  185.255820][ T1724] hid (null): invalid report_size 53633
[  185.261806][ T1724] hid (null): bogus close delimiter
[  185.267048][ T1724] hid (null): unknown global tag 0xe
[  185.272791][ T1724] hid (null): unknown global tag 0xc
[  185.278122][ T1724] hid (null): unknown global tag 0xe
[  185.284065][ T1724] hid (null): report_id 4160080533 is invalid
[  185.291739][ T1724] hid (null): report_id 29837 is invalid
[  185.297565][ T1724] hid (null): invalid report_size 57783
[  185.299527][ T6665] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  185.305417][ T1724] hid (null): usage index exceeded
[  185.311923][ T6665] rust_binder: Write failure EINVAL in pid:200
[  185.558601][ T1724] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  185.720477][ T1724] usb 2-1: config 7 has an invalid interface number: 108 but max is 2
[  185.728779][ T1724] usb 2-1: config 7 has an invalid interface number: 49 but max is 2
[  185.737269][ T1724] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  185.746985][ T6674] overlayfs: failed to resolve './file0': -2
[  185.747773][ T1724] usb 2-1: config 7 has 2 interfaces, different from the descriptor's value: 3
[  185.762618][ T1724] usb 2-1: config 7 has no interface number 0
[  185.768765][ T1724] usb 2-1: config 7 has no interface number 1
[  185.774871][ T1724] usb 2-1: config 7 interface 108 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 64
[  185.784927][ T1724] usb 2-1: config 7 interface 108 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  185.795926][ T1724] usb 2-1: config 7 interface 108 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  185.806645][ T1724] usb 2-1: config 7 interface 108 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  185.817698][ T1724] usb 2-1: config 7 interface 108 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  185.828845][ T1724] usb 2-1: config 7 interface 108 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  185.839681][ T1724] usb 2-1: config 7 interface 108 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[  185.850451][ T1724] usb 2-1: config 7 interface 108 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  185.860324][ T1724] usb 2-1: config 7 interface 108 altsetting 2 endpoint 0x3 has invalid maxpacket 72, setting to 64
[  185.871201][ T1724] usb 2-1: config 7 interface 108 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  185.882212][ T1724] usb 2-1: config 7 interface 108 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[  185.892987][ T1724] usb 2-1: config 7 interface 108 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[  185.903756][ T1724] usb 2-1: config 7 interface 49 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  185.916823][ T1724] usb 2-1: config 7 interface 108 has no altsetting 0
[  185.923678][ T1724] usb 2-1: config 7 interface 49 has no altsetting 0
[  185.939755][ T1724] usb 2-1: New USB device found, idVendor=045e, idProduct=00f7, bcdDevice=60.26
[  185.948985][ T1724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.957087][ T1724] usb 2-1: Product: Щ
[  185.961280][ T1724] usb 2-1: Manufacturer: à°�
[  185.965981][ T1724] usb 2-1: SerialNumber: syz
[  185.976956][ T6665] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  186.212807][ T1724] usb 2-1: USB disconnect, device number 12
[  187.340215][    T9] usb 4-1: USB disconnect, device number 11
[  187.632344][ T6713] rust_binder: Write failure EFAULT in pid:205
[  187.666975][ T6718] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  187.762244][ T6722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54232 sclass=netlink_route_socket pid=6722 comm=syz.5.2215
[  187.938628][ T1724] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  188.088582][ T1724] usb 2-1: Using ep0 maxpacket: 32
[  188.095124][ T1724] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  188.103749][ T1724] usb 2-1: config 0 has no interface number 0
[  188.110215][ T1724] usb 2-1: config 0 interface 184 has no altsetting 0
[  188.118867][ T1724] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  188.128246][ T1724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.136760][ T1724] usb 2-1: Product: syz
[  188.141385][ T1724] usb 2-1: Manufacturer: syz
[  188.146650][ T1724] usb 2-1: SerialNumber: syz
[  188.158854][ T1724] usb 2-1: config 0 descriptor??
[  188.166768][ T1724] smsc75xx v1.0.0
[  188.295228][ T6736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  188.295272][ T6736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38
[  188.333679][   T36] audit: type=1400 audit(2000000307.518:700): avc:  denied  { mounton } for  pid=6739 comm="syz.3.2222" path="/proc/40/task" dev="proc" ino=27193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  188.393707][ T6746] overlayfs: failed to clone upperpath
[  188.578588][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  188.729586][    T9] usb 4-1: config 0 has no interfaces?
[  188.735207][    T9] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  188.744325][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.753447][    T9] usb 4-1: config 0 descriptor??
[  188.961281][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.970737][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.980460][ T6740] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  188.981066][    T9] usb 4-1: USB disconnect, device number 12
[  191.325023][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  191.336092][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  191.352894][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  191.364169][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  191.376574][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  191.391516][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  191.401341][ T1724] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  191.418492][ T1724] usb 2-1: USB disconnect, device number 13
[  191.434348][ T6767] overlayfs: failed to clone upperpath
[  191.442818][ T6769] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  191.461132][   T36] audit: type=1400 audit(2000000310.648:701): avc:  denied  { nlmsg_read } for  pid=6768 comm="syz.1.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  191.718589][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  191.898569][   T10] usb 4-1: Using ep0 maxpacket: 16
[  191.909020][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.928599][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.952934][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  191.962393][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.971833][   T10] usb 4-1: config 0 descriptor??
[  192.388207][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.395612][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.402887][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.410578][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.418086][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.425373][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.432675][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.439962][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.447205][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.454487][   T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  192.463886][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input8
[  192.536045][   T10] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  192.549565][ T1724] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  192.566699][ T6789] overlayfs: failed to clone upperpath
[  192.601672][ T6772] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.601977][ T6772] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  192.610758][   T31] usb 4-1: USB disconnect, device number 13
[  192.708636][ T1724] usb 2-1: Using ep0 maxpacket: 32
[  192.714938][ T1724] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  192.723421][ T1724] usb 2-1: config 0 has no interface number 0
[  192.729600][ T1724] usb 2-1: config 0 interface 184 has no altsetting 0
[  192.737957][ T1724] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  192.747130][ T1724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.755305][ T1724] usb 2-1: Product: syz
[  192.759602][ T1724] usb 2-1: Manufacturer: syz
[  192.764355][ T1724] usb 2-1: SerialNumber: syz
[  192.774794][ T1724] usb 2-1: config 0 descriptor??
[  192.781148][ T1724] smsc75xx v1.0.0
[  192.960139][ T6815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6815 comm=syz.2.2248
[  192.986520][ T6817] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  192.994473][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'.
[  193.148787][ T6826] rust_binder: Error while translating object.
[  193.148820][ T6826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  193.155048][ T6826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48
[  193.181906][ T6829] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  193.209926][ T6831] bridge0: port 3(veth0_to_bridge) entered blocking state
[  193.225274][ T6831] bridge0: port 3(veth0_to_bridge) entered disabled state
[  193.232706][ T6831] veth0_to_bridge: entered allmulticast mode
[  193.239401][ T6831] veth0_to_bridge: entered promiscuous mode
[  193.245447][ T6831] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.258209][ T6831] bridge0: port 3(veth0_to_bridge) entered blocking state
[  193.265417][ T6831] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  193.275154][   T36] audit: type=1400 audit(2000000312.458:702): avc:  denied  { add_name } for  pid=6830 comm="syz.3.2254" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  193.318212][   T36] audit: type=1400 audit(2000000312.458:703): avc:  denied  { associate } for  pid=6830 comm="syz.3.2254" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  193.340503][   T36] audit: type=1400 audit(2000000312.478:704): avc:  denied  { setattr } for  pid=6830 comm="syz.3.2254" name="file0" dev="incremental-fs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  193.363862][   T36] audit: type=1400 audit(2000000312.478:705): avc:  denied  { create } for  pid=6830 comm="syz.3.2254" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  193.411135][ T6835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57
[  193.431503][ T6838] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  193.440821][ T6838] rust_binder: Error while translating object.
[  193.449843][ T6838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  193.456162][ T6838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[  193.501573][ T6843] rust_binder: Failed copying remainder into alloc: EFAULT
[  193.518575][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.537871][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.549991][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.562079][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.574154][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.586245][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.598329][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.610422][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.618859][ T6843] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  193.622633][ T6843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  193.622655][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.641154][ T6843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:62
[  193.652360][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  193.680118][ T6846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.914966][ T6864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=6864 comm=syz.3.2266
[  194.038958][ T6869] overlayfs: upper fs does not support tmpfile.
[  194.045655][   T36] audit: type=1400 audit(2000000313.218:706): avc:  denied  { getattr } for  pid=6868 comm="syz.3.2268" name="/" dev="incremental-fs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  194.108632][ T6869] input: syz1 as /devices/virtual/input/input9
[  194.128249][ T6869] rust_binder: validate_parent_fixup: fixup_min_offset=59, parent_offset=26
[  194.128293][ T6869] rust_binder: Error while translating object.
[  194.137868][ T6869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  194.144464][ T6869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74
[  194.156571][ T6869] 9pnet_fd: Insufficient options for proto=fd
[  194.284938][ T6874] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  194.292215][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  194.317295][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  194.327242][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  194.350592][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  194.360842][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  194.394504][ T1724] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  194.413509][ T1724] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  194.426764][ T1724] usb 2-1: USB disconnect, device number 14
[  194.543093][ T6893] bridge0: port 3(gretap0) entered blocking state
[  194.568056][ T6893] bridge0: port 3(gretap0) entered disabled state
[  194.578487][ T6893] gretap0: entered allmulticast mode
[  194.604713][ T6893] gretap0: entered promiscuous mode
[  194.623324][ T6903] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  194.632312][ T6893] bridge0: port 3(gretap0) entered blocking state
[  194.638824][ T6893] bridge0: port 3(gretap0) entered forwarding state
[  194.844106][ T6920] overlayfs: failed to resolve '?': -2
[  194.921108][ T6920] rust_binder: Error while translating object.
[  194.921153][ T6920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  194.939934][ T6920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:93
[  195.150643][ T6927] input: syz1 as /devices/virtual/input/input10
[  195.256176][ T6934] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  195.278600][ T6934] rust_binder: Write failure EINVAL in pid:96
[  195.293957][ T6932] tmpfs: Bad value for 'huge'
[  196.949079][ T6964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6964 comm=syz.5.2298
[  197.092833][ T6968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=6968 comm=syz.5.2299
[  197.135902][ T6968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=6968 comm=syz.5.2299
[  197.199821][ T6968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=6968 comm=syz.5.2299
[  197.359420][ T6973] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  197.430051][ T6973] overlayfs: missing 'lowerdir'
[  197.882422][ T6980] tap0: tun_chr_ioctl cmd 1074025677
[  197.906408][ T6980] tap0: linktype set to 776
[  198.355404][ T6996] netlink: 'syz.3.2308': attribute type 4 has an invalid length.
[  198.528577][    C1] net_ratelimit: 85710 callbacks suppressed
[  198.528597][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.546612][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.558688][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.570782][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.582843][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.594916][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.607011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.619085][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.631153][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.643338][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  198.717903][ T7012] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  198.912740][   T36] audit: type=1400 audit(2000000318.098:707): avc:  denied  { listen } for  pid=7018 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  198.993133][ T7024] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2318'.
[  199.088634][ T7027] rust_binder: Write failure EINVAL in pid:120
[  199.458573][ T1724] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  199.628567][ T1724] usb 4-1: Using ep0 maxpacket: 32
[  199.635078][ T1724] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  199.643713][ T1724] usb 4-1: config 0 has no interface number 0
[  199.650109][ T1724] usb 4-1: config 0 interface 184 has no altsetting 0
[  199.658729][ T1724] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  199.668415][ T1724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.756230][ T1724] usb 4-1: Product: syz
[  199.760810][ T1724] usb 4-1: Manufacturer: syz
[  199.777458][ T1724] usb 4-1: SerialNumber: syz
[  199.824050][ T1724] usb 4-1: config 0 descriptor??
[  199.831531][ T1724] smsc75xx v1.0.0
[  199.923133][   T36] audit: type=1400 audit(2000000319.108:708): avc:  denied  { create } for  pid=7049 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  200.229381][ T7060] 9p: Unknown access argument 00000000000000000000ÿ: -22
[  200.300850][ T7063] 9p: Unknown access argument 00000000000000000000ÿ: -22
[  200.438551][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  200.463976][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  200.571271][ T7073] netlink: 'syz.2.2332': attribute type 1 has an invalid length.
[  200.586925][ T7073] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2332'.
[  200.812136][ T7081] rust_binder: Error while translating object.
[  200.812169][ T7081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  200.818904][ T7081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:243
[  200.853715][ T7083] rust_binder: Error while translating object.
[  200.863144][ T7083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  200.869709][ T7083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245
[  201.089042][   T36] audit: type=1400 audit(2000000320.278:709): avc:  denied  { map } for  pid=7028 comm="syz.3.2321" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  201.140829][  T306] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  201.165264][   T36] audit: type=1400 audit(2000000320.308:710): avc:  denied  { read } for  pid=7028 comm="syz.3.2321" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  201.318594][  T306] usb 2-1: Using ep0 maxpacket: 16
[  201.326984][  T306] usb 2-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  201.340410][  T306] usb 2-1: config 1 interface 0 has no altsetting 0
[  201.349622][  T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.359077][  T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.367195][  T306] usb 2-1: Product: ã �
[  201.378874][  T306] usb 2-1: Manufacturer: ᡘ
[  201.391918][  T306] usb 2-1: SerialNumber: И
[  201.401085][  T306] usb 2-1: rejected 1 configuration due to insufficient available bus power
[  201.414310][  T306] usb 2-1: no configuration chosen from 1 choice
[  202.162011][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  202.181469][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  202.208587][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  202.231112][ T1724] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  202.261769][ T1724] usb 4-1: USB disconnect, device number 14
[  202.355999][   T36] audit: type=1400 audit(2000000321.538:711): avc:  denied  { setattr } for  pid=7114 comm="syz.5.2350" name="PPTP" dev="sockfs" ino=29094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  202.402226][ T7117] overlayfs: failed to clone upperpath
[  202.511329][   T36] audit: type=1400 audit(2000000321.698:712): avc:  denied  { write } for  pid=7124 comm="syz.3.2351" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  202.536196][   T36] audit: type=1400 audit(2000000321.718:713): avc:  denied  { open } for  pid=7124 comm="syz.3.2351" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  203.538566][    C1] net_ratelimit: 90799 callbacks suppressed
[  203.538590][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.556616][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.569458][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.582001][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.594084][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.606473][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.618740][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.630864][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.642951][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.655045][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.791213][ T4191] bridge_slave_1: left allmulticast mode
[  203.804347][ T4191] bridge_slave_1: left promiscuous mode
[  203.821828][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.833556][ T4191] bridge_slave_0: left allmulticast mode
[  203.843449][ T4191] bridge_slave_0: left promiscuous mode
[  203.852017][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.919980][ T1724] usb 2-1: USB disconnect, device number 15
[  204.055654][   T36] audit: type=1400 audit(2000000323.238:714): avc:  denied  { write } for  pid=10 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29330 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  204.104927][   T36] audit: type=1400 audit(2000000323.268:715): avc:  denied  { ioctl } for  pid=7169 comm="syz.3.2367" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  204.155202][ T7165] netlink: 'syz.2.2364': attribute type 1 has an invalid length.
[  204.188648][ T7165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2364'.
[  204.435465][ T7190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7190 comm=syz.5.2375
[  204.673109][   T36] audit: type=1400 audit(2000000323.858:716): avc:  denied  { execute } for  pid=7193 comm="syz.3.2377" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  204.714351][ T7194] kvm: pic: non byte write
[  204.720167][ T7194] random: crng reseeded on system resumption
[  205.104607][ T7211] overlay: Unknown parameter 'subj_user'
[  205.288221][   T36] audit: type=1400 audit(2000000324.468:717): avc:  denied  { map } for  pid=7218 comm="syz.5.2386" path="socket:[29524]" dev="sockfs" ino=29524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  205.315029][ T7219] fuse: Bad value for 'group_id'
[  205.330223][ T7219] fuse: Bad value for 'group_id'
[  206.957491][   T36] audit: type=1400 audit(2000000326.138:718): avc:  denied  { nlmsg_write } for  pid=7278 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  207.058629][   T36] audit: type=1400 audit(2000000326.168:719): avc:  denied  { create } for  pid=7278 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  207.089998][ T7284] rust_binder: Error while translating object.
[  207.090041][ T7284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  207.116669][ T7284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171
[  207.430010][   T36] audit: type=1400 audit(2000000326.608:720): avc:  denied  { shutdown } for  pid=7287 comm="syz.3.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  208.180941][ T7302] rust_binder: Error while translating object.
[  208.180990][ T7302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  208.207464][ T7302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180
[  208.365622][ T7304] 9pnet_fd: Insufficient options for proto=fd
[  208.548584][    C1] net_ratelimit: 89106 callbacks suppressed
[  208.548611][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.566915][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.579001][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.591055][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.603155][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.615404][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.627649][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.639725][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.651805][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.663880][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  208.940789][ T7315] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2421'.
[  208.978615][ T7315] tipc: Started in network mode
[  208.994337][ T7315] tipc: Node identity , cluster identity 4711
[  209.019235][ T7315] tipc: Failed to obtain node identity
[  209.038260][ T7315] tipc: Enabling of bearer <eth:wg1> rejected, failed to enable media
[  209.342238][ T7326] sit0: entered promiscuous mode
[  209.360895][ T7326] netlink: 'syz.5.2424': attribute type 1 has an invalid length.
[  209.389698][ T7326] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2424'.
[  209.458538][    C1] sched: DL replenish lagged too much
[  209.814512][ T7329] overlayfs: failed to clone upperpath
[  209.974488][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7331 comm=syz.3.2426
[  210.019996][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7331 comm=syz.3.2426
[  210.060128][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7331 comm=syz.3.2426
[  210.089744][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7331 comm=syz.3.2426
[  210.119416][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7331 comm=syz.3.2426
[  210.333543][   T36] audit: type=1400 audit(2000000329.518:721): avc:  denied  { setattr } for  pid=7338 comm="syz.3.2428" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  210.858576][  T306] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  210.994362][ T7366] cgroup: Need name or subsystem set
[  211.018576][  T306] usb 4-1: Using ep0 maxpacket: 32
[  211.026090][  T306] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  211.035820][  T306] usb 4-1: config 0 has no interface number 0
[  211.043383][ T7369] netlink: 'syz.1.2438': attribute type 4 has an invalid length.
[  211.052147][ T7369] netlink: 'syz.1.2438': attribute type 4 has an invalid length.
[  211.060705][  T306] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  211.070602][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.087755][  T306] usb 4-1: Product: syz
[  211.092172][  T306] usb 4-1: Manufacturer: syz
[  211.096795][  T306] usb 4-1: SerialNumber: syz
[  211.108203][  T306] usb 4-1: config 0 descriptor??
[  211.116713][  T306] smsc95xx v2.0.0
[  211.120756][  T306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  211.131319][  T306] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[  211.186461][ T7371] overlayfs: failed to clone upperpath
[  211.282310][   T36] audit: type=1400 audit(2000000330.468:722): avc:  denied  { accept } for  pid=7376 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  211.616204][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'.
[  211.632793][   T36] audit: type=1326 audit(2000000330.818:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.1.2454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158df8e929 code=0x0
[  212.781737][ T7463] netlink: 'syz.5.2470': attribute type 1 has an invalid length.
[  212.791654][ T7463] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2470'.
[  212.804011][ T7465] 9pnet_fd: Insufficient options for proto=fd
[  212.976092][ T7488] overlayfs: failed to clone lowerpath
[  213.301063][ T7498] overlayfs: failed to clone lowerpath
[  213.558539][    C1] net_ratelimit: 100987 callbacks suppressed
[  213.558556][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.576583][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.588632][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.600666][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.612694][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.624732][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.636791][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.637894][ T1724] usb 4-1: USB disconnect, device number 15
[  213.648886][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.666720][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.680397][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  213.696040][ T7506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  213.696078][ T7506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223
[  213.792180][ T7510] kvm: pic: non byte write
[  213.806819][ T7510] random: crng reseeded on system resumption
[  213.922965][ T7519] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  213.932180][ T7519] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  214.006232][ T4192] bridge_slave_1: left allmulticast mode
[  214.016329][ T4192] bridge_slave_1: left promiscuous mode
[  214.028678][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.057921][ T4192] bridge_slave_0: left allmulticast mode
[  214.068625][ T4192] bridge_slave_0: left promiscuous mode
[  214.083709][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.111927][ T7530] fuse: Bad value for 'fd'
[  214.277639][ T4192] veth1_macvtap: left promiscuous mode
[  214.283326][ T4192] veth0_vlan: left promiscuous mode
[  214.298612][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  214.468581][   T10] usb 4-1: Using ep0 maxpacket: 32
[  214.474946][   T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  214.493239][   T10] usb 4-1: config 0 has no interface number 0
[  214.502953][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  214.516725][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.530786][   T10] usb 4-1: Product: syz
[  214.539838][   T10] usb 4-1: Manufacturer: syz
[  214.548396][   T10] usb 4-1: SerialNumber: syz
[  214.558650][   T10] usb 4-1: config 0 descriptor??
[  214.567773][   T10] smsc95xx v2.0.0
[  214.571994][   T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  214.582717][   T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[  215.215258][ T7554] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2510'.
[  215.326393][   T36] audit: type=1400 audit(2000000334.508:724): avc:  denied  { create } for  pid=7555 comm="syz.2.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  216.741780][ T7581] fuse: Unknown parameter 'grmu«1p_id'
[  216.935063][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2522'.
[  217.083563][ T1724] usb 4-1: USB disconnect, device number 16
[  217.381908][ T7599] netlink: 'syz.5.2524': attribute type 1 has an invalid length.
[  217.399740][ T7599] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2524'.
[  217.768567][ T1724] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  217.938561][ T1724] usb 4-1: Using ep0 maxpacket: 32
[  217.948966][ T1724] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  217.959578][ T1724] usb 4-1: config 0 has no interface number 0
[  217.977857][ T1724] usb 4-1: config 0 interface 184 has no altsetting 0
[  217.991616][ T1724] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  218.001913][ T1724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.018590][ T1724] usb 4-1: Product: syz
[  218.027239][ T1724] usb 4-1: Manufacturer: syz
[  218.036305][ T1724] usb 4-1: SerialNumber: syz
[  218.049797][ T1724] usb 4-1: config 0 descriptor??
[  218.065874][ T1724] smsc75xx v1.0.0
[  218.568567][    C1] net_ratelimit: 94799 callbacks suppressed
[  218.568591][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.586662][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.598737][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.610805][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.622888][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.634967][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.647036][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.659103][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.671204][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.683267][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.511075][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  219.522087][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  219.541668][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  219.568586][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  219.608584][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  219.643481][ T1724] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  219.663492][ T7619] fuse: Bad value for 'user_id'
[  219.668413][ T7619] fuse: Bad value for 'user_id'
[  219.683640][ T1724] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  219.723504][ T1724] usb 4-1: USB disconnect, device number 17
[  220.280332][ T7634] overlayfs: failed to clone upperpath
[  220.568592][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  220.621006][ T7652] fuse: Bad value for 'fd'
[  220.768571][   T10] usb 4-1: Using ep0 maxpacket: 32
[  220.789647][   T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  220.812491][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.825576][ T7659] netlink: 'syz.5.2545': attribute type 1 has an invalid length.
[  220.848618][ T7659] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2545'.
[  220.857644][   T10] usb 4-1: config 0 has no interface number 0
[  220.881667][   T10] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  220.924693][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  220.941025][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.958670][   T10] usb 4-1: Product: syz
[  220.981627][   T10] usb 4-1: Manufacturer: syz
[  221.005121][   T10] usb 4-1: SerialNumber: syz
[  221.031724][   T10] usb 4-1: config 0 descriptor??
[  221.055152][   T10] smsc95xx v2.0.0
[  221.066566][   T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  221.102218][   T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[  221.134753][   T10] cdc_acm 4-1:0.67: Zero length descriptor references
[  221.154758][   T10] cdc_acm 4-1:0.67: probe with driver cdc_acm failed with error -22
[  221.734992][ T7660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244
[  222.080073][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.097661][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.121172][ T7672] bridge_slave_0: entered allmulticast mode
[  222.137961][ T7672] bridge_slave_0: entered promiscuous mode
[  222.156662][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.172650][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.193960][ T7672] bridge_slave_1: entered allmulticast mode
[  222.216160][ T7672] bridge_slave_1: entered promiscuous mode
[  222.420486][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.427623][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.434990][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.442066][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.550622][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.560600][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.872342][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.879465][ T4191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.932995][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.940216][ T4191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.035965][ T7672] veth0_vlan: entered promiscuous mode
[  223.089099][ T7672] veth1_macvtap: entered promiscuous mode
[  223.128413][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'.
[  223.330827][  T306] usb 4-1: USB disconnect, device number 18
[  223.468609][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  223.493599][   T36] audit: type=1326 audit(2000000342.678:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  223.578548][    C1] net_ratelimit: 88961 callbacks suppressed
[  223.578570][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.587286][   T36] audit: type=1326 audit(2000000342.678:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  223.596575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.632320][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  223.644638][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  223.656702][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.668785][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.680933][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  223.693081][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  223.705162][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.717262][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.745920][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.762214][   T36] audit: type=1326 audit(2000000342.678:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  223.818572][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.853490][   T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  223.887887][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.951026][   T10] usb 3-1: config 0 descriptor??
[  223.986661][   T36] audit: type=1326 audit(2000000342.678:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  224.117084][   T36] audit: type=1326 audit(2000000342.678:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  224.225622][   T36] audit: type=1326 audit(2000000342.678:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd724f8d290 code=0x7ffc0000
[  224.297633][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  224.327956][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  224.380656][   T10] usb 3-1: USB disconnect, device number 2
[  224.413895][   T36] audit: type=1326 audit(2000000342.678:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  224.600444][   T36] audit: type=1326 audit(2000000342.678:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  224.650631][ T7764] netlink: 'syz.5.2575': attribute type 1 has an invalid length.
[  224.690415][ T7764] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2575'.
[  224.728554][   T36] audit: type=1326 audit(2000000342.678:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  224.858443][   T36] audit: type=1326 audit(2000000342.678:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  228.588555][    C1] net_ratelimit: 88768 callbacks suppressed
[  228.588578][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.606559][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.618611][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.631053][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  228.643299][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.655310][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.667332][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.679438][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.691553][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  228.703633][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  230.050523][   T36] audit: type=1326 audit(2000000342.678:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  231.802328][   T36] audit: type=1326 audit(2000000342.678:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  233.598564][    C1] net_ratelimit: 87628 callbacks suppressed
[  233.598587][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  233.616620][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.628734][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.640841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.652995][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.665190][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  233.677276][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.689281][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.701312][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.713352][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.830867][   T36] audit: type=1326 audit(2000000342.678:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  237.313567][   T36] audit: type=1326 audit(2000000342.678:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  238.080128][   T36] audit: type=1326 audit(2000000342.678:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  238.608581][    C1] net_ratelimit: 88463 callbacks suppressed
[  238.608605][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.626680][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.638794][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  238.650885][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.662990][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.675016][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.687050][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.699155][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  238.711245][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.723320][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.690260][   T36] audit: type=1326 audit(2000000342.678:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  241.498906][   T36] audit: type=1326 audit(2000000342.678:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  243.618556][    C1] net_ratelimit: 89933 callbacks suppressed
[  243.618579][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.636607][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.648613][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.660735][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.672834][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  243.684908][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.696906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.708915][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.720952][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.733052][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  243.950868][   T36] audit: type=1326 audit(2000000342.678:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  245.280624][   T36] audit: type=1326 audit(2000000342.678:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  247.099252][   T36] audit: type=1326 audit(2000000342.728:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  248.628562][    C1] net_ratelimit: 85313 callbacks suppressed
[  248.628586][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.646715][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  248.658917][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.671039][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.683202][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.695231][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.707334][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  248.719422][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.731618][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.743632][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.921164][   T36] audit: type=1326 audit(2000000342.728:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.3.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd724f8e929 code=0x7ffc0000
[  253.638554][    C1] net_ratelimit: 55649 callbacks suppressed
[  253.638579][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.656603][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.668777][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  253.680896][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.692987][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.705059][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.717175][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.729405][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  253.741527][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.753578][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.648597][    C1] net_ratelimit: 51011 callbacks suppressed
[  258.648622][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.666703][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  258.678831][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.690877][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.702924][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.714996][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.727135][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  258.739250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.751303][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.763350][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.658606][    C1] net_ratelimit: 52581 callbacks suppressed
[  263.658630][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  263.676688][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.688744][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.700798][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.712873][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.725021][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  263.737162][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.749209][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.761266][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.773358][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.668545][    C1] net_ratelimit: 55639 callbacks suppressed
[  268.668569][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.686672][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  268.698775][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.710806][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.722841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.734894][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.747025][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  268.759123][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.771247][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.783275][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.678566][    C1] net_ratelimit: 55527 callbacks suppressed
[  273.678589][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.696553][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.708598][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.720663][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.732787][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  273.744886][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.757215][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.769243][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.781305][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.793430][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  278.688605][    C1] net_ratelimit: 59103 callbacks suppressed
[  278.688630][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.706689][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  278.718785][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.731254][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.743311][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.755362][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.767486][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  278.779621][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.791655][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.803692][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.698532][    C1] net_ratelimit: 59576 callbacks suppressed
[  283.698556][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.716543][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.728633][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  283.740856][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.753002][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  283.765126][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.777173][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.789223][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.801301][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  283.813430][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.708522][    C1] net_ratelimit: 55674 callbacks suppressed
[  288.708546][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  288.726587][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.738637][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.750666][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.762730][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  288.774857][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.786991][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  288.799097][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.811123][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.823162][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.718564][    C1] net_ratelimit: 58576 callbacks suppressed
[  293.718587][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  293.736664][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.748722][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.760772][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.772843][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  293.785042][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.797180][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.809253][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.821392][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  293.833524][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  298.728647][    C1] net_ratelimit: 58673 callbacks suppressed
[  298.728676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  298.746705][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  298.758841][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.770959][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.783027][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.795157][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  298.807283][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  298.819326][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.831403][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  298.843483][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  303.738578][    C1] net_ratelimit: 58647 callbacks suppressed
[  303.738601][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.756635][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  303.768675][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.780752][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.792883][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  303.805013][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  303.817064][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.829125][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  303.841267][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  303.853510][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.748556][    C1] net_ratelimit: 58483 callbacks suppressed
[  308.748579][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.766646][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.778788][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  308.790878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  308.802909][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.814953][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  308.827009][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  308.839195][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.851311][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  308.863352][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.758544][    C1] net_ratelimit: 60274 callbacks suppressed
[  313.758567][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  313.776600][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  313.788646][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.800701][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  313.812755][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  313.824905][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.837002][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  313.849142][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.861219][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.873349][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  318.768557][    C1] net_ratelimit: 59899 callbacks suppressed
[  318.768580][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  318.786605][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  318.798643][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  318.810687][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  318.822802][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  318.834911][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  318.846940][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  318.858976][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  318.871028][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  318.883235][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  323.778562][    C1] net_ratelimit: 57395 callbacks suppressed
[  323.778586][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  323.796690][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  323.808789][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  323.820824][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  323.832863][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  323.844911][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  323.857041][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  323.869144][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  323.881182][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  323.893236][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  328.788511][    C1] net_ratelimit: 59157 callbacks suppressed
[  328.788535][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  328.806608][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  328.818653][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  328.830679][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  328.842725][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  328.854851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  328.866956][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  328.878997][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  328.891074][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  328.903204][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  333.798491][    C1] net_ratelimit: 60161 callbacks suppressed
[  333.798515][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  333.816497][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  333.828630][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  333.840742][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  333.852841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  333.864867][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  333.876891][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  333.888940][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  333.901046][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  333.913135][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  338.808576][    C1] net_ratelimit: 59149 callbacks suppressed
[  338.808600][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  338.826649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  338.838749][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  338.850796][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  338.862861][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  338.874925][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  338.887044][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  338.899147][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  338.911177][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  338.923225][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  343.818584][    C1] net_ratelimit: 56200 callbacks suppressed
[  343.818607][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  343.836656][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  343.848753][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  343.860792][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  343.872927][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  343.885050][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  343.897262][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  343.909295][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  343.921323][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  343.933389][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  348.828515][    C1] net_ratelimit: 58742 callbacks suppressed
[  348.828541][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  348.846600][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  348.858713][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  348.870752][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  348.882818][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  348.895055][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  348.907169][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  348.919194][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  348.931228][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  348.943277][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  353.838570][    C1] net_ratelimit: 57977 callbacks suppressed
[  353.838594][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  353.856662][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  353.868856][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  353.880901][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  353.893044][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  353.905174][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  353.917289][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  353.929319][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  353.941345][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  353.953392][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  358.848489][    C1] net_ratelimit: 57015 callbacks suppressed
[  358.848513][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  358.866557][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  358.878583][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  358.890645][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  358.902756][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  358.914858][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  358.926906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  358.938940][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  358.950977][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  358.963149][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  363.858578][    C1] net_ratelimit: 57728 callbacks suppressed
[  363.858601][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  363.876665][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  363.888789][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  363.900845][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  363.912893][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  363.925000][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  363.937143][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  363.949246][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  363.961301][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  363.973388][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  368.868536][    C1] net_ratelimit: 54731 callbacks suppressed
[  368.868560][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  368.886609][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  368.898655][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  368.910777][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  368.922889][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  368.934932][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  368.946983][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  368.959116][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  368.971229][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  368.983266][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  373.878482][    C1] net_ratelimit: 54767 callbacks suppressed
[  373.878508][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  373.896652][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  373.908729][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  373.920813][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  373.932953][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  373.945069][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  373.957232][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  373.969289][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  373.981365][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  373.993508][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  378.888505][    C1] net_ratelimit: 58004 callbacks suppressed
[  378.888529][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  378.906574][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  378.918637][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  378.930695][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  378.942812][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  378.954913][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  378.966974][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  378.979017][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  378.991063][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  379.003189][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  383.898518][    C1] net_ratelimit: 59023 callbacks suppressed
[  383.898541][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  383.916538][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  383.928709][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  383.940799][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  383.952835][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  383.964876][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  383.977097][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  383.989228][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  384.001331][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  384.013356][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  388.908514][    C1] net_ratelimit: 60732 callbacks suppressed
[  388.908539][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  388.927070][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  388.939192][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  388.951247][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  388.963316][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  388.975473][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  388.987728][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  388.999846][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  389.011897][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  389.023976][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  393.918519][    C1] net_ratelimit: 56513 callbacks suppressed
[  393.918543][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  393.937000][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  393.949366][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  393.961502][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  393.973714][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  393.985795][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  393.997883][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  394.010116][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  394.022320][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  394.034387][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  394.780752][   T37] INFO: task syz-executor:7672 blocked for more than 123 seconds.
[  395.358781][   T37]       Not tainted 6.12.30-syzkaller-g9d80e3254812 #0
[  395.365692][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.861784][   T37] task:syz-executor    state:D stack:0     pid:7672  tgid:7672  ppid:1      flags:0x00004006
[  397.050757][   T37] Call Trace:
[  397.054114][   T37]  <TASK>
[  397.057087][   T37]  __schedule+0x145b/0x1f10
[  397.801751][   T37]  ? __sched_text_start+0x10/0x10
[  397.806859][   T37]  ? __mutex_add_waiter+0xcb/0x290
[  397.843049][   T37]  ? __kasan_check_write+0x18/0x20
[  397.848233][   T37]  ? trace_contention_begin+0xc0/0xc0
[  397.853675][   T37]  schedule+0xc6/0x240
[  397.857916][   T37]  schedule_preempt_disabled+0x14/0x30
[  397.863449][   T37]  __mutex_lock+0x836/0x1b60
[  397.868083][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  397.874921][   T37]  ? __kasan_check_write+0x18/0x20
[  397.880094][   T37]  ? _raw_spin_lock+0x8c/0x120
[  397.884913][   T37]  ? __kasan_check_write+0x18/0x20
[  397.890100][   T37]  ? wake_up_q+0x10f/0x1c0
[  397.894552][   T37]  ? __mutex_unlock_slowpath+0x466/0x720
[  397.900263][   T37]  ? mutex_unlock+0x240/0x240
[  397.905005][   T37]  __mutex_lock_slowpath+0xe/0x20
[  397.910098][   T37]  mutex_lock+0x102/0x1c0
[  397.914468][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  397.919417][   T37]  rcu_barrier+0x4d/0x530
[  397.923786][   T37]  ? __kasan_slab_free+0x6a/0x80
[  397.928913][   T37]  netdev_run_todo+0x10e/0xcb0
[  397.933720][   T37]  ? kvfree+0x39/0x50
[  397.937744][   T37]  ? __cfi_netdev_run_todo+0x10/0x10
[  397.943117][   T37]  rtnl_unlock+0x12/0x20
[  397.947391][   T37]  tun_chr_close+0xc5/0x150
[  397.951969][   T37]  ? __cfi_tun_chr_close+0x10/0x10
[  397.957130][   T37]  __fput+0x1fb/0xa00
[  397.961181][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  397.966858][   T37]  ____fput+0x20/0x30
[  397.970894][   T37]  task_work_run+0x1e0/0x250
[  397.975603][   T37]  ? __cfi_task_work_run+0x10/0x10
[  397.980790][   T37]  ? __kasan_check_write+0x18/0x20
[  397.985949][   T37]  do_exit+0x9b4/0x2630
[  397.990165][   T37]  ? __kasan_check_write+0x18/0x20
[  397.995331][   T37]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  398.001298][   T37]  ? __cfi_do_exit+0x10/0x10
[  398.005924][   T37]  ? _raw_read_unlock+0x16/0x40
[  398.011308][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  398.017262][   T37]  ? remove_wait_queue+0x132/0x150
[  398.022463][   T37]  ? __kasan_check_write+0x18/0x20
[  398.027622][   T37]  ? _raw_spin_lock_irq+0x8d/0x120
[  398.032841][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  398.038470][   T37]  do_group_exit+0x22a/0x300
[  398.043100][   T37]  ? __kasan_check_write+0x18/0x20
[  398.048248][   T37]  get_signal+0x139d/0x14f0
[  398.052815][   T37]  arch_do_signal_or_restart+0x96/0x720
[  398.058411][   T37]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  398.064629][   T37]  ? __kasan_check_read+0x15/0x20
[  398.069734][   T37]  syscall_exit_to_user_mode+0x58/0xb0
[  398.075255][   T37]  do_syscall_64+0x64/0xf0
[  398.079721][   T37]  ? clear_bhb_loop+0x50/0xa0
[  398.084434][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  398.090383][   T37] RIP: 0033:0x7f5b47984b53
[  398.094832][   T37] RSP: 002b:00007ffddc9bfd88 EFLAGS: 00000202 ORIG_RAX: 000000000000003d
[  398.103858][   T37] RAX: fffffffffffffe00 RBX: 0000000000000007 RCX: 00007f5b47984b53
[  398.111922][   T37] RDX: 0000000040000000 RSI: 00007ffddc9bfdcc RDI: 00000000ffffffff
[  398.119956][   T37] RBP: 00007ffddc9bfdcc R08: 000000003b535049 R09: 0000000000000000
[  398.128056][   T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  398.136189][   T37] R13: 00005555660ed470 R14: 0000000000036e50 R15: 00007ffddc9bfe20
[  398.144479][   T37]  </TASK>
[  398.691745][   T37] INFO: task syz.2.2574:7749 blocked for more than 127 seconds.
[  398.928493][    C1] net_ratelimit: 51406 callbacks suppressed
[  398.928517][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  398.946566][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  398.958597][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  398.970651][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  398.982875][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  398.994977][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  399.007044][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  399.019099][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  399.031653][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  399.043766][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  400.011755][   T37]       Not tainted 6.12.30-syzkaller-g9d80e3254812 #0
[  400.861874][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  400.870682][   T37] task:syz.2.2574      state:D stack:0     pid:7749  tgid:7749  ppid:7672   flags:0x00004004
[  400.880921][   T37] Call Trace:
[  400.884247][   T37]  <TASK>
[  400.887209][   T37]  __schedule+0x145b/0x1f10
[  400.891808][   T37]  ? __sched_text_start+0x10/0x10
[  400.896954][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  400.902837][   T37]  ? wake_nocb_gp+0x120/0x1b0
[  400.907558][   T37]  ? __kasan_check_write+0x18/0x20
[  400.912739][   T37]  ? llist_add_batch+0x109/0x1e0
[  400.917777][   T37]  schedule+0xc6/0x240
[  400.921920][   T37]  schedule_timeout+0xb2/0x3a0
[  400.926732][   T37]  ? __cfi_schedule_timeout+0x10/0x10
[  400.932206][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  400.937808][   T37]  ? generic_exec_single+0x201/0x500
[  400.943156][   T37]  ? __cfi_rcu_barrier_handler+0x10/0x10
[  400.948871][   T37]  wait_for_common+0x359/0x630
[  400.953695][   T37]  ? wait_for_completion+0x40/0x40
[  400.958882][   T37]  ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0
[  400.965424][   T37]  wait_for_completion+0x1c/0x40
[  400.970427][   T37]  rcu_barrier+0x415/0x530
[  400.974893][   T37]  kvm_mmu_uninit_tdp_mmu+0x1df/0x210
[  400.980328][   T37]  kvm_mmu_uninit_vm+0x27/0x60
[  400.985127][   T37]  kvm_arch_destroy_vm+0x383/0x410
[  400.990307][   T37]  ? __cfi_kvm_arch_destroy_vm+0x10/0x10
[  400.995981][   T37]  ? __kasan_check_write+0x18/0x20
[  401.001155][   T37]  ? mmu_notifier_unregister+0x2de/0x360
[  401.006841][   T37]  kvm_put_kvm+0xb04/0x12b0
[  401.011422][   T37]  ? kvm_irqfd_release+0x1b0/0x1d0
[  401.016579][   T37]  ? __fput+0x6ea/0xa00
[  401.020799][   T37]  ? __cfi_kvm_vm_release+0x10/0x10
[  401.026051][   T37]  kvm_vm_release+0x47/0x70
[  401.030623][   T37]  __fput+0x1fb/0xa00
[  401.034730][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  401.040369][   T37]  ____fput+0x20/0x30
[  401.044392][   T37]  task_work_run+0x1e0/0x250
[  401.049050][   T37]  ? __cfi_task_work_run+0x10/0x10
[  401.054198][   T37]  ? __kasan_check_read+0x15/0x20
[  401.059307][   T37]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  401.065419][   T37]  resume_user_mode_work+0x36/0x50
[  401.070607][   T37]  syscall_exit_to_user_mode+0x64/0xb0
[  401.076108][   T37]  do_syscall_64+0x64/0xf0
[  401.080586][   T37]  ? clear_bhb_loop+0x50/0xa0
[  401.085305][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  401.284472][   T36] audit: type=1400 audit(2000000520.458:746): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[1745]" dev="pipefs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  401.343284][   T37] RIP: 0033:0x7f5b4798e929
[  401.347867][   T37] RSP: 002b:00007ffddc9bfb68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  401.356362][   T37] RAX: 0000000000000000 RBX: 0000000000036c8d RCX: 00007f5b4798e929
[  401.364493][   T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  401.372541][   T37] RBP: 00007f5b47bb7ba0 R08: 0000000000000001 R09: 00000012dc9bfe5f
[  401.380599][   T37] R10: 00007f5b47800000 R11: 0000000000000246 R12: 00007f5b47bb5fac
[  401.388632][   T37] R13: 00007f5b47bb5fa0 R14: ffffffffffffffff R15: 00007ffddc9bfc80
[  401.396643][   T37]  </TASK>
[  401.458771][   T37] NMI backtrace for cpu 1
[  401.458794][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270
[  401.458826][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  401.458840][   T37] Call Trace:
[  401.458848][   T37]  <TASK>
[  401.458857][   T37]  __dump_stack+0x21/0x30
[  401.458889][   T37]  dump_stack_lvl+0x10c/0x190
[  401.458915][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  401.458944][   T37]  dump_stack+0x19/0x20
[  401.458969][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  401.459003][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  401.459025][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  401.459058][   T37]  ? sched_show_task+0x379/0x560
[  401.459083][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  401.459105][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  401.459130][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  401.459155][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  401.459190][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  401.459215][   T37]  watchdog+0xd8f/0xed0
[  401.459242][   T37]  ? __cfi_watchdog+0x10/0x10
[  401.459265][   T37]  ? __kasan_check_read+0x15/0x20
[  401.459292][   T37]  ? __kthread_parkme+0x138/0x180
[  401.459323][   T37]  ? schedule+0xc6/0x240
[  401.459345][   T37]  kthread+0x2ca/0x370
[  401.459378][   T37]  ? __cfi_watchdog+0x10/0x10
[  401.459402][   T37]  ? __cfi_kthread+0x10/0x10
[  401.459435][   T37]  ret_from_fork+0x64/0xa0
[  401.459469][   T37]  ? __cfi_kthread+0x10/0x10
[  401.459502][   T37]  ret_from_fork_asm+0x1a/0x30
[  401.459533][   T37]  </TASK>
[  401.459542][   T37] Sending NMI from CPU 1 to CPUs 0:
[  401.678224][    C0] NMI backtrace for cpu 0
[  401.678241][    C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270
[  401.678265][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  401.678275][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x33/0x70
[  401.678300][    C0] Code: 8b 45 08 65 48 8b 0c 25 40 e9 04 00 65 8b 15 7c 48 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 0b 00 00 00 <74> 2c 8b 91 c8 0b 00 00 83 fa 02 75 21 48 8b 91 d0 0b 00 00 48 8b
[  401.678315][    C0] RSP: 0018:ffffc900000071e8 EFLAGS: 00000246
[  401.678330][    C0] RAX: ffffffff84e09899 RBX: ffff888138248cc0 RCX: ffff888103662600
[  401.678343][    C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff888138248cc0
[  401.678354][    C0] RBP: ffffc900000071e8 R08: ffffc90000007540 R09: ffffc90000007550
[  401.678367][    C0] R10: ffffc900000076b0 R11: fffff52000000eda R12: 0000000000000001
[  401.678378][    C0] R13: ffffc90000007540 R14: 0000000000000003 R15: dffffc0000000000
[  401.678390][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  401.678404][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  401.678416][    C0] CR2: 00007ffbcfe3fff8 CR3: 0000000107ab6000 CR4: 00000000003526b0
[  401.678451][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  401.678462][    C0] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
[  401.678473][    C0] Call Trace:
[  401.678480][    C0]  <IRQ>
[  401.678488][    C0]  find_match+0x39/0x10f0
[  401.678515][    C0]  __find_rr_leaf+0x23c/0x790
[  401.678538][    C0]  ? rt6_check_expired+0x250/0x250
[  401.678559][    C0]  ? __siphash_unaligned+0x26e/0x3c0
[  401.678589][    C0]  fib6_table_lookup+0x2c5/0x9b0
[  401.678617][    C0]  ? __cfi_flow_hash_from_keys+0x10/0x10
[  401.678652][    C0]  ? __cfi_fib6_table_lookup+0x10/0x10
[  401.678679][    C0]  ? ipv6_rcv+0xed/0x220
[  401.678707][    C0]  ip6_pol_route+0x167/0x12c0
[  401.678746][    C0]  ? __cfi_br_dev_queue_push_xmit+0x10/0x10
[  401.678768][    C0]  ? __cfi_ip6_pol_route+0x10/0x10
[  401.678795][    C0]  ? netif_receive_skb+0x161/0x7b0
[  401.678829][    C0]  ? __cfi_netif_receive_skb+0x10/0x10
[  401.678861][    C0]  ? br_flood+0x67e/0x730
[  401.678881][    C0]  ? br_pass_frame_up+0x126/0x1c0
[  401.678903][    C0]  ip6_pol_route_input+0x5a/0x80
[  401.678932][    C0]  fib6_rule_lookup+0x4cc/0x6b0
[  401.678956][    C0]  ? __cfi_ip6_pol_route_input+0x10/0x10
[  401.678985][    C0]  ? __cfi_fib6_rule_lookup+0x10/0x10
[  401.679011][    C0]  ? ip6t_do_table+0x1dc/0x14d0
[  401.679044][    C0]  ip6_route_input+0x59f/0x8d0
[  401.679072][    C0]  ? __cfi_ip6_route_input+0x10/0x10
[  401.679103][    C0]  ? __cfi_ip6t_do_table+0x10/0x10
[  401.679133][    C0]  ? ip6_mc_input+0x4f3/0x670
[  401.679162][    C0]  ? __cfi_ip6table_mangle_hook+0x10/0x10
[  401.679184][    C0]  ip6_rcv_finish+0x15a/0x3c0
[  401.679212][    C0]  ipv6_rcv+0xed/0x220
[  401.679238][    C0]  ? __cfi_ipv6_rcv+0x10/0x10
[  401.679265][    C0]  ? __cfi_ip6_rcv_finish+0x10/0x10
[  401.679292][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  401.679326][    C0]  process_backlog+0x44b/0xae0
[  401.679350][    C0]  __napi_poll+0xd3/0x610
[  401.679381][    C0]  net_rx_action+0x584/0xce0
[  401.679403][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  401.679422][    C0]  ? sched_balance_domains+0x87a/0xa10
[  401.679458][    C0]  ? sched_balance_softirq+0xbd/0x170
[  401.679487][    C0]  handle_softirqs+0x1ae/0x630
[  401.679517][    C0]  __do_softirq+0xf/0x16
[  401.679538][    C0]  do_softirq+0xa6/0x100
[  401.679564][    C0]  </IRQ>
[  401.679571][    C0]  <TASK>
[  401.679578][    C0]  ? __cfi_do_softirq+0x10/0x10
[  401.679606][    C0]  ? __cfi_delayed_free_vfsmnt+0x10/0x10
[  401.679638][    C0]  __local_bh_enable_ip+0x74/0x80
[  401.679665][    C0]  rcu_do_batch+0x5c6/0xd20
[  401.679692][    C0]  ? rcu_core+0xd20/0xd20
[  401.679714][    C0]  ? __kasan_check_write+0x18/0x20
[  401.679745][    C0]  ? _raw_spin_trylock+0xaf/0x130
[  401.679777][    C0]  ? __kasan_check_read+0x15/0x20
[  401.679801][    C0]  ? rcu_nocb_cb_kthread+0x4c7/0xac0
[  401.679827][    C0]  rcu_nocb_cb_kthread+0x4dc/0xac0
[  401.679855][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  401.679880][    C0]  ? __kasan_check_write+0x18/0x20
[  401.679905][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  401.679937][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  401.679985][    C0]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  401.680024][    C0]  ? set_cpus_allowed_ptr+0x93/0xe0
[  401.680055][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  401.680085][    C0]  ? __kasan_check_read+0x15/0x20
[  401.680110][    C0]  ? __kthread_parkme+0x138/0x180
[  401.680138][    C0]  ? schedule+0xc6/0x240
[  401.680158][    C0]  kthread+0x2ca/0x370
[  401.680189][    C0]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  401.680215][    C0]  ? __cfi_kthread+0x10/0x10
[  401.680245][    C0]  ret_from_fork+0x64/0xa0
[  401.680278][    C0]  ? __cfi_kthread+0x10/0x10
[  401.680309][    C0]  ret_from_fork_asm+0x1a/0x30
[  401.680340][    C0]  </TASK>
[  401.712035][ T7789] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[  403.938531][    C1] net_ratelimit: 47300 callbacks suppressed
[  403.938557][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  403.972128][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  403.984344][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  403.996391][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  404.008507][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  404.020649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:75:0f:59:51:68, vlan:0)
[  404.032793][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  404.044923][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  404.057255][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  404.069326][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  404.221541][ T7789] ,cpuset=/,mems_allowed=0
[  404.226138][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz-executor Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270
[  404.226176][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  404.226191][ T7789] Call Trace:
[  404.226199][ T7789]  <TASK>
[  404.226208][ T7789]  __dump_stack+0x21/0x30
[  404.226241][ T7789]  dump_stack_lvl+0x10c/0x190
[  404.226268][ T7789]  ? __cfi_dump_stack_lvl+0x10/0x10
[  404.226296][ T7789]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  404.226333][ T7789]  dump_stack+0x19/0x20
[  404.226357][ T7789]  warn_alloc+0x1bc/0x2a0
[  404.226381][ T7789]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  404.226406][ T7789]  ? __cfi_warn_alloc+0x10/0x10
[  404.226429][ T7789]  ? __get_vm_area_node+0x1dc/0x3a0
[  404.226453][ T7789]  ? kcov_ioctl+0x5d/0x5c0
[  404.226478][ T7789]  __vmalloc_node_range_noprof+0x68e/0x1420
[  404.226508][ T7789]  ? locks_remove_posix+0x38b/0x580
[  404.226538][ T7789]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  404.226563][ T7789]  ? expand_files+0xd6/0x700
[  404.226598][ T7789]  vmalloc_user_noprof+0x77/0x90
[  404.226622][ T7789]  ? kcov_ioctl+0x5d/0x5c0
[  404.226645][ T7789]  kcov_ioctl+0x5d/0x5c0
[  404.226668][ T7789]  ? bpf_lsm_file_ioctl+0xd/0x20
[  404.226693][ T7789]  ? security_file_ioctl+0x34/0xd0
[  404.226725][ T7789]  ? __cfi_kcov_ioctl+0x10/0x10
[  404.226748][ T7789]  __se_sys_ioctl+0x135/0x1b0
[  404.226781][ T7789]  __x64_sys_ioctl+0x7f/0xa0
[  404.226813][ T7789]  x64_sys_call+0x1878/0x2ee0
[  404.226842][ T7789]  do_syscall_64+0x58/0xf0
[  404.226861][ T7789]  ? clear_bhb_loop+0x50/0xa0
[  404.226886][ T7789]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  404.226909][ T7789] RIP: 0033:0x7fd6e898e52b
[  404.226929][ T7789] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  404.226948][ T7789] RSP: 002b:00007ffcdc3b6770 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  404.226973][ T7789] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fd6e898e52b
[  404.226990][ T7789] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9
[  404.227005][ T7789] RBP: 00007fd6e8bb6118 R08: 00000000000000d8 R09: 0000000000000000
[  404.227019][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.227032][ T7789] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  404.227049][ T7789]  </TASK>
[  404.227057][ T7789] Mem-Info: