last executing test programs: 2m40.302240297s ago: executing program 1 (id=163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x2) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0xd592, 0x10000, 0x3, 0x0, 0x8000}, 0x1c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000181000/0x1000)=nil, 0x1000}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lsm_list_modules(0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) cachestat(r0, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m40.153590409s ago: executing program 1 (id=166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x8) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021d00ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3, 0x8000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x800000000000003}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f0000000000)={0x0, 0x5, 0x30}}}], 0x0, 0x0, 0x0}) 2m40.100610764s ago: executing program 1 (id=167): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x3be49d2d}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x2, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x40) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fsopen(&(0x7f0000000000)='mqueue\x00', 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pipe2$9p(&(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r5, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/4096, 0x1000, 0x1, 0x1000000028}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x26}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 2m40.009670601s ago: executing program 1 (id=168): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x183000, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0xb2000, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='$+\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) recvfrom$inet6(r7, &(0x7f0000000040)=""/44, 0x2c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) (async) r11 = socket(0x10, 0x5, 0x0) write(r11, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) (async) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r11) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2m40.009201641s ago: executing program 1 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x24, {[@local=@item_4={0x3, 0x2, 0x4, "75a33655"}, @global=@item_4={0x3, 0x1, 0x4, "bec449b6"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_012={0x2, 0x0, 0xa, "f380"}, @local=@item_4={0x3, 0x2, 0xc, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x101000) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) listen(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224effffffff", 0x58}], 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="11002dbd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000041) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0xb8}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) memfd_create(&(0x7f0000000140)='.\xdf*\'\x00', 0x4) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0xa, '-'}, @local=@item_012={0x1, 0x2, 0xa, "e8"}, @local=@item_012={0x0, 0x2, 0x4}]}}, 0x0}, 0x0) keyctl$join(0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r7, 0x147a5000) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x3}) 2m39.938252676s ago: executing program 1 (id=170): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce0102829709021200010000000009040000000202"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x79, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e28"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x28, 0x0, &(0x7f0000001dc0)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) 2m39.869628502s ago: executing program 32 (id=170): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce0102829709021200010000000009040000000202"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x79, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e28"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x28, 0x0, &(0x7f0000001dc0)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) 2m14.513613013s ago: executing program 0 (id=552): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x4, &(0x7f0000000180)=[{0x7, 0x1, 0x40}], 0x1, 0xfffffffffffffffc, 0x28, 0x4, 0x2, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x80007ffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, 0x0}}], 0x1, 0x4040084) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000140)="8469b66f", 0x4, 0x0, 0x0, 0x12) unshare(0x2c020400) r3 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40095505, 0x0) socketpair(0x28, 0x100000005, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) setpriority(0x1, 0x0, 0xe) r5 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 2m12.381687104s ago: executing program 0 (id=566): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x6e20, 0x101, @mcast1, 0xa3c}, {0xa, 0xfffe, 0xbffffffd, @mcast2, 0x4}, 0xffffffffffffffff, {[0x4, 0x0, 0xfffffffb, 0xfffffef9, 0x0, 0x0, 0xfffffff7]}}, 0x5c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) 2m12.367219105s ago: executing program 0 (id=567): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x4, &(0x7f0000000080)="d69012773a47c11765a02651cc7105b65e13c8ef3749e75a7603", 0x1a) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0982, 0x0) read$rfkill(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={0x4, 0x0, 0x20000}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r7) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) close_range(r2, 0xffffffffffffffff, 0x0) 2m12.251339725s ago: executing program 0 (id=568): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) read(r0, &(0x7f00000003c0)=""/202, 0xca) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x80010, r3, 0xb9a18000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) 2m12.231585526s ago: executing program 0 (id=569): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, &(0x7f0000000440)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x2000000001, 0x0, 0xe}, @flat=@weak_binder}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m12.105665636s ago: executing program 0 (id=570): keyctl$reject(0x13, 0x0, 0x9, 0x202, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/166, 0xa6) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f00000000c0)=ANY=[@ANYRES16]) 2m12.103363516s ago: executing program 33 (id=570): keyctl$reject(0x13, 0x0, 0x9, 0x202, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/166, 0xa6) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f00000000c0)=ANY=[@ANYRES16]) 49.760577633s ago: executing program 5 (id=1609): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c2085314d59186e318c0ef901e7a52315febc5974b6b4555fd81f8ef8cedf5974b51d752b131249633bee11af9a1a89ed7d7cc1cdb250f71c7a13b8201d9ff7e36930854cfcec9941"]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$unix(0x1, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r2, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="b648b3af132fc777e96153ecf0c2e02fe51dfba5b3a78ad5bdb4506258c865473cad3ebf293b98441e2a5f77da1846ecff1931ce9875f7571b941543d6001380a70f3460bb1376d43a9a95cd1c61b42d2aed7fa6523b8ca737eab48d74b99c9ed775fd13d32bd02adcb92934a030c3c5e60e9180c2c8b9c583abc51524f5b191ae8914143becff4b2ae1dc74d0a1a922bc54b46e07a0cab09f1634828c9475993840142cc937a2b125f94e78d0e3aa0e77b0065b40cb39058de0492e073814917b70f6633ae8888aff40cce60d7609225d0956d08162e26da642fce973bf0fbdc071072107ef980708864d15895e4057", 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0xfffffe4b}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 48.881098203s ago: executing program 5 (id=1624): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x8, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hfs\x00', 0x109, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 48.852608076s ago: executing program 5 (id=1625): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x990a81474b92c3e, 0x0) r0 = gettid() pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x30000009}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60042, 0x115) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x4, 0x22004500, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e90634d8356cfd60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) fcntl$lock(r7, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x100000000004ac, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000100)={0x80002006}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)) shutdown(r9, 0x0) epoll_wait(r8, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)={0x2000200b}) chdir(0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f24cb737761702c00fff56ffe112bbbd09537f75ec1b13c6bd8f597217b1be9ff4efe826b29c70f7c13e77ea6eff046ffffffffffff3e529bf8200c21525d0cd5299b577381f1c519cfcd318e8b8b8f573a04473e8c798add7f3a74ae5832438584fc38e3fef0b08713ba4ccc"]) read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020) 46.466502237s ago: executing program 3 (id=1654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) close(r2) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa04a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x71, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xa8d9, 0xff, 0x1, {0x22, 0x6a3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x29, 0xcc, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x92, 0x63}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0xd9, 0x3, 0x8, 0x10, 0x2}, 0x6f, &(0x7f0000000200)={0x5, 0xf, 0x6f, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x89, 0x10, 0x1, 0x3, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x28, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x400, 0xf00, 0x6, [0xc00f, 0x0, 0xc0, 0xffc0c0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x81, 0xdd, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x9, 0xf, 0x2, [0x30, 0x0, 0xf0f3ed947a0644d0, 0xffff0f, 0xffff3f, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x7, 0xcb}]}, 0xa, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}, {0x2b, &(0x7f00000002c0)=@string={0x2b, 0x3, "e728a7a6fc3b1cde3e3fc2c229a42a0789ce9f633e9f296eb201bf3df3e00734779753808566d5d8c0"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x67, &(0x7f0000000340)=@string={0x67, 0x3, "0e57f782d386403cefdb9dd7db6ab30a17275158ec65a1d0bb5172b0de6304270be1e34baf9430a87e6f5b5315b4a5e7c12a0a8292c24acfd31b51050ce01e6d1c1136a4b2c7e2a3794ad5934e81d16821f6485608a0af60619e40392714ecc06fb6441722"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x81a}}, {0x44, &(0x7f0000000480)=@string={0x44, 0x3, "844b88d2ca555c7e6dfd7a4a4b5d29c07df0875e73bb701ac18f64796eb527288cede8e4a5a3e2dd07f8138dc289412b78156367644238cddc2214a6ea7ad219b1e3"}}, {0x13, &(0x7f0000000500)=@string={0x13, 0x3, "cc16dfb36391c6f980e5345ca18e403dc7"}}, {0xab, &(0x7f0000000540)=@string={0xab, 0x3, "b412db766d111fcb173a9b13ea6403e66a57574bbd459d3892f93d21bad9341cc8993470d9bd30f43c1b6c9a8a19b5143b0c2200b9b74d9362cb7146c58ae4865b9a34e26179ff1d9969b91bcc62edc59a104968306def67ac40d9e823e5e8429241bab6634feb58a24974b534d23b153f72ca9e663958cab0e1139c49952e0324b8da99ceda26e3191b881b3817c78d07742bd38b7a72569129ef7d2b5c96c4a69df01a16be881e66"}}, {0x89, &(0x7f0000000600)=@string={0x89, 0x3, "c7ec6ce9dd573cffbbeb8694e2af8855715beca49735ee0e568e483268949e46a32fadabf7aee07ce4430aa9437b2bcc262410fc5b4cfdec03835c3c741100f7ff29a436ff3b54fd8300e3fff83d0433c0033c9e8d619b1e8faa435166afc752beb6c54459cb11e32fdc4ec396c9073115fec0f3ef6a90f1d4d0e8fc80335906ae48ea2ac86d08"}}]}) 46.388219293s ago: executing program 4 (id=1657): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)={0x80000004}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r3 = syz_clone(0x12208f00, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0xe, 0x6, 0x301, 0x0, 0x0, {0x4, 0x0, 0x42}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048854}, 0x4) tkill(r3, 0x34) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10008, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r2, 0x0, 0x80000000) 46.387566573s ago: executing program 4 (id=1658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000380)=""/85, 0x0, 0x400, 0xc, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000340)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x100000, 0x1000, 0x1}, 0xfffffffffffffea5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x40000002}) r7 = syz_clone(0x20286400, 0x0, 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r7, 0x7, r2, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x3}) ptrace(0x10, r1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, &(0x7f0000000000)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0xa, 0x1, 0x3, 0x3, 0xf}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 45.906683962s ago: executing program 3 (id=1659): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) rmdir(&(0x7f0000000040)='./file0\x00') 45.787966712s ago: executing program 3 (id=1662): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r5, 0x406, r5) (async) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_to_bridge\x00', @broadcast}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsopen(0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000092, 0x0, 0x7}]}) close_range(r0, 0xffffffffffffffff, 0x0) 45.787682861s ago: executing program 4 (id=1663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffc0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peekuser(0x3, r7, 0x0) (async, rerun: 32) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0xf4}}, 0x50) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="0000360000000000000000dce5baf4806ea77f2893e44854a8c3cd83b2dada9ce6c77492b2ef82"]) (async) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 45.544422551s ago: executing program 3 (id=1666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40a01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f0000000400)='{\x00') ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 45.483398836s ago: executing program 5 (id=1667): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) 45.480700706s ago: executing program 4 (id=1668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2, 0xca9a3b}], 0x1, 0x0, 0x0, 0x1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x18a, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) read$hiddev(r5, &(0x7f0000000240)=""/208, 0xd0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1000, 0x800000000000000}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "54d0e51ab5accb930dd4c76fe78b2476b0f75caa3fbb72f1c1ba25b8e320d3b78cef27cdfa3817a72c0c66221e17ac56ba29571acc59f976851cf55a236e2fb5", 0x2f}, 0x48, r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 45.479330676s ago: executing program 2 (id=1669): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) (async) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r2 = syz_usb_connect$uac1(0x4, 0x90, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2}, [@selector_unit={0xb, 0x24, 0x5, 0x4, 0x1, "2ccb4cb7a30a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0x80, 0x1f, "c63e44b078"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x3, 0xb, {0x7, 0x25, 0x1, 0x1, 0x1, 0xff5}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x3b, 0x94, 0x8, 0x8}, 0x15, &(0x7f0000000240)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7, 0xf000, 0x3124, [0x7e00]}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x20, 0x5, 0x42, {0x42, 0x30, "181b0c9695ca1b855aafbef6f4d0ef260b8c30984c0d4ead04614cd8711ea6180e552b880327798f2c1193ff88546284d475883a0a39ea2eee8b7df4164ef553"}}, &(0x7f0000000380)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "0c90b443043941cfbf86c9bc058aab7229f38431696bd2299ee85141e4ac5542e1e92c4de2e0fd22650e26ef86a458f38b53c0a85834fddb3bd1d79cec6dfe32e4a9d3b77282fc15d3215a33a148485decca1774552102aa58ac985bb02eac8cacb6349fb6bfb79b9f6ea871c79445bd10e19eb593c539daeb8aaaab5146cf6eb62cc434b2b41bb52e9ce153b5b5ced273d52ad505034441194c309c843bd1dc9c4ea20431b112d0cc7bd1cae6f40bb06e18804ea2414e4077121efe20c94fdbaf0c79f489f4621fdc9062c63a09d3"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0xc, 0xac, "16f67e0e446ba515acf765eecb95ddb042dafebebf446184412e4f331b815154f667eda09557bd636d78fa0214bf3a1f7c9acaa75d03b0ff9d24d4d1aa3e6c5b3e4b96e663b3f6dc8092c0c6ea2b141d8e9c506083a200a24b35168a9cce9522b797ed57b7be8163c9323530e7e452862f38110e57893f7ec4a696c35318d2d3bb41ee0d4aaf518181a4fc98f7d31898306e6d13812108987242e6a45653d0a863b86457dc5311e426044027"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x81, 0x2, "69f8"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "b0aa"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "1466"}, &(0x7f0000000700)={0x20, 0x84, 0x1, '\a'}, &(0x7f0000000740)={0x20, 0x85, 0x3, "a1ebbc"}}) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000800), &(0x7f0000000840)=0x14) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = dup(r3) bind$inet6(r4, &(0x7f0000001dc0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80000001}, 0x1c) (async) clock_gettime(0x4, &(0x7f00000004c0)) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000021c0)=ANY=[@ANYBLOB="00fb15042b0700000000000010235e6d7a29ef0000a72c0376a54d72b82c09942bc45d25097b7ea9248a262d94c9281e11e3863a74fb0923b947e80a14c26fc6a38ef5215df94441afbc9b8f710eab3222d637027c4b6d2adb4afaf34f7214bd8024579f6aaae4aedbfc968aadefc47e5ebdb41a37320f93eb71d5933cd3c680c6fba044a57b6b59003fd9d07316c276101bac96a16eb25f462d35e042be961a2a578b944db6bc8d7a2116f0dceddab101c767d44b67e2c831903338838f0770e706014900ba06706c99c96111fdf8cce1e270c586cac8483a904503a9332ef7bbbc5ea2f2354878e19cf0d05b0db1c7f72c645b80950901d9cd38624b65790ba419c22fd4e023c2f2fb9d2f46db52ecf78bf6c3aa7dda7e9d97fee11f0a9f95fecfdd3fee96ad775c37ce46c2ba872b17c3b9586fba0bca39e9451f0f1e5d3e6f0c09c279d05941a1c65d0d776f5a437550f50b741cd540c380b02e61f267702cae5a2a8be3b253bc08690bb256a37d91d4406f8a07b3da6627f29b25b069a818b7758f058bcc137799e2cbc245bafd4ae76d78d8af648f1fdbe14459e141114fcc4ba584974487f284ea31fbfc47ad6e79959310e3cb39a4009783b521a66bde9520ab5db026f47915e2476c5f4ec6d22fa1f09d57d5bd01ead348809f80514fa15c29e80d0b20a61cffc3c291793f190648f4e45afc07829ada51a7570eae2b97c545e2efb4a32da7115fb8b4b17952c29959ca9ede70a870e24fca1698ccfa9d4e857af1d39532abde3c5719d99d1a604680db9bb51ba34e8634b8c28e99bb21a10b090548ca32f32c97ad7e7c34605277dd9ec327fffda64c8b859d5fa48e75395347a68bcf38391d6051bf70e1a71ccd00d1b8e729f90a7a2237bcebcf41eff94aea08b1d7648d5486654dcf7a8c9ef1ea8a0faf855a60a3f78d310b5e8b4009ca711df0144cba6b5253051363e886cec8f1f2c220d1ed783aa40fbac7d1c618ff3df491a6353b8b45727aa0052993b058dd6c3411654fa91e1b33df15c17373476b08b1d5fddbbb465e4315906cfb38fd979a6d524edbfc418259aca497a49b95aba1e87628988ab73f81081076926b10acc5b7e63460df94eec025987f530b9a13d00f4a0972d2f34cc2e279ae6a62d54f433a0d2577ae876f85109559780338b5231396b7941fe1426a8a85c51f7d21a1130622986b5577fd278a204e22814bbdc18519fb9bd69366d78a562f8538e3d122252867371a3c6af0556fb1845bbc967f2f4361c7513dddbfe80293fb476904f6d3eac1a9ad63a5c38c3e8796616bbbe451514bb86d1b67e77581ae814c7ee7475eb495fde8cc44bb75401242b15aaba4457f293bf82b91478d4b9c1235a307f1cff8cd28d7b0f6dc23b8bc9f22b5e3a97fabaa471b6b63d5302afd2eeb4caed098d0b0df1f15289f54655cb8a1bc95dc215fd6380df73eca061b1d2c38ab7976da8c77c01c40d9e6ede7a5963ec8b1d2b931fb16a84cf43d86f8c82144a8f1e98d1135dcba5392cc14321b0a944ae35b63e029243b7019e9c4299ba16de893b22a963192e5c6395118b51c8b64601055b733c9aacb0d2cafa0dce2e87c4be99b312e8addeaa0a9ffa384f47e0ab3d5a4b757d345737155438e6fd0f70437574c9ad392e7fc0aff6b58a3243407516e4dc106dded415ae221f7ec91fe73ff2ee2e44ef89843f3b8c68b04f7e8d59424721696edb25d3a8c01011c5de042831292cd3e89a35e30e77c17cf3a965c20acb9c8338621ae3cfec557af57ae89adc5932fda0c4e3fa89d6f33bc6b07f95d69e7e5e58b1b31731a3c033cec2b8093ae58fdf34d4f73b107f892d8e1362c75a00a1c10c802058eba79eb167a55ee1b35e5e41e81a435c37fd453486b3c68afb1a3be8becf0231896a85d812e54082be550adb1bc2665becac58e5bce373618897b28532ebc4a254742618e48889c1125c83ceb94a93eb9ce52481f30ee82901bf9e53aa05dd037638c7951ef57535af610b2ddcf82cde3f766d8e7e8d330ba5a6be35267b1c93f7489f11ec2a256a864746f597133653e826c41460f134a30c0b4fcdfeace2ba9ca421dba892fcba6b64a9b7dce07eec72be1254da1b89cd90242d62e06dae13bf0d07eaaca82ff61167fa489dd338553008b04de46b81a459116e47b927a6aa68f12f0e23db885e0a4c79b7ae274e8762e8f7c157f9d862c37f4d7262f457a04f994442eea17d934667003e9389fb3fb6bdd32a8b59d0bd2c5b5918f669c109999b0fe517657885f804a736e6a0b054bb8eb0dba39cf109d0807b084eac91ea488d1e0ab8806e3b08e6308a0134afc230b342a072586514de4defa37023df632f7554a104174977479a90a1b175bb0630378be945c83a236b55af1dc010af2e6ccbc8f748855bbc46c850114e44d7703918d3f0da9270266fe1ba839033c4191ed2249242e8c5e34ccf1e286bcd46fd5a86dc7123894e3a14b6ea26ec34279440bb951f545a6eff4259d16681603e4e1a74873a3ded1d36eaed78681771e8e6775f77796ddb9b849287565dc13d56d236c1b16e7ca124caa53bb5e882c3fae742ccbacd9f6c22098be043361ca8d76628010637ec4473786ed2fa4890be6dcb1c1c28d8a573f4ad166f58f9ddea645ad08cd6c6a586fb5f246662fff8a9c7f2087bb27f9e5ba62bff606fafdd35d7b259c1aa9c1e2b57c84baaa74d1a218d9b79df74ba55d14a28733c8fd7bdc370075064a9db64ca92448173835f60b3b74470b61f9ece964af8787630cad0267c8bdab5a185dabbf6d454095d830d02f72bf46f31c87964538282f3a073de342f60fe436427912b01d7a2db22c83e48d0bd36121bfb7698ceedab2fe4b71f0912570aae3a039c876604a5f08ef7e1ae043596a98673545347a38e31e30f7b5dc5d10d4b63e87f727ea78fd24554fab3f7f37658ad6a01796b903f5ee382d901b06da5551184d92929b23db95333a3cabc96632ffbb2e01c4a94d0591b981bd903adc3cc6a1d3427184dce74a702117484cd5c0f8afaa23de505abae2e011737213adaf04d1a7976be699b4ce2d2a434e6274bae04894d8bce9e3f4be94ac7056144595d09f004269e7673cc4586418ecd09a26059c140ed508a5938ba7a00211872c33191b33bcfa02b88e37e7f677210c518c06a1648e6ffca94935eb7acd527ef370fa410de8931c072972097ad975ee642f4683eea925962437cd44de94f00f4b20b61b3a0bc3a435a3da4d7be377f22d3a58298f843bcdcf611dd4cb91e3d4e6aaa6105d489b78548c573434f66d4b331ddb6c13085bb66ae0ab11241b1427a42d9c0f34fb380572975dfc6f09601194a7465ef38286c1c1f2fe493d218c71afa5a399ffd53257258c1330a04cf7afd4b45c7e8dfabbad524c2783f7846cb9f0d7e07abd6f89a416196a0d5122e740785cdec86ab804a59ee72ff7b8b9b0e3851e5f0cdc1042d71298489f934d08d607225af63f8d3a4d5ccc62360a5d9ad9679370f584c4c74f0bc28a313d81310fe85b1200ee1fb9f9bf8934bb54f347a86b374de956e1122aa61d1ad8045484f0753e155856af6fc6e504a54f417b4f7c3902e5932d12f23cce592ed98053dcfc71450da080ea934a074151ddb544a0234c459803e9fcc97b62a891ed033e313d569571cab35bc93b772b0552817697ed1d3182886997638f9f30ef764964e4059b22d5ea03be084d8d947a0af535e00fd554cce6cab170182a807af70916dbe9ce7a0d16765583c80cfd5dcb66123c05a57773b8d2a79cd3c276bbd244c678f81077737e924e46fa2958fc3d9291aa705a06dcdf3ad1216ca38120e3e2404c60d0855d4869cc1a052fcd29459ca9f69c68c46a2298cdee7a7f57335bd2173e93d3d41f8131ebd4fea4502fe114ba02aa6cd4b96ec7ecb47709b7680189b4cc26a540c407e83bc98b2e19991ac0143f58c13e17ab8b3d69be3c12157582d516f46835b786c876fa30ea07800f158c79ca9a83a22181ef38c8fec1952eaf53e6fc9259f872c597930cbb56bc449ac2443f25eab278f426654414ec196a81c8f9859742c7a7c036dc4224903f3b96007f1f115fc70b8ddd0c84310587a7444d5e6f9311219c47e7853ca90e5561a2b02739316af261a2cd8ab8bf7a4990e9417f500d012ede987db9c0efd79e60ffe0d5acf3487ce516ef4bb604896a91e4d8f09ef3e1c79dd1381b5f8d30f3d08986da4c3503dd82d47cfcba52277dfefaf82783972372bc6fc050e5feeb112332b291fb035d78359a9bf926208c90a73df2826c62707a5755f7e46c31ba9aed1fe8c0a836e817d79f31db5cd837efa13c1a0b7fe6fc8b7478ee74731bd6eb7c08f3ca9ab82f85c34952a737b21b17686a288d67e9547c62abb6ab8cbc456a0166fd3c3ddda5839f8fe070986040473283af1a9bef94b1977d9a75a7bf6469526c665b27988a7f9601ee0f5c95018cb180a4a00009a4a9ce4cdfbac1c8d228d4eddc51486c5d8d8344d8d5897afa381c63d3ed7ecea235a6bd6c0901e4c4ccca06802f9c8190899775fc0d58f0de4de8c4e3e671cfc9337fa41e3dd84a7e935fc6c5e8c6f2bfc7914e425146df0728fde7656fa9c6431a53d8584509b8aff3e41036fecdfb0bdc44640b94135cbabd55eaaaaaa17377dc0b84e196227e1dc92239e763dd723e50b529766388ee529e7d2e6c49912e943081a3b9370a2a027c8b4a33b77443501e24416668f4cb4e31be9346869e6ed8b1b6ae1d514c87e1fd2b236dd2f93ca2c2444e602db5442446f4b53324e27da2ac6cdb596b9fb2fa5a0747c208dbd906403dd5e658b1b9d4d9eb27825bc35c5010470cfb1efa631511a23df96e3a84acc62bbe84a7b8835e01d827d4d9e4a165d0521bd822b01eeefd2f4d930006c7df493749ce513f32e93019e4e84403f7d096d4c15db0a36eddd226d8ad25357cd7145c0e78d47efa543569caad0e9ea013b9a5bc2163110483013fdc268f860cce2ae975c21dcb83eafb1bbd35c0579deaef5df2facf979aabe8aeadfb298656be3adb22ee45d5f0b8e122270309b87f950b1705fda0748932a801768472b64f97b50c8de5924c67dfdc72647024428afbe70d4c52a84471d818893a1da6d9356ab6fa173b32cc5f6fde1266dd76dc5bca95794c9db6b544d6a29b97225342eed7647bb82b495a7488a551e2def21c14f3e213599ab432d1167a7e7bcbcb61588e010e71e1691163feee5f67d66411b78a24055f328b7144d1276ac282f94302a7191898c342ca6f8257509cb4ee279e515fe03838ddadd53376e1998889450c9b7a6520a017716c4006a613b5ff6da1d96497a0e64e5ef9f48c51cc9e9b8d6d43485f62282a65f5c950cc465d552c079d57c25f71d076bb6138e3dfa11c3127661d6f011138a8e2193f487473e4ef781685cb2a653f8cb5f8e1de098c72b27fc3af5ff05d43a92c38258c12ad833fb25b74fa709979a6a8219d315c0e1bc6b501d8f2912de8cac38fa23bc22280834c73bb6c248e9ebabbb10d5b41d326080aeffb161d06d4c1e047532ee6cadac7853ef689bc1f933e25c3b963e42965918beca498c177eb01bab213a5a2e99dc59dfb51455dd10f1e558845e2149bfa468e593791e0b89d2a233f2b2fb1848ad51c09e857ed7e1cf484445c42781e10b184ee61a7ed3456d811eb44181f93f7c4c9b961a523a547d0f5ca41dfcde78ee40e07a9b6b378cade3e31335e3174b1aef6ee5e722c85d84853f3f89d5f46641d0b51d5a190b10000000000000000000000000000000000000081295f3b4b846e4e6bfb1e01351dd4096cef8c73f9f0ea6abb5ddad33b4dc348c3d22f54f668808f9e6e8d349aabbf8a77551124d3832e976ee201c5dac25104c679ad8184a18237d8907c29953e216a3b24a46601bb41a16627ee8c69c0e3eaf45053cac8d3868cb6abcee429a9b532f8456e330c09e83fe90faf669bf5e02ab8b4560f06f6366f4f48cbaa4395524d6d026e6a310ed96e5f8636d5cd14a45569b0af7d235b7ee32321e78c5a52cdf5074a392b24127a925ddd2f6d3c2e4a28a697560e98ca94abb864117d08ce3b2d659fa45b8d04205dc9871dfc834f8d20ce145fdc2508a69cb6f4b2c31bdc21ed"], 0x1015, 0x1) 45.475499947s ago: executing program 3 (id=1670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x407, 0x401, 0x2d, 0x18, "96a00c83b08bcc4e"}) (async) io_setup(0x2, &(0x7f0000000000)=0x0) (async, rerun: 64) r2 = eventfd(0x0) (rerun: 64) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, 0x0, 0x0, 0xffffffffffffff30}]) syz_usb_connect(0x6, 0x24, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 45.356398296s ago: executing program 5 (id=1671): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@cache_mmap}, {@access_client}]}}) r4 = open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 44.761339884s ago: executing program 2 (id=1672): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 44.032325162s ago: executing program 4 (id=1673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5}) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000600)={0x1d, r8}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000580)={'gre0\x00', r8, 0x1, 0x80, 0x0, 0x3ff, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x35, 0x2, [{0xa, 0x9, "775b65e54481a2"}, {0x1, 0x11, "aa564a42b1aec8613b6df65b1773a1"}, {0x1, 0xa, "aa06eb21aa697561"}, {0x6, 0xb, "6a2e2948debf968669"}]}, @lsrr={0x83, 0x17, 0x36, [@loopback, @multicast2, @broadcast, @multicast2, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 43.903136563s ago: executing program 5 (id=1674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000005c0)="ac8aa9459f0c9df1ecf5e4f00e757a979547be3071e7d6b36917f0f29601b4873b3cc5584ec337fda5625326efc8f6", 0x2f}], 0x1}}], 0x1, 0x4000000) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 42.499090065s ago: executing program 2 (id=1675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) recvfrom$inet(r1, &(0x7f0000000000)=""/122, 0x7a, 0x40, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 41.737241266s ago: executing program 3 (id=1676): r0 = syz_io_uring_complete(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) r2 = getegid() write$FUSE_ENTRY(r0, &(0x7f0000002040)={0x90, 0x0, r1, {0x5, 0x0, 0x11, 0x1, 0x17, 0x7ff, {0x5, 0x1, 0xc, 0x2, 0x8, 0x3, 0x3a4, 0x652, 0x2, 0xa000, 0x9b, 0xee01, r2, 0x401, 0xa2e}}}, 0x90) clock_settime(0x4, &(0x7f0000002100)={0x0, 0x989680}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000004180)={0x0, 0xffff, 0x3, 0x8c0, 0x6, 0x8, 0x0, 0x8}, &(0x7f00000041c0)={0x80008000, 0x7, 0x4, 0x47, 0x1, 0x8, 0x2, 0x3}, &(0x7f0000004200)={0x26, 0x2, 0x2f3, 0xa0c, 0x63, 0x7, 0x3, 0x9}, &(0x7f0000004240)={0x77359400}, &(0x7f00000042c0)={&(0x7f0000004280)={[0x1823]}, 0x8}) getresgid(&(0x7f0000004300), &(0x7f0000004340), &(0x7f0000004380)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000043c0)=0x2) write$FUSE_GETXATTR(r0, &(0x7f0000004400)={0x18, 0xfffffffffffffff5, 0x0, {0x10000}}, 0x18) r5 = memfd_secret(0x80000) read(r5, &(0x7f0000004440)=""/37, 0x25) setgid(r3) r6 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000004480), 0x80000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f00000044c0)={{r5}, "afc1ce8c44b1918dfc7dab4ef82a3dea8bf97368a954533dc536939d5012fa63db0a780bd4d7c5288ab955063fe2dba1bf66816f95d13c26227b234661d299284fb29f6dae82903106dfd247f869b84aad45558f8fef653c4f025d45c0412d52e87b6ba276deea35d7a3ca7e72a13d3634a29251719da7defa5658a76452ad6e4cf87262e7744b3de41e405840f9070e2035b3c8618fe9b194d6beeb2e93114a4745ca03735197b9054176aa0b90fd15160b22b39418030989e56aad4863a9c0cd9a99e2f5374ac7c99aa0d3eb84130567fff31436dbecfd15966d3eabb1fcbb225407f54af0e46103e888fdca362a9d91372fc7cb2fbf113eb330aefbd10f4eff9486e4325a73f1a08da76301b2bd0e65b7c6ba3def9d26f5790f1ca225f8f525bd4e30b161e391cfa663c4aea49f5639718c4ae881e160702f59b2e06a2dc728e77ea62cd1e9073621270ebcb8f2058d800ddde3f48b80959b2677fdf052e7ad2905b3c9246ec4a49cbebfa223814523f638062c143b591fe14393c9d5ddc021fb254fecdfca730864ca25e83eafc70a0500739229528e987de810e9dc1c5fa9265329eb3fa75bb2bd49cc27949422133d4c0dfd591809bf3d8ace119370a66c39b829c1597b126d9cd43b2b8d62b5ccca13b8b5aa4490c2ae33fed7990f29041dc14e55928651e492a33576e78fcda9e2e3903fd9a477607edfb5dc12b167f06c25e9ddf20d3784576c9dcffedac2fabb1725853abbb385d3b0b1cb9e6ffdac709767089fe4951a082fca25ac4a82599fcc52946986129370377ba5283c59121d86eafbbef08713a2e44070787b33a69e3085f28924d205faf23b8d8182a1c65c0d528f748288fd41ea1ea13bdbdee12092ae071d6134fb373a0fd29c875c4f9b010dddf13dc51374e88376a5779c27a36bba212806edee2bab2cf78166ff79aa72aef5225a596e6ac4e079a226caa4ffb5e319507cf65d1003090e54e67d9e7fdfc2ece78eefac8abbfc6f4fc9a449fe8b2ac669377668c644388ed9fbafad3f2dfa2c00e829ae020774f7dfa8305eb8e622de3f441a27a27ed2c88732d61374e657e2d792a9b8d629ea46da27c7721320ba01e1fc961dee04b40178bea75d949e0c5dd002844d26a69c35dfa3d7fda085ce43f49dfa2c8747db7c22686cd66194174278cb8afb1c6e01b1d0c5ce9141e55219bad02f3a4351e0117fc67ac82c8362df667ac55fad5df4ee4a90e8598d164a422c9a78020c5d8d439930009b2f50430febae31da5efce8b371f3c0cedce6ea8ebe51adf56c26c8eda36d9f83a549978c0a303d0f163a67e4e987f480868755a381a2f0f594e1c2d1cb89d4f3a9b27f07881520931ccfa52d8f990973d6850bd62740aed1f01d85d14c10eba06e4d770991dc3fda33eb2c773ea006b4aeb2bf237f8f80a69713f150143e5156b1e2d262869af7d8706fa5665da945135f81e3b0fbe052e742a53a7eb68193012b3de1137df36a33f12a3041642e8b72704c54b7a160c43381247e354508a8f5beeedb61c946828dd0bcbdc30bf0114fb9f1d4f1e6f02b09dad14b146237b63ab62bc34427f25486a6e120deec42c036e052089d9b190099105e28925e483c58f1f41eea27c2b58032d782398e1b8a9f6881e5ad96fd41a212daa111f0cb05de54c6e1a87f466450d9ac974069d7133eb42b3c20b1dc36370252c7e8678b4e508dd916ca250a9f31dfb382fdaca96af48558ba9c69bc1058cd2ba141b4ebe9a575e462fd13ec5323b973942a49e9378e0b296fa0107fca6b8560e3adde3e19b0275ca8e17ed9fdea6b788c9377dee3510c94fb23de7cf807db7a7dfa4cda48c4f3216eca3fea8cdca33f148a475bca928c55034a4af35c30772ab9093d13dccb9f6a79549fca0fc73af51c5dde756660dce1cd1aa5e46d240ba28545f5e203853511d4ab8390a90232c518253b29aaca5b702ca441be0f438b5be3999d949f55d5edafd89f2067273fac9408353545dcdebf37138821ee3cc80e53a5a1fbf2eb3380c45e7921f95d10148c71d7bf5d47c3a7e09c79ae80a8a1b9be1607e49f40c1160aa29b763ce394f64012784fe4db67d71b43659d0dac8e6cf71c2ead459a45c967a54b9a976e54b6df133575bac58b5f72214ec0e1c04981613798e86cddd8a2b579d04d8ee1a5ec44cd35d2bea0387dff2a836ece92cc2d49581d4bd28d048c9c8338fe1014d781a70c94564d1f4afef8950bedbb7cfa2810619a33fb38e0045f95278acd901ca4a1f8a943c88a7e5e8ef9e31f71a6da2b46319c30cc1842af4353b59cbcde93b008e2ef3bf6620718c1cf8bd578eca76d43cfa7cf2ad5073c83a998abf2016ebb9c48c729060fa229a451396453e94cbee2d910de2b03cbb92001590aaebef986d15f95b34aacdd0771ab4ea42ad32f5c28eea98efa137286ec088fce34278ac298ab59c81a8092cab4a6bc9c0f4c41bd889e5ab4a8d6cf86c242051a1e3f8311a68538b84cae1c2a77fda38c3ca949f6c7d0df3a530e8c6d08f268b310bb6de1c2ca0eab26210814c36655068490336dd4ac5983234b794f48253523a0ae454f2bf602874058e5be2805404857dd4078c35cf87dfbc203acfb0b825f1075f08e53594ad1c107614fa56f14f2f552f000518036c2f3efe6263f0cd2e10add1e67bfbd107f81d9ad3ed221d0ada4985811ab55bd37ffe98475e200ba17b21b2bbcf78b2a7161b72b0b87ce9df5db6a2c28c4d95ba3f4a57a1b7e431c482b8ede691cc04f763e07e498d4c6e5c72eb9607ecbc64299387fbdb1b3f43cf8a75c9947826418535855849f2b2dc69f12bf826d5b353ff81df06d41a354c623c44ff8d5c5bed4a0908695079a4a64f456e74dd7b748802ba4802ee089f01f9cea4dbdd5689f8f3c8117b66c0a81a0e95cb2742cf7c9aeaeebe73813b75fdc91e9188674804dfb3e5e8b239492adc342cf2e1a3d6c59a3472286224c6373a0d7b7ab941f8cf8d2b243872276ce4acc641f5af651c5eb42b7ae9aa916c875bca2d39b3f35ce8753f4632c6de651c37ba173d70b68c0dc09e20c856549c10a20e0c27b19ff1d3fab0a5749e87c0bedee7694ac443c1d91be26aa41bc8aa1af586a86f70ece206d1c242e7203091462638dee06ba259ab8f01c8e81b728eb8963a2a5c26a6961ba0138fc40987f813ecab4e44fc9dc162933432960920848c3d8b9a0807b1fb6235e4508bf1a1193dcb81a0d100ddbafd59c00a45c40b609f45412b24f6d1f374cfbcad781889f8bd79549701aaae6c3112d8950f49da274994fd410e6740cd75192c92e7eb2ecb973fbecdd2ad60f12db02a4142e11e5d798c8e2825340c1c2a511eff53eb19a4a0700dd8100a25cef6b3325c1cff52a6836fedd1f8c3bb91cd49768d8b7af6d7c1d7b4033070914e1270a7740dc7bb50b87e71b4fb926365ec2644a3bf2438e4f025378be02f3dc5c16bca7cd5af6e3888e4dfeeb843b97966862802d0b9061fab5a14ebd77f8604e5730101414994316e7436d6b0d6e79e3aa3871f53bc0894abb37073afdd316be1ef2012280b57a7f3c557dcf0f0cc068419b95fb556c19d6e6b9b323cca93ff812c753eb83db9855af24e4a8ec792a9bfe4cdb0889f4147deebb83cc13ce39e679e6344a94333b94c8cf3da609622c4adc6586dfd493c8cf3b3861949354d042164aafba9bbf55407f97bf3bd6009bcee77b932baa36ab303b8c1fc9cf2af70943d0b570241e3a8a69a3eb2b3ed50afb7fa8b53c773bffac08205a8f94b83383cb83835011ca66cc59af6459ba7b8961dd65690264710e63cfc9b74a6af6938f010a86d15d3fa702efd90a24522280d52ec8ff2fefd1c52e54f26c58e2d50183d820111bd72259d6b75874eafcadc6e7a14c933d81fbeb079188b74476762e55ed8d45f75b8582946b9cf98254fdf1556a29494b0afdc0686db2e929134c2952266745d7b7df0dc92f5040ab319acaad1536f5c6ef8cf0fab83d13eb621113e28b1ada5dbfb1e09ee0916146377c30f4e8b2e274e213b4795e7cb48c6fe679567e1f8ee671dcdc8ca7f4d9e20fb20af4a15c526fd4ad5231f999a4cf49b1af706be720ef6b603f9f854e3f6f37ef6144040ea737f8c3aa1220b31405d524991c2909f8a9da19af99fbdd304104a190841595b10102fd83d9c8458d8f2fca8e6563817a98144948a72bb14b0a8a2bb938a1f100c482f789ae03cc5a0bc6ae12ec08548ace241a3afc2c3112f9949cf2d51a41f9c8ca449f7652f78c7cf3108eedf1188c70b8370672efadd8716bacd4f1ba37c8373aead484e7e35afb76315a071212f7a442ee854fb56c9d6d64abe292b5a795506819dac36a7e0eb7a391e921de264b0a5f33a2d73e25a82159dcf4be1bfd10161d48fc9cd6e7cb5e194d3b4fe6e9d463295d93f1cfdb4cc498304ebaf1131be3538bb3c2465b17a68c4fab1cbbf448d64a6d030256de429049734daebd47efa9e380de2e5b081b523d71d5db2a39583c6a345772e25e591e67026f7581afe8cc3ca3e9ebd25d72c495d4e3a7cec54f4dc1573e037087816490ca9875e0f6ac24cebf7a84344a7b1b358235fc09576124e3bc82f352eef799e0d0aa9194bd91020a24c6431c87c1a6b2c71fbe589d910a933011f826b75146f77d726b535a1bf0e1c79ad53ba6f84267fe3cd5fb40082576e2ecc45ef207ac1df60688d01241e775071dda4122c57f43662ebab3c6c26c73c1f0911bdf680a6469788a6e7263cc064b3a345ff56a1e978832e14b60f46b9c9fdc6738cf6a205c0ba3a5782f35df61eac601a3b8056010c282752236ebd2c36054e2138606494156fcc153b1ba37623a67bb3f6ac9a5a15d56d8c898a5ae5bc41fbebfbc4e53cf6e65bd8d0dad3a4f1fadb6ef96ebc804e058ed9510965aa8193090dfab408276a0c88403213424fb1489389d1457ca163f3b045d01e618850e5fffd373b9b20a97c63a0bb18e5ae78ecfa3a666f3cdbe7aedd39b8c676b1bbabdc2214cc8c548424b35530a9f94081609d93eb347801085e2d6edcdf22f3a2a6fc58787b0836e2137ddc7fb058b1d0090f091b9fdcd5b2fe20fdc5ae16501af034a0c541b591b363b49fbac8f8cb112384389a75b5c1bf3576aa3fbe21c030cbd29e23866d5cb6b7aec1913982e567024c44a92cbe052b612b5b76fd378cee6397c6d40266a0bf255371cb78753ec9e23be60213daada2a78dbe89ebc1a6a0512a6e1e78b2381951b72d6d8aec2f75760f5a68b1b68a10abd4ca76270d798e3107c923b5a84f9539b4a01b0f4e9e65bdb76ebf752ccd122bd84784cf77f91fe16e016dfa5a03e63edf84b4daac998633cba07efc6f724df72f17363edf98e3f01b101ff845bcf2def6e838359a40e04a5902093115e9a2be919faa35760ec46197a60c017d74ba9fbc3cd9af1c1efb5afa31002a3e605a31e41342820e848a0f3e2de8952de9e06c176cd6d5deb8ac8f320d1cdfacd203bf494e78db622bdc20b5efadaee52da8e5faac4beebc3e49ee2f9cfda7bced40741752d22390f11433482b7523fe9d6593fe3c7f957497febc17b9e32c06ad03aad08fedf24fa14dd2f3f9ec92ca21453b5e64d4b6bc265a53a729c4c0522abb47766d2ca444b62d4bf99c511ab777344b0357bdc42d2c25ee4b435979c6b477cc8bd81ec83b8493a3eeefdf2409323cee4113633845abaf9ba554adf8446fd953cb691f0fc068eb722fc7756429565899d00fe219e3c193cf5f047ecc889"}) sched_rr_get_interval(r4, &(0x7f00000054c0)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000005500)={0x5, 0x0, 0x7, 0xdf, 0x2f76}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000005540)={0x0, "2f686fcf22cf1caa0321d18d26a1907a"}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000006540)={0x0, "8ef0bd518ddfbc114778c84599cd2d26"}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000007540)={0x0, 0x6, 0x7, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000007940)={0x9, 0x4, {0x7fffffffffffffff, @usage, r7, 0xc, 0x31ca, 0x2, 0x7, 0xa2e, 0x20, @struct={0x3, 0x1}, 0x2, 0x10001, [0x3, 0xf56c, 0x7, 0xfffffffffffffffa, 0x8000000000000001, 0x4]}, {0x2, @struct={0x5, 0x7ff}, r8, 0xa000000000000000, 0x9, 0x8, 0x100000000, 0x100000001, 0x20, @struct={0x101, 0x3e07a8dd}, 0x98000000, 0xb, [0x9c1a, 0xffff, 0x4, 0x0, 0x6, 0x2]}, {0x800, @struct={0x5e8, 0x98e}, r9, 0x3ff, 0x891, 0x4, 0x0, 0x5, 0x80, @struct={0x10, 0xfffffffb}, 0x8, 0x8, [0xfffffffffffffff7, 0x100000000, 0x7, 0x8, 0x2, 0xc]}, {0x8, 0x1e40, 0x8}}) fadvise64(r0, 0x3, 0x3, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000007d40)={r5}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000007d80)={0x0, r0}) splice(r5, &(0x7f0000007dc0)=0x4, r5, &(0x7f0000007e00)=0x7, 0x4, 0xa) ioctl$BLKPG(r5, 0x1269, &(0x7f0000007f00)={0x0, 0x0, 0x98, &(0x7f0000007e40)={0x1, 0x40, 0x11}}) clock_adjtime(0x1, &(0x7f0000007f40)={0x8001, 0x2, 0xb336, 0x2, 0xe20, 0x7, 0x5, 0x32fe, 0x5, 0x80, 0xf, 0x964, 0x2, 0x6, 0x3, 0x0, 0x6, 0x8000, 0x9, 0x8000, 0x400, 0x9, 0x4, 0xa82a, 0x7, 0x2}) bind$bt_sco(r5, &(0x7f0000008040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f0000008080)={0x6, 0x0, [{0xc0000006, 0x8, 0x4, 0x6, 0x7, 0x8f, 0x8}, {0x40000000, 0x5, 0x5, 0x77e9baae, 0x81, 0x9, 0x9}, {0x6, 0x2, 0x2, 0x8, 0x6, 0x5, 0x5}, {0xb, 0x9a, 0x2, 0x7, 0x8000, 0x6, 0x3}, {0xc0000001, 0x1, 0x2, 0x3, 0x7f, 0x4, 0x5}, {0x80000008, 0x7, 0x6, 0x8, 0xfffffffa, 0x40, 0x4}]}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000008180)={@loopback, @broadcast, 0xffffffffffffffff, "35e7b54602e7023ba4c5d0238252c1d5fc0b619da524ab956be6070a90b1bc39", 0x540cd2ff, 0x6, 0x2, 0x8}, 0x3c) 34.360076017s ago: executing program 4 (id=1677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 28.800366042s ago: executing program 34 (id=1674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000005c0)="ac8aa9459f0c9df1ecf5e4f00e757a979547be3071e7d6b36917f0f29601b4873b3cc5584ec337fda5625326efc8f6", 0x2f}], 0x1}}], 0x1, 0x4000000) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 28.561577092s ago: executing program 2 (id=1679): rt_sigprocmask(0x1000000, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) (async) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 23.436677032s ago: executing program 35 (id=1676): r0 = syz_io_uring_complete(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) r2 = getegid() write$FUSE_ENTRY(r0, &(0x7f0000002040)={0x90, 0x0, r1, {0x5, 0x0, 0x11, 0x1, 0x17, 0x7ff, {0x5, 0x1, 0xc, 0x2, 0x8, 0x3, 0x3a4, 0x652, 0x2, 0xa000, 0x9b, 0xee01, r2, 0x401, 0xa2e}}}, 0x90) clock_settime(0x4, &(0x7f0000002100)={0x0, 0x989680}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000004180)={0x0, 0xffff, 0x3, 0x8c0, 0x6, 0x8, 0x0, 0x8}, &(0x7f00000041c0)={0x80008000, 0x7, 0x4, 0x47, 0x1, 0x8, 0x2, 0x3}, &(0x7f0000004200)={0x26, 0x2, 0x2f3, 0xa0c, 0x63, 0x7, 0x3, 0x9}, &(0x7f0000004240)={0x77359400}, &(0x7f00000042c0)={&(0x7f0000004280)={[0x1823]}, 0x8}) getresgid(&(0x7f0000004300), &(0x7f0000004340), &(0x7f0000004380)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000043c0)=0x2) write$FUSE_GETXATTR(r0, &(0x7f0000004400)={0x18, 0xfffffffffffffff5, 0x0, {0x10000}}, 0x18) r5 = memfd_secret(0x80000) read(r5, &(0x7f0000004440)=""/37, 0x25) setgid(r3) r6 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000004480), 0x80000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f00000044c0)={{r5}, "afc1ce8c44b1918dfc7dab4ef82a3dea8bf97368a954533dc536939d5012fa63db0a780bd4d7c5288ab955063fe2dba1bf66816f95d13c26227b234661d299284fb29f6dae82903106dfd247f869b84aad45558f8fef653c4f025d45c0412d52e87b6ba276deea35d7a3ca7e72a13d3634a29251719da7defa5658a76452ad6e4cf87262e7744b3de41e405840f9070e2035b3c8618fe9b194d6beeb2e93114a4745ca03735197b9054176aa0b90fd15160b22b39418030989e56aad4863a9c0cd9a99e2f5374ac7c99aa0d3eb84130567fff31436dbecfd15966d3eabb1fcbb225407f54af0e46103e888fdca362a9d91372fc7cb2fbf113eb330aefbd10f4eff9486e4325a73f1a08da76301b2bd0e65b7c6ba3def9d26f5790f1ca225f8f525bd4e30b161e391cfa663c4aea49f5639718c4ae881e160702f59b2e06a2dc728e77ea62cd1e9073621270ebcb8f2058d800ddde3f48b80959b2677fdf052e7ad2905b3c9246ec4a49cbebfa223814523f638062c143b591fe14393c9d5ddc021fb254fecdfca730864ca25e83eafc70a0500739229528e987de810e9dc1c5fa9265329eb3fa75bb2bd49cc27949422133d4c0dfd591809bf3d8ace119370a66c39b829c1597b126d9cd43b2b8d62b5ccca13b8b5aa4490c2ae33fed7990f29041dc14e55928651e492a33576e78fcda9e2e3903fd9a477607edfb5dc12b167f06c25e9ddf20d3784576c9dcffedac2fabb1725853abbb385d3b0b1cb9e6ffdac709767089fe4951a082fca25ac4a82599fcc52946986129370377ba5283c59121d86eafbbef08713a2e44070787b33a69e3085f28924d205faf23b8d8182a1c65c0d528f748288fd41ea1ea13bdbdee12092ae071d6134fb373a0fd29c875c4f9b010dddf13dc51374e88376a5779c27a36bba212806edee2bab2cf78166ff79aa72aef5225a596e6ac4e079a226caa4ffb5e319507cf65d1003090e54e67d9e7fdfc2ece78eefac8abbfc6f4fc9a449fe8b2ac669377668c644388ed9fbafad3f2dfa2c00e829ae020774f7dfa8305eb8e622de3f441a27a27ed2c88732d61374e657e2d792a9b8d629ea46da27c7721320ba01e1fc961dee04b40178bea75d949e0c5dd002844d26a69c35dfa3d7fda085ce43f49dfa2c8747db7c22686cd66194174278cb8afb1c6e01b1d0c5ce9141e55219bad02f3a4351e0117fc67ac82c8362df667ac55fad5df4ee4a90e8598d164a422c9a78020c5d8d439930009b2f50430febae31da5efce8b371f3c0cedce6ea8ebe51adf56c26c8eda36d9f83a549978c0a303d0f163a67e4e987f480868755a381a2f0f594e1c2d1cb89d4f3a9b27f07881520931ccfa52d8f990973d6850bd62740aed1f01d85d14c10eba06e4d770991dc3fda33eb2c773ea006b4aeb2bf237f8f80a69713f150143e5156b1e2d262869af7d8706fa5665da945135f81e3b0fbe052e742a53a7eb68193012b3de1137df36a33f12a3041642e8b72704c54b7a160c43381247e354508a8f5beeedb61c946828dd0bcbdc30bf0114fb9f1d4f1e6f02b09dad14b146237b63ab62bc34427f25486a6e120deec42c036e052089d9b190099105e28925e483c58f1f41eea27c2b58032d782398e1b8a9f6881e5ad96fd41a212daa111f0cb05de54c6e1a87f466450d9ac974069d7133eb42b3c20b1dc36370252c7e8678b4e508dd916ca250a9f31dfb382fdaca96af48558ba9c69bc1058cd2ba141b4ebe9a575e462fd13ec5323b973942a49e9378e0b296fa0107fca6b8560e3adde3e19b0275ca8e17ed9fdea6b788c9377dee3510c94fb23de7cf807db7a7dfa4cda48c4f3216eca3fea8cdca33f148a475bca928c55034a4af35c30772ab9093d13dccb9f6a79549fca0fc73af51c5dde756660dce1cd1aa5e46d240ba28545f5e203853511d4ab8390a90232c518253b29aaca5b702ca441be0f438b5be3999d949f55d5edafd89f2067273fac9408353545dcdebf37138821ee3cc80e53a5a1fbf2eb3380c45e7921f95d10148c71d7bf5d47c3a7e09c79ae80a8a1b9be1607e49f40c1160aa29b763ce394f64012784fe4db67d71b43659d0dac8e6cf71c2ead459a45c967a54b9a976e54b6df133575bac58b5f72214ec0e1c04981613798e86cddd8a2b579d04d8ee1a5ec44cd35d2bea0387dff2a836ece92cc2d49581d4bd28d048c9c8338fe1014d781a70c94564d1f4afef8950bedbb7cfa2810619a33fb38e0045f95278acd901ca4a1f8a943c88a7e5e8ef9e31f71a6da2b46319c30cc1842af4353b59cbcde93b008e2ef3bf6620718c1cf8bd578eca76d43cfa7cf2ad5073c83a998abf2016ebb9c48c729060fa229a451396453e94cbee2d910de2b03cbb92001590aaebef986d15f95b34aacdd0771ab4ea42ad32f5c28eea98efa137286ec088fce34278ac298ab59c81a8092cab4a6bc9c0f4c41bd889e5ab4a8d6cf86c242051a1e3f8311a68538b84cae1c2a77fda38c3ca949f6c7d0df3a530e8c6d08f268b310bb6de1c2ca0eab26210814c36655068490336dd4ac5983234b794f48253523a0ae454f2bf602874058e5be2805404857dd4078c35cf87dfbc203acfb0b825f1075f08e53594ad1c107614fa56f14f2f552f000518036c2f3efe6263f0cd2e10add1e67bfbd107f81d9ad3ed221d0ada4985811ab55bd37ffe98475e200ba17b21b2bbcf78b2a7161b72b0b87ce9df5db6a2c28c4d95ba3f4a57a1b7e431c482b8ede691cc04f763e07e498d4c6e5c72eb9607ecbc64299387fbdb1b3f43cf8a75c9947826418535855849f2b2dc69f12bf826d5b353ff81df06d41a354c623c44ff8d5c5bed4a0908695079a4a64f456e74dd7b748802ba4802ee089f01f9cea4dbdd5689f8f3c8117b66c0a81a0e95cb2742cf7c9aeaeebe73813b75fdc91e9188674804dfb3e5e8b239492adc342cf2e1a3d6c59a3472286224c6373a0d7b7ab941f8cf8d2b243872276ce4acc641f5af651c5eb42b7ae9aa916c875bca2d39b3f35ce8753f4632c6de651c37ba173d70b68c0dc09e20c856549c10a20e0c27b19ff1d3fab0a5749e87c0bedee7694ac443c1d91be26aa41bc8aa1af586a86f70ece206d1c242e7203091462638dee06ba259ab8f01c8e81b728eb8963a2a5c26a6961ba0138fc40987f813ecab4e44fc9dc162933432960920848c3d8b9a0807b1fb6235e4508bf1a1193dcb81a0d100ddbafd59c00a45c40b609f45412b24f6d1f374cfbcad781889f8bd79549701aaae6c3112d8950f49da274994fd410e6740cd75192c92e7eb2ecb973fbecdd2ad60f12db02a4142e11e5d798c8e2825340c1c2a511eff53eb19a4a0700dd8100a25cef6b3325c1cff52a6836fedd1f8c3bb91cd49768d8b7af6d7c1d7b4033070914e1270a7740dc7bb50b87e71b4fb926365ec2644a3bf2438e4f025378be02f3dc5c16bca7cd5af6e3888e4dfeeb843b97966862802d0b9061fab5a14ebd77f8604e5730101414994316e7436d6b0d6e79e3aa3871f53bc0894abb37073afdd316be1ef2012280b57a7f3c557dcf0f0cc068419b95fb556c19d6e6b9b323cca93ff812c753eb83db9855af24e4a8ec792a9bfe4cdb0889f4147deebb83cc13ce39e679e6344a94333b94c8cf3da609622c4adc6586dfd493c8cf3b3861949354d042164aafba9bbf55407f97bf3bd6009bcee77b932baa36ab303b8c1fc9cf2af70943d0b570241e3a8a69a3eb2b3ed50afb7fa8b53c773bffac08205a8f94b83383cb83835011ca66cc59af6459ba7b8961dd65690264710e63cfc9b74a6af6938f010a86d15d3fa702efd90a24522280d52ec8ff2fefd1c52e54f26c58e2d50183d820111bd72259d6b75874eafcadc6e7a14c933d81fbeb079188b74476762e55ed8d45f75b8582946b9cf98254fdf1556a29494b0afdc0686db2e929134c2952266745d7b7df0dc92f5040ab319acaad1536f5c6ef8cf0fab83d13eb621113e28b1ada5dbfb1e09ee0916146377c30f4e8b2e274e213b4795e7cb48c6fe679567e1f8ee671dcdc8ca7f4d9e20fb20af4a15c526fd4ad5231f999a4cf49b1af706be720ef6b603f9f854e3f6f37ef6144040ea737f8c3aa1220b31405d524991c2909f8a9da19af99fbdd304104a190841595b10102fd83d9c8458d8f2fca8e6563817a98144948a72bb14b0a8a2bb938a1f100c482f789ae03cc5a0bc6ae12ec08548ace241a3afc2c3112f9949cf2d51a41f9c8ca449f7652f78c7cf3108eedf1188c70b8370672efadd8716bacd4f1ba37c8373aead484e7e35afb76315a071212f7a442ee854fb56c9d6d64abe292b5a795506819dac36a7e0eb7a391e921de264b0a5f33a2d73e25a82159dcf4be1bfd10161d48fc9cd6e7cb5e194d3b4fe6e9d463295d93f1cfdb4cc498304ebaf1131be3538bb3c2465b17a68c4fab1cbbf448d64a6d030256de429049734daebd47efa9e380de2e5b081b523d71d5db2a39583c6a345772e25e591e67026f7581afe8cc3ca3e9ebd25d72c495d4e3a7cec54f4dc1573e037087816490ca9875e0f6ac24cebf7a84344a7b1b358235fc09576124e3bc82f352eef799e0d0aa9194bd91020a24c6431c87c1a6b2c71fbe589d910a933011f826b75146f77d726b535a1bf0e1c79ad53ba6f84267fe3cd5fb40082576e2ecc45ef207ac1df60688d01241e775071dda4122c57f43662ebab3c6c26c73c1f0911bdf680a6469788a6e7263cc064b3a345ff56a1e978832e14b60f46b9c9fdc6738cf6a205c0ba3a5782f35df61eac601a3b8056010c282752236ebd2c36054e2138606494156fcc153b1ba37623a67bb3f6ac9a5a15d56d8c898a5ae5bc41fbebfbc4e53cf6e65bd8d0dad3a4f1fadb6ef96ebc804e058ed9510965aa8193090dfab408276a0c88403213424fb1489389d1457ca163f3b045d01e618850e5fffd373b9b20a97c63a0bb18e5ae78ecfa3a666f3cdbe7aedd39b8c676b1bbabdc2214cc8c548424b35530a9f94081609d93eb347801085e2d6edcdf22f3a2a6fc58787b0836e2137ddc7fb058b1d0090f091b9fdcd5b2fe20fdc5ae16501af034a0c541b591b363b49fbac8f8cb112384389a75b5c1bf3576aa3fbe21c030cbd29e23866d5cb6b7aec1913982e567024c44a92cbe052b612b5b76fd378cee6397c6d40266a0bf255371cb78753ec9e23be60213daada2a78dbe89ebc1a6a0512a6e1e78b2381951b72d6d8aec2f75760f5a68b1b68a10abd4ca76270d798e3107c923b5a84f9539b4a01b0f4e9e65bdb76ebf752ccd122bd84784cf77f91fe16e016dfa5a03e63edf84b4daac998633cba07efc6f724df72f17363edf98e3f01b101ff845bcf2def6e838359a40e04a5902093115e9a2be919faa35760ec46197a60c017d74ba9fbc3cd9af1c1efb5afa31002a3e605a31e41342820e848a0f3e2de8952de9e06c176cd6d5deb8ac8f320d1cdfacd203bf494e78db622bdc20b5efadaee52da8e5faac4beebc3e49ee2f9cfda7bced40741752d22390f11433482b7523fe9d6593fe3c7f957497febc17b9e32c06ad03aad08fedf24fa14dd2f3f9ec92ca21453b5e64d4b6bc265a53a729c4c0522abb47766d2ca444b62d4bf99c511ab777344b0357bdc42d2c25ee4b435979c6b477cc8bd81ec83b8493a3eeefdf2409323cee4113633845abaf9ba554adf8446fd953cb691f0fc068eb722fc7756429565899d00fe219e3c193cf5f047ecc889"}) sched_rr_get_interval(r4, &(0x7f00000054c0)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000005500)={0x5, 0x0, 0x7, 0xdf, 0x2f76}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000005540)={0x0, "2f686fcf22cf1caa0321d18d26a1907a"}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000006540)={0x0, "8ef0bd518ddfbc114778c84599cd2d26"}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000007540)={0x0, 0x6, 0x7, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000007940)={0x9, 0x4, {0x7fffffffffffffff, @usage, r7, 0xc, 0x31ca, 0x2, 0x7, 0xa2e, 0x20, @struct={0x3, 0x1}, 0x2, 0x10001, [0x3, 0xf56c, 0x7, 0xfffffffffffffffa, 0x8000000000000001, 0x4]}, {0x2, @struct={0x5, 0x7ff}, r8, 0xa000000000000000, 0x9, 0x8, 0x100000000, 0x100000001, 0x20, @struct={0x101, 0x3e07a8dd}, 0x98000000, 0xb, [0x9c1a, 0xffff, 0x4, 0x0, 0x6, 0x2]}, {0x800, @struct={0x5e8, 0x98e}, r9, 0x3ff, 0x891, 0x4, 0x0, 0x5, 0x80, @struct={0x10, 0xfffffffb}, 0x8, 0x8, [0xfffffffffffffff7, 0x100000000, 0x7, 0x8, 0x2, 0xc]}, {0x8, 0x1e40, 0x8}}) fadvise64(r0, 0x3, 0x3, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000007d40)={r5}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000007d80)={0x0, r0}) splice(r5, &(0x7f0000007dc0)=0x4, r5, &(0x7f0000007e00)=0x7, 0x4, 0xa) ioctl$BLKPG(r5, 0x1269, &(0x7f0000007f00)={0x0, 0x0, 0x98, &(0x7f0000007e40)={0x1, 0x40, 0x11}}) clock_adjtime(0x1, &(0x7f0000007f40)={0x8001, 0x2, 0xb336, 0x2, 0xe20, 0x7, 0x5, 0x32fe, 0x5, 0x80, 0xf, 0x964, 0x2, 0x6, 0x3, 0x0, 0x6, 0x8000, 0x9, 0x8000, 0x400, 0x9, 0x4, 0xa82a, 0x7, 0x2}) bind$bt_sco(r5, &(0x7f0000008040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f0000008080)={0x6, 0x0, [{0xc0000006, 0x8, 0x4, 0x6, 0x7, 0x8f, 0x8}, {0x40000000, 0x5, 0x5, 0x77e9baae, 0x81, 0x9, 0x9}, {0x6, 0x2, 0x2, 0x8, 0x6, 0x5, 0x5}, {0xb, 0x9a, 0x2, 0x7, 0x8000, 0x6, 0x3}, {0xc0000001, 0x1, 0x2, 0x3, 0x7f, 0x4, 0x5}, {0x80000008, 0x7, 0x6, 0x8, 0xfffffffa, 0x40, 0x4}]}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000008180)={@loopback, @broadcast, 0xffffffffffffffff, "35e7b54602e7023ba4c5d0238252c1d5fc0b619da524ab956be6070a90b1bc39", 0x540cd2ff, 0x6, 0x2, 0x8}, 0x3c) 21.317325742s ago: executing program 2 (id=1681): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0x4, 0xfe, 0x16, "ec28a144f13d7607"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r0, 0x20800) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) accept$inet(r3, 0x0, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0x4, 0xfe, 0x16, "ec28a144f13d7607"}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) (async) syz_open_pts(r0, 0x20800) (async) dup3(r2, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) (async) accept$inet(r3, 0x0, &(0x7f0000000000)) (async) 17.301700424s ago: executing program 36 (id=1677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 15.190497933s ago: executing program 2 (id=1683): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000440)=[@wr_crn={0x46, 0x20, {0x3}}, @uexit={0x0, 0x18, 0x100}, @cpuid={0x14, 0x18, {0xffffffff, 0x7}}, @wr_crn={0x46, 0x20, {0x3, 0x6}}, @wrmsr={0x1e, 0x20, {0xa25, 0x9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x82, {"360f2367c4a27918acfff100c0fe460f01d164642e360f01c8430f01c548b8c8000000000000000f23c80f21f835000030000f23f866baf80cb89850228bef66bafc0cb837e20000ef66baf80cb836cdde87ef66bafc0c66b8be2966ef66baf80cb8ef5c9a83ef66bafc0cec66bad004ed"}}, @wrmsr={0x1e, 0x20, {0x928, 0x5}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0xfff}, @wrmsr={0x1e, 0x20, {0xa85}}, @uexit={0x0, 0x18, 0x10001}, @wr_crn={0x46, 0x20, {0x1}}, @rdmsr={0x32, 0x18, {0x830}}, @rdmsr={0x32, 0x18, {0x2a1}}, @uexit={0x0, 0x18, 0x9f}, @code={0xa, 0x75, {"26430f0134f8c74424000a7be4c8c744240206000000c7442406000000000f011c24b9800000c00f3235002000000f30360f01d10fc773000fc73c283e0f0138f24410fc48b800000000008000000f23c00f21f835020004000f23f8b8010000000f01d9"}}, @wrmsr={0x1e, 0x20, {0xbbe, 0x4}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffff8}}, @wr_crn={0x46, 0x20, {0x4, 0x7}}, @rdmsr={0x32, 0x18, {0x37d}}, @wrmsr={0x1e, 0x20, {0x983, 0x2}}, @cpuid={0x14, 0x18, {0x9a5, 0x8}}, @cpuid={0x14, 0x18, {0x9, 0x1}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xaf4}}, @cpuid={0x14, 0x18, {0x7}}, @rdmsr={0x32, 0x18, {0x9b5}}, @code={0xa, 0x4e, {"430f01d12666f3440f2d4bfb66bad004ed420f644b00c402ad98a759000000c481817dc7c4834142da0c26670f01f836360fc7bdab910000660fc73459"}}], 0x405}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x800, 0x0) r2 = syz_clone(0x200, &(0x7f0000000900)="675b3e5fd238519e37dc31b43b129930f177b7377466f3fa5e75580caa1b61e235db2980ede4a1371a669ab16c32ac9b879b00101a738e43ee46f632ca17e3f2c37a7d9a427486e4245095988968e232ffd652aceafb36f9e35ba4a846d22ac3af9210bff9b11d987bf9", 0x6a, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="951df0d7ee9bf720dbebe37004bb00385e3fc7ab6f23d29db495434a643d135ba557a41cea80793857b952a10d5e16bdf243711b88fd8d5caba0be70668dfb9c8886dc8a12f77cd4931a46416895006ef8b1b4a7e206fe6b92f4327bbab2fde16dfa7033feef527a9b3a018c08732171001d53d5f26d6742e2c2dcee28827c052af71ba1b4e396dba02c7c14070fe862c71cb413545c42f239ffaa9afea4317f500199a4a87bbc72219aa3960ae09976dbf6df87fc8ab233b25103b61487ea575c01bd46cbd8f37a07c8818c8797604c9a4c812c7f97c5ad9a339fe1aa7a24014cd22905165faecc33cc5138c83d538bb877035ea0f0227dc74adf") r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b80)={0x2c0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_KEYS={0x170, 0x51, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3d8558c247"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6e8a0b8246"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "90edde48dbaa8b48bca2aa7eab"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "2a4d7530d54ee4c172"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ba59f7321a21e40404825fdb3e"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x13, 0x4, "223344298e68a81189d84eb14c040f"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x12, 0x4, "217f37a3e8a7cf66b80b671a51fd"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7fc9f8af94"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x11, 0x4, "70b1fb260b4328b8abd60da125"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_KEYS={0xc0, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "89bc79c269"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "40fa9961b5"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5f7c6a40fe35d3c7d89d5336e6"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "48c622e929ddbd9c8759f99806"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "55945da899b87de7174ebf58ad"}]}]}, @NL80211_ATTR_SSID={0xd, 0x34, @random="031251089cb48cbb03"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x401, 0x2, 0x4, 0x0, {0x9, 0x6, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x400, 0x80000000, 0xfd}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x2, 0x0, {0x6, 0x7, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x9, 0xb}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000ec0)={'dvmrp0\x00', {0x2, 0x0, @private}}) pipe2(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000f40)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000001040)=0xe8) ioprio_set$pid(0x3, r2, 0x0) socket$pptp(0x18, 0x1, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r8, 0x8138ae83, &(0x7f0000001080)) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x810, r9, 0x4253b000) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001200)={0x1d, r7}, 0x10) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000001240)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000001280)={0x8, 0x63c88c2c, 0x8, 0x4, 0x0, 0xfff}) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) openat$cgroup_type(r6, &(0x7f0000001400), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001440), 0x501040) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@empty, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@private2}}, &(0x7f0000001580)=0xe8) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x24) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000016c0)={0x24, &(0x7f00000015c0)={0x0, 0x21, 0x1f, {0x1f, 0xc, "7251fee26487866270714df182fe89ce725c5a3259723c826b47d68919"}}, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000001640)={0x0, 0x22, 0x12, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x3, "854cb0c3"}, @main=@item_4={0x3, 0x0, 0x8, "770e6034"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x0, "275fca76"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000001680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x2f2}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001700)={0x20, 0x16, 0xe4, "71a2016b0243a0fc3972cb5255fa9bd01682d9fa8b0bc566dc5c194b0d39b4dfafa8a1c975d5a330f292a43aa8b073822f3ccec1348acdf872dde97115c9aa531d52a3a12590cf0735cbd16fbccc5de6a7e21a9336964796b8a1ae056da4ff96e5269e34ced5ae763d35a5f859444b1594450e1494fe6d4687072d803dab20dbfeffa0c15b5d4487e19fec6956fcb2f54f36c18e826d056e1ecd06bc86b04c07e57b87d5468f1bdefeafa3ca09d099d9e96d9ac76eb9c56e7025e2212be4586b91351927a825adcd421f525d7115220f512ae26f11b5b5492dd303a0bbd1980136c32f79"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001880)={0x20, 0x1, 0x37, "65a1c7f47ee738acb0bdf2f2d4a55825eb546783a775d22fe05ed1ea3f6099d53e8e514c44e82f3ef83d800f23b4504bfe1c7ef4105701"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x3}}) r11 = syz_open_dev$hiddev(&(0x7f0000001940), 0xc0, 0x100) poll(&(0x7f0000001980)=[{r10}, {r11, 0x28c}], 0x2, 0x0) 0s ago: executing program 37 (id=1683): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000440)=[@wr_crn={0x46, 0x20, {0x3}}, @uexit={0x0, 0x18, 0x100}, @cpuid={0x14, 0x18, {0xffffffff, 0x7}}, @wr_crn={0x46, 0x20, {0x3, 0x6}}, @wrmsr={0x1e, 0x20, {0xa25, 0x9}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x82, {"360f2367c4a27918acfff100c0fe460f01d164642e360f01c8430f01c548b8c8000000000000000f23c80f21f835000030000f23f866baf80cb89850228bef66bafc0cb837e20000ef66baf80cb836cdde87ef66bafc0c66b8be2966ef66baf80cb8ef5c9a83ef66bafc0cec66bad004ed"}}, @wrmsr={0x1e, 0x20, {0x928, 0x5}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0xfff}, @wrmsr={0x1e, 0x20, {0xa85}}, @uexit={0x0, 0x18, 0x10001}, @wr_crn={0x46, 0x20, {0x1}}, @rdmsr={0x32, 0x18, {0x830}}, @rdmsr={0x32, 0x18, {0x2a1}}, @uexit={0x0, 0x18, 0x9f}, @code={0xa, 0x75, {"26430f0134f8c74424000a7be4c8c744240206000000c7442406000000000f011c24b9800000c00f3235002000000f30360f01d10fc773000fc73c283e0f0138f24410fc48b800000000008000000f23c00f21f835020004000f23f8b8010000000f01d9"}}, @wrmsr={0x1e, 0x20, {0xbbe, 0x4}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffff8}}, @wr_crn={0x46, 0x20, {0x4, 0x7}}, @rdmsr={0x32, 0x18, {0x37d}}, @wrmsr={0x1e, 0x20, {0x983, 0x2}}, @cpuid={0x14, 0x18, {0x9a5, 0x8}}, @cpuid={0x14, 0x18, {0x9, 0x1}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xaf4}}, @cpuid={0x14, 0x18, {0x7}}, @rdmsr={0x32, 0x18, {0x9b5}}, @code={0xa, 0x4e, {"430f01d12666f3440f2d4bfb66bad004ed420f644b00c402ad98a759000000c481817dc7c4834142da0c26670f01f836360fc7bdab910000660fc73459"}}], 0x405}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x800, 0x0) r2 = syz_clone(0x200, &(0x7f0000000900)="675b3e5fd238519e37dc31b43b129930f177b7377466f3fa5e75580caa1b61e235db2980ede4a1371a669ab16c32ac9b879b00101a738e43ee46f632ca17e3f2c37a7d9a427486e4245095988968e232ffd652aceafb36f9e35ba4a846d22ac3af9210bff9b11d987bf9", 0x6a, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="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") r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b80)={0x2c0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_KEYS={0x170, 0x51, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3d8558c247"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6e8a0b8246"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "90edde48dbaa8b48bca2aa7eab"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "2a4d7530d54ee4c172"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ba59f7321a21e40404825fdb3e"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x13, 0x4, "223344298e68a81189d84eb14c040f"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x12, 0x4, "217f37a3e8a7cf66b80b671a51fd"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7fc9f8af94"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x11, 0x4, "70b1fb260b4328b8abd60da125"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_KEYS={0xc0, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "89bc79c269"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "40fa9961b5"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5f7c6a40fe35d3c7d89d5336e6"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "48c622e929ddbd9c8759f99806"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "55945da899b87de7174ebf58ad"}]}]}, @NL80211_ATTR_SSID={0xd, 0x34, @random="031251089cb48cbb03"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x401, 0x2, 0x4, 0x0, {0x9, 0x6, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x400, 0x80000000, 0xfd}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x2, 0x0, {0x6, 0x7, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x9, 0xb}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000ec0)={'dvmrp0\x00', {0x2, 0x0, @private}}) pipe2(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000f40)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000001040)=0xe8) ioprio_set$pid(0x3, r2, 0x0) socket$pptp(0x18, 0x1, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r8, 0x8138ae83, &(0x7f0000001080)) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x810, r9, 0x4253b000) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001200)={0x1d, r7}, 0x10) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000001240)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000001280)={0x8, 0x63c88c2c, 0x8, 0x4, 0x0, 0xfff}) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) openat$cgroup_type(r6, &(0x7f0000001400), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001440), 0x501040) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@empty, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@private2}}, &(0x7f0000001580)=0xe8) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x24) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000016c0)={0x24, &(0x7f00000015c0)={0x0, 0x21, 0x1f, {0x1f, 0xc, "7251fee26487866270714df182fe89ce725c5a3259723c826b47d68919"}}, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000001640)={0x0, 0x22, 0x12, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x3, "854cb0c3"}, @main=@item_4={0x3, 0x0, 0x8, "770e6034"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x0, "275fca76"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000001680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x2f2}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001700)={0x20, 0x16, 0xe4, "71a2016b0243a0fc3972cb5255fa9bd01682d9fa8b0bc566dc5c194b0d39b4dfafa8a1c975d5a330f292a43aa8b073822f3ccec1348acdf872dde97115c9aa531d52a3a12590cf0735cbd16fbccc5de6a7e21a9336964796b8a1ae056da4ff96e5269e34ced5ae763d35a5f859444b1594450e1494fe6d4687072d803dab20dbfeffa0c15b5d4487e19fec6956fcb2f54f36c18e826d056e1ecd06bc86b04c07e57b87d5468f1bdefeafa3ca09d099d9e96d9ac76eb9c56e7025e2212be4586b91351927a825adcd421f525d7115220f512ae26f11b5b5492dd303a0bbd1980136c32f79"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001880)={0x20, 0x1, 0x37, "65a1c7f47ee738acb0bdf2f2d4a55825eb546783a775d22fe05ed1ea3f6099d53e8e514c44e82f3ef83d800f23b4504bfe1c7ef4105701"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x3}}) r11 = syz_open_dev$hiddev(&(0x7f0000001940), 0xc0, 0x100) poll(&(0x7f0000001980)=[{r10}, {r11, 0x28c}], 0x2, 0x0) kernel console output (not intermixed with test programs): s.c:158 func:do_mount_root [ 74.312613][ T2594] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 74.320538][ T2594] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 74.328479][ T2594] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 74.337098][ T2594] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 74.345020][ T2594] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 74.352914][ T2594] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 74.360836][ T2594] 0 B 0 init/initramfs.c:101 func:find_link [ 80.033467][ T2598] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.069987][ T2603] rust_binder: 105: no such ref 3 [ 80.079082][ T2603] rust_binder: Write failure EFAULT in pid:105 [ 80.110160][ T2616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.179629][ T2626] binder: Bad value for 'max' [ 80.196142][ T2627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 80.221605][ T2630] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 80.235913][ T2630] rust_binder: Error while translating object. [ 80.248291][ T2630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.283543][ T2630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378 [ 80.334116][ T36] audit: type=1400 audit(1754625030.526:839): avc: denied { mount } for pid=2632 comm="syz.2.707" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 80.372794][ T36] audit: type=1400 audit(1754625030.526:840): avc: denied { mounton } for pid=2632 comm="syz.2.707" path="/114/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 80.413361][ T36] audit: type=1400 audit(1754625030.556:841): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 80.467499][ T2644] rust_binder: Failed copying remainder into alloc: EFAULT [ 80.467528][ T2644] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 80.479282][ T2644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.491145][ T2644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:390 [ 80.663225][ T2660] fuse: Bad value for 'rootmode' [ 80.757114][ T2669] 9pnet_fd: Insufficient options for proto=fd [ 80.832092][ T2680] netlink: 'syz.5.721': attribute type 1 has an invalid length. [ 80.839868][ T2680] netlink: 'syz.5.721': attribute type 2 has an invalid length. [ 80.923553][ T65] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 80.985875][ T2689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.037674][ T2698] netlink: 'syz.5.726': attribute type 3 has an invalid length. [ 81.083558][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 81.094372][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.105644][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.115562][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.124727][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.125236][ T2702] input: syz1 as /devices/virtual/input/input8 [ 81.151669][ T65] usb 3-1: config 0 descriptor?? [ 81.164479][ T65] hub 3-1:0.0: USB hub found [ 81.364471][ T65] hub 3-1:0.0: 7 ports detected [ 81.369654][ T65] hub 3-1:0.0: insufficient power available to use all downstream ports [ 81.397575][ T36] audit: type=1400 audit(1754625031.586:842): avc: denied { mount } for pid=2707 comm="syz.3.729" name="/" dev="configfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.420275][ T36] audit: type=1400 audit(1754625031.586:843): avc: denied { search } for pid=2707 comm="syz.3.729" name="/" dev="configfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.423886][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 81.458142][ T2712] overlayfs: failed to clone upperpath [ 81.503240][ T2719] overlayfs: failed to clone upperpath [ 81.604669][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.615583][ T45] usb 5-1: config 0 has no interfaces? [ 81.621896][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 81.631123][ T45] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 81.639315][ T45] usb 5-1: Manufacturer: syz [ 81.644896][ T45] usb 5-1: config 0 descriptor?? [ 81.742623][ T2734] netlink: 'syz.3.738': attribute type 6 has an invalid length. [ 81.752710][ T2733] netlink: 'syz.3.738': attribute type 6 has an invalid length. [ 81.772244][ T2660] rust_binder: Error while translating object. [ 81.772297][ T2660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 81.778622][ T2660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:398 [ 81.887855][ T2741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.899145][ T2741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.907188][ T2741] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 81.921241][ T2741] rust_binder: Write failure EINVAL in pid:135 [ 81.955222][ T2745] syzkaller0: entered promiscuous mode [ 81.966946][ T2745] syzkaller0: entered allmulticast mode [ 82.050813][ T2747] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 82.050839][ T2747] rust_binder: Error while translating object. [ 82.059740][ T2747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.066004][ T2747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 82.150529][ T2749] SELinux: failed to load policy [ 82.209424][ T390] usb 5-1: USB disconnect, device number 15 [ 82.286059][ T36] audit: type=1400 audit(1754625032.476:844): avc: denied { map } for pid=2754 comm="syz.4.745" path="pipe:[6651]" dev="pipefs" ino=6651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 82.403583][ T1613] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 82.553582][ T1613] usb 6-1: Using ep0 maxpacket: 32 [ 82.559885][ T1613] usb 6-1: config 1 has an invalid interface number: 137 but max is 0 [ 82.568172][ T1613] usb 6-1: config 1 has no interface number 0 [ 82.574303][ T1613] usb 6-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545 [ 82.584339][ T1613] usb 6-1: config 1 interface 137 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.594320][ T1613] usb 6-1: config 1 interface 137 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.603558][ T390] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 82.604270][ T1613] usb 6-1: config 1 interface 137 has no altsetting 0 [ 82.620145][ T1613] usb 6-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 82.631889][ T36] audit: type=1400 audit(1754625032.826:845): avc: denied { bind } for pid=2756 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.633171][ T1613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.659368][ T1613] usb 6-1: Product: syz [ 82.663590][ T1613] usb 6-1: Manufacturer: syz [ 82.668359][ T1613] usb 6-1: SerialNumber: syz [ 82.678492][ T2749] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 82.752341][ T2770] tipc: Enabling of bearer rejected, failed to enable media [ 82.774784][ T390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.785863][ T390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.795919][ T390] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 82.805176][ T390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.821169][ T390] usb 5-1: config 0 descriptor?? [ 82.884613][ T398] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 82.894605][ T2749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.910754][ T2749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.119825][ T2749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.128524][ T2749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.229573][ T390] wacom 0003:056A:0000.0006: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 83.239916][ T390] wacom 0003:056A:0000.0006: hidraw0: USB HID v0.01 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 83.262028][ T390] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0006/input/input9 [ 83.340738][ T1613] pl2303 6-1:1.137: required interrupt-in endpoint missing [ 83.356279][ T1613] usb 6-1: USB disconnect, device number 5 [ 83.431465][ T45] usb 5-1: USB disconnect, device number 16 [ 83.699673][ T2804] netlink: 228 bytes leftover after parsing attributes in process `syz.2.763'. [ 83.712201][ T2804] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 83.746409][ T45] usb 3-1: USB disconnect, device number 22 [ 83.797962][ T2810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 83.873292][ T2813] /dev/rnullb0: Can't open blockdev [ 83.943474][ T2820] 9pnet_virtio: no channels available for device syz [ 84.003849][ T2827] /dev/rnullb0: Can't open blockdev [ 84.143575][ T398] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 84.295067][ T398] usb 6-1: unable to get BOS descriptor or descriptor too short [ 84.303175][ T398] usb 6-1: not running at top speed; connect to a high speed hub [ 84.311725][ T398] usb 6-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 84.322042][ T398] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.330998][ T398] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.347126][ T398] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.356250][ T398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.364323][ T398] usb 6-1: SerialNumber: syz [ 84.615896][ T398] cdc_ncm 6-1:1.0: invalid descriptor buffer length [ 84.622585][ T398] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 84.629505][ T398] cdc_ncm 6-1:1.0: bind() failure [ 84.636470][ T398] usb 6-1: USB disconnect, device number 6 [ 90.647433][ T36] audit: type=1400 audit(1754625040.836:846): avc: denied { watch watch_reads } for pid=2834 comm="syz.2.774" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.710703][ T36] audit: type=1326 audit(1754625040.836:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.739341][ T36] audit: type=1326 audit(1754625040.836:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.763215][ T36] audit: type=1326 audit(1754625040.836:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.787899][ T36] audit: type=1326 audit(1754625040.836:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.814469][ T36] audit: type=1326 audit(1754625040.836:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.838035][ T36] audit: type=1326 audit(1754625040.836:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.862190][ T36] audit: type=1326 audit(1754625040.836:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.885984][ T36] audit: type=1326 audit(1754625040.836:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 90.910022][ T36] audit: type=1326 audit(1754625040.836:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106478ebe9 code=0x7ffc0000 [ 90.928003][ T2856] overlayfs: conflicting lowerdir path [ 90.962963][ T2860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 90.962982][ T2860] rust_binder: Read failure Err(EFAULT) in pid:404 [ 91.476921][ T2874] fuse: Unknown parameter '0000000000000000000000300000000000000000000004' [ 91.622563][ T2881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.622635][ T2881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.640044][ T2883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.653581][ T2881] rust_binder: Write failure EFAULT in pid:156 [ 91.690436][ T2885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.723772][ T2885] rust_binder: Error in use_page_slow: ESRCH [ 91.743549][ T2885] rust_binder: use_range failure ESRCH [ 91.761434][ T2885] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 91.773558][ T2885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.792219][ T2885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:159 [ 91.983543][ T390] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 92.081893][ T2906] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 92.089884][ T2906] netlink: 9 bytes leftover after parsing attributes in process `syz.3.799'. [ 92.099462][ T2906] tipc: Enabling of bearer rejected, failed to enable media [ 92.099520][ T2908] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.108436][ T2908] rust_binder: Read failure Err(EFAULT) in pid:168 [ 92.164688][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 92.182362][ T390] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 92.191467][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.200616][ T390] usb 3-1: config 0 descriptor?? [ 92.205676][ T65] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 92.213783][ T2889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.270492][ T2920] netlink: 'syz.3.806': attribute type 2 has an invalid length. [ 92.279489][ T2920] fuseblk: Unknown parameter 'obj_user' [ 92.373574][ T45] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 92.382274][ T65] usb 5-1: config 0 has no interfaces? [ 92.390860][ T65] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 92.400060][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.409102][ T65] usb 5-1: config 0 descriptor?? [ 92.524975][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 92.536326][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.550797][ T45] usb 6-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 92.559922][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.567961][ T45] usb 6-1: Product: Д [ 92.572066][ T45] usb 6-1: Manufacturer: Ñ [ 92.576618][ T45] usb 6-1: SerialNumber: è†æ•ªí™”훜ꧤ￠准﷟如㲰朔隤幜긥玊౦ꂪ჌䫴콴ⅈç¾ì ˜á¾­ã©–æŽâ¹¬íš¹ê¦³ê´†ã£¿á«•î®ê¢šçŽ³å‚¢ã…¨éŠ±ë‡ˆá­«ã„š [ 92.593671][ T2912] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 92.620986][ T2936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.630340][ T2936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.653368][ T2941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.662060][ T2941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.671045][ T2941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.679697][ T2941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.688137][ T390] usbhid 3-1:0.0: can't add hid device: -71 [ 92.694331][ T390] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.705915][ T390] usb 3-1: USB disconnect, device number 23 [ 92.776334][ T1613] usb 5-1: USB disconnect, device number 17 [ 93.002656][ T2912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.013893][ T2912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.023710][ T2912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.033271][ T2912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.044920][ T2912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.054100][ T2912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.066356][ T45] usbhid 6-1:1.0: can't add hid device: -71 [ 93.072597][ T45] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 93.081882][ T45] usb 6-1: USB disconnect, device number 7 [ 93.124366][ T2951] netlink: 'syz.3.817': attribute type 13 has an invalid length. [ 93.245709][ T2963] overlay: Unknown parameter 'func' [ 93.473561][ T31] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 93.612427][ T2974] /dev/rnullb0: Can't open blockdev [ 93.636071][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.646652][ T31] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 93.655788][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.664399][ T31] usb 5-1: config 0 descriptor?? [ 93.700072][ T2978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.716356][ T2982] input: syz0 as /devices/virtual/input/input13 [ 93.805064][ T2982] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 93.822852][ T2982] kvm: Disabled LAPIC found during irq injection [ 93.957745][ T2987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.011132][ T2988] rust_binder: Write failure EFAULT in pid:191 [ 94.071828][ T31] uclogic 0003:28BD:0074.0007: interface is invalid, ignoring [ 94.182597][ T2998] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 94.234239][ T3002] input: syz1 as /devices/virtual/input/input14 [ 94.243246][ T3002] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 94.325978][ T31] usb 5-1: USB disconnect, device number 18 [ 94.500554][ T3017] SELinux: failed to load policy [ 94.621935][ T3023] syz.3.843 (3023): attempted to duplicate a private mapping with mremap. This is not supported. [ 94.632736][ T3024] rust_binder: inc_ref_done called when no active inc_refs [ 94.632761][ T3024] rust_binder: inc_ref_done called when no active inc_refs [ 94.707819][ T3038] incfs: Error accessing: ./file2. [ 94.720286][ T3038] incfs: mount failed -2 [ 94.986620][ T3059] rust_binder: Write failure EFAULT in pid:427 [ 94.987515][ T3060] binder: Unknown parameter 'fscontext?}' [ 95.115782][ T3071] /dev/rnullb0: Can't open blockdev [ 95.422391][ T3085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 95.422431][ T3085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:445 [ 95.488877][ T3089] random: crng reseeded on system resumption [ 95.568505][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.833612][ T65] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 95.847860][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 95.847878][ T36] audit: type=1400 audit(1754625046.036:900): avc: denied { validate_trans } for pid=3096 comm="syz.5.867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.023557][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 96.029879][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.040076][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.050537][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.059908][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.068001][ T65] usb 3-1: Product: syz [ 96.072194][ T65] usb 3-1: Manufacturer: syz [ 96.076859][ T65] usb 3-1: SerialNumber: syz [ 96.290924][ T65] usb 3-1: 0:2 : does not exist [ 96.299071][ T65] usb 3-1: USB disconnect, device number 24 [ 96.311619][ T2837] udevd[2837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.382801][ T36] audit: type=1400 audit(1754625046.566:901): avc: denied { nlmsg_read } for pid=3101 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.472623][ T3114] rust_binder: Write failure EFAULT in pid:464 [ 96.495167][ T3119] rust_binder: Write failure EINVAL in pid:468 [ 96.495166][ T3118] rust_binder: Write failure EINVAL in pid:468 [ 96.520660][ T3121] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 96.534313][ T3121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:471 [ 96.765390][ T3128] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 96.774750][ T3128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 96.782742][ T3128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:213 [ 96.855525][ T3135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 96.874884][ T3138] rust_binder: 3131 RLIMIT_NICE not set [ 96.875090][ T3131] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 96.911807][ T3144] rust_binder: 218: no such ref 3 [ 96.928145][ T36] audit: type=1400 audit(1754625047.116:902): avc: denied { ioctl } for pid=3143 comm="syz.3.886" path="socket:[18032]" dev="sockfs" ino=18032 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.947249][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.956133][ T3148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221 [ 96.973445][ T3152] rust_binder: 482: no such ref 0 [ 96.990213][ T3152] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 96.998158][ T3152] netlink: 168 bytes leftover after parsing attributes in process `syz.4.889'. [ 97.000191][ T3154] overlayfs: failed to resolve './file3': -2 [ 97.008564][ T3152] rust_binder: 482: no such ref 0 [ 97.046787][ T3160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.892'. [ 97.183074][ T36] audit: type=1400 audit(1754625047.366:903): avc: denied { create } for pid=3174 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 97.211732][ T3177] overlayfs: failed to clone upperpath [ 97.248582][ T3183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=3183 comm=syz.5.900 [ 97.266360][ T36] audit: type=1400 audit(1754625047.456:904): avc: denied { read } for pid=3182 comm="syz.5.900" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.295044][ T36] audit: type=1400 audit(1754625047.456:905): avc: denied { open } for pid=3182 comm="syz.5.900" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.319140][ T36] audit: type=1400 audit(1754625047.486:906): avc: denied { ioctl } for pid=3182 comm="syz.5.900" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.346369][ T3190] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 97.347043][ T3190] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 97.557471][ T3205] overlay: Unknown parameter 'obj_role' [ 97.684220][ T3212] rust_binder: Failed copying remainder into alloc: EFAULT [ 97.684267][ T3212] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 97.691563][ T3212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 97.699998][ T3212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:230 [ 97.747167][ T3216] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.757168][ T3216] rust_binder: Error in use_page_slow: ESRCH [ 97.763793][ T3216] rust_binder: use_range failure ESRCH [ 97.769844][ T3216] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 97.775727][ T3216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 97.783712][ T3216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:234 [ 97.835620][ T3226] netlink: 'syz.5.914': attribute type 12 has an invalid length. [ 97.913566][ T65] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 97.944008][ T3234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.945614][ T2536] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.959791][ T3235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 98.063562][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 98.079290][ T65] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.087532][ T65] usb 5-1: config 0 has no interface number 0 [ 98.095118][ T65] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.104238][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.112246][ T65] usb 5-1: Product: syz [ 98.116455][ T65] usb 5-1: Manufacturer: syz [ 98.121069][ T65] usb 5-1: SerialNumber: syz [ 98.126673][ T65] usb 5-1: config 0 descriptor?? [ 98.132406][ T65] smsc95xx v2.0.0 [ 98.533567][ T65] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 98.544457][ T65] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 98.735401][ T65] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 98.746320][ T65] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 98.755624][ T65] usb 5-1: USB disconnect, device number 19 [ 98.785729][ T3248] fuse: Bad value for 'fd' [ 98.791774][ T36] audit: type=1400 audit(1754625048.976:907): avc: denied { setopt } for pid=3247 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 99.266535][ T3260] netlink: 100 bytes leftover after parsing attributes in process `syz.4.925'. [ 99.699281][ T3268] overlayfs: failed to clone upperpath [ 99.973544][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 99.973679][ T519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.011852][ T3297] tipc: Enabling of bearer rejected, failed to enable media [ 100.022947][ T3299] overlayfs: failed to resolve './file1': -2 [ 100.586274][ T3313] rust_binder: Write failure EFAULT in pid:267 [ 100.591865][ T36] audit: type=1326 audit(1754625050.776:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3314 comm="syz.3.944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefd4d8ebe9 code=0x0 [ 100.639747][ T3324] netlink: 20 bytes leftover after parsing attributes in process `syz.5.947'. [ 100.645411][ T3325] bridge0: port 2(veth0_to_bridge) entered blocking state [ 100.657073][ T3325] bridge0: port 2(veth0_to_bridge) entered disabled state [ 100.664738][ T3325] veth0_to_bridge: entered allmulticast mode [ 100.671294][ T3325] veth0_to_bridge: entered promiscuous mode [ 100.677712][ T3325] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.690182][ T3325] bridge0: port 2(veth0_to_bridge) entered blocking state [ 100.697355][ T3325] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 100.841185][ T36] audit: type=1326 audit(1754625051.036:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6a98ebe9 code=0x7fc00000 [ 100.864537][ T36] audit: type=1326 audit(1754625051.036:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f6a98ebe9 code=0x7fc00000 [ 100.977144][ T3338] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 100.984923][ T3338] netlink: 'syz.2.953': attribute type 2 has an invalid length. [ 100.992860][ T3338] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 101.000770][ T3338] netlink: 'syz.2.953': attribute type 2 has an invalid length. [ 101.033572][ T1613] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 101.183575][ T1613] usb 6-1: Using ep0 maxpacket: 32 [ 101.189914][ T1613] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.201147][ T1613] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.211526][ T1613] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 101.221013][ T1613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.229390][ T36] audit: type=1400 audit(1754625051.416:911): avc: denied { accept } for pid=3347 comm="syz.4.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.229413][ T3348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 101.263153][ T1613] usb 6-1: config 0 descriptor?? [ 101.462983][ T36] audit: type=1400 audit(1754625051.646:912): avc: denied { read } for pid=3358 comm="syz.3.961" name="/" dev="configfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.486236][ T36] audit: type=1400 audit(1754625051.646:913): avc: denied { open } for pid=3358 comm="syz.3.961" path="/" dev="configfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.511037][ T36] audit: type=1400 audit(1754625051.646:914): avc: denied { setattr } for pid=3358 comm="syz.3.961" name="/" dev="configfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.713946][ T1613] kone 0003:1E7D:2CED.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 101.932999][ T3324] tmpfs: Unknown parameter 'smackfsroot' [ 101.939646][ T1613] kone 0003:1E7D:2CED.0008: couldn't init struct kone_device [ 101.947254][ T1613] kone 0003:1E7D:2CED.0008: couldn't install mouse [ 101.954508][ T1613] kone 0003:1E7D:2CED.0008: probe with driver kone failed with error -5 [ 101.964449][ T1613] usb 6-1: USB disconnect, device number 8 [ 102.155432][ T36] audit: type=1400 audit(1754625052.346:915): avc: denied { create } for pid=3370 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.181672][ T3376] overlayfs: failed to clone upperpath [ 102.425674][ T3381] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 102.433931][ T3381] netlink: 'syz.2.968': attribute type 4 has an invalid length. [ 102.558601][ T3395] rust_binder: Error while translating object. [ 102.558632][ T3395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.564888][ T3395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 102.607416][ T2537] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.000803][ T36] audit: type=1400 audit(1754625053.186:916): avc: denied { write } for pid=3416 comm="syz.2.980" name="/" dev="configfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.076441][ T3422] netlink: 104 bytes leftover after parsing attributes in process `syz.3.982'. [ 103.956966][ T3431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.985'. [ 103.976699][ T3436] overlayfs: failed to clone upperpath [ 103.998767][ T3439] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 104.110007][ T3442] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 104.119199][ T3442] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 104.186717][ T3450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3450 comm=syz.3.992 [ 104.199947][ T3450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3450 comm=syz.3.992 [ 104.215479][ T3451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3451 comm=syz.3.992 [ 104.613554][ T519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.508092][ T3539] netlink: 'syz.2.1020': attribute type 1 has an invalid length. [ 105.629242][ T3553] overlayfs: failed to clone upperpath [ 106.108738][ T3576] netlink: 'syz.5.1032': attribute type 4 has an invalid length. [ 106.119382][ T3576] netlink: 'syz.5.1032': attribute type 4 has an invalid length. [ 106.142966][ T3582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.183467][ T36] audit: type=1400 audit(1754625056.366:917): avc: denied { getopt } for pid=3591 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.228638][ T3597] rust_binder: Error in use_page_slow: ESRCH [ 106.228668][ T3597] rust_binder: use_range failure ESRCH [ 106.234828][ T3597] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 106.240351][ T3597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 106.248519][ T3597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:308 [ 106.264259][ T36] audit: type=1400 audit(1754625056.456:918): avc: denied { associate } for pid=3603 comm="syz.4.1042" name="ptp0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 106.441153][ T3638] overlayfs: missing 'lowerdir' [ 106.895753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.907968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.920334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.932383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.944619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.956651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.968761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.980789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.992962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.004999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.035010][ T3673] mmap: syz.5.1067 (3673) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.097332][ T3676] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 107.215531][ T36] audit: type=1400 audit(1754625057.406:919): avc: denied { append } for pid=3679 comm="syz.5.1071" name="userfaultfd" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.305691][ T3693] overlayfs: missing 'workdir' [ 107.638084][ T3711] overlayfs: failed to clone upperpath [ 107.789376][ T3716] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 107.810492][ T3716] incfs: Can't find or create .index dir in ./file0 [ 107.829194][ T3716] incfs: mount failed -22 [ 107.883551][ T36] audit: type=1326 audit(1754625058.066:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.1083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f6a98ebe9 code=0x0 [ 107.996317][ T3735] 9pnet_fd: Insufficient options for proto=fd [ 108.073324][ T3742] netlink: 'syz.3.1094': attribute type 13 has an invalid length. [ 108.181200][ T36] audit: type=1400 audit(1754625058.366:921): avc: denied { getopt } for pid=3745 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.273532][ T390] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 108.433521][ T390] usb 6-1: Using ep0 maxpacket: 8 [ 108.450405][ T390] usb 6-1: unable to get BOS descriptor or descriptor too short [ 108.471989][ T390] usb 6-1: config 1 interface 0 altsetting 105 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 108.521310][ T390] usb 6-1: config 1 interface 0 has no altsetting 0 [ 108.533119][ T390] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 108.542526][ T390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.559110][ T390] usb 6-1: Product: syz [ 108.572086][ T390] usb 6-1: SerialNumber: syz [ 108.716192][ T3769] fuse: Bad value for 'fd' [ 108.791220][ T3739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.844630][ T3739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.903928][ T3774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1106'. [ 109.162909][ T3786] batadv_slave_1: entered promiscuous mode [ 109.204497][ T3785] batadv_slave_1: left promiscuous mode [ 110.575282][ T3814] fuse: Bad value for 'fd' [ 111.123545][ T390] usbhid 6-1:1.0: can't add hid device: -71 [ 111.141951][ T390] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 111.180171][ T36] audit: type=1400 audit(1754625061.366:922): avc: denied { write } for pid=3819 comm="syz.5.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 111.216957][ T390] usb 6-1: USB disconnect, device number 9 [ 111.780919][ T2538] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.807562][ T3830] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 111.848321][ T3830] rust_binder: Write failure EINVAL in pid:330 [ 111.903539][ C1] net_ratelimit: 116462 callbacks suppressed [ 111.903565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.927969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.940102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.952133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.964175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.976306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.988358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.000496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.012624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.024665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.625381][ T36] audit: type=1326 audit(1754625062.816:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f106478ebe9 code=0x0 [ 112.702117][ T3841] 9pnet_fd: Insufficient options for proto=fd [ 113.452191][ T3852] 9pnet_fd: Insufficient options for proto=fd [ 113.813564][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 113.816739][ T519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.862330][ T3865] syz.2.1137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.951166][ T36] audit: type=1400 audit(1754625064.136:924): avc: denied { create } for pid=3872 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.259962][ T3884] fuse: Unknown parameter '¦{t' [ 114.749240][ T3895] random: crng reseeded on system resumption [ 114.845929][ T3900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 115.063556][ T65] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 115.263551][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 115.274636][ T65] usb 6-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 115.293366][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.308167][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.47 [ 115.320701][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.345191][ T65] usb 6-1: Product: syz [ 115.353544][ T65] usb 6-1: Manufacturer: syz [ 115.358184][ T65] usb 6-1: SerialNumber: syz [ 115.592544][ T65] usb 6-1: cannot find UAC_HEADER [ 115.623158][ T65] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.650048][ T65] usb 6-1: USB disconnect, device number 10 [ 115.666787][ T2837] udevd[2837]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.953907][ T3947] fuse: Bad value for 'fd' [ 116.007973][ T36] audit: type=1400 audit(1754625066.196:925): avc: denied { append } for pid=3951 comm="syz.4.1169" name="file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.423793][ T3979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1177'. [ 116.559978][ T3994] fuse: Bad value for 'fd' [ 116.913547][ C1] net_ratelimit: 110511 callbacks suppressed [ 116.913570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.931727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.943860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.955923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.968044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.980102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.992412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.004560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.016598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.028645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.109812][ T4010] ÿÿÿÿÿÿ: renamed from bridge0 (while UP) [ 117.258999][ T4010] tipc: Started in network mode [ 117.276988][ T4010] tipc: Node identity 8e6688f70a1b, cluster identity 4711 [ 117.300900][ T4010] tipc: Enabled bearer , priority 0 [ 117.335451][ T4012] tipc: Resetting bearer [ 117.362452][ T36] audit: type=1326 audit(1754625067.546:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 117.411614][ T36] audit: type=1326 audit(1754625067.586:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 117.479190][ T36] audit: type=1326 audit(1754625067.586:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 117.551757][ T36] audit: type=1326 audit(1754625067.586:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 117.625056][ T4012] tipc: Disabling bearer [ 117.680263][ T36] audit: type=1326 audit(1754625067.586:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 117.735723][ T36] audit: type=1326 audit(1754625067.586:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 117.797912][ T36] audit: type=1326 audit(1754625067.586:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 117.947724][ T36] audit: type=1326 audit(1754625067.586:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 118.060959][ T4036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.068157][ T36] audit: type=1326 audit(1754625067.586:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 118.193125][ T4036] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 118.253712][ T36] audit: type=1326 audit(1754625067.586:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 118.285536][ T4036] kvm: Disabled LAPIC found during irq injection [ 118.313844][ T36] audit: type=1326 audit(1754625067.586:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 118.391496][ T36] audit: type=1326 audit(1754625067.586:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 118.454369][ T36] audit: type=1326 audit(1754625067.586:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 118.481614][ T36] audit: type=1326 audit(1754625067.586:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x7ff00000 [ 118.783962][ T4056] overlayfs: failed to clone upperpath [ 118.907998][ T4064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 118.943556][ T65] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 119.114607][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.134657][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 253, changing to 7 [ 119.154753][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25696, setting to 1024 [ 119.185043][ T65] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.203549][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.232599][ T65] usb 6-1: Product: syz [ 119.239162][ T65] usb 6-1: Manufacturer: syz [ 119.264061][ T65] usb 6-1: SerialNumber: syz [ 119.273959][ T65] usb 6-1: config 0 descriptor?? [ 119.290436][ T65] usb 6-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 64 [ 119.351805][ T4077] overlayfs: failed to clone upperpath [ 119.645730][ T4082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.652803][ T4082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=4082 comm=syz.5.1197 [ 119.735702][ T4086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:360 [ 119.837361][ T65] usb 6-1: USB disconnect, device number 11 [ 119.955929][ T2899] udevd[2899]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.248072][ T4116] tipc: Enabling of bearer rejected, failed to enable media [ 120.443396][ T4127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.443765][ T4127] rust_binder: Write failure EINVAL in pid:365 [ 120.656954][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 120.685300][ T4145] overlayfs: missing 'lowerdir' [ 120.709497][ T4145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1230'. [ 120.718635][ T65] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 120.883543][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 120.892147][ T65] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 120.903192][ T65] usb 6-1: config 0 has no interface number 0 [ 120.914572][ T65] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 120.925987][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.934520][ T65] usb 6-1: Product: syz [ 120.943656][ T65] usb 6-1: Manufacturer: syz [ 120.948436][ T65] usb 6-1: SerialNumber: syz [ 120.957788][ T65] usb 6-1: config 0 descriptor?? [ 120.969020][ T65] smsc95xx v2.0.0 [ 121.344975][ T4164] 9pnet: p9_errstr2errno: server reported unknown error [ 121.365163][ T65] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 121.376150][ T65] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.395169][ T4165] 9pnet_fd: Insufficient options for proto=fd [ 121.592436][ T65] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 121.611359][ T65] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 121.923509][ C1] net_ratelimit: 120535 callbacks suppressed [ 121.923536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.941651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.953749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.965856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.977874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.989958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.001970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.014090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.026197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.038239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.364394][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 123.364414][ T36] audit: type=1326 audit(1754625073.556:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4187 comm="syz.4.1245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f106478ebe9 code=0x0 [ 123.444082][ T9] usb 6-1: USB disconnect, device number 12 [ 124.249603][ T36] audit: type=1400 audit(1754625074.436:1000): avc: denied { watch } for pid=4219 comm="syz.3.1256" path="/439/file0" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.425487][ T36] audit: type=1400 audit(1754625074.616:1001): avc: denied { create } for pid=4232 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.552575][ T36] audit: type=1400 audit(1754625074.736:1002): avc: denied { mount } for pid=4238 comm="syz.2.1265" name="/" dev="ramfs" ino=23055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 125.162826][ T4254] netlink: 'syz.3.1270': attribute type 13 has an invalid length. [ 125.188718][ T4256] tipc: Enabled bearer , priority 0 [ 125.230954][ T4256] tipc: Disabling bearer [ 125.250887][ T4259] overlayfs: missing 'lowerdir' [ 125.303773][ T4265] No source specified [ 125.375241][ T4269] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33 sclass=netlink_audit_socket pid=4269 comm=syz.3.1275 [ 125.426402][ T36] audit: type=1400 audit(1754625075.616:1003): avc: denied { shutdown } for pid=4267 comm="syz.5.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.500363][ T36] audit: type=1400 audit(1754625075.686:1004): avc: denied { execute } for pid=4289 comm="syz.2.1278" path="/dev/rnullb0" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.805841][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 126.841605][ T4370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.862094][ T4370] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.901430][ T36] audit: type=1400 audit(1754625077.086:1005): avc: denied { write } for pid=4368 comm="syz.2.1302" path="socket:[23538]" dev="sockfs" ino=23538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.933517][ C1] net_ratelimit: 140214 callbacks suppressed [ 126.933539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.951778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.963795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.975962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.988106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.000165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.012204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.024327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.036389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.048498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.144853][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 127.357513][ T4382] overlayfs: failed to clone upperpath [ 127.372189][ T4382] overlayfs: failed to clone upperpath [ 127.600512][ T4397] tipc: Enabling of bearer rejected, failed to enable media [ 127.833023][ T4404] overlayfs: failed to clone upperpath [ 128.156390][ T4417] netlink: 'syz.3.1321': attribute type 4 has an invalid length. [ 128.973701][ T4441] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1331'. [ 129.189275][ T4444] overlay: filesystem on ./bus is read-only [ 129.195292][ T36] audit: type=1400 audit(1754625079.376:1006): avc: denied { mounton } for pid=4443 comm="syz.3.1332" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 129.374076][ T4440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.374470][ T4440] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 129.446733][ T36] audit: type=1400 audit(1754625079.636:1007): avc: denied { setopt } for pid=4447 comm="syz.3.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.569324][ T4440] rust_binder: Write failure EINVAL in pid:385 [ 129.701161][ T4454] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 130.059437][ T4465] netlink: 'syz.5.1339': attribute type 10 has an invalid length. [ 130.806348][ T4496] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1347'. [ 130.868720][ T36] audit: type=1400 audit(1754625081.056:1008): avc: denied { execute_no_trans } for pid=4499 comm="syz.4.1348" path="/278/file0" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.933640][ T4500] incfs: Error accessing: ./file0. [ 130.938827][ T4500] incfs: mount failed -20 [ 131.943530][ C1] net_ratelimit: 115281 callbacks suppressed [ 131.943557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.961604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.973711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.985844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.997885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.009942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.022084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.034123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.046244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.058375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.234678][ T36] audit: type=1400 audit(1754625082.426:1009): avc: denied { nlmsg_tty_audit } for pid=4560 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 132.743582][ T36] audit: type=1400 audit(1754625082.926:1010): avc: denied { create } for pid=4584 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.874763][ T4595] overlayfs: failed to resolve './file0': -2 [ 132.975564][ T4600] 9pnet_fd: Insufficient options for proto=fd [ 133.673545][ T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 133.741701][ T36] audit: type=1400 audit(1754625083.926:1011): avc: denied { accept } for pid=4638 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 133.763249][ T4640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4640 comm=syz.3.1395 [ 133.814327][ T4640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4640 comm=syz.3.1395 [ 133.843542][ T9] usb 6-1: device descriptor read/64, error -71 [ 133.865271][ T4640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4640 comm=syz.3.1395 [ 134.103541][ T9] usb 6-1: device descriptor read/64, error -71 [ 134.367546][ T9] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 134.513531][ T9] usb 6-1: device descriptor read/64, error -71 [ 134.773645][ T9] usb 6-1: device descriptor read/64, error -71 [ 134.907977][ T9] usb usb6-port1: attempt power cycle [ 135.263550][ T9] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 135.286495][ T9] usb 6-1: device descriptor read/8, error -71 [ 135.419016][ T9] usb 6-1: device descriptor read/8, error -71 [ 135.663530][ T9] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 135.685638][ T9] usb 6-1: device descriptor read/8, error -71 [ 135.823237][ T9] usb 6-1: device descriptor read/8, error -71 [ 135.945783][ T9] usb usb6-port1: unable to enumerate USB device [ 136.017674][ T4691] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 136.032623][ T4692] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 136.120383][ T36] audit: type=1400 audit(1754625086.306:1012): avc: denied { watch_reads } for pid=4695 comm="syz.4.1415" path="/302/file0" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.638298][ T36] audit: type=1400 audit(1754625086.826:1013): avc: denied { write } for pid=4709 comm="syz.5.1419" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.723808][ T4715] rust_binder: Write failure EFAULT in pid:409 [ 136.953547][ C1] net_ratelimit: 131817 callbacks suppressed [ 136.953574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.977923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.990046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.995638][ T36] audit: type=1400 audit(1754625087.186:1014): avc: denied { relabelfrom } for pid=4735 comm="syz.3.1430" name="" dev="pipefs" ino=24664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 137.002078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.025615][ T36] audit: type=1326 audit(1754625087.226:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefd4d8ebe9 code=0x0 [ 137.036429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.071175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.083179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.095254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.107337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.119330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.860367][ T4755] tipc: Enabling of bearer rejected, failed to enable media [ 137.878467][ T4756] tipc: Enabling of bearer rejected, failed to enable media [ 137.923743][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 138.124783][ T4773] 9pnet_fd: Insufficient options for proto=fd [ 138.305964][ T1613] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 138.374665][ T4804] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1451'. [ 138.384317][ T4797] bridge0: port 3(veth1_macvtap) entered blocking state [ 138.398805][ T4797] bridge0: port 3(veth1_macvtap) entered disabled state [ 138.418511][ T4797] veth1_macvtap: entered allmulticast mode [ 138.436756][ T4797] veth1_macvtap: left allmulticast mode [ 138.515898][ T1613] usb 6-1: Using ep0 maxpacket: 16 [ 138.523824][ T36] audit: type=1400 audit(1754625088.716:1016): avc: denied { link } for pid=4822 comm="syz.4.1456" name="file1" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.644434][ T1613] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 138.656780][ T1613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.674838][ T1613] usb 6-1: Product: syz [ 138.679058][ T1613] usb 6-1: Manufacturer: syz [ 138.705353][ T1613] usb 6-1: SerialNumber: syz [ 138.713108][ T1613] usb 6-1: config 0 descriptor?? [ 138.798532][ T1613] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 138.824190][ T1613] usb 6-1: Detected FT232H [ 138.999606][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.009940][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.028166][ T1613] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 139.088555][ T1613] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 139.118119][ T1613] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 139.136255][ T1613] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 139.170853][ T1613] usb 6-1: USB disconnect, device number 17 [ 139.197088][ T1613] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.218685][ T1613] ftdi_sio 6-1:0.0: device disconnected [ 139.588094][ T4878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.589366][ T4878] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 139.700834][ T4894] overlayfs: failed to clone upperpath [ 140.040990][ T4923] tipc: Enabling of bearer rejected, failed to enable media [ 140.188233][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 140.697263][ T4970] overlayfs: failed to clone upperpath [ 140.746242][ T4954] rust_binder: Error in use_page_slow: ESRCH [ 140.746271][ T4954] rust_binder: use_range failure ESRCH [ 140.771313][ T4956] rust_binder: Error in use_page_slow: ESRCH [ 140.802211][ T4954] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 140.829758][ T4956] rust_binder: use_range failure ESRCH [ 140.849892][ T4954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.862251][ T4956] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 140.876963][ T4954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:431 [ 140.900100][ T4956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.929242][ T4956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:431 [ 141.023743][ T4985] FAULT_INJECTION: forcing a failure. [ 141.023743][ T4985] name failslab, interval 1, probability 0, space 0, times 1 [ 141.089175][ T4985] CPU: 0 UID: 0 PID: 4985 Comm: syz.5.1509 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 141.089221][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.089237][ T4985] Call Trace: [ 141.089244][ T4985] [ 141.089253][ T4985] __dump_stack+0x21/0x30 [ 141.089287][ T4985] dump_stack_lvl+0x10c/0x190 [ 141.089315][ T4985] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.089344][ T4985] ? _parse_integer_limit+0x195/0x1e0 [ 141.089373][ T4985] dump_stack+0x19/0x20 [ 141.089399][ T4985] should_fail_ex+0x3d9/0x530 [ 141.089429][ T4985] should_failslab+0xac/0x100 [ 141.089464][ T4985] __kmalloc_node_noprof+0x6c/0x450 [ 141.089495][ T4985] ? __kvmalloc_node_noprof+0x11d/0x300 [ 141.089526][ T4985] __kvmalloc_node_noprof+0x11d/0x300 [ 141.089562][ T4985] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 141.089591][ T4985] ? selinux_file_permission+0x309/0xb30 [ 141.089617][ T4985] seq_read_iter+0x21f/0xfe0 [ 141.089641][ T4985] ? __kasan_check_write+0x18/0x20 [ 141.089671][ T4985] ? proc_fail_nth_write+0x17e/0x210 [ 141.089700][ T4985] vfs_read+0x540/0xb60 [ 141.089732][ T4985] ? __cfi_vfs_read+0x10/0x10 [ 141.089762][ T4985] ? __cfi_mutex_lock+0x10/0x10 [ 141.089790][ T4985] ksys_read+0x141/0x250 [ 141.089819][ T4985] ? xfd_validate_state+0x68/0x150 [ 141.089848][ T4985] ? __cfi_ksys_read+0x10/0x10 [ 141.089879][ T4985] ? __kasan_check_read+0x15/0x20 [ 141.089908][ T4985] __x64_sys_read+0x7f/0x90 [ 141.089938][ T4985] x64_sys_call+0x2638/0x2ee0 [ 141.089968][ T4985] do_syscall_64+0x58/0xf0 [ 141.090001][ T4985] ? clear_bhb_loop+0x50/0xa0 [ 141.090028][ T4985] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.090054][ T4985] RIP: 0033:0x7f89a378ebe9 [ 141.090073][ T4985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.090092][ T4985] RSP: 002b:00007f89a46c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.090117][ T4985] RAX: ffffffffffffffda RBX: 00007f89a39b5fa0 RCX: 00007f89a378ebe9 [ 141.090135][ T4985] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 141.090151][ T4985] RBP: 00007f89a46c7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.090166][ T4985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.090185][ T4985] R13: 00007f89a39b6038 R14: 00007f89a39b5fa0 R15: 00007ffd7673d488 [ 141.090206][ T4985] [ 141.419202][ T4996] overlayfs: missing 'lowerdir' [ 141.502919][ T5008] 9pnet_fd: Insufficient options for proto=fd [ 141.636988][ T5024] FAULT_INJECTION: forcing a failure. [ 141.636988][ T5024] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.655878][ T5024] CPU: 1 UID: 0 PID: 5024 Comm: syz.5.1522 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 141.655920][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.655935][ T5024] Call Trace: [ 141.655943][ T5024] [ 141.655951][ T5024] __dump_stack+0x21/0x30 [ 141.655985][ T5024] dump_stack_lvl+0x10c/0x190 [ 141.656012][ T5024] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.656041][ T5024] ? string_escape_mem+0xb79/0xbd0 [ 141.656067][ T5024] dump_stack+0x19/0x20 [ 141.656092][ T5024] should_fail_ex+0x3d9/0x530 [ 141.656123][ T5024] should_fail+0xf/0x20 [ 141.656150][ T5024] should_fail_usercopy+0x1e/0x30 [ 141.656181][ T5024] _copy_to_iter+0x1a3/0x14b0 [ 141.656215][ T5024] ? seq_write+0xe3/0x140 [ 141.656247][ T5024] ? __cfi_proc_show_options+0x10/0x10 [ 141.656279][ T5024] ? __cfi__copy_to_iter+0x10/0x10 [ 141.656314][ T5024] ? check_stack_object+0x82/0x140 [ 141.656344][ T5024] ? __virt_addr_valid+0x2a6/0x380 [ 141.656367][ T5024] ? __kasan_check_write+0x18/0x20 [ 141.656397][ T5024] seq_read_iter+0xd39/0xfe0 [ 141.656424][ T5024] vfs_read+0x540/0xb60 [ 141.656455][ T5024] ? __cfi_vfs_read+0x10/0x10 [ 141.656486][ T5024] ? __cfi_mutex_lock+0x10/0x10 [ 141.656514][ T5024] ksys_read+0x141/0x250 [ 141.656545][ T5024] ? __cfi_ksys_read+0x10/0x10 [ 141.656576][ T5024] ? __kasan_check_read+0x15/0x20 [ 141.656605][ T5024] __x64_sys_read+0x7f/0x90 [ 141.656636][ T5024] x64_sys_call+0x2638/0x2ee0 [ 141.656667][ T5024] do_syscall_64+0x58/0xf0 [ 141.656700][ T5024] ? clear_bhb_loop+0x50/0xa0 [ 141.656727][ T5024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.656766][ T5024] RIP: 0033:0x7f89a378ebe9 [ 141.656784][ T5024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.656805][ T5024] RSP: 002b:00007f89a46c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.656831][ T5024] RAX: ffffffffffffffda RBX: 00007f89a39b5fa0 RCX: 00007f89a378ebe9 [ 141.656855][ T5024] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 141.656871][ T5024] RBP: 00007f89a46c7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.656887][ T5024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.656901][ T5024] R13: 00007f89a39b6038 R14: 00007f89a39b5fa0 R15: 00007ffd7673d488 [ 141.656921][ T5024] [ 141.956312][ T5030] 9pnet_fd: Insufficient options for proto=fd [ 141.963526][ C1] net_ratelimit: 120626 callbacks suppressed [ 141.963546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.981668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.993842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.005885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.016804][ T5036] ªªªªª$: renamed from bridge_slave_0 (while UP) [ 142.017931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.036515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.048526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.060631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.072725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.084757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.151067][ T36] audit: type=1326 audit(1754625092.316:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.5.1529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a378ebe9 code=0x0 [ 142.426923][ T5061] /dev/rnullb0: Can't open blockdev [ 143.393555][ T36] audit: type=1400 audit(1754625093.576:1018): avc: denied { bpf } for pid=5096 comm="syz.3.1547" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.607673][ T36] audit: type=1326 audit(1754625093.796:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.3.1551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefd4d8ebe9 code=0x0 [ 144.093552][ T65] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 144.284268][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 144.313069][ T65] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.344884][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.381854][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.410754][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.438459][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.465860][ T65] usb 6-1: Product: syz [ 144.482354][ T5161] overlayfs: failed to clone upperpath [ 144.488119][ T65] usb 6-1: Manufacturer: syz [ 144.505057][ T65] usb 6-1: SerialNumber: syz [ 144.923959][ T65] usb 6-1: 0:2 : does not exist [ 144.964655][ T5196] fuse: Unknown parameter 'fd¥ r6§sƒºB' [ 145.683427][ T5231] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 145.706465][ T5231] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1570'. [ 145.774812][ T5236] overlay: Unknown parameter 'euid' [ 146.354699][ T65] usb 6-1: 1:0: cannot get min/max values for control 6 (id 1) [ 146.376539][ T65] usb 6-1: USB disconnect, device number 18 [ 146.400562][ T5123] udevd[5123]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.435218][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1575'. [ 146.576933][ T5250] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 146.594055][ T36] audit: type=1400 audit(1754625096.786:1020): avc: denied { relabelto } for pid=5249 comm="syz.2.1578" name="file0" dev="tmpfs" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 146.622838][ T36] audit: type=1400 audit(1754625096.786:1021): avc: denied { associate } for pid=5249 comm="syz.2.1578" name="file0" dev="tmpfs" ino=2041 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 146.803037][ T36] audit: type=1400 audit(1754625096.986:1022): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 146.907159][ T5261] input: syz1 as /devices/virtual/input/input16 [ 146.973500][ C1] net_ratelimit: 119996 callbacks suppressed [ 146.973523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.991674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.003789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.015827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.027866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.040006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.052068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.064350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.076519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.088607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.285233][ T5281] batadv_slave_1: entered promiscuous mode [ 147.433061][ T5281] batadv_slave_1: left promiscuous mode [ 147.534595][ T5286] binder: Bad value for 'max' [ 147.887048][ T36] audit: type=1400 audit(1754625098.076:1023): avc: denied { create } for pid=5311 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 147.926694][ T36] audit: type=1400 audit(1754625098.096:1024): avc: denied { create } for pid=5311 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 147.954777][ T36] audit: type=1400 audit(1754625098.096:1025): avc: denied { setopt } for pid=5311 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 147.975217][ T36] audit: type=1400 audit(1754625098.096:1026): avc: denied { ioctl } for pid=5311 comm="syz.5.1598" path="socket:[26613]" dev="sockfs" ino=26613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 148.008004][ T36] audit: type=1400 audit(1754625098.106:1027): avc: denied { bind } for pid=5311 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 148.052869][ T5320] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1601'. [ 148.084984][ T5322] tipc: Trying to set illegal importance in message [ 148.418353][ T36] audit: type=1400 audit(1754625098.596:1028): avc: denied { accept } for pid=5349 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.454651][ T5386] tmpfs: Unknown parameter 'no$Ëswap' [ 149.486749][ T36] audit: type=1400 audit(1754625099.676:1029): avc: denied { accept } for pid=5399 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.970291][ T5440] tc_dump_action: action bad kind [ 151.352629][ T5450] overlayfs: failed to resolve './file1': -2 [ 151.399834][ T36] audit: type=1400 audit(1754625101.586:1030): avc: denied { write } for pid=5451 comm="syz.4.1647" name="file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 151.426879][ T36] audit: type=1400 audit(1754625101.606:1031): avc: denied { open } for pid=5451 comm="syz.4.1647" path="/363/file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 151.501299][ T5467] overlayfs: failed to clone upperpath [ 151.983542][ C1] net_ratelimit: 129545 callbacks suppressed [ 151.983565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.001708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.013825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.025868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.038002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.050129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.062164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.074180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.086270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.098292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.128918][ T5496] fuse: Unknown parameter 'default_permissiâÒt¤h«Óons' [ 152.199675][ T5504] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1662'. [ 152.228824][ T5503] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1662'. [ 153.877206][ T36] audit: type=1400 audit(1754625103.956:1032): avc: denied { read write } for pid=5532 comm="syz.5.1671" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 155.695626][ T36] audit: type=1400 audit(1754625103.956:1033): avc: denied { open } for pid=5532 comm="syz.5.1671" path="/164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 156.993496][ C0] net_ratelimit: 262545 callbacks suppressed [ 156.993519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.993559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.999724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.011673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.023558][ C1] sched: DL replenish lagged too much [ 157.023611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.035674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 157.047599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.052920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.064922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.076880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.003489][ C1] net_ratelimit: 297638 callbacks suppressed [ 162.003514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.003523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.003570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.009607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.021606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.033531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.045525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.057494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.069386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.081278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.013485][ C1] net_ratelimit: 287745 callbacks suppressed [ 167.013507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.013513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.013561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.019623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.031611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.043570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.055472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.067358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.079338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.091756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.023481][ C0] net_ratelimit: 288433 callbacks suppressed [ 172.023504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.023515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.023586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.029619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.041792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.053666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.065629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 172.077653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.089510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.101511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.766833][ T5549] 9pnet_fd: Insufficient options for proto=fd [ 175.857999][ T5549] 9pnet_fd: Insufficient options for proto=fd [ 177.033501][ C0] net_ratelimit: 283801 callbacks suppressed [ 177.033524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.033557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.039704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.051660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.063559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.075526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.087530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.099411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 177.111294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.123270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.043507][ C0] net_ratelimit: 280923 callbacks suppressed [ 182.043555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.043570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.043628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.049779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.061862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.073767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.085690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.097613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.109580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 182.121638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.053486][ C0] net_ratelimit: 290000 callbacks suppressed [ 187.053510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.053531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.059570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.071610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.083529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.095425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.107398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.119377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 187.131378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.143213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.063477][ C1] net_ratelimit: 288760 callbacks suppressed [ 192.063502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.063508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.063558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.069581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.081565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.093524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.105570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.117673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.129637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.141640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.073462][ C0] net_ratelimit: 290890 callbacks suppressed [ 197.073485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.073521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.079582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.091529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.103473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.115419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.127305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.139203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.151182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.163169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 202.083494][ C1] net_ratelimit: 281543 callbacks suppressed [ 202.083518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 202.083526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.083575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.089579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.101609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.113606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.125519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.137427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.149448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.161459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.093460][ C0] net_ratelimit: 290261 callbacks suppressed [ 207.093484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.093505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.099554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.111599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.123575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.135472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.147531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.159509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.171432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.183309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.103461][ C1] net_ratelimit: 281812 callbacks suppressed [ 212.103485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.103506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.109562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.121584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.133543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.145469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.157419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.169350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.181353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.193414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.113463][ C0] net_ratelimit: 287478 callbacks suppressed [ 217.113486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.113525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 217.119560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.131465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.143483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.155435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.167305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.179231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.191202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.203183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.123457][ C1] net_ratelimit: 296263 callbacks suppressed [ 222.123480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.123506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.129560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.141520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.153534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.165466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.177444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.189431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.201428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 222.213304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.133477][ C1] net_ratelimit: 278303 callbacks suppressed [ 227.133501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.133517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.139583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.151589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.163594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 227.175502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.187378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.199366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.211328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.223227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.143461][ C0] net_ratelimit: 281843 callbacks suppressed [ 232.143483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.143518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.149554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.161623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 232.173565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.185420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.197430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.209390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.221281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.233220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.153466][ C0] net_ratelimit: 279266 callbacks suppressed [ 237.153488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.153525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.159589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.171524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 237.183561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.195528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.207501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.219457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.231394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.243389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.163479][ C0] net_ratelimit: 290928 callbacks suppressed [ 242.163504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.163547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.169631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.181532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.193459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.205499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.217485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.229387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 242.241273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.253229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.173465][ C0] net_ratelimit: 280404 callbacks suppressed [ 247.173488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.173510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.179568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.191585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.203532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.215490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.227424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.239451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.251436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.263404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.183452][ C1] net_ratelimit: 281614 callbacks suppressed [ 252.183476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.183479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.183526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.189701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.201725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.213677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.225653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.237545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.249508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.261399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.193435][ C1] net_ratelimit: 285255 callbacks suppressed [ 257.193458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.193466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.193524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.199538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.211574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.223565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 257.235470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.247419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.259403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.271476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.714295][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.721383][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.745318][ T5566] bridge_slave_0: entered allmulticast mode [ 257.768567][ T5566] bridge_slave_0: entered promiscuous mode [ 257.975271][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.982369][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.005816][ T5566] bridge_slave_1: entered allmulticast mode [ 258.034398][ T5566] bridge_slave_1: entered promiscuous mode [ 262.203460][ C0] net_ratelimit: 277890 callbacks suppressed [ 262.203484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.203507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.209560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.221591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.233602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.245522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.257472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.269460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 262.281432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.293330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.213445][ C1] net_ratelimit: 279343 callbacks suppressed [ 267.213468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.213472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.213521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.219561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.231579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.243503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.255523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.267538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.279431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.291320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.223441][ C1] net_ratelimit: 285493 callbacks suppressed [ 272.223463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.223722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.229618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.241706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.253603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.265514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.277507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.289413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.301294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.313280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.365414][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.372515][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.405011][ T5568] bridge_slave_0: entered allmulticast mode [ 275.435020][ T5568] bridge_slave_0: entered promiscuous mode [ 276.198084][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.299689][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.314718][ T5577] bridge_slave_0: entered allmulticast mode [ 276.343236][ T5577] bridge_slave_0: entered promiscuous mode [ 276.455641][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.462729][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.545714][ T5568] bridge_slave_1: entered allmulticast mode [ 276.569296][ T5568] bridge_slave_1: entered promiscuous mode [ 277.115957][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.123033][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.144986][ T5577] bridge_slave_1: entered allmulticast mode [ 277.173568][ T5577] bridge_slave_1: entered promiscuous mode [ 277.233447][ C0] net_ratelimit: 286033 callbacks suppressed [ 277.233466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.233499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.239524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.251460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.263446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.275431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.287354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.299298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.311178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.323178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.786180][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.793265][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.834490][ T5575] bridge_slave_0: entered allmulticast mode [ 277.864272][ T5575] bridge_slave_0: entered promiscuous mode [ 278.385874][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.392975][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.424959][ T5575] bridge_slave_1: entered allmulticast mode [ 278.450517][ T5575] bridge_slave_1: entered promiscuous mode [ 281.595567][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.602648][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.623551][ T5580] bridge_slave_0: entered allmulticast mode [ 281.647274][ T5580] bridge_slave_0: entered promiscuous mode [ 282.243440][ C0] net_ratelimit: 282447 callbacks suppressed [ 282.243482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.243496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 282.243544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.249549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.261516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.273553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.285475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.297464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.309430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.321339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.383740][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.390814][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.919028][ T5580] bridge_slave_1: entered allmulticast mode [ 282.975039][ T5580] bridge_slave_1: entered promiscuous mode [ 287.253428][ C0] net_ratelimit: 297226 callbacks suppressed [ 287.253453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.253469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.259634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.271540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:6f:55:c6:5f:8c, vlan:0) [ 287.283495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.295367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.307363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.319380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.331402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.343452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.935966][ T37] INFO: task syz-executor:2183 blocked for more than 123 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.113597][ T36] audit: type=1400 audit(1754625239.286:1034): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[3198]" dev="pipefs" ino=3198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 289.171392][ T37] Not tainted 6.12.38-syzkaller-g209015b548fb #0 [ 289.178358][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.187098][ T37] task:syz-executor state:D stack:0 pid:2183 tgid:2183 ppid:1 flags:0x00004006 [ 289.197332][ T37] Call Trace: [ 289.200639][ T37] [ 289.203629][ T37] __schedule+0x1322/0x1df0 [ 289.208192][ T37] ? __sched_text_start+0x10/0x10 [ 289.213253][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 289.218694][ T37] ? __kasan_check_write+0x18/0x20 [ 289.223872][ T37] ? llist_add_batch+0x109/0x1e0 [ 289.228852][ T37] schedule+0xc6/0x240 [ 289.232977][ T37] schedule_timeout+0xb2/0x3a0 [ 289.237859][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 289.243335][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 289.249058][ T37] ? generic_exec_single+0x201/0x500 [ 289.254412][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 289.260089][ T37] wait_for_common+0x359/0x630 [ 289.264911][ T37] ? wait_for_completion+0x40/0x40 [ 289.270065][ T37] ? flush_work+0x40/0x40 [ 289.274442][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 289.279945][ T37] ? mod_delayed_work_on+0x140/0x140 [ 289.285286][ T37] wait_for_completion+0x1c/0x40 [ 289.290287][ T37] rcu_barrier+0x415/0x530 [ 289.294771][ T37] flush_rcu_work+0x71/0x90 [ 289.299303][ T37] kvfree_rcu_barrier+0x23c/0x2f0 [ 289.304383][ T37] ? p9_client_destroy+0x42b/0x480 [ 289.309528][ T37] kmem_cache_destroy+0x32/0x170 [ 289.314516][ T37] p9_client_destroy+0x42b/0x480 [ 289.319486][ T37] ? __cfi_p9_client_destroy+0x10/0x10 [ 289.325009][ T37] v9fs_session_close+0x52/0x1d0 [ 289.329995][ T37] v9fs_kill_super+0x60/0x90 [ 289.334724][ T37] deactivate_locked_super+0xd5/0x2a0 [ 289.340131][ T37] deactivate_super+0xb8/0xe0 [ 289.344857][ T37] cleanup_mnt+0x3f1/0x480 [ 289.349304][ T37] __cleanup_mnt+0x1d/0x40 [ 289.353770][ T37] task_work_run+0x1e0/0x250 [ 289.358477][ T37] ? __cfi_task_work_run+0x10/0x10 [ 289.363628][ T37] ? __x64_sys_umount+0x126/0x170 [ 289.368687][ T37] ? __cfi___x64_sys_umount+0x10/0x10 [ 289.374120][ T37] ? __kasan_check_read+0x15/0x20 [ 289.379226][ T37] resume_user_mode_work+0x36/0x50 [ 289.384405][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 289.389910][ T37] do_syscall_64+0x64/0xf0 [ 289.394382][ T37] ? clear_bhb_loop+0x50/0xa0 [ 289.399103][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.405043][ T37] RIP: 0033:0x7f89a378ff17 [ 289.409495][ T37] RSP: 002b:00007ffd7673c718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 289.417971][ T37] RAX: 0000000000000000 RBX: 00007f89a3811c05 RCX: 00007f89a378ff17 [ 289.425988][ T37] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7673c7d0 [ 289.434004][ T37] RBP: 00007ffd7673c7d0 R08: 0000000000000000 R09: 0000000000000000 [ 289.442003][ T37] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7673d860 [ 289.450022][ T37] R13: 00007f89a3811c05 R14: 000000000002585c R15: 00007ffd7673d8a0 [ 289.458058][ T37] [ 289.461199][ T37] NMI backtrace for cpu 0 [ 289.461215][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 289.461247][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.461261][ T37] Call Trace: [ 289.461268][ T37] [ 289.461278][ T37] __dump_stack+0x21/0x30 [ 289.461309][ T37] dump_stack_lvl+0x10c/0x190 [ 289.461337][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.461366][ T37] dump_stack+0x19/0x20 [ 289.461392][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 289.461426][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 289.461451][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 289.461490][ T37] ? sched_show_task+0x379/0x560 [ 289.461517][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 289.461541][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.461567][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.461593][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 289.461628][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 289.461654][ T37] watchdog+0xd8f/0xed0 [ 289.461684][ T37] ? __cfi_watchdog+0x10/0x10 [ 289.461710][ T37] ? __kasan_check_read+0x15/0x20 [ 289.461746][ T37] ? __kthread_parkme+0x138/0x180 [ 289.461778][ T37] ? schedule+0xc6/0x240 [ 289.461800][ T37] kthread+0x2ca/0x370 [ 289.461820][ T37] ? __cfi_watchdog+0x10/0x10 [ 289.461847][ T37] ? __cfi_kthread+0x10/0x10 [ 289.461876][ T37] ret_from_fork+0x67/0xa0 [ 289.461905][ T37] ? __cfi_kthread+0x10/0x10 [ 289.461925][ T37] ret_from_fork_asm+0x1a/0x30 [ 289.461958][ T37] [ 289.619183][ T37] Sending NMI from CPU 0 to CPUs 1: [ 289.626388][ C1] NMI backtrace for cpu 1 [ 289.626448][ C1] CPU: 1 UID: 0 PID: 2533 Comm: kworker/u8:8 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 289.626471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.626482][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 289.626506][ C1] RIP: 0010:update_stack_state+0x17f/0x4b0 [ 289.626526][ C1] Code: 48 8b 73 28 4c 89 ff 48 89 da 48 8b 8d 60 ff ff ff e8 b5 b9 f5 ff 85 c0 0f 85 2f 01 00 00 48 8b 85 40 ff ff ff 42 80 3c 28 00 <74> 08 4c 89 f7 e8 f7 de 97 00 4d 8b 3e 48 8b 85 48 ff ff ff 42 80 [ 289.626540][ C1] RSP: 0018:ffffc9000022fcd8 EFLAGS: 00000246 [ 289.626553][ C1] RAX: 1ffff92000045fc6 RBX: ffffc9000022fe28 RCX: 1ffff92000045fc7 [ 289.626566][ C1] RDX: 1ffff92000045fc8 RSI: 1ffff92000045fc6 RDI: ffffc9000022fe80 [ 289.626579][ C1] RBP: ffffc9000022fd98 R08: ffffc9000022fef0 R09: ffffc9000022fee8 [ 289.626591][ C1] R10: 0000000000000009 R11: ffffffff81742a80 R12: 0000000000000000 [ 289.626601][ C1] R13: dffffc0000000000 R14: ffffc9000022fe30 R15: ffffc900002304d0 [ 289.626614][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 289.626627][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.626638][ C1] CR2: 00007fe897bae4c0 CR3: 000000010a7f6000 CR4: 00000000003526b0 [ 289.626653][ C1] DR0: 0000000001400000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.626663][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 289.626674][ C1] Call Trace: [ 289.626679][ C1] [ 289.626687][ C1] unwind_next_frame+0x3c2/0x750 [ 289.626705][ C1] ? __kernel_text_address+0x11/0x40 [ 289.626723][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 289.626752][ C1] arch_stack_walk+0x139/0x170 [ 289.626791][ C1] ? arp_process+0xd79/0x1740 [ 289.626812][ C1] stack_trace_save+0x9d/0xe0 [ 289.626831][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 289.626851][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 289.626886][ C1] ? ref_tracker_alloc+0x29e/0x540 [ 289.626910][ C1] kasan_save_stack+0x3e/0x60 [ 289.626933][ C1] ? kasan_save_stack+0x3e/0x60 [ 289.626954][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 289.626972][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 289.626990][ C1] ? __call_rcu_common+0xd5/0x700 [ 289.627011][ C1] ? call_rcu_hurry+0xf/0x30 [ 289.627031][ C1] ? dst_release+0x1a3/0x240 [ 289.627047][ C1] ? skb_release_head_state+0x74/0x260 [ 289.627075][ C1] ? __kfree_skb+0x29/0x210 [ 289.627102][ C1] ? consume_skb+0x65/0x1a0 [ 289.627123][ C1] ? arp_process+0xd79/0x1740 [ 289.627148][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 289.627166][ C1] __kasan_record_aux_stack+0xb2/0xd0 [ 289.627184][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 289.627200][ C1] kasan_record_aux_stack_noalloc+0xf/0x20 [ 289.627219][ C1] __call_rcu_common+0xd5/0x700 [ 289.627240][ C1] ? call_rcu_hurry+0x30/0x30 [ 289.627260][ C1] ? rcuref_put_slowpath+0xd1/0x200 [ 289.627275][ C1] ? __cfi_rcuref_put_slowpath+0x10/0x10 [ 289.627290][ C1] ? percpu_counter_add_batch+0xfc/0x1b0 [ 289.627311][ C1] call_rcu_hurry+0xf/0x30 [ 289.627330][ C1] dst_release+0x1a3/0x240 [ 289.627347][ C1] skb_release_head_state+0x74/0x260 [ 289.627370][ C1] ? arp_process+0xd79/0x1740 [ 289.627389][ C1] __kfree_skb+0x29/0x210 [ 289.627410][ C1] ? arp_process+0xd79/0x1740 [ 289.627429][ C1] consume_skb+0x65/0x1a0 [ 289.627450][ C1] arp_process+0xd79/0x1740 [ 289.627469][ C1] ? ret_from_fork+0x67/0xa0 [ 289.627489][ C1] ? __cfi_arp_process+0x10/0x10 [ 289.627509][ C1] ? __cfi_arp_process+0x10/0x10 [ 289.627527][ C1] NF_HOOK+0x157/0x1b0 [ 289.627544][ C1] ? __cfi_arp_process+0x10/0x10 [ 289.627563][ C1] ? arp_xmit+0x1f0/0x1f0 [ 289.627581][ C1] ? __cfi_arp_process+0x10/0x10 [ 289.627599][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 289.627624][ C1] arp_rcv+0x2f8/0x490 [ 289.627642][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 289.627661][ C1] netif_receive_skb+0x22d/0x7b0 [ 289.627685][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 289.627725][ C1] ? br_flood+0x67e/0x730 [ 289.627749][ C1] br_pass_frame_up+0x126/0x1c0 [ 289.627765][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 289.627782][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 289.627798][ C1] ? kthread_is_per_cpu+0xbe/0xf0 [ 289.627820][ C1] ? can_migrate_task+0x1e4/0xad0 [ 289.627844][ C1] br_handle_frame+0x5a6/0xba0 [ 289.627861][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 289.627876][ C1] __netif_receive_skb_core+0xf48/0x3940 [ 289.627900][ C1] ? update_vsyscall+0xc3c/0x1180 [ 289.627922][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 289.627941][ C1] ? qdisc_run_end+0x120/0x120 [ 289.627963][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 289.627982][ C1] ? update_curr+0x4e4/0xaa0 [ 289.628004][ C1] ? __kasan_check_write+0x18/0x20 [ 289.628024][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 289.628046][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 289.628068][ C1] ? __kasan_check_read+0x15/0x20 [ 289.628088][ C1] process_backlog+0x3e5/0xae0 [ 289.628117][ C1] ? run_posix_cpu_timers+0x2c5/0x620 [ 289.628142][ C1] __napi_poll+0xd0/0x610 [ 289.628163][ C1] net_rx_action+0x584/0xce0 [ 289.628188][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 289.628210][ C1] ? sched_clock+0x44/0x60 [ 289.628227][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 289.628245][ C1] ? sched_clock+0x44/0x60 [ 289.628262][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 289.628280][ C1] handle_softirqs+0x1ab/0x630 [ 289.628303][ C1] __do_softirq+0xf/0x16 [ 289.628317][ C1] do_softirq+0xa6/0x100 [ 289.628337][ C1] [ 289.628342][ C1] [ 289.628347][ C1] ? __cfi_do_softirq+0x10/0x10 [ 289.628367][ C1] ? _raw_spin_lock_bh+0x90/0x120 [ 289.628388][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 289.628412][ C1] __local_bh_enable_ip+0x74/0x80 [ 289.628433][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 289.628455][ C1] wg_index_hashtable_insert+0x100/0x430 [ 289.628473][ C1] ? __asan_memset+0x39/0x50 [ 289.628493][ C1] wg_noise_handshake_create_initiation+0x5de/0x7f0 [ 289.628517][ C1] ? __cfi_wg_noise_handshake_create_initiation+0x10/0x10 [ 289.628542][ C1] ? update_curr+0xdc/0xaa0 [ 289.628562][ C1] ? psi_task_change+0x1ce/0x360 [ 289.628582][ C1] ? check_preempt_wakeup_fair+0x886/0xae0 [ 289.628606][ C1] ? ttwu_do_activate+0x630/0x630 [ 289.628621][ C1] ? ktime_get_coarse_with_offset+0x157/0x1a0 [ 289.628640][ C1] wg_packet_handshake_send_worker+0x160/0x240 [ 289.628656][ C1] ? __kasan_check_read+0x15/0x20 [ 289.628675][ C1] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 289.628694][ C1] ? wake_up_process+0x14/0x20 [ 289.628714][ C1] ? kick_pool+0x3d8/0x550 [ 289.628729][ C1] process_scheduled_works+0x7d2/0x1020 [ 289.628754][ C1] worker_thread+0xc58/0x1250 [ 289.628779][ C1] kthread+0x2ca/0x370 [ 289.628792][ C1] ? __cfi_worker_thread+0x10/0x10 [ 289.628813][ C1] ? __cfi_kthread+0x10/0x10 [ 289.628826][ C1] ret_from_fork+0x67/0xa0 [ 289.628844][ C1] ? __cfi_kthread+0x10/0x10 [ 289.628859][ C1] ret_from_fork_asm+0x1a/0x30 [ 289.628883][ C1] [ 292.263432][ C0] net_ratelimit: 255334 callbacks suppressed [ 292.263457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.263478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.269525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.281476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.293487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.305353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.317360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.329384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.341350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.353344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.273449][ C0] net_ratelimit: 286738 callbacks suppressed [ 297.273473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.273491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.279569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.291610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.303574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.315485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.327539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.339446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.351342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.363326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)