last executing test programs: 4m8.6346756s ago: executing program 1 (id=487): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r1 = socket$inet(0x2, 0xa, 0xfffffffd) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44090) read(r0, &(0x7f0000000140)=""/148, 0x94) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) read(r0, &(0x7f0000000300)=""/197, 0xc5) clock_adjtime(0x8fd7fd18bd254f93, &(0x7f0000000080)={0x6, 0x400, 0x9, 0x5, 0x3, 0x8, 0x7, 0x101, 0x3f4, 0x3, 0x7ff, 0xd, 0x1, 0x2, 0x1, 0xfffffffffffffff7, 0x3, 0x3, 0x7fffffffffffffff, 0x6, 0x3, 0xfffffffffffffffd, 0x8000, 0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"6bcafbd965957792c4dd2b6a4c236258", 0x0, 0x0, {0xe36, 0x10}, {0x101}, 0x2, [0x4, 0xfffffffffffffffc, 0x6, 0x5, 0x200, 0xd7, 0xfffffffffffffffa, 0x7, 0xa, 0x2, 0x9, 0x3, 0xffffffffffffe3cf, 0xe, 0x9]}) r4 = epoll_create(0x9) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd6c6, 0x7}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"10742204d3beaecf45dbf95abd714516", r3, 0x0, {0x23ea, 0xf97}, {0x7f, 0xf}, 0x8, [0x7fff, 0x6c6, 0x10001, 0x8, 0x24d5, 0xb474, 0x2, 0xfffe000000000000, 0x2, 0xfffffffffffff801, 0x3, 0x8, 0xa025, 0x8, 0x3, 0x3]}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 4m8.63445523s ago: executing program 1 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffc7, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) 4m7.934508264s ago: executing program 1 (id=498): prctl$PR_GET_TIMERSLACK(0x1e) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="100006000000000020"], 0x54, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) stat(&(0x7f0000007080)='./file0\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{@none}, {@fixed}, {@none}, {}, {}]}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 4m7.921583694s ago: executing program 1 (id=499): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000180)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000008000000000a00000200000005ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000a004e24000000010000000000000000000000000000000001080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200007fff000000000000000000000000000000000900"/400], 0x90) getsockopt(r2, 0xff, 0x4, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x114000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) rmdir(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 4m7.301918226s ago: executing program 1 (id=506): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(r3, 0x8913, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) (async) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001300210800", @ANYRES32=r5, @ANYBLOB], 0x2c}], 0x1}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) pipe2$9p(0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0xffffffffffffffcd) 4m7.234556917s ago: executing program 1 (id=507): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x9, '\a\x00'}, @main=@item_4={0x3, 0x0, 0xb, "dddc6011"}, @global=@item_012={0x2, 0x1, 0x3, 'e`'}]}}, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m7.191854618s ago: executing program 32 (id=507): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x9, '\a\x00'}, @main=@item_4={0x3, 0x0, 0xb, "dddc6011"}, @global=@item_012={0x2, 0x1, 0x3, 'e`'}]}}, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m56.021264267s ago: executing program 4 (id=679): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) 3m55.966684567s ago: executing program 4 (id=680): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r3, 0x22e7c000) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 3m55.966064528s ago: executing program 4 (id=681): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40d4}, 0x4800) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x800, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x4044) r6 = socket(0xa, 0x3, 0x3a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r9, r7) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x6, 0x3dcf, 0xc, 0xfffffffb, 0x0, 0x0, 0x2]}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in6=@private0, 0x4e21, 0x9, 0x4e20, 0x5, 0xa, 0x80, 0xa0, 0x89, r10, r11}, {0xb, 0x9, 0x3, 0xde74, 0x9, 0x66c, 0xe3, 0x80000001}, {0x2e22, 0x6, 0x6}, 0x0, 0x6e6bbf, 0x0, 0x1, 0x3, 0x1}, {{@in6=@mcast2, 0x4d4, 0x33}, 0x2, @in=@loopback, 0x3502, 0x4, 0x1, 0x1, 0x6, 0x9}}, 0xe8) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') 3m54.758392551s ago: executing program 4 (id=692): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x0, 0x900, 0x1, 0x2000008}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 3m54.747420311s ago: executing program 4 (id=693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0xc0, 0x19, 0x8}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0xb1, 0x3, 0x5, 0xb5}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x80}, {0x6000, 0x100000, 0x0, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xe6e5d000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x82, 0xf7, 0x83}, {0x1000, 0xf000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x6, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x15, 0x6, 0x0, 0x7, 0x3, 0xd, 0x81, 0x1, 0x70}, {0x10000, 0x1000, 0xe, 0x5, 0xf, 0x0, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x5000, 0x2024, 0x3, 0x0, 0x3000, [0xa, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x1, 0x1, 0x0}) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000300)) 3m54.666709313s ago: executing program 4 (id=694): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9) (async, rerun: 32) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r2, 0x56a31000) (async) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x9) 3m39.611010097s ago: executing program 33 (id=694): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9) (async, rerun: 32) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r2, 0x56a31000) (async) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x9) 3m22.828623985s ago: executing program 0 (id=1298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0xffff7f00}) 3m22.828091646s ago: executing program 0 (id=1299): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x0, 0xd, 0x2, 0x9345, 0x1, 0x2, 0x3, 0xff, 0x3, 0x5, 0x9, 0x1, 0xffffffffffffffe3, 0x6, 0xe], 0x6000, 0x5000}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0xff, &(0x7f0000000180)=0x2) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) fchmod(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) ioctl$TIOCSBRK(r3, 0x5427) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f00000002c0)="3377e9c704c5c19492a9f9f774372fcdd66dcd6e2cb4d5ea59e55bdf280bb043880057eb7a4407e27fcf486357a7e20df0b386429b14f30dd3765e87bfe6262c63f4652809fedaaa1245a172ed538f5aad0f5daff0ea39b19884fd8e59b8f2a1cc98162bad139f159176607fb5864fe46cb34eda22673b06e4dee5160ecf75e4094f5237b3a650f9ed556f794eeeb501351559fc9282f9555fe133", 0x9b) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2a}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xa, 0x4, "00ba34ac5ea3"}, @NL80211_KEY_SEQ={0x9, 0x4, "42ea939790"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "020115eca58d5021f1c5bc45c3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3f5481c25bf096130eb3f3c9e3"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040084}, 0xc0) connect$inet(r2, &(0x7f0000000580)={0x2, 0x4e24, @local}, 0x10) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000005c0)=0xb, &(0x7f0000000600)=0x2) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000640)={0x7f, 0x8, 0xfff, 0x1ff, 0xc, "c6141cbe97f3bbbb"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000006c0)='.log\x00', 0x8001, 0x100) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000b40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000740)={0x3c0, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x37c, 0x84, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="42fd65a8703bd08a20f57581f6842bf16564ef1268d5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2ab}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xf}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10001}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffff4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10de}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffc0000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1e8f}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e5b3043aaad2"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x17, 0x1, @random="f7b35fa0210edde675fbcfc448eb6cb0938d16"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xc}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa}, @NL80211_BAND_LC={0x8, 0x5, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a249e55504c4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ada98996c82c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffd}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10001}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="bdc56270a669bef286564ce1fcf5ec483de063439b102373c3ddf66b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="8eb0"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x100}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5665}, @NL80211_BAND_LC={0x8, 0x5, 0x7fff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1510}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="3d7900da0515f46a17956d6a1dcbefab567cd3870c94a3622ba3c09deb7fdc91"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x30c0}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r6, &(0x7f0000000b80)=""/211, 0xd3, 0x10100, &(0x7f0000000c80)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0xe, "b8ddfc587ce0d9c890d13850fcca898fd63dc69b372747b6d25da73562039735c643e297c66d278472bbb098b9b254200459f2928a6a93bf5bb2f46e7af153", 0xb}, 0x80) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000d00)={0x3}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d40)={"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"}) getsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x4) bind$bt_hci(r6, &(0x7f00000011c0)={0x1f, 0x4}, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r6) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x2e}}, @GTPA_I_TEI={0x8, 0x8, 0xefcb}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x4c}}, 0x4040040) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000013c0)=@req3={0x401, 0x5, 0x6, 0x5, 0x3, 0x9, 0xe}, 0x1c) 3m22.015580252s ago: executing program 0 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed35}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x438}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb76b}]}]}, 0xb0}}, 0x4) (async) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x11, r3, 0x1, 0x0, 0x6, @random="a5ec2722506c"}, 0x14) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000640)={0x1, 0x0, &(0x7f0000000400)=""/238, &(0x7f0000000500)=""/180, &(0x7f00000005c0)=""/94, 0x8080000}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4323}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9f0967c6dc44ef46f797abffb0f6bf36fb48ccfa58889866f217ee12f1347bdb7f39e1b1"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xbc}}, 0x1) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x55, 0xa8, @random="74c82f7d667026febc2179d19ead595beb29b8abd5f1015d0b8e308cca59636fba0a66963a39a313c4a7ae292feb9af58cfc2d0896e0b3d5ea4585069f4d99446090a2b86e86b16e5c4c778f0adc23d688"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x204, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x98, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x93c7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd102}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5aa}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000011) r6 = signalfd4(r2, &(0x7f0000000cc0)={[0x4]}, 0x8, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r8, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2004800) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000002440)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000000ec0)={0x1508, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x3ff}, 0x5a, 0x3, 0xc000, 0x1, 0x1e, 'syz1\x00', "c19b0ca1ee0bf84e7a1b53beddc948d2e333ea33b055bddaec3a15f895c10311", "f0e5b9fc8cb47aa51a6db2c678042ad0bbd9ce6a203ba95352bb05c80fd0bf81", [{0x8, 0x8, {0x1, 0x2}}, {0x8f, 0x5, {0x1, 0x10000}}, {0x2, 0x94, {0x3, 0x5}}, {0x9, 0x1, {0x0, 0x699}}, {0x2, 0x7, {0x1, 0x6}}, {0x7fff, 0x3, {0x2, 0x2125}}, {0x2, 0x7, {0x2, 0x401}}, {0x4, 0xc0, {0x1, 0xb}}, {0x800, 0x60, {0x3, 0xfffffc00}}, {0xf27, 0x9, {0x2, 0x9}}, {0x8, 0x5, {0x2, 0xfff}}, {0x0, 0x2, {0x0, 0xbdc1}}, {0x401, 0x1000, {0x2, 0xc3}}, {0x3, 0x1, {0x0, 0x6}}, {0x3ff, 0xfa, {0x2, 0x8c6}}, {0x8, 0x6, {0x1, 0x3}}, {0x3000, 0x0, {0x2, 0xf200}}, {0x8, 0x81, {0x2, 0x607b}}, {0x9, 0xf, {0x0, 0x40}}, {0xffff, 0xa97b, {0x2, 0x401}}, {0x9, 0x9, {0x3, 0xffffffff}}, {0x9, 0x6, {0x1, 0x5}}, {0x8000, 0x4, {0x7168f1f5012e6281, 0x9}}, {0xe, 0xcc8, {0x3, 0xffe00}}, {0xc2, 0x7, {0x1, 0xfffffffe}}, {0x80, 0x9, {0x2, 0x3}}, {0x0, 0xdc, {0x2, 0x1ff}}, {0x3ff, 0x2, {0x3, 0xff}}, {0x7, 0x3, {0x1, 0x7}}, {0x4, 0x9, {0x3, 0x4}}, {0x7, 0xff, {0x2, 0x200}}, {0xa7a0, 0x7ff, {0x1, 0x7b1}}, {0x2, 0x4, {0x0, 0x1}}, {0x7fff, 0x6, {0x0, 0x6f1ee2fb}}, {0x4, 0x0, {0x0, 0x8e}}, {0x6c46, 0x7, {0x2, 0x5}}, {0x5, 0x1ff, {0x3, 0x3}}, {0xb, 0x7ff, {0x3, 0x32}}, {0x0, 0x260e, {0x1, 0x2}}, {0x401, 0x8001, {0x2, 0x1000}}]}}}, {{0x254, 0x1, {{0x3, 0x7add}, 0x9, 0x2b, 0x6fe, 0x0, 0xb, 'syz1\x00', "f1cbd02ca75c401f80303004bbfe32335b542b1ea47bea5c0d48ab7113bf227d", "58fa4b31ee698a2992757bff46f2599426f26bdb719b1a46ffa7bff2d826ae60", [{0x9, 0x1, {0x0, 0x7}}, {0x8, 0xa11, {0x3, 0x7}}, {0x100, 0x1, {0x0, 0xffff}}, {0xfffc, 0x0, {0x2, 0x4}}, {0xd9, 0x0, {0x1, 0x26ab}}, {0x1, 0x8, {0x3, 0xf67}}, {0x2, 0xb, {0x0, 0x9}}, {0x200, 0x1b, {0x2, 0x362}}, {0x2, 0x7, {0x3, 0x800}}, {0x40, 0x2, {0x1, 0x8}}, {0x2, 0xf800, {0x1, 0x1}}, {0xd, 0x68b6, {0x3}}, {0x2, 0xffff, {0x1, 0x7}}, {0x6, 0xc, {0x1, 0x76}}, {0x895c, 0xc3, {0x2, 0x4}}, {0xe6b, 0xf, {0x2, 0x81}}, {0x3, 0x7, {0x0, 0x1}}, {0x3, 0x4, {0x3, 0x2}}, {0x5, 0x8, {0x0, 0x5f5}}, {0x7, 0x5, {0x3, 0x8}}, {0x5aa4, 0x0, {0x0, 0xfffffff9}}, {0x3ff, 0x1, {0x1, 0x9}}, {0x5, 0x4, {0x2, 0xd}}, {0x60a7, 0x1, {0x1, 0xffffffff}}, {0x2, 0xffc0, {0x2, 0x4}}, {0xa479, 0x1, {0x1}}, {0x9, 0x6, {0x1, 0x8}}, {0xfff, 0x1, {0x2, 0x401}}, {0x2b92, 0x9, {0x1, 0x3}}, {0xfff7, 0xf5, {0x2, 0x1}}, {0x7f, 0x115, {0x1, 0x400}}, {0x101, 0x7, {0x1, 0xa8e1}}, {0xe5, 0x4d, {0x2, 0x406}}, {0x74, 0x3, {0x1, 0x8}}, {0x3, 0x80, {0x2, 0x3}}, {0x7, 0x6, {0x3, 0x3ff}}, {0x7, 0x7, {0x2, 0x2}}, {0x4, 0xa9, {0x1, 0x1}}, {0x2, 0x7fff, {0x2, 0xd502}}, {0x2, 0xc, {0x0, 0x82}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffffa}, 0x80, 0x5, 0x4, 0x3, 0x10, 'syz0\x00', "a945ed30d091fad7d4c3b934dcd37da07746bacd410add9f23a6d4155392ebfe", "bb6c255996e1228282bcd923a261d1029453d580664c61da1919c29e400000b1", [{0x6, 0x81}, {0x1, 0x200, {0x3, 0xffff0001}}, {0x7, 0x8000, {0x3, 0x2d372107}}, {0xe, 0x4, {0x2, 0x1000}}, {0x9, 0xf4, {0x1, 0xffffffff}}, {0x3, 0xbfac, {0x2, 0x1}}, {0x1ff, 0xaea7, {0x2, 0x3}}, {0x0, 0x52, {0x2, 0x5}}, {0x800, 0x10, {0x2, 0xa16a}}, {0x0, 0x0, {0x2, 0xc4}}, {0x1, 0x4, {0x3, 0xd}}, {0x4, 0x122, {0x3, 0x2}}, {0x5, 0x5, {0x0, 0x5}}, {0xffff, 0x1, {0x1}}, {0x7, 0x1, {0x2, 0x5}}, {0xe, 0x0, {0x2, 0x7}}, {0x5, 0x9, {0x2, 0x6}}, {0x2, 0x8, {0x1, 0x1}}, {0x7, 0x2, {0x1, 0x2d5}}, {0x5, 0x81, {0x1, 0x6}}, {0xfc00, 0x101, {0x2, 0xfff}}, {0x8, 0x9, {0x3, 0x7fff}}, {0x0, 0x3, {0x2, 0x5}}, {0x8, 0x2, {0x1, 0x8}}, {0x1, 0x200, {0x1, 0x10000}}, {0x401, 0x9, {0x3, 0x4}}, {0x7ff, 0x5, {0x2, 0x6}}, {0x0, 0x53, {0x0, 0x7cad}}, {0x4, 0x5, {0x1, 0xff}}, {0x7, 0xfff8, {0x0, 0x10000}}, {0x4, 0xc52f, {0x0, 0x7}}, {0x8, 0x8, {0x1, 0x8}}, {0x3, 0x98, {0x2, 0x3}}, {0x1, 0x1, {0x1, 0x52fb}}, {0x8, 0x7f, {0x0, 0x8}}, {0xb7, 0x237, {0x0, 0xe54}}, {0x1ff, 0xfff8, {0x1, 0x5}}, {0x2, 0xa2, {0x1, 0x3}}, {0x4, 0xb, {0x3, 0x8}}, {0x1000, 0x9, {0x0, 0x96}}]}}}, {{0x254, 0x1, {{0x1, 0xd}, 0x10, 0x9, 0x5, 0x0, 0x24, 'syz1\x00', "429df27b62f05b2d754e979128e77adc5589948af692cdd3e0a674e94735cb2f", "ee67bbc49085e9e6325d7927e4d00536a6934dbbb195613b9300f1ab14720a7d", [{0x6, 0x1f, {0x2, 0xcf6}}, {0x4ca9, 0x1, {0x0, 0x1}}, {0x922, 0x9, {0x0, 0x2}}, {0x9, 0x5, {0x2, 0x7}}, {0x3ff, 0x3, {0x2, 0xfffffffc}}, {0x6, 0x4dd, {0x2, 0x3}}, {0x3, 0x6, {0x2}}, {0x81, 0x1, {0x1, 0xffffffff}}, {0x9f6, 0x9, {0x0, 0x8001}}, {0xfffc, 0x401, {0x3, 0x1}}, {0x2, 0xfff, {0x3, 0x10}}, {0x4, 0xe5, {0x0, 0x9}}, {0x7, 0x9, {0x3, 0x5}}, {0x1, 0x3, {0x1, 0xffff}}, {0x80, 0x0, {0x3, 0x51f}}, {0x40, 0x6, {0x2, 0x2}}, {0x3, 0xcdb1, {0x0, 0x4}}, {0x6, 0x2, {0x0, 0xb}}, {0x8000, 0x5, {0x2, 0xa42}}, {0x1ff, 0x2, {0x3, 0xd9db}}, {0x85e0, 0x2, {0x1, 0x400}}, {0x0, 0x42b7, {0x3, 0x1ff}}, {0x4, 0x0, {0x2, 0x6}}, {0x853, 0x7, {0x0, 0x5}}, {0x4, 0x2, {0x0, 0x8}}, {0xff, 0x6, {0x2, 0x7f}}, {0x6, 0x0, {0x0, 0x101}}, {0x94, 0x4, {0x3, 0xff}}, {0x7, 0xfff, {0x2, 0x3}}, {0x21a8, 0xd008, {0x1, 0x6}}, {0x9, 0x800, {0x3, 0x9}}, {0x2, 0x400, {0x2, 0xffffffff}}, {0x6, 0x0, {0x3, 0x6}}, {0x6, 0xe, {0x2, 0x1ff}}, {0x84, 0x7, {0x1, 0x3}}, {0x7, 0x8, {0x3, 0x19}}, {0x7f, 0x9, {0x3, 0x9}}, {0x0, 0x3, {0x1, 0x1}}, {0x3, 0x54, {0x0, 0x1513da68}}, {0xffff, 0xc15, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x9, 0x2, 0x1, 0x9, 0x22, 'syz1\x00', "f3dc56e4f16d2a30355ab6acfbee151306d91134126b6ea47c34d0e055675785", "3946a46acdc6f9d4ab49c67384705d685a26a0e00e13750116e96c8153f484eb", [{0x81, 0x7}, {0x2, 0x9e, {0x0, 0x7fffffff}}, {0x2, 0x4, {0x3, 0x80000001}}, {0x2fb8, 0x9, {0x2, 0x99b4}}, {0x6, 0x7, {0x2, 0x3ff}}, {0x81, 0x8, {0x0, 0x8}}, {0x2, 0x1, {0x0, 0xffff}}, {0x1ddb, 0x7f, {0x0, 0x9}}, {0x6, 0x8, {0x3, 0x9}}, {0x101, 0x45b, {0x1, 0xe}}, {0x2, 0x2af0, {0x0, 0x6}}, {0x8, 0x5, {0x3}}, {0xff, 0x3, {0x1, 0xffffffff}}, {0x6, 0x0, {0x0, 0x10001}}, {0x0, 0x0, {0x1, 0x8}}, {0xffff, 0xe, {0x1, 0x5}}, {0x2, 0x8, {0x2, 0x3}}, {0x8, 0x2, {0x3, 0x10}}, {0x1a, 0xffc3, {0x2, 0xfffff15e}}, {0x6, 0x6, {0x3, 0x47}}, {0x1, 0xb, {0x2, 0x7}}, {0x2, 0x5, {0x2, 0x9}}, {0x4, 0x2, {0x3}}, {0x6, 0x4, {0x1}}, {0x2, 0xfe, {0x1, 0xd71}}, {0x9, 0x101, {0x3, 0xfffffff8}}, {0x8, 0x9, {0x1}}, {0xfff, 0x3, {0x1, 0x4}}, {0x2, 0xbde, {0x2, 0xff}}, {0x4, 0x8, {0x3, 0x4}}, {0xfff8, 0x4a, {0x2, 0x3}}, {0x868, 0x2, {0x3, 0x4be}}, {0x101, 0x1, {0xdd9ab4994123803c, 0x3}}, {0x7, 0x400, {0x1, 0xffffff23}}, {0xe7, 0xfffd, {0x0, 0x90}}, {0x0, 0x0, {0x1, 0x1}}, {0x2, 0x9, {0x2, 0x7}}, {0x3, 0x4, {0x3, 0x7}}, {0x9, 0x6, {0x3, 0x3}}, {0x3, 0x3, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0xd0, 0xd, 0xffff, 0x2, 0x24, 'syz1\x00', "11c490b86fdd7dab02ebe0557bfde96959ba7b61cc425fb38349c6fcb2172ad0", "838a5acbd913c689bfa6b518d437235d4807a2f0dffa95175049b7b91dd3d935", [{0x0, 0x2, {0x1, 0x8}}, {0x5, 0x0, {0x1, 0x200}}, {0x9, 0x0, {0x2, 0xb}}, {0x3, 0x0, {0x2, 0x644}}, {0x800, 0x4, {0x1, 0x6}}, {0x3, 0x9, {0x3}}, {0x2, 0x2, {0x2, 0x7}}, {0x3, 0x200, {0x3, 0x7}}, {0xff, 0x0, {0x0, 0x3}}, {0x3, 0x6b8, {0x0, 0x6}}, {0x3, 0x87b, {0x0, 0x1000}}, {0x1, 0x1, {0x2, 0x101}}, {0x0, 0x4, {0x2, 0x6}}, {0x3, 0x2, {0x0, 0xc3}}, {0x4deb, 0x6, {0x0, 0xfff}}, {0x2, 0x8, {0x0, 0x666}}, {0x1, 0xffc0, {0x0, 0x3}}, {0x5, 0x24a, {0x1, 0xffff}}, {0x5, 0x9, {0x2, 0xfffffffa}}, {0x9, 0x5, {0x1, 0x100}}, {0x8001, 0x7, {0x0, 0x4}}, {0xa, 0x3, {0x3, 0x7}}, {0x8659, 0x6, {0x3}}, {0x2, 0x9f, {0x1, 0x5}}, {0xa, 0x8, {0x1, 0x40}}, {0xe2, 0x0, {0x2}}, {0x1, 0x8001, {0x2, 0x3}}, {0x9, 0x7, {0x0, 0xf}}, {0x9e8a, 0x682f, {0x3, 0x8}}, {0xfff8, 0x3ff, {0x1, 0x9}}, {0x7, 0x5, {0x0, 0x3ff}}, {0x8, 0x57, {0x1, 0x3}}, {0x1ff, 0x8, {0x1, 0x4}}, {0x2, 0x4, {0x0, 0x4}}, {0x1, 0xfffd, {0x2, 0xc}}, {0x14d, 0x80, {0x3, 0x1ff}}, {0xfff9, 0x8, {0x0, 0x33}}, {0x8, 0x8000, {0x3, 0x8}}, {0x6, 0xffff, {0x0, 0x5}}, {0x1000, 0x1400, {0x1, 0x80000001}}]}}}, {{0x254, 0x1, {{0x3, 0x4945b4b8}, 0x52, 0xd9, 0x9, 0x84d0, 0xf, 'syz1\x00', "6f5f6014b92424311ac0afd5270b26974101e843ef79367398c57948310184b9", "baa14c61fca5632373f80ee2cca5cbdc9fdf1ae6a3c7cfe9f4289b1aced6e157", [{0x2, 0x36, {0x0, 0x9}}, {0x8001, 0x7, {0x2, 0x3}}, {0xc8, 0x0, {0x3, 0x2}}, {0x5, 0x1, {0x1, 0x4}}, {0x0, 0x2, {0x1, 0x3}}, {0xdf82, 0x7, {0x3, 0x7}}, {0xfff7, 0xada, {0xcd1a08e4713e2bd8, 0x7fffffff}}, {0x4, 0x1, {0x2, 0x4}}, {0x2, 0x0, {0x3, 0x8}}, {0x3, 0x2, {0x1, 0xe}}, {0xb, 0x2, {0x2, 0x8}}, {0x3, 0x8000, {0x2}}, {0x1, 0x1, {0x3, 0x1}}, {0x1, 0x8001, {0x1, 0x9}}, {0x7, 0x8, {0x2, 0x401}}, {0x4, 0xe, {0x2, 0x5}}, {0x8, 0x8, {0x0, 0x67a}}, {0xb154, 0xff, {0x3, 0x800}}, {0x8000, 0x4, {0x3, 0x779b}}, {0xffff, 0x9, {0x2, 0x8}}, {0x101, 0xc309, {0x2, 0x4}}, {0x2, 0x6, {0x3, 0x2aaa}}, {0x0, 0x5, {0x0, 0x6}}, {0x2, 0x2, {0x0, 0x1}}, {0x5, 0xa4a, {0x3, 0x6}}, {0x200, 0x57fc, {0x3, 0x7ff}}, {0x8, 0xfff0, {0x2, 0x8001}}, {0x4, 0xb85d, {0x2, 0xff}}, {0xffff, 0x9, {0x2, 0x2}}, {0x1, 0x0, {0x1}}, {0x4, 0x5, {0x3, 0xfffffff9}}, {0xfffe, 0x0, {0x2, 0x2}}, {0x9, 0x7, {0x1, 0xff}}, {0x6, 0x263, {0x3, 0xfff}}, {0x4, 0x80, {0x1, 0x8001}}, {0xd1b, 0x8, {0x0, 0x59e}}, {0x5, 0x5, {0x1, 0x5}}, {0x4, 0x81, {0x1, 0xdf}}, {0x7f, 0x401}, {0x7, 0x6, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x4, 0x2, 0xcf, 0x6, 0xa, 'syz1\x00', "c442cbad04262e3f98920061b22fd1fc48f06191acf28e7f3fcd79abb9d40473", "e7bef7deca1c40821f92f2b96cfb899f19cb3279db7014ee5bee84ffaf61e24b", [{0x8, 0x7, {0x2, 0x8}}, {0xf, 0xb, {0x2, 0xfff}}, {0x2, 0x8, {0x2, 0xfffffff8}}, {0x5, 0x0, {0x2, 0x1}}, {0xde0, 0xc, {0x1, 0x3}}, {0x2, 0x7, {0x3, 0xd}}, {0x1, 0xe, {0x1, 0xfffffff8}}, {0x8, 0x61ac, {0x3, 0x6}}, {0x8, 0xe, {0x2, 0x80000000}}, {0x0, 0x100, {0x1, 0x6}}, {0x2, 0x9, {0x3, 0xd}}, {0xa, 0x5, {0x1, 0x8}}, {0x4, 0x6, {0x0, 0x5841}}, {0xfffc, 0x2, {0x3, 0xfffffe00}}, {0x48, 0x81, {0x0, 0x1}}, {0x0, 0x5, {0x0, 0x7}}, {0x4000, 0x1, {0x0, 0x4}}, {0xebd0, 0x0, {0x3}}, {0x7, 0x8, {0x0, 0x3}}, {0x9, 0x6, {0x3, 0x9}}, {0x3, 0xcf41, {0x2, 0x3}}, {0x8, 0x4, {0x3, 0xc}}, {0x400, 0x9, {0x1, 0x9}}, {0x80, 0x1, {0x2, 0x7fffffff}}, {0xc, 0x1, {0x3}}, {0x401, 0x8, {0x3, 0x800}}, {0x7, 0xf, {0x1, 0x5}}, {0x0, 0x8001, {0x0, 0x8}}, {0xfffe, 0x3, {0x0, 0x6}}, {0x6, 0x8, {0x0, 0x5}}, {0x66b, 0x6, {0x2, 0x6}}, {0x9, 0x502, {0x0, 0x14b}}, {0x85c3, 0xfffb, {0x3, 0x6}}, {0x0, 0x2, {0x1, 0xff}}, {0x323, 0x100, {0x2}}, {0x10, 0x7837, {0x0, 0x7}}, {0x9, 0x101, {0x2, 0x6}}, {0x9f, 0x4, {0x0, 0x9}}, {0xad, 0x7f, {0x0, 0x9}}, {0x0, 0x1ff, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0xd806}, 0xf9, 0xa, 0x9, 0xde84, 0x1d, 'syz0\x00', "37ef6b454747863a739477a3ad607110c4019b6a779cdff7deee5155ba78a569", "b0f1f2206096025c15fb82d956f58f7f27f7f49ca78b60a9951d12306cac6809", [{0x7, 0x7, {0x1, 0x1}}, {0xf96, 0x1, {0x1, 0x1}}, {0x400, 0x6, {0x1, 0x5}}, {0x9, 0x4, {0x3, 0x800}}, {0x8, 0x5, {0x1, 0x8}}, {0x1, 0x17, {0x1, 0x3585}}, {0x8, 0x7, {0x1, 0x4}}, {0x7, 0x6, {0x2, 0x7fff}}, {0x7ff, 0x8, {0x3, 0x4}}, {0x2, 0x2, {0x3, 0x8a1}}, {0x7fff, 0x7, {0x2, 0x7}}, {0x1ca, 0x5, {0x2, 0x4}}, {0x8, 0x5, {0x1}}, {0x1, 0x9, {0x2, 0x8}}, {0x6ed4, 0x6, {0x1, 0x3fe5}}, {0x2, 0x6, {0x2, 0x1}}, {0x8, 0x8, {0x1, 0xffffffff}}, {0x8000, 0x7, {0x1, 0x9178}}, {0x9, 0x31, {0x3, 0xff}}, {0xf, 0x4, {0x2, 0x3}}, {0x5, 0x321, {0x0, 0xffff}}, {0x2, 0x8001, {0x0, 0x401}}, {0x3, 0xa013, {0x3, 0x2}}, {0x8, 0x7ff, {0x3}}, {0x6, 0xc, {0x3, 0x10}}, {0x5, 0xcb, {0x1, 0xa}}, {0x9, 0x81, {0x3, 0x3}}, {0x7, 0x5, {0x3, 0x28000}}, {0x18, 0xdbf, {0x3, 0xffff}}, {0x9, 0x3, {0x1, 0x8001}}, {0xfff1, 0x7, {0x1, 0x7}}, {0x4, 0x200c}, {0x8001, 0x6a48, {0x1, 0x80000000}}, {0x8, 0xf367, {0x0, 0x10001}}, {0x5, 0x7, {0x1, 0xfffffffd}}, {0x4, 0xeea5, {0x2, 0x4}}, {0x699, 0x8000, {0x3, 0xc299}}, {0x8, 0x3, {0x3, 0x4}}, {0x3800, 0x8001, {0x3, 0xc}}, {0x5, 0x8, {0x1, 0x9}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) (async) getsockopt$netlink(r9, 0x10e, 0x7, &(0x7f0000002480)=""/37, &(0x7f00000024c0)=0x25) (async) read$FUSE(r6, &(0x7f0000002500)={0x2020}, 0x2020) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000004540)={0x2, {0x2, 0x0, 0x54, 0x6, 0x9, 0x4}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000004580), r6) (async) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f00000045c0)) (async) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000004600)="2697eed3a06f8d33f2814b201843320a7bf7852af3f5f4c66cd4a9614682aa1c1d9f1df597d08fbf2171785585cf8ccdc399ddadd69cbca860fefe60aaa1c135aaa511bcdd508b4a28f062e7f12703141d7c5c10556448cb42b7379acedfad04e316223efc7c3b231068a5fda414c67a0891d88ba90525e1862287a2380787e2fbec") (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004700), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x24, r10, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000004900)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004880)={0x40, r8, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xd0, 0x3}, {0x5, 0x2}, {0xb3, 0x6}, {0x3, 0x5}, {0x52}, {0x9, 0x4}, {0x6, 0x1}, {0x5, 0x7}, {0xd, 0x7}, {0xa, 0x2}, {0x10, 0x5}], "a217562379e8c0a2"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) 3m21.987813862s ago: executing program 0 (id=1314): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2000000000000003) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x3dcf, 0xc, 0xfffffffb, 0x0, 0x0, 0x2]}}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x0, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "1615211d18d9f717", "0350dac0552469771defd9a0ca6315217926732467253bd90b23d43cb6b07b2a", "fddec243", "b329d7ef622e5a21"}, 0x38) r7 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendfile(r6, r7, 0x0, 0xe74e) 3m21.144988858s ago: executing program 0 (id=1337): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r8 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(r8, &(0x7f0000000080)='./file1\x00', 0x728b2367235ab0a2) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r9 = dup(r2) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000feffef4e97e1e87786eb05a033504f92448b8d654e4d4ad28e9bba440478f78806d4e446765aeef5196ba29865c8bbceabcad293894a65581004c2923f"], 0x138) read$FUSE(r3, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="747208210000fbffffffffe575bf07", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c616e616d653dfa853e04bcba05ec0c1cfe71c32c64656275673d3078303030303030303030303030303030342c666f776e65723c", @ANYRESDEC=r10, @ANYBLOB=',rootcontext=system_u,fowner>', @ANYRESDEC=r10, @ANYBLOB=',fscontext=root,obj_role=,\x00']) r12 = syz_open_procfs(r11, &(0x7f0000000380)='stat\x00') mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) read$FUSE(r12, &(0x7f00000029c0)={0x2020}, 0x2020) write$P9_RSYMLINK(r0, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x152c3940369a41c6, 0x5, 0x8}}, 0x14) 3m20.234988706s ago: executing program 0 (id=1350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) pipe2$9p(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020310"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x19e) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3m5.150269131s ago: executing program 34 (id=1350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) pipe2$9p(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020310"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x19e) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m0.294608211s ago: executing program 5 (id=3704): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r0, 0x7aa3, 0x2, 0x8}) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x88a2}, @val={0x2, 0x80, 0x40, 0xe1, 0x10, 0x3a}, @x25={0x3, 0x6f, 0x0, "38b822c2461411283f54a6ba0300e6fa23b58b3226b673d115d317cc08ddb4eea82d0bb5c36ad17dc1309141640925d378f01c67eff0d8d5e0f3bae5d3dd972c0532e7ccd388232b12a46eb85f62e6bb41ac7d0572dbf4659ddbfe961d15fdc2622bf265"}}, 0x75) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r4 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000080)=',^\x00', &(0x7f00000000c0)='./file0\x00', r5) sendmmsg(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6c382ccb69434f02", "a6b3b6be08c3ba02e945de45490efc0ef54528d6726a902093be2838c1ed2264", "d9d1f4c2", "cbde04a76efcf227"}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x9]}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r7) 59.593500885s ago: executing program 2 (id=3717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @sack_perm, @window={0x3, 0x3, 0x7}, @timestamp, @sack_perm, @mss={0x2, 0xd}, @window={0x3, 0x7, 0x6}, @timestamp, @window={0x3, 0xc}, @mss={0x2, 0x80000001}], 0xa) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) (async) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) (async) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 59.483011257s ago: executing program 2 (id=3719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r1, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000080)={0x5, {{0xa, 0x4e20, 0xcc64, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}, {{0xa, 0x4e24, 0x80, @remote, 0x80}}}, 0x108) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x9d, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x91, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r9, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000500)={0x0, 0x10008e, 0x40000}, 0x20) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x66}, 0x22}, 0x1c) unshare(0x64000600) syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000c40)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 59.35064791s ago: executing program 5 (id=3721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fchmod(r1, 0x20049549e2a2d659) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r2}) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 59.255320172s ago: executing program 5 (id=3723): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040bd28340900000000040000e502000000092100000081220500090581032000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000d155546f000000"], 0x0}, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) unshare(0x22020600) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 56.362199938s ago: executing program 2 (id=3770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000004e40)) openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f00000003c0), 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f00000001c0)) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800000}}], 0x18}, 0x4044) close_range(r0, 0xffffffffffffffff, 0x0) 56.361758179s ago: executing program 2 (id=3771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x1, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 64) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) shutdown(r6, 0x1) (async) listen(r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) (async, rerun: 32) close_range(r7, 0xffffffffffffffff, 0x0) (rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) (async) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000c40)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 56.361013159s ago: executing program 6 (id=3772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000100)={'filter\x00', 0xb001, 0x4, 0x408, 0x238, 0x130, 0x238, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8000, 0x101}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@decrefs={0x40046307, 0x2}, @free_buffer, @free_buffer, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/212, 0x0, 0x2, 0x27}, @flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x2, 0xb}}, &(0x7f00000002c0)}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x1, 0x2f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)}}, @register_looper], 0x0, 0x0, 0x0}) 56.32237872s ago: executing program 6 (id=3773): syz_open_dev$usbfs(&(0x7f0000000080), 0x7f, 0x20000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da5"], 0x310) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=']) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @increfs], 0x0, 0x0, 0x0}) 56.30013666s ago: executing program 3 (id=3774): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x20, 0xa, 0x7, {0x7, 0xd, "90d551f0b7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd2c, 0x25dfd9fb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 56.27494029s ago: executing program 2 (id=3775): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070999ea364491"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100000000000000020001000000000000000141"], 0x34}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) syz_genetlink_get_family_id$nl802154(0x0, r2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x11, 0xfdff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x40240c4) r5 = socket$inet(0x2, 0x1, 0x1) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0xa, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mkdir(0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0xb, 0x400, 0x1, 0x52c5, 0x1, 0xd23, 0x6, 0xea0, 0x6, 0xda00, 0x8cae, 0x8001, 0x8, 0x9, 0xfff, 0x10, 0x4, 0x4fd9, 0x1, 0x101, 0x6, 0x2}}) socket$igmp6(0xa, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000fff7ffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 56.206305372s ago: executing program 6 (id=3776): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r1, 0x409, 0x5) pwrite64(r1, &(0x7f0000000000)="48ed", 0x2, 0x3) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f00000000c0)={0x1a, 0xe, 0x3}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r4, &(0x7f0000002bc0)={0x2020}, 0x2020) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz1\x00', {0x508, 0x7fff, 0x7, 0x1}, 0x100004a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x8, 0x0, 0x0, 0x4000000, 0x5, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0x1, 0x1, 0x3f, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x5, 0x0, 0x2, 0x0, 0xfffffff7, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x1d, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x80000001, 0x0, 0x15960318, 0x0, 0x0, 0xb, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x800000, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) recvmmsg(r7, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, &(0x7f0000001400)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) r9 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r9, 0x0) ftruncate(r9, 0x3) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x40400) 56.205885182s ago: executing program 6 (id=3777): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200840, 0x40) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00fb15050d6e199400c05fb82dab595404ccf564d3"], 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 56.194466772s ago: executing program 5 (id=3778): prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) (async, rerun: 32) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) (async, rerun: 32) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) (async) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000200)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000240)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000280)) (async) prctl$PR_GET_TSC(0x19, &(0x7f00000002c0)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000380)) prctl$PR_GET_TSC(0x19, &(0x7f00000003c0)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000400)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000440)) (async, rerun: 64) prctl$PR_GET_TSC(0x19, &(0x7f0000000480)) (async, rerun: 64) prctl$PR_GET_TSC(0x19, &(0x7f00000004c0)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000500)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000540)) prctl$PR_GET_TSC(0x19, &(0x7f0000000580)) prctl$PR_GET_TSC(0x19, &(0x7f00000005c0)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000600)) (async, rerun: 32) prctl$PR_GET_TSC(0x19, &(0x7f0000000640)) (async, rerun: 32) prctl$PR_GET_TSC(0x19, &(0x7f0000000680)) (async) prctl$PR_GET_TSC(0x19, &(0x7f00000006c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000700)) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000740)) 56.165120233s ago: executing program 6 (id=3779): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) (async) ioctl$TIOCCBRK(r0, 0x5428) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x2200, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r1, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020", 0x1a, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 56.158057323s ago: executing program 5 (id=3780): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000680)) (async, rerun: 64) ptrace$setregs(0xd, 0x0, 0x0, 0x0) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000073c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9006800000f01c166ba6100ec670fc79ac0910f20d835080000000f22d8df95000000003e67f36e0fc72e64660f388147500f08", 0x39}], 0x1, 0x52, 0x0, 0x0) (async, rerun: 32) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000bc0), 0x10) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x40000100000200) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x10, r7, 0x5d017000) (async) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000000)={0x2, 0x17, 0xfffc, 0x8001}, 0x8, 0x6, 0xc, 0x0, 0xffffff7d, 0x101, 0x0}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2880, 0x4) (async) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0x6) (async, rerun: 64) fsmount(r9, 0x0, 0xf1) (rerun: 64) 55.752588731s ago: executing program 6 (id=3781): syz_clone3(&(0x7f00000001c0)={0x184001000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/71, 0x47, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) close_range(0xffffffffffffffff, r0, 0x2) socketpair(0x29, 0x1, 0xffffffff, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x87, 0x19}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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") r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000006c0)='tasks\x00', 0x2, 0x0) write$evdev(r4, &(0x7f0000000700)=[{{0x0, 0xea60}, 0x2, 0x80, 0x80000001}, {{0x77359400}, 0x0, 0x800, 0xeec}], 0x30) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000740)={0x0, r2, 'id1\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000008c0)=0xe8) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r8, &(0x7f0000000900)='./file0\x00') r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', &(0x7f00000009c0)={'erspan0\x00', r7, 0x20, 0x8000, 0x40000000, 0x9, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0x38, 0x0, [{0x5, 0x10, "0190b2645c838156247dad766542"}, {0x7, 0x10, "40067e8a57e716a164aaf7a89f84"}, {0x5, 0x12, "70a3d5aedcd66fe347d4a869a896454f"}]}, @noop]}}}}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x7cd73381f26f687c) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/sockstat\x00') close_range(r1, r2, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r6) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x10) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000c00)="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") sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x114, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xe0, 0x8, "88630592baab9c2e289fe6e48544e8e6b97047679226b478b0f95267ab4ed972fd7259faa438f3b03d5b00cb03efd57dc8aac1970987b330c4463729dd9a46b8a6208fa1943241fa6ce330fce64e2ec598d4e163ada54b5e1b9c207b5c89f4286dffbb8521e6eb7ae6d52f91fd6b5052979b74f72702a8150b19c97dc90fd9630d664fff76477187634b346302a85edadb630fb80fe97ca7d42ff5f31d2bf53a93258da99713a591a58c5e0addb87a1c35571d67b6cc8d9a6361f75e0455bd73a14f388c0d845eb11d699313041001be37a9235c7e4eee29dc8e6c62"}]}, 0x114}}, 0x0) mknodat(r6, &(0x7f0000000f00)='./file0\x00', 0x400, 0x400) r12 = openat$incfs(r6, &(0x7f0000000f40)='.log\x00', 0x8000, 0xe5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000fc0)=[{r12, 0x21}, {r2, 0x452}, {r5, 0x20}, {r6, 0x400}, {r1, 0x2480}, {r13, 0x4478}, {r11, 0x4}, {r6, 0x390}], 0x8, 0x6) r14 = syz_open_dev$usbfs(&(0x7f0000001000), 0x0, 0x400140) poll(&(0x7f0000001040)=[{r14}, {r4, 0x131}, {r0, 0x4084}, {0xffffffffffffffff, 0xc8}, {r1, 0x20}, {r12, 0x384}], 0x6, 0x80000001) r15 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) close_range(r15, r14, 0x2) 54.599234143s ago: executing program 2 (id=3782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1/file0\x00', 0xe24ec0c916271a77) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x0) r4 = socket$inet(0x2, 0x4, 0xb) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000240), 0x4) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000280)=0x8, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="66643d6073babeecac5f04ea7bc14e5e4156f5a41107f0963e60c8dbb934087dff881c86dac83e1b6eebdd5856d9a7828ac27d60b7a11e2a8f73bd654167c37773ce14282ad4be1acde1a6a16f5c432bdc475c1f67ed74a0b09445800e4cbfd217afa10b22a5db1fc40ae916d4642a8976a76c35c4462fcf05461f", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESOCT=r5, @ANYRESOCT=r1]) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r5], 0x0, 0x0, 0x0}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, 0x0}, 0x20) mount$bpf(0x0, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), 0x1708a3, &(0x7f0000000500)=ANY=[@ANYBLOB="6769643da727b379cb70eba80ba72b8e3cc02a9244c7f5c5fe29e0b83db0562c9b0c352c8c9c43e966239475603b61f17f3edb8d6c23bfdd7593c600b2dc7cf554944bd2fbf1d6bdf0c2b0430ac3582ce1a737eae60903cff44dbc4311fe12d26018038e95d5780b19d890e6056a7fb63eec87289342ade2a7ff1adaad7c805c912013d1", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',dont_measure,\x00']) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000003140)=""/4096, 0x1000, 0x1, 0x1f}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x2000023}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) memfd_create(0x0, 0x20) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) 52.893869776s ago: executing program 3 (id=3783): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xfe15, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x2}, @release, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/45, 0x2d, 0x2, 0x36}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 49.854552516s ago: executing program 5 (id=3784): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@expire={0x104, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {{{@in6=@empty, @in=@broadcast, 0x4e22, 0x6, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0xd5}, {@in6=@remote, 0x4d5, 0x3c}, @in=@rand_addr=0x64010102, {0x515a9802, 0x7f, 0xffffffffffffffff, 0xd, 0x8000000000000000, 0xba, 0x7, 0xe}, {0x3f, 0xffffffffffffff4d, 0x6, 0x4}, {0x5, 0x10, 0x97}, 0x70bd25, 0x3500, 0xa, 0x7, 0x9, 0x8}, 0xd}, [@mark={0xc, 0x15, {0x35075a, 0x9}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x0) r4 = dup(r3) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0x7, 0x3, '\x00', 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x200004b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x9, 0x0, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}}, 0x40816) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r5, 0xd6, 0x0) 40.42112885s ago: executing program 35 (id=3781): syz_clone3(&(0x7f00000001c0)={0x184001000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/71, 0x47, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) close_range(0xffffffffffffffff, r0, 0x2) socketpair(0x29, 0x1, 0xffffffff, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x87, 0x19}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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") r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000006c0)='tasks\x00', 0x2, 0x0) write$evdev(r4, &(0x7f0000000700)=[{{0x0, 0xea60}, 0x2, 0x80, 0x80000001}, {{0x77359400}, 0x0, 0x800, 0xeec}], 0x30) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000740)={0x0, r2, 'id1\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000008c0)=0xe8) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r8, &(0x7f0000000900)='./file0\x00') r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', &(0x7f00000009c0)={'erspan0\x00', r7, 0x20, 0x8000, 0x40000000, 0x9, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0x38, 0x0, [{0x5, 0x10, "0190b2645c838156247dad766542"}, {0x7, 0x10, "40067e8a57e716a164aaf7a89f84"}, {0x5, 0x12, "70a3d5aedcd66fe347d4a869a896454f"}]}, @noop]}}}}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x7cd73381f26f687c) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/sockstat\x00') close_range(r1, r2, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r6) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x10) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000c00)="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") sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x114, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xe0, 0x8, "88630592baab9c2e289fe6e48544e8e6b97047679226b478b0f95267ab4ed972fd7259faa438f3b03d5b00cb03efd57dc8aac1970987b330c4463729dd9a46b8a6208fa1943241fa6ce330fce64e2ec598d4e163ada54b5e1b9c207b5c89f4286dffbb8521e6eb7ae6d52f91fd6b5052979b74f72702a8150b19c97dc90fd9630d664fff76477187634b346302a85edadb630fb80fe97ca7d42ff5f31d2bf53a93258da99713a591a58c5e0addb87a1c35571d67b6cc8d9a6361f75e0455bd73a14f388c0d845eb11d699313041001be37a9235c7e4eee29dc8e6c62"}]}, 0x114}}, 0x0) mknodat(r6, &(0x7f0000000f00)='./file0\x00', 0x400, 0x400) r12 = openat$incfs(r6, &(0x7f0000000f40)='.log\x00', 0x8000, 0xe5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000fc0)=[{r12, 0x21}, {r2, 0x452}, {r5, 0x20}, {r6, 0x400}, {r1, 0x2480}, {r13, 0x4478}, {r11, 0x4}, {r6, 0x390}], 0x8, 0x6) r14 = syz_open_dev$usbfs(&(0x7f0000001000), 0x0, 0x400140) poll(&(0x7f0000001040)=[{r14}, {r4, 0x131}, {r0, 0x4084}, {0xffffffffffffffff, 0xc8}, {r1, 0x20}, {r12, 0x384}], 0x6, 0x80000001) r15 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) close_range(r15, r14, 0x2) 27.16290742s ago: executing program 3 (id=3786): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10, 0x0) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) (rerun: 64) setfsgid(r2) (async) setfsgid(r2) (async) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) (rerun: 64) setresuid(0xee01, 0x0, 0x0) setfsuid(0x0) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, 0x0) 26.760748797s ago: executing program 36 (id=3784): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@expire={0x104, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {{{@in6=@empty, @in=@broadcast, 0x4e22, 0x6, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0xd5}, {@in6=@remote, 0x4d5, 0x3c}, @in=@rand_addr=0x64010102, {0x515a9802, 0x7f, 0xffffffffffffffff, 0xd, 0x8000000000000000, 0xba, 0x7, 0xe}, {0x3f, 0xffffffffffffff4d, 0x6, 0x4}, {0x5, 0x10, 0x97}, 0x70bd25, 0x3500, 0xa, 0x7, 0x9, 0x8}, 0xd}, [@mark={0xc, 0x15, {0x35075a, 0x9}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x0) r4 = dup(r3) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0x7, 0x3, '\x00', 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x200004b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x9, 0x0, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}}, 0x40816) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r5, 0xd6, 0x0) 23.184376707s ago: executing program 37 (id=3782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1/file0\x00', 0xe24ec0c916271a77) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x0) r4 = socket$inet(0x2, 0x4, 0xb) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000240), 0x4) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000280)=0x8, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="66643d6073babeecac5f04ea7bc14e5e4156f5a41107f0963e60c8dbb934087dff881c86dac83e1b6eebdd5856d9a7828ac27d60b7a11e2a8f73bd654167c37773ce14282ad4be1acde1a6a16f5c432bdc475c1f67ed74a0b09445800e4cbfd217afa10b22a5db1fc40ae916d4642a8976a76c35c4462fcf05461f", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESOCT=r5, @ANYRESOCT=r1]) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r5], 0x0, 0x0, 0x0}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, 0x0}, 0x20) mount$bpf(0x0, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), 0x1708a3, &(0x7f0000000500)=ANY=[@ANYBLOB="6769643da727b379cb70eba80ba72b8e3cc02a9244c7f5c5fe29e0b83db0562c9b0c352c8c9c43e966239475603b61f17f3edb8d6c23bfdd7593c600b2dc7cf554944bd2fbf1d6bdf0c2b0430ac3582ce1a737eae60903cff44dbc4311fe12d26018038e95d5780b19d890e6056a7fb63eec87289342ade2a7ff1adaad7c805c912013d1", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',dont_measure,\x00']) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000003140)=""/4096, 0x1000, 0x1, 0x1f}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x2000023}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) memfd_create(0x0, 0x20) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) 22.724940746s ago: executing program 3 (id=3789): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) truncate(&(0x7f0000000040)='./file0\x00', 0x1) 21.581228359s ago: executing program 3 (id=3790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, r6, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r8) r9 = getpid() r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r10, &(0x7f0000001400)={0x2020}, 0x2020) r11 = syz_pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000280)={0x0, 0x9, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r7], 0x14}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x8fe, 0x12) r13 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) read$FUSE(r14, &(0x7f0000001100)={0x2020}, 0x2020) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2404}, {r13, 0x8}], 0x2, 0x101) ioctl$KVM_RUN(r7, 0xae80, 0x0) 18.4539161s ago: executing program 3 (id=3791): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff}, 0xffffffffffffff66) close_range(r0, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000010c0)='~[\x1d\xe81\xc7 /)\x1d\x00\x9f\xf7\xc5\\R\xe6\x05/n\x1c\xf3B\x83\xf8p\xaa\xa9\x11P\xb1\xf9\xd4I\xc0\xf0\x15\xb0\xe7', 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/171, 0xab) r4 = socket$inet(0x2, 0xa, 0x9) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x40014, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xb55}], 0x7, 0x40000100, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) userfaultfd(0x801) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'wlan1\x00', 0x800}) 0s ago: executing program 38 (id=3791): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff}, 0xffffffffffffff66) close_range(r0, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000010c0)='~[\x1d\xe81\xc7 /)\x1d\x00\x9f\xf7\xc5\\R\xe6\x05/n\x1c\xf3B\x83\xf8p\xaa\xa9\x11P\xb1\xf9\xd4I\xc0\xf0\x15\xb0\xe7', 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/171, 0xab) r4 = socket$inet(0x2, 0xa, 0x9) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x40014, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xb55}], 0x7, 0x40000100, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) userfaultfd(0x801) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'wlan1\x00', 0x800}) kernel console output (not intermixed with test programs): ecutor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff36cf8ebe9 code=0x0 [ 156.678531][ T7479] rust_binder: Write failure EINVAL in pid:376 [ 156.763684][ T7486] fuse: Bad value for 'fd' [ 157.360858][ T7504] tipc: New replicast peer: 255.255.255.255 [ 157.368765][ T7504] tipc: Enabled bearer , priority 10 [ 157.400604][ T7506] rust_binder: 391: no such ref 1 [ 157.406448][ T7506] rust_binder: Write failure EFAULT in pid:391 [ 157.406775][ T7509] overlayfs: failed to resolve './file1': -2 [ 157.419211][ T7513] __vm_enough_memory: pid: 7513, comm: syz.6.2320, bytes: 18014402804453376 not enough memory for the allocation [ 157.421791][ T36] audit: type=1400 audit(2000000038.640:567): avc: denied { read write } for pid=7512 comm="syz.6.2320" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.432994][ T7513] __vm_enough_memory: pid: 7513, comm: syz.6.2320, bytes: 18014402804453376 not enough memory for the allocation [ 157.468065][ T36] audit: type=1400 audit(2000000038.640:568): avc: denied { open } for pid=7512 comm="syz.6.2320" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.498194][ T36] audit: type=1400 audit(2000000038.640:569): avc: denied { ioctl } for pid=7512 comm="syz.6.2320" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.525486][ T36] audit: type=1400 audit(2000000038.640:570): avc: denied { map } for pid=7512 comm="syz.6.2320" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.573540][ T7522] netlink: 'syz.3.2323': attribute type 4 has an invalid length. [ 157.634259][ T7528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.634296][ T7528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 157.635693][ T7529] netlink: 'syz.3.2323': attribute type 4 has an invalid length. [ 157.683367][ T7531] rust_binder: Error while translating object. [ 157.683430][ T7531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 157.689745][ T7531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:405 [ 157.889383][ T7554] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2335'. [ 157.970692][ T7571] overlayfs: failed to clone upperpath [ 157.994459][ T7573] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 158.168808][ T7568] netlink: 'syz.6.2340': attribute type 27 has an invalid length. [ 158.176866][ T7569] netlink: 'syz.6.2340': attribute type 27 has an invalid length. [ 158.475790][ T7593] tipc: Enabling of bearer rejected, failed to enable media [ 158.561048][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 158.783988][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.793591][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.995745][ T7610] veth1: entered allmulticast mode [ 159.001715][ T7609] veth1: left allmulticast mode [ 159.015376][ T7614] 9pnet_fd: Insufficient options for proto=fd [ 159.021622][ T6591] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 159.182973][ T6591] usb 7-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 16 [ 159.193169][ T6591] usb 7-1: config 1 interface 0 has no altsetting 0 [ 159.202008][ T6591] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.211346][ T6591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.220115][ T6591] usb 7-1: Product: Т [ 159.224236][ T6591] usb 7-1: Manufacturer: ᵎ춈 [ 159.229277][ T6591] usb 7-1: SerialNumber: ⡵廤쳣è©ìŒˆì¸ƒë…“霼짼峃㖑ꈹ겹者嚷ᴺä¿é™‹Õ­äŠè–™ä•šè—䯤砀è‰ï¼¿å²€â‹–ᾀᛑó¾¶á™»ï•¡ã¦¡ëƒªëžˆë¦¦é¤‚䊩á­ï‘ºä¬†æ‘¨à¬â‹³ê¬¡ã«¶í é£¹å¸€ä°çž¬è®‚ï²â›¬à¶Œëž®è§›é˜µâ±ìŠ± è¾–ì¼ [ 159.253239][ T7608] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 159.463606][ T36] audit: type=1400 audit(2000000040.690:571): avc: denied { setattr } for pid=7606 comm="syz.6.2352" name="HCI" dev="sockfs" ino=35671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.488232][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.497237][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.509481][ T6591] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 4 proto 3 vid 0x0525 pid 0xA4A8 [ 159.523116][ T6591] usb 7-1: USB disconnect, device number 16 [ 159.530816][ T6591] usblp0: removed [ 160.022077][ T7646] bridge0: entered allmulticast mode [ 160.301612][ T6591] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 160.431514][ T6591] usb 7-1: device descriptor read/64, error -71 [ 160.513074][ T7665] cgroup: noprefix used incorrectly [ 160.671574][ T6591] usb 7-1: device descriptor read/64, error -71 [ 160.877542][ T7686] tmpfs: Unsupported parameter 'mpol' [ 160.884375][ T7688] tmpfs: Unsupported parameter 'mpol' [ 160.911526][ T6591] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 161.051546][ T6591] usb 7-1: device descriptor read/64, error -71 [ 161.291516][ T6591] usb 7-1: device descriptor read/64, error -71 [ 161.401647][ T6591] usb usb7-port1: attempt power cycle [ 161.761594][ T6591] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 161.782808][ T6591] usb 7-1: device descriptor read/8, error -71 [ 161.855943][ T7767] 9pnet_fd: Insufficient options for proto=fd [ 161.912907][ T6591] usb 7-1: device descriptor read/8, error -71 [ 162.151547][ T6591] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 162.172705][ T6591] usb 7-1: device descriptor read/8, error -71 [ 162.210693][ T7792] overlayfs: failed to clone upperpath [ 162.302449][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2420'. [ 162.311580][ T6591] usb 7-1: device descriptor read/8, error -71 [ 162.401296][ T36] audit: type=1326 audit(2000000043.620:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.2423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f609b38ebe9 code=0x0 [ 162.424275][ T6591] usb usb7-port1: unable to enumerate USB device [ 162.958837][ T7817] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 162.988234][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2428'. [ 163.142998][ T7834] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 163.150768][ T7834] rust_binder: Write failure EINVAL in pid:455 [ 163.269775][ T7843] netlink: 'syz.2.2436': attribute type 27 has an invalid length. [ 163.284023][ T7843] lo: entered promiscuous mode [ 163.288795][ T7843] lo: entered allmulticast mode [ 163.294528][ T7843] tunl0: entered promiscuous mode [ 163.299599][ T7843] tunl0: entered allmulticast mode [ 163.305435][ T7843] gre0: entered promiscuous mode [ 163.310425][ T7843] gre0: entered allmulticast mode [ 163.316145][ T7843] gretap0: entered promiscuous mode [ 163.323131][ T7843] gretap0: entered allmulticast mode [ 163.328576][ T7843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.600298][ T7878] overlayfs: failed to resolve './file0': -2 [ 163.608276][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 163.736572][ T7909] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2456'. [ 164.604760][ T7925] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 164.613156][ T7925] rust_binder: Write failure EINVAL in pid:472 [ 164.753974][ T36] audit: type=1400 audit(2000000045.980:573): avc: denied { append } for pid=7932 comm="syz.6.2465" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.799205][ T7935] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2466'. [ 164.819628][ T7939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7939 comm=syz.3.2468 [ 164.940928][ T7954] rust_binder: Error in use_page_slow: ESRCH [ 164.940947][ T7954] rust_binder: use_range failure ESRCH [ 164.947450][ T7954] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 164.953161][ T7954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.961184][ T7954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:497 [ 165.064270][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.321575][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 165.352876][ T36] audit: type=1400 audit(2000000046.580:574): avc: denied { create } for pid=7966 comm="syz.5.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 165.383018][ T7968] overlayfs: failed to clone lowerpath [ 165.390173][ T7968] overlayfs: failed to resolve './file1': -2 [ 165.472667][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.483593][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.496499][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 165.505593][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.514326][ T10] usb 7-1: config 0 descriptor?? [ 165.923439][ T10] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 165.930470][ T10] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 165.943092][ T10] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 165.950532][ T10] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 165.957762][ T10] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 165.964953][ T10] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 165.971980][ T10] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 165.979942][ T10] lenovo 0003:17EF:60EE.000B: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0 [ 166.186020][ T36] audit: type=1400 audit(2000000047.410:575): avc: denied { write } for pid=8004 comm="syz.3.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.531429][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2509'. [ 167.081568][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.087731][ T411] Bluetooth: hci0: command 0x1003 tx timeout [ 167.096876][ T10] usb 7-1: USB disconnect, device number 21 [ 167.643671][ T36] audit: type=1326 audit(2000000048.870:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7fc00000 [ 167.671666][ T8098] ./cgroup: Can't lookup blockdev [ 167.766366][ T8113] rust_binder: Write failure EFAULT in pid:511 [ 167.838151][ T8118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 167.850951][ T8118] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 167.861379][ T8118] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:513 [ 167.883535][ T31] rust_binder: 8117: removing orphan mapping 0:24 [ 167.951718][ T8133] tmpfs: Unknown parameter 'nV¨¼æ±Âc¶o¶©G¯swap' [ 167.958572][ T8133] rust_binder: Error while translating object. [ 167.958615][ T8133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 167.965509][ T8133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:518 [ 168.002567][ T8135] rust_binder: 520: no such ref 0 [ 168.046263][ T8146] netlink: 'syz.6.2543': attribute type 13 has an invalid length. [ 168.065857][ T8148] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 168.377181][ T36] audit: type=1326 audit(2000000049.600:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f609b38ebe9 code=0x7fc00000 [ 168.598260][ T8179] 9pnet_fd: Insufficient options for proto=fd [ 169.525055][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2568'. [ 169.649506][ T8243] incfs: mount failed -22 [ 169.661735][ T8243] rust_binder: 576: no such ref 1 [ 169.666954][ T8243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:576 [ 169.703072][ T8256] can: request_module (can-proto-0) failed. [ 169.867212][ T8271] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾ)Ä‘JùýÊ×mãe`ñ¬u3 is not valid (left unmapped). [ 169.942483][ T8279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=8279 comm=syz.5.2586 [ 170.098515][ T8301] netlink: 'syz.2.2596': attribute type 13 has an invalid length. [ 170.106847][ T8301] erspan0: refused to change device tx_queue_len [ 170.116047][ T8301] tipc: Enabling of bearer rejected, failed to enable media [ 170.134229][ T8303] netlink: 'syz.2.2597': attribute type 16 has an invalid length. [ 170.142419][ T8303] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2597'. [ 170.152962][ T8303] overlayfs: failed to clone upperpath [ 170.548612][ T8314] KVM: debugfs: duplicate directory 8314-5 [ 170.581079][ T8316] netlink: 'syz.5.2602': attribute type 4 has an invalid length. [ 170.588954][ T8316] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2602'. [ 170.598495][ T8316] netlink: 'syz.5.2602': attribute type 1 has an invalid length. [ 170.606387][ T8316] netlink: 'syz.5.2602': attribute type 2 has an invalid length. [ 170.670987][ T8318] rust_binder: Write failure EFAULT in pid:587 [ 170.789364][ T8330] rust_binder: Error while translating object. [ 170.795906][ T8330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.802304][ T8330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 177.819640][ T8362] netlink: 'syz.5.2619': attribute type 29 has an invalid length. [ 177.834833][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2619'. [ 177.943113][ T8377] veth1: entered allmulticast mode [ 177.952585][ T8381] overlayfs: failed to clone upperpath [ 177.958573][ T8376] veth1: left allmulticast mode [ 178.061516][ T8391] 9pnet_fd: Insufficient options for proto=fd [ 178.133080][ T36] audit: type=1326 audit(2000000059.360:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.2.2630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f609b38ebe9 code=0x0 [ 178.488346][ T8413] overlayfs: failed to resolve './file0': -2 [ 178.623489][ T8423] 9pnet_fd: Insufficient options for proto=fd [ 178.914576][ T8427] netlink: 'syz.3.2640': attribute type 27 has an invalid length. [ 178.923281][ T8427] fuse: Unknown parameter 'f$' [ 179.011064][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2644'. [ 179.021391][ T1875] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.151242][ T36] audit: type=1400 audit(2000000060.370:579): avc: denied { setopt } for pid=8466 comm="syz.5.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.201531][ T36] audit: type=1400 audit(2000000060.370:580): avc: denied { setattr } for pid=8468 comm="syz.5.2654" path="socket:[40079]" dev="sockfs" ino=40079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.511514][ T64] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 179.641687][ T64] usb 7-1: device descriptor read/64, error -71 [ 179.881582][ T64] usb 7-1: device descriptor read/64, error -71 [ 180.121609][ T64] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 180.251508][ T64] usb 7-1: device descriptor read/64, error -71 [ 180.491494][ T64] usb 7-1: device descriptor read/64, error -71 [ 180.611637][ T64] usb usb7-port1: attempt power cycle [ 180.951586][ T64] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 180.972904][ T64] usb 7-1: device descriptor read/8, error -71 [ 181.081595][ T411] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.081632][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 181.096449][ T8438] can0: slcan on ptm0. [ 181.103736][ T64] usb 7-1: device descriptor read/8, error -71 [ 181.172483][ T8458] can0 (unregistered): slcan off ptm0. [ 181.341604][ T64] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 181.362938][ T64] usb 7-1: device descriptor read/8, error -71 [ 181.492766][ T64] usb 7-1: device descriptor read/8, error -71 [ 181.601726][ T64] usb usb7-port1: unable to enumerate USB device [ 187.367123][ T8603] rust_binder: Error while translating object. [ 187.367166][ T8603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.373454][ T8603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617 [ 187.420858][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 187.496657][ T36] audit: type=1400 audit(2000000068.720:581): avc: denied { listen } for pid=8618 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.727645][ T8659] /dev/rnullb0: Can't lookup blockdev [ 187.796373][ T45] usb 6-1: USB disconnect, device number 3 [ 187.897696][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.904818][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.911987][ T8666] bridge_slave_0: entered allmulticast mode [ 187.918296][ T8666] bridge_slave_0: entered promiscuous mode [ 187.924698][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.931889][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.939139][ T8666] bridge_slave_1: entered allmulticast mode [ 187.945510][ T8666] bridge_slave_1: entered promiscuous mode [ 187.990097][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.997280][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.004759][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.011831][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.031906][ T1875] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.039317][ T1875] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.049752][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.056923][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.066461][ T1875] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.073615][ T1875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.099342][ T8666] veth0_vlan: entered promiscuous mode [ 188.112658][ T8666] veth1_macvtap: entered promiscuous mode [ 188.143239][ T8677] rust_binder: Error while translating object. [ 188.143301][ T8677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 188.149518][ T8677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 188.392635][ T36] audit: type=1400 audit(2000000069.620:582): avc: denied { read } for pid=8693 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.423330][ T8697] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2711'. [ 188.428187][ T36] audit: type=1400 audit(2000000069.620:583): avc: denied { write } for pid=8693 comm="syz.6.2716" path="socket:[39835]" dev="sockfs" ino=39835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.517824][ T8721] x_tables: duplicate underflow at hook 1 [ 188.523815][ T8721] x_tables: duplicate underflow at hook 1 [ 188.529776][ T8721] x_tables: duplicate underflow at hook 1 [ 188.536055][ T8721] x_tables: duplicate underflow at hook 1 [ 188.542350][ T8721] x_tables: duplicate underflow at hook 1 [ 188.548162][ T8721] x_tables: duplicate underflow at hook 1 [ 188.554168][ T8721] x_tables: duplicate underflow at hook 1 [ 188.560008][ T8721] x_tables: duplicate underflow at hook 1 [ 188.566072][ T8721] x_tables: duplicate underflow at hook 1 [ 188.572541][ T8721] x_tables: duplicate underflow at hook 1 [ 188.999468][ T1875] Bluetooth: hci1: Frame reassembly failed (-84) [ 189.362201][ T8732] can: request_module (can-proto-3) failed. [ 189.379118][ T8737] /dev/loop0: Can't lookup blockdev [ 189.421350][ T8747] overlayfs: conflicting options: userxattr,metacopy=on [ 189.437393][ T8750] overlayfs: failed to clone upperpath [ 190.065983][ T8774] tipc: Enabling of bearer rejected, failed to enable media [ 190.521590][ T438] Bluetooth: hci0: command 0x1003 tx timeout [ 190.521590][ T411] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.001554][ T411] Bluetooth: hci1: command 0x1003 tx timeout [ 191.001554][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 191.139583][ T8805] netlink: 'syz.3.2757': attribute type 4 has an invalid length. [ 191.422609][ T8820] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 191.732824][ T8842] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2768'. [ 191.781566][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 191.826587][ T8854] sit0: entered promiscuous mode [ 191.833560][ T8854] netlink: 'syz.3.2772': attribute type 1 has an invalid length. [ 191.842962][ T8854] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2772'. [ 191.853438][ T8854] fuse: Unknown parameter '0x00000000000000000x0000000000000007' [ 191.952684][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.965595][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.975116][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.983401][ T31] usb 6-1: Product: syz [ 191.987671][ T31] usb 6-1: Manufacturer: syz [ 191.992565][ T31] usb 6-1: SerialNumber: syz [ 192.023122][ T8864] 9pnet_fd: Insufficient options for proto=fd [ 192.411534][ T970] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 192.564226][ T970] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 192.573557][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.581724][ T970] usb 7-1: Product: syz [ 192.585930][ T970] usb 7-1: Manufacturer: syz [ 192.590717][ T970] usb 7-1: SerialNumber: syz [ 192.899435][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2798'. [ 192.942913][ T8941] overlayfs: failed to clone upperpath [ 193.003939][ T31] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 193.010860][ T31] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 193.018613][ T31] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 193.043463][ T970] rtl8150 7-1:1.0: couldn't reset the device [ 193.049717][ T970] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 193.059158][ T970] usb 7-1: USB disconnect, device number 26 [ 193.411115][ T8827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 193.625686][ T8969] rust_binder: 8968 RLIMIT_NICE not set [ 193.642860][ T970] rust_binder: 8967: removing orphan mapping 0:4248 [ 193.694276][ T8976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.753235][ T970] rust_binder: 8975: removing orphan mapping 0:24 [ 193.776024][ T8980] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 193.803286][ T36] audit: type=1400 audit(2000000075.030:584): avc: denied { ioctl } for pid=8981 comm="syz.6.2814" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 193.852252][ T8985] 9pnet_fd: Insufficient options for proto=fd [ 193.878715][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 193.926442][ T8991] kvm: kvm [8990]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 194.091395][ T1875] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.152837][ T8999] 9pnet_fd: Insufficient options for proto=fd [ 194.180182][ T9003] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2823'. [ 194.548585][ T31] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 194.557615][ T31] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 194.581568][ T31] usb 6-1: USB disconnect, device number 4 [ 194.589028][ T31] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 194.911554][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 195.064379][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 195.071586][ T31] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.084786][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 195.094093][ T31] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 195.103287][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.111814][ T31] usb 6-1: Product: syz [ 195.121763][ T31] usb 6-1: Manufacturer: syz [ 195.126488][ T31] usb 6-1: SerialNumber: syz [ 195.224220][ T9047] netlink: 37 bytes leftover after parsing attributes in process `syz.2.2838'. [ 195.343526][ T31] usbhid 6-1:1.0: can't add hid device: -71 [ 195.349863][ T31] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 195.359539][ T31] usb 6-1: USB disconnect, device number 5 [ 195.858653][ T9066] /dev/sr0: Can't lookup blockdev [ 196.121633][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.127912][ T411] Bluetooth: hci0: command 0x1003 tx timeout [ 196.201565][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 196.353008][ T10] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 196.361341][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.371728][ T10] usb 6-1: config 0 has no interface number 0 [ 196.379445][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 196.388631][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.397183][ T10] usb 6-1: Product: syz [ 196.401522][ T10] usb 6-1: Manufacturer: syz [ 196.406136][ T10] usb 6-1: SerialNumber: syz [ 196.411371][ T10] usb 6-1: config 0 descriptor?? [ 196.619671][ T9080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 196.619710][ T9080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:27 [ 196.629824][ T1522] usb 6-1: USB disconnect, device number 6 [ 196.660759][ T9100] /dev/rnullb0: Can't open blockdev [ 196.675091][ T9102] rust_binder: Write failure EFAULT in pid:711 [ 196.689739][ T9104] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 196.969223][ T36] audit: type=1400 audit(2000000078.190:585): avc: denied { write } for pid=10 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41897 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 197.381548][ T1522] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 197.532913][ T1522] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.543987][ T1522] usb 6-1: config 1 interface 0 has no altsetting 0 [ 197.552238][ T1522] usb 6-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.40 [ 197.561365][ T1522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.569736][ T1522] usb 6-1: Product: syz [ 197.574127][ T1522] usb 6-1: Manufacturer: syz [ 197.578888][ T1522] usb 6-1: SerialNumber: syz [ 197.751566][ T10] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 197.790244][ T1522] usbhid 6-1:1.0: can't add hid device: -71 [ 197.796337][ T1522] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 197.805555][ T1522] usb 6-1: USB disconnect, device number 7 [ 197.867659][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2870'. [ 197.877312][ T9138] 9pnet_fd: Insufficient options for proto=fd [ 197.893380][ T9140] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2871'. [ 197.902638][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.913463][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 197.925333][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 197.961499][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.983004][ T10] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 198.011496][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.019644][ T10] usb 7-1: Product: syz [ 198.031489][ T10] usb 7-1: Manufacturer: syz [ 198.036143][ T10] usb 7-1: SerialNumber: syz [ 198.052491][ T10] usb 7-1: config 0 descriptor?? [ 198.059456][ T9136] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 198.082676][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input14 [ 198.174716][ T12] bridge_slave_1: left allmulticast mode [ 198.180426][ T12] bridge_slave_1: left promiscuous mode [ 198.187309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.196290][ T12] tipc: Resetting bearer [ 198.224557][ T12] tipc: Disabling bearer [ 198.275963][ T10] usb 7-1: USB disconnect, device number 27 [ 198.351645][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.358882][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.366324][ T9158] bridge_slave_0: entered allmulticast mode [ 198.372831][ T9158] bridge_slave_0: entered promiscuous mode [ 198.379176][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.386516][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.393913][ T9158] bridge_slave_1: entered allmulticast mode [ 198.400522][ T9158] bridge_slave_1: entered promiscuous mode [ 198.416282][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2883'. [ 198.474613][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.481724][ T9158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.489041][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.496195][ T9158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.504176][ T12] tipc: Disabling bearer [ 198.509823][ T12] tipc: Left network mode [ 198.516724][ T12] veth1_macvtap: left promiscuous mode [ 198.522804][ T12] veth0_vlan: left promiscuous mode [ 198.580307][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.591080][ T1875] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.598201][ T1875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.624724][ T9158] veth0_vlan: entered promiscuous mode [ 198.640368][ T9158] veth1_macvtap: entered promiscuous mode [ 198.683692][ T9195] incfs: Error accessing: ./file0. [ 198.689083][ T9194] incfs: Error accessing: ./file0. [ 198.691648][ T9195] incfs: mount failed -20 [ 198.694678][ T9194] incfs: mount failed -20 [ 198.719574][ T9197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2886'. [ 198.729492][ T9197] rust_binder: Write failure EFAULT in pid:7 [ 198.758161][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 198.801844][ T31] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 198.837550][ T9207] loop2: detected capacity change from 0 to 7 [ 198.890946][ T9217] /dev/rnullb0: Can't open blockdev [ 198.952667][ T31] usb 6-1: LPM exit latency is zeroed, disabling LPM. [ 198.960734][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 198.971591][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.998036][ T31] usb 6-1: string descriptor 0 read error: -22 [ 199.028757][ T31] usb 6-1: New USB device found, idVendor=0eef, idProduct=7302, bcdDevice= 0.40 [ 199.052127][ T9236] 9pnet_fd: Insufficient options for proto=fd [ 199.067663][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.086693][ T9190] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 199.136221][ T9240] can0: slcan on ttyS3. [ 199.208510][ T9240] can0 (unregistered): slcan off ttyS3. [ 199.252133][ T9250] fuse: Unknown parameter 'v90x0000000000000005' [ 199.320091][ T9190] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 199.864331][ T970] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 200.042771][ T970] usb 7-1: config 0 has an invalid interface number: 40 but max is 0 [ 200.053231][ T970] usb 7-1: config 0 has no interface number 0 [ 200.063759][ T970] usb 7-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=de.fa [ 200.080815][ T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.095636][ T970] usb 7-1: config 0 descriptor?? [ 200.713865][ T9332] sock: sock_timestamping_bind_phc: sock not bind to device [ 200.863461][ T970] usb 7-1: string descriptor 0 read error: -71 [ 200.887589][ T970] ftdi_sio 7-1:0.40: FTDI USB Serial Device converter detected [ 200.902562][ T970] ftdi_sio ttyUSB0: unknown device type: 0xdefa [ 200.910617][ T970] usb 7-1: USB disconnect, device number 28 [ 200.925643][ T970] ftdi_sio 7-1:0.40: device disconnected [ 200.975255][ T36] audit: type=1326 audit(2000000082.200:586): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.000515][ T36] audit: type=1326 audit(2000000082.200:587): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.026373][ T36] audit: type=1326 audit(2000000082.200:588): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.050943][ T36] audit: type=1326 audit(2000000082.200:589): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.080125][ T36] audit: type=1326 audit(2000000082.200:590): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.108101][ T9380] tc_dump_action: action bad kind [ 201.108331][ T36] audit: type=1326 audit(2000000082.200:591): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.119090][ T9380] tc_dump_action: action bad kind [ 201.138005][ T36] audit: type=1326 audit(2000000082.200:592): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.166273][ T36] audit: type=1326 audit(2000000082.200:593): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.196086][ T36] audit: type=1326 audit(2000000082.200:594): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f609b38d550 code=0x7ffc0000 [ 201.222291][ T36] audit: type=1326 audit(2000000082.200:595): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7ffc0000 [ 201.248908][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 201.395021][ T9423] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2955'. [ 201.961555][ T411] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.961689][ T438] Bluetooth: hci0: command 0x1003 tx timeout [ 202.046523][ T9450] rust_binder: Write failure EFAULT in pid:53 [ 202.135757][ T9456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 202.262927][ T9459] 9pnet_fd: Insufficient options for proto=fd [ 202.280092][ T9459] 9pnet_fd: Insufficient options for proto=fd [ 202.413442][ T9475] overlayfs: failed to resolve './file0': -2 [ 202.586231][ T9480] kvm: kvm [9479]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 202.613056][ T9480] __vm_enough_memory: pid: 9480, comm: syz.5.2976, bytes: 18014402804453376 not enough memory for the allocation [ 202.687157][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.696025][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.760423][ T9488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9488 comm=syz.5.2978 [ 203.001901][ T411] Bluetooth: hci1: command 0x1003 tx timeout [ 203.001932][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 203.261506][ T330] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 203.346988][ T9524] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 203.397568][ T9525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 203.432603][ T330] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 203.471503][ T330] usb 7-1: config 0 interface 0 has no altsetting 0 [ 203.478345][ T330] usb 7-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 203.488074][ T330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.501821][ T330] usb 7-1: config 0 descriptor?? [ 203.997689][ T9545] veth1: entered allmulticast mode [ 204.006600][ T9544] veth1: left allmulticast mode [ 204.122437][ T31] usbhid 6-1:1.0: can't add hid device: -32 [ 204.128556][ T31] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 204.132270][ T9558] tipc: Enabling of bearer rejected, failed to enable media [ 204.214328][ T9569] fuse: Bad value for 'fd' [ 204.219207][ T9569] 9pnet_fd: p9_fd_create_unix (9569): problem connecting socket: ./file0: -111 [ 204.768499][ T9594] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3013'. [ 204.781985][ T9593] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3013'. [ 204.868787][ T9606] fuse: Bad value for 'fd' [ 204.906179][ T9615] netlink: 'syz.3.3020': attribute type 4 has an invalid length. [ 205.185961][ T9626] syzkaller1: entered allmulticast mode [ 205.333368][ T9640] rust_binder: Write failure EFAULT in pid:115 [ 205.365473][ T9643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 205.371827][ T9643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:118 [ 205.399619][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.418725][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.427973][ T9645] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 205.435761][ T9645] rust_binder: Write failure EINVAL in pid:120 [ 205.487900][ T9648] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3029'. [ 206.039227][ T1522] usb 7-1: USB disconnect, device number 29 [ 206.310259][ T9684] netlink: 'syz.3.3041': attribute type 4 has an invalid length. [ 206.413877][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 206.413895][ T36] audit: type=1400 audit(2000000087.640:627): avc: denied { nlmsg_write } for pid=9686 comm="syz.3.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 206.451008][ T9687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=9687 comm=syz.3.3042 [ 206.482527][ T9687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9687 comm=syz.3.3042 [ 207.062215][ T9694] rust_binder: 9693 RLIMIT_NICE not set [ 207.067679][ T6591] rust_binder: 9692: removing orphan mapping 0:4248 [ 207.095363][ T9696] overlayfs: failed to clone upperpath [ 207.347791][ T9703] fuse: Bad value for 'fd' [ 208.202797][ T36] audit: type=1400 audit(2000000089.430:628): avc: denied { map } for pid=9742 comm="syz.2.3064" path="socket:[45538]" dev="sockfs" ino=45538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 208.240481][ T36] audit: type=1400 audit(2000000089.460:629): avc: denied { watch } for pid=9745 comm="syz.2.3065" path="/328/cgroup" dev="tmpfs" ino=1783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 208.300715][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 208.446533][ T9793] netlink: 'syz.3.3080': attribute type 4 has an invalid length. [ 208.498748][ T9795] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=8 (32 ns) > initial count (12 ns). Using initial count to start timer. [ 208.631634][ T9804] rust_binder: 132: no such ref 0 [ 208.637093][ T9805] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 208.644507][ T9805] rust_binder: 132: no such ref 0 [ 208.668192][ T9807] rust_binder: Write failure EFAULT in pid:135 [ 208.819755][ T36] audit: type=1400 audit(2000000090.040:630): avc: denied { mounton } for pid=9818 comm="syz.5.3089" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 208.820025][ T9819] incfs: Can't find or create .index dir in ./bus [ 208.854603][ T9819] incfs: mount failed -1 [ 208.860716][ T9819] incfs: Can't find or create .index dir in ./bus [ 208.867220][ T9819] incfs: mount failed -1 [ 208.996982][ T13] bridge_slave_1: left allmulticast mode [ 208.999366][ T1522] usb 6-1: USB disconnect, device number 8 [ 209.011512][ T13] bridge_slave_1: left promiscuous mode [ 209.017188][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.051963][ T13] bridge_slave_0: left allmulticast mode [ 209.057644][ T13] bridge_slave_0: left promiscuous mode [ 209.070641][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.204842][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.211963][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.219171][ T9827] bridge_slave_0: entered allmulticast mode [ 209.225420][ T9827] bridge_slave_0: entered promiscuous mode [ 209.231946][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.239071][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.247642][ T9827] bridge_slave_1: entered allmulticast mode [ 209.254229][ T9827] bridge_slave_1: entered promiscuous mode [ 209.260932][ T13] veth1_macvtap: left promiscuous mode [ 209.266627][ T13] veth0_vlan: left promiscuous mode [ 209.344105][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.351232][ T9827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.359156][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.366389][ T9827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.374528][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.382250][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.404615][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.411806][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.420900][ T1875] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.428015][ T1875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.452502][ T9827] veth0_vlan: entered promiscuous mode [ 209.463303][ T9827] veth1_macvtap: entered promiscuous mode [ 209.861589][ T330] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.021548][ T330] usb 6-1: Using ep0 maxpacket: 8 [ 210.028225][ T330] usb 6-1: unable to get BOS descriptor or descriptor too short [ 210.036889][ T330] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 210.045069][ T330] usb 6-1: config 0 has no interface number 0 [ 210.051203][ T330] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 210.062559][ T330] usb 6-1: config 0 interface 88 has no altsetting 0 [ 210.071797][ T330] usb 6-1: string descriptor 0 read error: -22 [ 210.078192][ T330] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 210.087700][ T330] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 210.096629][ T330] usb 6-1: config 0 descriptor?? [ 210.104217][ T330] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input16 [ 210.240194][ T9867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=9867 comm=syz.2.3102 [ 210.305493][ T6591] usb 6-1: USB disconnect, device number 9 [ 210.501307][ T9885] IPv6: Can't replace route, no match found [ 210.508394][ T9885] tipc: Started in network mode [ 210.513675][ T9885] tipc: Node identity 7f000001, cluster identity 4711 [ 210.520578][ T9885] tipc: Enabling of bearer rejected, failed to enable media [ 210.530429][ T36] audit: type=1326 audit(2000000091.750:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.3110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x0 [ 210.800226][ T9903] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=9903 comm=syz.3.3117 [ 210.984589][ T9914] rust_binder: Error while translating object. [ 210.984628][ T9914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 210.991049][ T9914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:11 [ 211.217951][ T9930] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 211.234826][ T9930] rust_binder: Write failure EINVAL in pid:789 [ 211.271577][ T330] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 211.354595][ T9935] 9pnet_fd: Insufficient options for proto=fd [ 211.431529][ T330] usb 6-1: Using ep0 maxpacket: 32 [ 211.438212][ T330] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.447723][ T330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.458210][ T330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.468884][ T330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.478194][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.486533][ T330] usb 6-1: Product: ㇺ稛匧ꎽ矞髙䂾ⶔὫåžæ¸¿ä®®á½í‰’ê–㎅敇礫訚＊ꂘ贊㳚䶋ퟠ렒뭶멌踨礘Ὀ渣⡘隸ä¦Òµï€‘䟩㊇ç•ë§¯èˆì™‰î Ÿï¥µî‹•è‡ê´ê“ªíŠƒâ¦ê¥íŽ±ä·žç¿®æ´½ã†¼ä€ƒå°€ï¿à³¬â µé¶®áž²á•³á·¾æ—¾á‚Œä–‚ⱒ᫨ﰆ츄餉밼챷墓죢å ãŒ›ã¼ [ 211.516921][ T330] usb 6-1: Manufacturer: ч [ 211.521706][ T330] usb 6-1: SerialNumber: ꢠ។켱äƒæ³“姺ᑄâꌚ⃒먪䳟ꖥ캘â†â‹íˆ˜áª´ê²›ä°¨ [ 211.736265][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.745845][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.763203][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.772093][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.781955][ T36] audit: type=1400 audit(2000000093.010:632): avc: denied { map } for pid=9924 comm="syz.5.3125" path="socket:[47254]" dev="sockfs" ino=47254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.782974][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.816223][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.837521][ T330] usb 6-1: 0:2 : does not exist [ 211.848772][ T330] usb 6-1: USB disconnect, device number 10 [ 212.042248][T10003] 9pnet_fd: Insufficient options for proto=fd [ 212.412745][T10074] rust_binder: 20: no such ref 0 [ 212.418032][T10074] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 212.425407][T10074] rust_binder: 20: no such ref 0 [ 212.613276][T10087] 9pnet_fd: Insufficient options for proto=fd [ 212.643195][T10090] rust_binder: Write failure EFAULT in pid:36 [ 212.696853][T10094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.703224][T10094] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 212.719155][T10095] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 212.728126][T10095] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 212.818878][T10110] /dev/rnullb0: Can't open blockdev [ 212.915394][T10128] overlayfs: failed to clone upperpath [ 212.921337][ T36] audit: type=1400 audit(2000000094.140:633): avc: denied { execute } for pid=10126 comm="syz.3.3199" path="/memory.events.local" dev="ramfs" ino=47520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 212.921970][T10127] tipc: Enabling of bearer rejected, failed to enable media [ 212.977688][ T36] audit: type=1326 audit(2000000094.200:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.2.3200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x0 [ 213.051381][T10148] tmpfs: Bad value for 'uid' [ 213.056346][T10148] tmpfs: Bad value for 'uid' [ 213.092377][T10146] rust_binder: Error while translating object. [ 213.092402][T10146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.098581][T10146] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 213.108088][T10146] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:62 [ 213.120737][T10146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.139365][ T31] rust_binder: 10142: removing orphan mapping 0:24 [ 213.151024][T10156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.151112][T10156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.170055][T10161] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3209'. [ 213.421582][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 213.572836][ T31] usb 6-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 213.583530][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.596789][ T31] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 213.605938][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.615040][ T31] usb 6-1: config 0 descriptor?? [ 214.326420][ T31] usb 6-1: string descriptor 0 read error: -71 [ 214.334054][ T31] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 214.344760][ T31] usb 6-1: USB disconnect, device number 11 [ 214.439823][T10182] rust_binder: Write failure EFAULT in pid:76 [ 214.467418][ T36] audit: type=1326 audit(2000000095.690:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.5.3219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6034b8ebe9 code=0x0 [ 214.737231][ T36] audit: type=1326 audit(2000000095.960:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7fc00000 [ 214.788172][T10198] overlayfs: failed to clone lowerpath [ 214.830901][T10208] 9pnet_fd: Insufficient options for proto=fd [ 214.889983][ T36] audit: type=1400 audit(2000000096.110:637): avc: denied { listen } for pid=10215 comm="syz.2.3230" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.891117][T10216] 9pnet_fd: Insufficient options for proto=fd [ 214.981782][T10232] 9pnet_fd: Insufficient options for proto=fd [ 215.013255][T10239] fuseblk: Bad value for 'group_id' [ 215.018884][T10239] fuseblk: Bad value for 'group_id' [ 215.025085][T10239] /dev/loop0: Can't lookup blockdev [ 215.031964][T10239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10239 comm=syz.2.3238 [ 215.119517][T10247] 8021q: VLANs not supported on ip_vti0 [ 215.137165][T10251] netlink: 'syz.3.3242': attribute type 4 has an invalid length. [ 215.479123][T10282] /dev/rnullb0: Can't open blockdev [ 215.511598][ T64] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 215.661560][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 215.668320][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 215.677029][ T64] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 215.685212][ T64] usb 7-1: config 0 has no interface number 0 [ 215.691536][ T64] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 215.702801][ T64] usb 7-1: config 0 interface 88 has no altsetting 0 [ 215.711873][ T64] usb 7-1: string descriptor 0 read error: -22 [ 215.718505][ T64] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 215.728651][ T64] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 215.737593][ T64] usb 7-1: config 0 descriptor?? [ 215.744347][ T64] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input17 [ 215.947317][ T64] usb 7-1: USB disconnect, device number 30 [ 216.046754][ T36] audit: type=1400 audit(2000000097.270:638): avc: denied { remount } for pid=10290 comm="syz.3.3257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 216.117268][ T36] audit: type=1326 audit(2000000097.340:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10298 comm="syz.3.3260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d678ebe9 code=0x0 [ 216.352262][T10302] rust_binder: Error while translating object. [ 216.352305][T10302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 216.358716][T10302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101 [ 216.370310][T10302] tipc: Enabling of bearer rejected, failed to enable media [ 216.442726][T10304] rust_binder: Write failure EINVAL in pid:103 [ 216.502440][T10309] /dev/rnullb0: Can't open blockdev [ 216.700460][ T36] audit: type=1400 audit(2000000097.920:640): avc: denied { accept } for pid=10333 comm="syz.5.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 216.787337][T10337] veth1: entered allmulticast mode [ 217.009278][T10349] binder: Unknown parameter 'func' [ 217.041507][ T6591] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 217.124699][T10368] overlayfs: failed to clone upperpath [ 217.141522][T10368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10368 comm=syz.3.3281 [ 217.168109][T10368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10368 comm=syz.3.3281 [ 217.202570][ T6591] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 217.210966][ T6591] usb 6-1: config 0 has no interface number 1 [ 217.231496][ T6591] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 217.251501][ T6591] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.270774][ T6591] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 217.281483][ T6591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.301577][ T6591] usb 6-1: SerialNumber: syz [ 217.307062][ T6591] usb 6-1: config 0 descriptor?? [ 217.322738][ T6591] usb 6-1: Found UVC 0.00 device (0002:0000) [ 217.329736][ T6591] usb 6-1: No valid video chain found. [ 217.413939][T10387] 9pnet_fd: Insufficient options for proto=fd [ 217.538341][T10337] veth1: left allmulticast mode [ 217.549011][ T6591] usb 6-1: USB disconnect, device number 12 [ 217.685584][T10423] sit0: entered promiscuous mode [ 217.698788][T10423] netlink: 'syz.2.3298': attribute type 1 has an invalid length. [ 217.731423][T10423] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3298'. [ 217.784370][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 218.063779][ T36] audit: type=1326 audit(2000000099.290:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.5.3316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6034b8ebe9 code=0x0 [ 218.125763][T10481] netlink: 'syz.6.3320': attribute type 4 has an invalid length. [ 218.193825][T10487] binder: Bad value for 'defcontext' [ 218.208619][ T36] audit: type=1400 audit(2000000099.430:642): avc: denied { watch } for pid=10488 comm="syz.6.3323" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 218.316407][ T36] audit: type=1400 audit(2000000099.540:643): avc: denied { sys_nice } for pid=10492 comm="syz.6.3324" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 218.571645][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 218.924856][T10522] rust_binder: Error while translating object. [ 218.924886][T10522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 218.931264][T10522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:131 [ 219.217501][T10541] tipc: Enabling of bearer rejected, failed to enable media [ 219.267870][T10551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2833 sclass=netlink_route_socket pid=10551 comm=syz.2.3347 [ 219.297939][T10557] overlayfs: failed to clone upperpath [ 219.651929][ T36] audit: type=1400 audit(2000000100.880:644): avc: denied { map } for pid=10589 comm="syz.3.3361" path="socket:[48505]" dev="sockfs" ino=48505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.699074][ T36] audit: type=1400 audit(2000000100.880:645): avc: denied { read } for pid=10589 comm="syz.3.3361" path="socket:[48505]" dev="sockfs" ino=48505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.850280][T10599] rust_binder: Error while translating object. [ 219.850354][T10599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 219.866810][T10599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:866 [ 219.892663][T10599] rust_binder: 866: no such ref 1 [ 219.927439][T10599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:866 [ 219.972930][T10610] rust_binder: Write failure EFAULT in pid:868 [ 220.014498][T10612] netlink: 'syz.6.3369': attribute type 7 has an invalid length. [ 220.039958][T10612] netlink: 'syz.6.3369': attribute type 5 has an invalid length. [ 220.048048][T10612] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3369'. [ 220.133210][T10623] rust_binder: 10616 RLIMIT_NICE not set [ 220.143981][ T330] rust_binder: 10614: removing orphan mapping 0:4248 [ 220.163847][ T36] audit: type=1400 audit(2000000101.390:646): avc: denied { setopt } for pid=10625 comm="syz.5.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.286675][T10640] binder: Unknown parameter 'defcontext01777777777777777777777' [ 220.461855][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.711500][ T330] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 221.330808][ T36] audit: type=1326 audit(2000000102.550:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.2.3392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f609b38ebe9 code=0x0 [ 221.382936][T10679] netlink: 'syz.2.3392': attribute type 30 has an invalid length. [ 222.262574][T10686] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.3395'. [ 222.521517][ T411] Bluetooth: hci0: command 0x1003 tx timeout [ 222.521575][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.759136][T10701] rust_binder: Write failure EINVAL in pid:902 [ 222.759538][T10702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.528671][ T36] audit: type=1326 audit(2000000104.750:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.2.3406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x0 [ 223.572476][T10737] /dev/rnullb0: Can't open blockdev [ 223.578465][T10737] /dev/rnullb0: Can't open blockdev [ 223.584266][T10737] /dev/rnullb0: Can't open blockdev [ 223.590231][T10737] /dev/rnullb0: Can't open blockdev [ 223.598405][T10737] /dev/rnullb0: Can't open blockdev [ 223.604069][T10737] /dev/rnullb0: Can't open blockdev [ 223.609860][T10737] /dev/rnullb0: Can't open blockdev [ 223.615685][T10737] /dev/rnullb0: Can't open blockdev [ 223.621168][T10737] /dev/rnullb0: Can't open blockdev [ 223.627606][T10737] /dev/rnullb0: Can't open blockdev [ 223.633365][T10737] /dev/rnullb0: Can't open blockdev [ 223.638927][T10737] /dev/rnullb0: Can't open blockdev [ 223.644721][T10737] /dev/rnullb0: Can't open blockdev [ 223.650289][T10737] /dev/rnullb0: Can't open blockdev [ 223.656020][T10737] /dev/rnullb0: Can't open blockdev [ 223.661783][T10737] /dev/rnullb0: Can't open blockdev [ 223.667262][T10737] /dev/rnullb0: Can't open blockdev [ 223.673030][T10737] /dev/rnullb0: Can't open blockdev [ 223.678597][T10737] /dev/rnullb0: Can't open blockdev [ 223.684336][T10737] /dev/rnullb0: Can't open blockdev [ 223.689797][T10737] /dev/rnullb0: Can't open blockdev [ 223.695568][T10737] /dev/rnullb0: Can't open blockdev [ 223.701045][T10737] /dev/rnullb0: Can't open blockdev [ 223.706708][T10737] /dev/rnullb0: Can't open blockdev [ 223.712410][T10737] /dev/rnullb0: Can't open blockdev [ 223.717870][T10737] /dev/rnullb0: Can't open blockdev [ 223.723565][T10706] SELinux: security_context_str_to_sid () failed with errno=-22 [ 223.731831][T10737] /dev/rnullb0: Can't open blockdev [ 223.737400][T10737] /dev/rnullb0: Can't open blockdev [ 223.744147][T10737] /dev/rnullb0: Can't open blockdev [ 223.750277][T10737] /dev/rnullb0: Can't open blockdev [ 223.759318][T10737] /dev/rnullb0: Can't open blockdev [ 223.765031][T10737] /dev/rnullb0: Can't open blockdev [ 223.770655][T10737] /dev/rnullb0: Can't open blockdev [ 223.780765][T10737] /dev/rnullb0: Can't open blockdev [ 223.786652][T10737] /dev/rnullb0: Can't open blockdev [ 223.792623][T10737] /dev/rnullb0: Can't open blockdev [ 223.799970][T10737] /dev/rnullb0: Can't open blockdev [ 223.805804][T10737] /dev/rnullb0: Can't open blockdev [ 223.811874][T10737] /dev/rnullb0: Can't open blockdev [ 223.818047][T10737] /dev/rnullb0: Can't open blockdev [ 223.824427][T10737] /dev/rnullb0: Can't open blockdev [ 223.830440][T10737] /dev/rnullb0: Can't open blockdev [ 223.836562][T10737] /dev/rnullb0: Can't open blockdev [ 223.842595][T10737] /dev/rnullb0: Can't open blockdev [ 223.848678][T10737] /dev/rnullb0: Can't open blockdev [ 223.854472][T10737] /dev/rnullb0: Can't open blockdev [ 223.871782][T10737] /dev/rnullb0: Can't open blockdev [ 223.877349][T10737] /dev/rnullb0: Can't open blockdev [ 223.884346][T10737] /dev/rnullb0: Can't open blockdev [ 223.890534][T10737] /dev/rnullb0: Can't open blockdev [ 223.896499][T10737] /dev/rnullb0: Can't open blockdev [ 223.902218][T10737] /dev/rnullb0: Can't open blockdev [ 223.907718][T10737] /dev/rnullb0: Can't open blockdev [ 223.913888][T10737] /dev/rnullb0: Can't open blockdev [ 223.919429][T10737] /dev/rnullb0: Can't open blockdev [ 223.924943][T10737] /dev/rnullb0: Can't open blockdev [ 223.930314][T10737] /dev/rnullb0: Can't open blockdev [ 223.935800][T10737] /dev/rnullb0: Can't open blockdev [ 223.941182][T10737] /dev/rnullb0: Can't open blockdev [ 223.946889][T10737] /dev/rnullb0: Can't open blockdev [ 223.952427][T10737] /dev/rnullb0: Can't open blockdev [ 223.957924][T10737] /dev/rnullb0: Can't open blockdev [ 223.963468][T10737] /dev/rnullb0: Can't open blockdev [ 223.968874][T10737] /dev/rnullb0: Can't open blockdev [ 223.974432][T10737] /dev/rnullb0: Can't open blockdev [ 224.012199][ T36] audit: type=1400 audit(2000000105.240:649): avc: denied { unmount } for pid=9827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 224.037651][T10764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 224.044608][ T10] rust_binder: 10762: removing orphan mapping 0:24 [ 224.226735][T10774] rust_binder: Error while translating object. [ 224.226770][T10774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.233148][T10774] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 224.242733][T10774] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:172 [ 224.296510][ T10] rust_binder: 10773: removing orphan mapping 0:24 [ 224.405315][T10786] fuse: Unknown parameter 'g~oup_id' [ 224.405486][ T36] audit: type=1400 audit(2000000105.630:650): avc: denied { mounton } for pid=10784 comm="syz.5.3421" path="/63/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 224.411011][T10796] fuse: Unknown parameter 'g~oup_id' [ 224.501983][ T36] audit: type=1400 audit(2000000105.730:651): avc: denied { execute_no_trans } for pid=10800 comm="syz.2.3426" path="/file0" dev="ramfs" ino=48836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 224.673749][ T36] audit: type=1326 audit(2000000105.900:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609b38ebe9 code=0x7fc00000 [ 224.770021][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3435'. [ 224.834092][T10836] tmpfs: Unknown parameter 'H*B4]es' [ 224.990667][ T36] audit: type=1400 audit(2000000106.210:653): avc: denied { mounton } for pid=10843 comm="syz.6.3442" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 225.236226][T10852] tmpfs: Unknown parameter '00000000000000000000003QƒLå$Xé8‘cAJ[ÎÓ«¦6âÈc×¹0x0000000000000003' [ 225.259138][T10855] overlayfs: unescaped trailing colons in lowerdir mount option. [ 225.501498][ T1522] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 225.651495][ T1522] usb 6-1: Using ep0 maxpacket: 8 [ 225.657976][ T1522] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 225.667185][ T1522] usb 6-1: config 0 has no interface number 0 [ 225.675335][ T1522] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 225.685004][ T1522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.693359][ T1522] usb 6-1: Product: syz [ 225.697747][ T1522] usb 6-1: Manufacturer: syz [ 225.702632][ T1522] usb 6-1: SerialNumber: syz [ 225.708485][ T1522] usb 6-1: config 0 descriptor?? [ 225.917075][ T1522] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 225.923590][ T1522] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 225.932270][ T1522] usb 6-1: Failed to create links for entity 5 [ 225.938637][ T1522] usb 6-1: Failed to register entities (-22). [ 226.119066][ T330] usb 6-1: USB disconnect, device number 14 [ 226.315110][T10888] 9pnet_fd: Insufficient options for proto=fd [ 226.322478][T10888] 9pnet_fd: Insufficient options for proto=fd [ 226.500423][T10924] sit0: entered promiscuous mode [ 226.507179][T10924] netlink: 'syz.6.3470': attribute type 1 has an invalid length. [ 226.515075][T10924] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3470'. [ 226.539283][T10928] /dev/rnullb0: Can't open blockdev [ 226.570126][T10940] overlayfs: failed to clone upperpath [ 226.661676][T10946] binder: Unknown parameter 'fscontext?}' [ 226.694523][T10953] 2N: renamed from vcan0 (while UP) [ 226.923835][T10963] netlink: 'syz.2.3482': attribute type 4 has an invalid length. [ 227.222687][T10980] 9pnet_fd: Insufficient options for proto=fd [ 227.344717][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 227.354813][T10986] veth1: entered allmulticast mode [ 227.370303][T10985] veth1: left allmulticast mode [ 227.458317][ T36] audit: type=1400 audit(2000000108.680:654): avc: denied { map } for pid=10991 comm="syz.2.3492" path="socket:[49118]" dev="sockfs" ino=49118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.739408][T11010] binder: Unknown parameter '0x0000000000000000' [ 227.753194][T11017] overlayfs: failed to clone upperpath [ 227.810552][T11025] netlink: 'syz.2.3506': attribute type 4 has an invalid length. [ 227.926995][T11042] fuse: Bad value for 'fd' [ 228.131531][ T330] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 228.261544][ T330] usb 6-1: device descriptor read/64, error -71 [ 228.501513][ T330] usb 6-1: device descriptor read/64, error -71 [ 228.751517][ T330] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 228.765127][ T36] audit: type=1326 audit(2000000109.990:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11056 comm="syz.2.3517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f609b38ebe9 code=0x0 [ 228.891540][ T330] usb 6-1: device descriptor read/64, error -71 [ 229.131538][ T330] usb 6-1: device descriptor read/64, error -71 [ 229.242827][ T330] usb usb6-port1: attempt power cycle [ 229.560663][T11078] veth1: entered allmulticast mode [ 229.567034][ T36] audit: type=1400 audit(2000000110.790:656): avc: denied { connect } for pid=11077 comm="syz.2.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.567736][T11077] veth1: left allmulticast mode [ 229.592331][ T330] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 229.612605][ T330] usb 6-1: device descriptor read/8, error -71 [ 229.752735][ T330] usb 6-1: device descriptor read/8, error -71 [ 229.991579][ T330] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 230.012784][ T330] usb 6-1: device descriptor read/8, error -71 [ 230.143237][ T330] usb 6-1: device descriptor read/8, error -71 [ 230.179697][T11096] overlayfs: failed to clone lowerpath [ 230.186322][T11097] overlayfs: failed to clone lowerpath [ 230.252024][ T330] usb usb6-port1: unable to enumerate USB device [ 230.367342][T11139] netlink: 37 bytes leftover after parsing attributes in process `syz.2.3545'. [ 230.957336][ T36] audit: type=1400 audit(2000000112.171:657): avc: denied { bind } for pid=11158 comm="syz.6.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.000788][T11166] fuse: Unknown parameter 'rootmode000000000100000' [ 231.053288][T11179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 231.181109][T11189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3563'. [ 231.199387][T11189] 0ªî{X¹¦: renamed from gretap0 [ 231.205024][T11189] 0ªî{X¹¦: entered allmulticast mode [ 231.210647][T11189] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 231.960467][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3580'. [ 232.000523][T11250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11283 sclass=netlink_route_socket pid=11250 comm=syz.6.3581 [ 232.019676][ T36] audit: type=1400 audit(2000000113.231:658): avc: denied { append } for pid=11249 comm="syz.6.3581" name="file2" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.480673][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3582'. [ 232.489818][T11252] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3582'. [ 232.498856][T11252] netlink: 'syz.2.3582': attribute type 3 has an invalid length. [ 232.506708][T11252] netlink: 'syz.2.3582': attribute type 2 has an invalid length. [ 232.514493][T11252] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3582'. [ 232.723815][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3594'. [ 232.732961][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3594'. [ 232.742134][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3594'. [ 232.751234][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3594'. [ 232.825389][T11290] bridge0: port 3(veth0_to_bridge) entered blocking state [ 232.833033][T11290] bridge0: port 3(veth0_to_bridge) entered disabled state [ 232.840323][T11290] veth0_to_bridge: entered allmulticast mode [ 232.846829][T11290] veth0_to_bridge: entered promiscuous mode [ 232.852922][T11290] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.865296][T11290] bridge0: port 3(veth0_to_bridge) entered blocking state [ 232.872481][T11290] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 233.223860][T11293] netlink: 'syz.3.3596': attribute type 4 has an invalid length. [ 233.275965][T11300] netlink: 'syz.2.3599': attribute type 4 has an invalid length. [ 233.284142][T11300] netlink: 'syz.2.3599': attribute type 4 has an invalid length. [ 234.237259][T11358] 9pnet_fd: Insufficient options for proto=fd [ 234.254541][T11363] tipc: Enabling of bearer rejected, failed to enable media [ 234.321526][ T330] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 234.356531][T11381] 9pnet_fd: Insufficient options for proto=fd [ 234.366952][T11386] 9pnet_fd: Insufficient options for proto=fd [ 234.451537][ T330] usb 6-1: device descriptor read/64, error -71 [ 234.691506][ T330] usb 6-1: device descriptor read/64, error -71 [ 234.931512][ T330] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 234.960992][T11411] netlink: 'syz.6.3635': attribute type 6 has an invalid length. [ 234.968846][T11411] netlink: 'syz.6.3635': attribute type 5 has an invalid length. [ 235.002235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.014436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.026763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.038858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.051159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.063233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.075478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.087568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.099812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.673221][ T330] usb 6-1: device descriptor read/64, error -71 [ 235.871406][T11432] tipc: Enabling of bearer rejected, failed to enable media [ 236.133400][ T330] usb 6-1: device descriptor read/64, error -71 [ 236.211541][ C0] net_ratelimit: 17020 callbacks suppressed [ 236.211564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.229895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.241973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.254204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.266360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.278697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.290889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.303213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.315408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.327535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.338916][T11469] __nla_validate_parse: 66 callbacks suppressed [ 236.338938][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 236.345076][ T330] usb usb6-port1: attempt power cycle [ 236.404355][T11474] tipc: Enabling of bearer rejected, failed to enable media [ 236.592842][T11494] fuse: Unknown parameter 'rootmoÕÃ2á’·Ae°ù_fÑde' [ 236.804606][ T330] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 236.839997][T11518] overlay: Unknown parameter 'fsuuid' [ 236.880727][ T330] usb 6-1: device descriptor read/8, error -71 [ 236.902815][T11524] No source specified [ 237.028425][ T330] usb 6-1: device descriptor read/8, error -71 [ 237.534793][T11546] netlink: 'syz.2.3678': attribute type 4 has an invalid length. [ 237.883121][T11572] overlayfs: failed to clone upperpath [ 237.941886][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3687'. [ 237.967751][T11575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3687'. [ 238.556778][T11601] rust_binder: Error while translating object. [ 238.556835][T11601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 238.574188][T11601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:242 [ 238.631511][T11606] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 238.818051][T11631] 9pnet_fd: Insufficient options for proto=fd [ 239.249348][T11665] netlink: 'syz.2.3709': attribute type 4 has an invalid length. [ 239.585499][T11686] 9pnet_fd: Insufficient options for proto=fd [ 239.647269][T11689] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 239.691517][T11689] rust_binder: 252: no such ref 3 [ 239.707185][T11692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=11692 comm=syz.6.3722 [ 239.786219][T11692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11692 comm=syz.6.3722 [ 240.041497][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 240.074083][T11711] fuse: Bad value for 'fd' [ 240.221894][ T31] usb 6-1: no configurations [ 240.229957][ T31] usb 6-1: can't read configurations, error -22 [ 240.381521][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 240.474209][ T36] audit: type=1400 audit(2000000121.691:659): avc: denied { module_load } for pid=11723 comm="syz.3.3734" path="/bus" dev="ramfs" ino=52851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 240.499096][T11724] Invalid ELF header magic: != ELF [ 240.541878][ T31] usb 6-1: no configurations [ 240.549958][ T31] usb 6-1: can't read configurations, error -22 [ 240.571221][ T31] usb usb6-port1: attempt power cycle [ 240.824297][T11742] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3742'. [ 240.846487][T11742] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3742'. [ 240.857475][T11742] netlink: 'syz.6.3742': attribute type 6 has an invalid length. [ 240.878596][T11746] overlayfs: failed to clone upperpath [ 240.891409][T11742] netlink: 'syz.6.3742': attribute type 5 has an invalid length. [ 240.906619][T11742] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3742'. [ 240.931566][ T31] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 240.962702][ T31] usb 6-1: no configurations [ 240.968138][ T31] usb 6-1: can't read configurations, error -22 [ 241.111522][ T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 241.152402][ T31] usb 6-1: no configurations [ 241.157533][ T31] usb 6-1: can't read configurations, error -22 [ 241.167027][ T31] usb usb6-port1: unable to enumerate USB device [ 241.192442][T11767] 9pnet_fd: Insufficient options for proto=fd [ 241.221526][ C0] net_ratelimit: 77160 callbacks suppressed [ 241.221543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.239696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.251982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.264394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.276870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.289003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 241.301343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.313666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.325779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.338001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.386411][T11773] overlayfs: failed to clone upperpath [ 241.393728][T11773] 9pnet_fd: Insufficient options for proto=fd [ 246.231444][ C0] net_ratelimit: 117094 callbacks suppressed [ 246.231469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.231470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.231546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.237659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.249759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.261910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.273943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.286219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.298252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.310278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.814666][ C0] sched: DL replenish lagged too much [ 251.241464][ C0] net_ratelimit: 121966 callbacks suppressed [ 251.241488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.241509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.247657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 251.259591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.271695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.283740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.295846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.307814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.319707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.331659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.251448][ C0] net_ratelimit: 128154 callbacks suppressed [ 256.251473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.251540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.257556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.269669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.281664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 256.293513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.305561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.317528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.329902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.341446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.261489][ C0] net_ratelimit: 129350 callbacks suppressed [ 261.261512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.261524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.261600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.267606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.279599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.291571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.303673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.315574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 261.327458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.339394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.271462][ C1] net_ratelimit: 132045 callbacks suppressed [ 266.271485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.271513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.277681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.289687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.302090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.321290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.326790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.338776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.350724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.363050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.281447][ C1] net_ratelimit: 131530 callbacks suppressed [ 271.281471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.281498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.287578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.299487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 271.311546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.323503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.335464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.347680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.359622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.371451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.291475][ C1] net_ratelimit: 127641 callbacks suppressed [ 276.291500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.291506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 276.291570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.297679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.309720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.321699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.333543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.345631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.357563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.369573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.301447][ C1] net_ratelimit: 121030 callbacks suppressed [ 281.301469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.301615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.307734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.319578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.331606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.343710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.355921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.368009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.380103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.391995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.311432][ C1] net_ratelimit: 133678 callbacks suppressed [ 286.311457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.311464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.311545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.317578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.329549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.341530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.353666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 286.365607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.377465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.389519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.321465][ C0] net_ratelimit: 132708 callbacks suppressed [ 291.321489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.321537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.327692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.339762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.351963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.364023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.375908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.387881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.400154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.412150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.331446][ C1] net_ratelimit: 134653 callbacks suppressed [ 296.331469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.331517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.338015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.350226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.362987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.375143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.387364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.399965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.412095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.423969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.341422][ C1] net_ratelimit: 135122 callbacks suppressed [ 301.341447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.341471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.341525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.347542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.359613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 301.371656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.383965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.395866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.407981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.420055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.351449][ C1] net_ratelimit: 125325 callbacks suppressed [ 306.351473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.351542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.357673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.369802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.382075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.393980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.406344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.418433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.430435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.442534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.361435][ C1] net_ratelimit: 130112 callbacks suppressed [ 311.361459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.361483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.367658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.379618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.391829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.404333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.416402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.428347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.440485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.452625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.371420][ C0] net_ratelimit: 132396 callbacks suppressed [ 316.371442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.371480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.377515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.389825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.401901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.413762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.425953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.438028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.450009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.461973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.381465][ C1] net_ratelimit: 135286 callbacks suppressed [ 321.381489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.381541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.387680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.399751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.411997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.424103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.436387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.448397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 321.460472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.473420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.391469][ C1] net_ratelimit: 133801 callbacks suppressed [ 326.391492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.394405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 326.397607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.409843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.421849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.433762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.445657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.457620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.469689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.481651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.401439][ C0] net_ratelimit: 133079 callbacks suppressed [ 331.401463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 331.401484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.407532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.419525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.431628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.443808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.456110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.468279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.480497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.492702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.411415][ C0] net_ratelimit: 131316 callbacks suppressed [ 336.411438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 336.411474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.417657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.429935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.441967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.453808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.465786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.477698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.489694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.501783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.421447][ C0] net_ratelimit: 124875 callbacks suppressed [ 341.421470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.421491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.427542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.439573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.451618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.463627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.475721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.487578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.499761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.511746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.431435][ C0] net_ratelimit: 127624 callbacks suppressed [ 346.431459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.431503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.437538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.450597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.463477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.477168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.489066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.501846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.514368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 346.526224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.441440][ C1] net_ratelimit: 131351 callbacks suppressed [ 351.441467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.441470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.441537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.447621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.459619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.471672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.483696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.495584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.507795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.519753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.451496][ C1] net_ratelimit: 128472 callbacks suppressed [ 356.451520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.451562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.457596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.469604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.481593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.493522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.505405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.517364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.529339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.541323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.461411][ C1] net_ratelimit: 131071 callbacks suppressed [ 361.461433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.461486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.467525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.479524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.491538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.503472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.515578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.527551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.539410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.551432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.471428][ C0] net_ratelimit: 133775 callbacks suppressed [ 366.471453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 366.471461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.471537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.477568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.489654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.501837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.514391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.526343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.538498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.550473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.481415][ C0] net_ratelimit: 130545 callbacks suppressed [ 371.481439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.481444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.481519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.487511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.499588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.511511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.523535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.535563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.547467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.559525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 376.491404][ C1] net_ratelimit: 135818 callbacks suppressed [ 376.491428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.491450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.497494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.509647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.521630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.533673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 376.545564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.557483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.569662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.581764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.501446][ C0] net_ratelimit: 129104 callbacks suppressed [ 381.501469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.501485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.501590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.507755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.519628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.531673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.543676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.555666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.567482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.579471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.511739][ C1] net_ratelimit: 129314 callbacks suppressed [ 386.511764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.511795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.517955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.530049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.542281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.554255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.566370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.578648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.590504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.602424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 391.521405][ C0] net_ratelimit: 129622 callbacks suppressed [ 391.521430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.521443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.527557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.539540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.551640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.563768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.575790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.587691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.599531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.611593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.531392][ C0] net_ratelimit: 130795 callbacks suppressed [ 396.531417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.531444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.537518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.549519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.561412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.573365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.585228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.597343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.609338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.621266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.565721][ T37] INFO: task kworker/1:5:1522 blocked for more than 123 seconds. [ 397.767963][ T37] Not tainted syzkaller #0 [ 397.773068][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.781883][ T37] task:kworker/1:5 state:D stack:0 pid:1522 tgid:1522 ppid:2 flags:0x00004000 [ 397.792267][ T37] Workqueue: events fqdir_free_fn [ 397.797517][ T37] Call Trace: [ 397.800904][ T37] [ 397.803948][ T37] __schedule+0x1322/0x1df0 [ 397.808483][ T37] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 397.813550][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 397.818782][ T37] ? rcu_barrier_entrain+0x350/0x4d0 [ 397.824208][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 397.829435][ T37] schedule+0xc6/0x240 [ 397.833551][ T37] schedule_timeout+0xb2/0x3a0 [ 397.838447][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 397.843859][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 397.849443][ T37] ? generic_exec_single+0x20a/0x500 [ 397.854800][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 397.860543][ T37] wait_for_common+0x359/0x630 [ 397.865403][ T37] ? wait_for_completion+0x40/0x40 [ 397.870541][ T37] ? try_to_wake_up+0xdfb/0x1b00 [ 397.875552][ T37] wait_for_completion+0x1c/0x40 [ 397.880507][ T37] rcu_barrier+0x415/0x530 [ 397.884964][ T37] fqdir_free_fn+0x36/0x150 [ 397.889670][ T37] process_scheduled_works+0x7d5/0x1020 [ 397.895269][ T37] worker_thread+0xc58/0x1250 [ 397.899970][ T37] kthread+0x2c7/0x370 [ 397.904257][ T37] ? __cfi_worker_thread+0x10/0x10 [ 397.909384][ T37] ? __cfi_kthread+0x10/0x10 [ 397.914028][ T37] ret_from_fork+0x64/0xa0 [ 397.918470][ T37] ? __cfi_kthread+0x10/0x10 [ 397.923098][ T37] ret_from_fork_asm+0x1a/0x30 [ 397.927982][ T37] [ 398.048097][ T36] audit: type=1400 audit(2000000279.021:660): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2630]" dev="pipefs" ino=2630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 398.075539][ T37] NMI backtrace for cpu 1 [ 398.075561][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 398.075589][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.075601][ T37] Call Trace: [ 398.075609][ T37] [ 398.075617][ T37] __dump_stack+0x21/0x30 [ 398.075658][ T37] dump_stack_lvl+0x10c/0x190 [ 398.075684][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 398.075712][ T37] dump_stack+0x19/0x20 [ 398.075737][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 398.075764][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 398.075790][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 398.075817][ T37] ? sched_show_task+0x379/0x560 [ 398.075843][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 398.075866][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 398.075892][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 398.075917][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 398.075945][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 398.075970][ T37] watchdog+0xd8f/0xed0 [ 398.075998][ T37] ? __cfi_watchdog+0x10/0x10 [ 398.076022][ T37] ? __kasan_check_read+0x15/0x20 [ 398.076050][ T37] ? __kthread_parkme+0x138/0x180 [ 398.076068][ T37] ? schedule+0xc6/0x240 [ 398.076087][ T37] kthread+0x2c7/0x370 [ 398.076107][ T37] ? __cfi_watchdog+0x10/0x10 [ 398.076132][ T37] ? __cfi_kthread+0x10/0x10 [ 398.076152][ T37] ret_from_fork+0x64/0xa0 [ 398.076178][ T37] ? __cfi_kthread+0x10/0x10 [ 398.076199][ T37] ret_from_fork_asm+0x1a/0x30 [ 398.076229][ T37] [ 398.076237][ T37] Sending NMI from CPU 1 to CPUs 0: [ 398.290172][ C0] NMI backtrace for cpu 0 [ 398.290188][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 398.290210][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.290220][ C0] RIP: 0010:stack_trace_consume_entry+0x13b/0x2a0 [ 398.290249][ C0] Code: d9 4d 89 e0 4c 89 f2 48 8b 75 c0 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 42 01 00 00 41 3b 19 0f 92 c0 48 83 c4 20 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 c1 80 e1 07 80 [ 398.290262][ C0] RSP: 0018:ffffc90000007218 EFLAGS: 00000282 [ 398.290278][ C0] RAX: 0000000000000001 RBX: ffffc90000007300 RCX: 0000000000007200 [ 398.290291][ C0] RDX: dffffc0000000000 RSI: ffffffff81dc0470 RDI: ffffc90000007300 [ 398.290303][ C0] RBP: ffffc90000007238 R08: ffffc90000007310 R09: ffffc90000007308 [ 398.290314][ C0] R10: 0000000000000001 R11: ffffffff81744330 R12: ffffc9000000730c [ 398.290333][ C0] R13: 1ffff92000000e61 R14: ffffc90000007390 R15: ffffc90000007398 [ 398.290345][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 398.290360][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.290371][ C0] CR2: 00007fdae0f6b030 CR3: 000000010b7a2000 CR4: 00000000003526b0 [ 398.290389][ C0] Call Trace: [ 398.290394][ C0] [ 398.290402][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 398.290424][ C0] arch_stack_walk+0x12d/0x170 [ 398.290453][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 398.290474][ C0] stack_trace_save+0x9d/0xe0 [ 398.290493][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 398.290513][ C0] ? __kfree_skb+0x18f/0x210 [ 398.290535][ C0] kasan_save_track+0x3e/0x80 [ 398.290550][ C0] ? kasan_save_track+0x3e/0x80 [ 398.290564][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 398.290588][ C0] ? fib_table_lookup+0x10eb/0x1ad0 [ 398.290606][ C0] kasan_save_alloc_info+0x40/0x50 [ 398.290625][ C0] __kasan_slab_alloc+0x73/0x90 [ 398.290640][ C0] kmem_cache_alloc_noprof+0x131/0x3a0 [ 398.290662][ C0] ? dst_alloc+0x13c/0x250 [ 398.290679][ C0] dst_alloc+0x13c/0x250 [ 398.290694][ C0] ip_route_input_rcu+0x184a/0x2520 [ 398.290711][ C0] ? ip_route_input_noref+0x130/0x130 [ 398.290727][ C0] ? __asan_memcpy+0x5a/0x80 [ 398.290747][ C0] ? arpt_do_table+0x1b6c/0x1d50 [ 398.290765][ C0] ip_route_input_noref+0xbf/0x130 [ 398.290779][ C0] ? __cfi_ip_route_input_noref+0x10/0x10 [ 398.290794][ C0] ? __asan_memcpy+0x5a/0x80 [ 398.290814][ C0] arp_process+0x89d/0x1740 [ 398.290833][ C0] ? __cfi_arp_process+0x10/0x10 [ 398.290851][ C0] ? __cfi_arp_process+0x10/0x10 [ 398.290868][ C0] NF_HOOK+0x154/0x1b0 [ 398.290885][ C0] ? __cfi_arp_process+0x10/0x10 [ 398.290902][ C0] ? arp_xmit+0x1f0/0x1f0 [ 398.290919][ C0] ? __cfi_arp_process+0x10/0x10 [ 398.290937][ C0] arp_rcv+0x2f8/0x490 [ 398.290955][ C0] ? __cfi_arp_rcv+0x10/0x10 [ 398.290972][ C0] process_backlog+0x553/0xae0 [ 398.290995][ C0] __napi_poll+0xd3/0x610 [ 398.291014][ C0] net_rx_action+0x584/0xce0 [ 398.291036][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 398.291055][ C0] ? sched_clock+0x44/0x60 [ 398.291074][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 398.291093][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 398.291110][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 398.291130][ C0] handle_softirqs+0x1ab/0x630 [ 398.291152][ C0] __do_softirq+0xf/0x16 [ 398.291166][ C0] do_softirq+0xa6/0x100 [ 398.291186][ C0] [ 398.291192][ C0] [ 398.291197][ C0] ? __cfi_do_softirq+0x10/0x10 [ 398.291218][ C0] ? dst_destroy+0x37d/0x460 [ 398.291233][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 398.291249][ C0] __local_bh_enable_ip+0x74/0x80 [ 398.291270][ C0] rcu_do_batch+0x5c6/0xd20 [ 398.291290][ C0] ? rcu_core+0xd20/0xd20 [ 398.291309][ C0] ? __kasan_check_write+0x18/0x20 [ 398.291329][ C0] ? _raw_spin_lock+0x8c/0x120 [ 398.291353][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 398.291374][ C0] ? __kasan_check_read+0x15/0x20 [ 398.291397][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 398.291419][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 398.291454][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 398.291479][ C0] ? __kasan_check_write+0x18/0x20 [ 398.291504][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 398.291530][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 398.291557][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 398.291582][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 398.291601][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 398.291621][ C0] ? __kasan_check_read+0x15/0x20 [ 398.291646][ C0] ? __kthread_parkme+0x138/0x180 [ 398.291664][ C0] ? schedule+0xc6/0x240 [ 398.291680][ C0] kthread+0x2c7/0x370 [ 398.291699][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 398.291755][ C0] ? __cfi_kthread+0x10/0x10 [ 398.291774][ C0] ret_from_fork+0x64/0xa0 [ 398.291798][ C0] ? __cfi_kthread+0x10/0x10 [ 398.291818][ C0] ret_from_fork_asm+0x1a/0x30 [ 398.291848][ C0] [ 401.541379][ C1] net_ratelimit: 117786 callbacks suppressed [ 401.541403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.541469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.547477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.559495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 401.571686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.583558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.595599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.607767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.619782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.631644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.551418][ C1] net_ratelimit: 132308 callbacks suppressed [ 406.551442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.551499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.557540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.569584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:2f:91:05:c1:b6, vlan:0) [ 406.581806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.593814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.605810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.617762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.629660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.641662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)