last executing test programs: 3m49.201339189s ago: executing program 2 (id=883): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x41b0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000140)={@loopback, @remote}, 0x8) io_setup(0x5, &(0x7f0000000640)=0x0) r7 = eventfd(0x6) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x4, r5, 0x0, 0x0, 0x9, 0x0, 0x1, r7}]) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r8 = dup(r4) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',uname=access=client,-']) sendfile(r2, r1, 0x0, 0x80000000) 3m49.094238168s ago: executing program 2 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2200008, 0x0) 3m48.932647511s ago: executing program 2 (id=887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x7, 0xffffffffffff8000}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x100000000000008, 0x0, 0x40, 0x0, 0x543}, {0x8, 0x7fffffffffffffff, 0x8000000000000b, 0xfffffffffffffffd}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@mcast1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) fcntl$setlease(r0, 0x400, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 3m48.846537018s ago: executing program 2 (id=888): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe63}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 3m48.846139908s ago: executing program 2 (id=889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="020100069d0000000000000000000000030005000000000002000000ac1414000000000000000000030006000000000002000000ac1414200000000000000000"], 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 3m48.670033172s ago: executing program 2 (id=892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000100)={@none, 0x80}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) sched_setscheduler(r3, 0x6, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) r5 = socket$inet6(0xa, 0x6, 0x6) getsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f00000001c0)=""/231, &(0x7f0000000040)=0xe7) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000300, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 3m48.645777024s ago: executing program 32 (id=892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000100)={@none, 0x80}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) sched_setscheduler(r3, 0x6, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) r5 = socket$inet6(0xa, 0x6, 0x6) getsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f00000001c0)=""/231, &(0x7f0000000040)=0xe7) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000300, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 3m6.070292372s ago: executing program 0 (id=1273): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xffffff01, 0x10002, 0x4, 0x3, 0x1b, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x9, 0x7ffd, 0x90, "9900010000000000008000"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) (async) recvfrom$inet6(r1, 0x0, 0x0, 0x12003, 0x0, 0x0) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000200)="96577f", 0x3}, {0x0}, {0x0}], 0x3, 0x0, 0x3) (async) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 3m6.052867033s ago: executing program 0 (id=1274): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) setgroups(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) lsm_set_self_attr(0x65, 0x0, 0x20, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x40000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 3m6.044684694s ago: executing program 0 (id=1275): clock_nanosleep(0xfffffffffffffffe, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x103}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000080)=0xf3e, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x262840, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000280)=@x86={0x6, 0x80, 0x6, 0x0, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x2, 0x3, 0x8, 0x0, 0x40, 0x9, 0x80, 0xf7, 0x9, 0xf, '\x00', 0x6, 0x7fffffff}) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) socket$packet(0x11, 0x3, 0x300) 3m5.786538055s ago: executing program 0 (id=1280): ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 3m5.784978195s ago: executing program 0 (id=1281): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x4080101}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r0, 0x57789000) setresuid(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x1001002, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m5.72534155s ago: executing program 0 (id=1283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$TCFLSH(r0, 0x400455c8, 0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x1, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 3m5.705376692s ago: executing program 33 (id=1283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$TCFLSH(r0, 0x400455c8, 0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x1, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 2m50.7864551s ago: executing program 3 (id=1395): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000163, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m50.666398779s ago: executing program 3 (id=1396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x7}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) socket(0x1e, 0x0, 0xfffffc00) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64) r3 = inotify_init() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000100)={0x0, @aes128, 0x0, @desc4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/112, 0x70, 0x1, 0x4000027}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/218, 0xda, 0x0, 0x1f}, @fda={0x66646185, 0x2, 0x1, 0x1000000000000019}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x2, 0x0, &(0x7f0000000540)="8d00"}) 2m50.66088038s ago: executing program 3 (id=1397): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = getuid() mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x28001a, &(0x7f0000000100)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}], [{@euid_gt={'euid>', r0}}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '+*'}}]}) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x4007) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x24000, 0x4) mmap(&(0x7f00001d0000/0x1000)=nil, 0x1000, 0xb635773f04ebbeec, 0x8031, r1, 0xe7dcc000) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x8}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4643c3, 0x0) write(r3, &(0x7f0000000400)="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", 0x1f000) 2m50.649239731s ago: executing program 3 (id=1398): r0 = getpgrp(0xffffffffffffffff) tkill(r0, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0xbc1f, 0x2001) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) syz_io_uring_setup(0x172b, &(0x7f0000000000)={0x0, 0x1e60, 0x800, 0x0, 0x31e, 0x0, r3}, &(0x7f0000000080), &(0x7f0000000140)) preadv2(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x5, 0x7, 0x9) 2m50.586280346s ago: executing program 3 (id=1399): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) prctl$PR_MCE_KILL(0x29, 0x0, 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="0f3066ba610066ed0f01dfb84a0000000f23d00f21f835200000020f23f866ba6100b8d3000000efb9e7000000b800000000ba000000000f300f01790926670f01c82e650faea535ffffff66b882008ee0", 0x51}], 0x1, 0x1a, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) setns(r6, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x26879580, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r8, 0xc06855c8, 0x0) vmsplice(r8, &(0x7f0000000100)=[{&(0x7f0000000280)="fdf4e068e8af7059f2b7f041efb19515c40be85be2e0957f1494104b94f422f6cd5ba62a7cb2c7dc45091df3541ddef04359901164a399163f9dc724c36205500ee8d8f674e3da143d4840cbb8d8626078f7386b7c5fb1a54f5235ddd46bdbfe295be4b7ad8f26835e687f197e8633380af9501779228f3b09f3ce68592a034d05630decd2e3103062019b5773da129e9313456051eab4e00bd620bb0cb2c5a804e9f2b24779ece708dd598b3341dd438d49ed3c06945da169b90f76bfe79ef915c3caac8ec629a20554502a0396", 0xce}, {&(0x7f0000000000)="5df7afda8f6cd3d4e2cd8715393438698fd3cf5bc4ca9c5842f84d6109b82bd4d904d268a6272ac7c1ca877aed833050e6b77c67d58522ba36c102b2f6141256b5cf251f00e2fdda8a56e9b692373cd5519ec3e751230dcb7334fa1e3d548f33e06296ebbdb64b30dbc53cbf897ba4e3b94624b9a87a014cb151380df54bd2cdcf8dd748cd", 0x85}, {&(0x7f0000000380)="75b0eac5f16251aa4a952d07bbd81fb37d935ffffd68e85d1bac5aa80a1e18ec9fe74a7646d0f1eecf26b8c312b4a68a55d510b3c5fd45ca24d2c2a35899377c96fd0cc3800f5c6dc8a6ee021e662c8bc87b201da2b4c81f144bee951e879739fb8dce9c18a180553b49ab8b99c93d5c6955ee52145231f61e11b29e257ad8b61641fb61cd22218da07c111a8900d155d6a3179376da29fe3115afef3b7425c4e266f8f8c6005a9f1002b10ded381f45cea3a185802c9e1a3f12c118e5643b33ee724a5e6c67868d8af13bb219e15e860e1cdeb6207016919a2e2fa860c34476b27a795b529075079f52ec49d2c6f536771fc54b16e8fd82a26859891a0a55bec1946d3849c448c6ae377586b8279a1406b69f9b5b07265c93a5780e9c3bedb4c3c9285421f335440346280d70e7632209933b675536144b7ee18b5c5c29f444527a9872b8150c2da31a47a57d6dd67fbd61b5e425e08853a633234eb3c3b67fc0a5508bf9a1de2304cbf87ebba2e5ffb9140b55cf50ac7aa653c2cd1ad5d2312ad1ae1955615895030be496ae55dcda516eb5d6746cb535d201cefbce690ba77692b0ca581edf13f0e45c28dc237c021d6e993ad50a8da48c4d08456a8fa1d854446288247a4162e5eca0874187698f841876e12a41ede48439cccb1eecb54154953218ea59daa5656a89f473fd1c866e00dc82137e644e0c72bb9270fd8db600ff99b2cf4739e33a1fcf2f0e3dc58c80c446634c5c1afe96d3577569b601256af06c32d297dc78fb568dc931a90660e9bde765a9b12715a79a31e6c4bc173ee74653c5e3f91acd91a39a34d75d75a5958b888dbe8be3dbbb7a63154dda834c30a727a647778bd2e9d33adf26d376341320a44df3e2fefacf5f74039cd48f85e7038b5226c03f7ca15f16d482c15f28063a8473169b2c7d68c6af3c2fe6d272d75d3235e6d0da7ddcc003ec62fbf5d32396af527f213ef35ede7a7bb0745c7890ec0ab1dc5660c9ed38d8a20ea8eb0b2e429777db55706074978ac6021a3d80d1807944034cce8e60955455cbf0428ce56b28a8f314570cba145ac56898c2feed66f8a3826e1e7550bd7fa8cb8f425c5aa2841adf6e6278f5fb38b5934970b3ffca22b3cbd3e9a4f0d1857057c83c104249a78da2e92977a62bffee8d761fb9db62193af51eb8c66893e304adb9f28f5eac926aaee07bbc36eb2cb43f2d1c373903c3d2520752911231011c3ce8ee8a02d04282ae6ed41e7861e1d71a14883afe3b75c64128260240f86de5ea00f69919236be0883a0bbe5d2dbb72fe7606b2a39fad3d8923c9d097af6b2ca906668fd48d4258166f2480b1ff0fb7af197bb5797322a9f35e4442bf565c351d9674158d9c42d90288d0061daf05f377e1d916dddc5bedd833ea746c582d381bdff48fef8656edb0b881a18f2e9023bfd698b91e953681c7d22747f0163d36e8e59be06d86a0cdae1012aac25902ea386d6897a1bd2ba89420d0476496827a3cfdd9f4cc75ab4df4b8b86ddebc9ca45d0d0990a6746292e67c8e8ee2301f72eba9fd8ebab8e52cb85a6dc539232554013b70f38ef75f61b1e7c3b6dc061a3bf104b99cfb8066102e6c05e8656aa76ad23e0d587b6f0215198ae6cf75062b1380217571f8e6a01f77683ecd9c71df31a1023fdedf6ce94ed9a2089d61f76192d0731c9b3d2b2d6bc86cfe854afbc5b9072d529636fc348acfa1410e54ecde358b254d8ed61ec1168bf25814a2345af90aad1c5b1918ee699a41047266348488b5d70ae0516150728905b0533a1b955d1fee52cced21bb3cbe8b355d62921bf31eb4aabc50cee8b6a205c586256b91eeab455d2bcd77387d240eda00e39bfb1192247896da383406fe058144deee5c85947a7eaa7546b9ae99c346180232116895a09aeefbcf1d55a63d8848a23cf5870baea8eaf4b25c689bd6d0be82b8ccf1e44497cb9513113ecf135fb9b114bbae8562b8b8671e3431e41811f6baebdafe320e4f50a222fca4fe43018cfa75f4b88a9fdb51d41120963d302fa76180768ceb93929d8b71d7972e555f3e888eaca0bfecaa559e00fe7f731afe11b64c1702a2f6b85566797ee2f8a4c0ba6f36c3f84a13604cc94be4023fb2f4980d0f1945f90047357f84f977a4a6ff629f22a782ffbb89ad7fff9fd99552d54803a6473f63857d27592f79d1abe30ce65c714aca0c996a242f7277db14e74885dd82a1af851f5beac70f503b05f515f8b0e98f73f36c3a557336250d39e979ed9d0b27786489096d30cb3469671a64d5479355d03f2d5ab8843250e427ce84795fe073dd6da68e157195800a78ae81921785a3045e4cdb3888c0bca65fa05ac44f348ff7ab5f57842d126b29ea9c85efb25790380c3c9ef5c504b4e3218dd1e3bd19e7e061872d950ab93ed9f0abf568ca87d477c75c872195ead3887ff10b3c44a3ca9ea57989a6d605112ceb7803637b5db7e940af4f33c5688e986cde7336c09a49431ac08558326a6a5c6a7e80910aec41ba4739de27a269d2d31aad44615a00b477f61b57c7d9ac6b684694d82043c8604f6cb61cb3238db94973edf160d33ba7d5f05a284042f18803ce6cfceaba377bab5da17b7403b679eb7c0a677b2c3471454afd4c8cb7c3a8ae12ea3cb40832694666b755f68eeb08f2f59c77c66862877485eaeaaa876ce8f3eaed54aae4f1ce1e23cad15b8caa12a51853ae642e13963629d7e3b571bcc7baabe0e539b3acb923712a09cccae7c105ec30b58822c4bf25d9a62b9ac4e2595b20a9d57420b2a1f28e097122486621d9b0c16978219778b8bb5f271d34a728a39cdeabbd5100514f015d32f0c40a37f544fc6fbd4f555ceaf88f00f156c20d8ddb6e6b6dabb553d4e3f5115a6a5201a88d9a25e11180782c4edad769987900012979ecccf006a17464a171f6c8d72bde8244a58e6c5aca0245250c822da26fb2ed34a861969633f1e950a6f28c27f3c8b6c20509fad37c75aba4d7fbf9fd2d1d917c6d069dd3b77001d4abcc8b569d3e01e7333f5a5072cdcce4deaf2608bdb4d60183d438b22d930eef0e191dfe48fcdb3273322d85a1533d7eb5996bdde5189a2d4b5e4ebd868aa2632c56eb97c901a425ce8245da241ead7b973a98fe51281f5006fc1c7795ff53335eafcc14c78129a523355493900e991d1ee2b8c8709a88325381fdc49cd6059798afddf14d8843f7a3faf1e0f7fdae58e25f032f342191caec2114df8e68269684c5f50ba52e1aac5228879395b45b108a1b14a82cf2548303f068e6f84088d5fb6c546c027ff335b6306fbaa546eeed4748fbd904175786a820eb24440ab29459d2ebbb3adc91616a69fce0d94eb26fa9d85df7835e46365410f53b8ec4ae89cb7964ccd047cad5dec707524aad8c589b8478f6bfe4d2d9087607baa0df83e898013de05230a2c862570fdf881ded3630500ba6021669d71c2d69a830fef5b9f2b94fe4c8622301a97793bf03d187efefe41a9446dcebe0d9d7b5ae218bd503712526a1f146c597176f5fa3ec1ae93ddee61bb508b16e7e50072623b1b3d96a79ab8ccb6d88ee3697829494fbc5ade84c096ca5abf969283056a7aa046927b825ad47c535205147530ee5d405670e513148a74e67c5d8f02072db298624bdcc33d2813582dcb3befb2587e19eb49faff22f137c0f9e5e9ef20730c109a7a420de0c5332cf4914c643f775470e3c9ab285af94f949164afdce161f4fb4bc43c3c9132b5ea011f96b1865916d67dd9e85f364f264cdfac1b6a2cecea8c7af4ffd4f635ca4d44229776875d1d1bde504906bc5a3ac923f644b29f8ed43d1716d9429bd78fe6eb8d96fe01600e61edba2ccb4ecb77c015ade9008474b4b3004a532bc7b3bb7d348c41e203428277bed6fb3b3982ee355c847496c4f218c36fa09f757fbe563b2e3e3e1b07d8dc777ef328f03e48871e408b63995e53f1b1e9d29da3e38a136a64f1e37aa7531cbc9b1e4bef2bdac98ee557158436f867bd3599a6d00fe5d6fd0906bfb2575056c371f41dcafeb9bf1d00a0f073ff9e923b7a44b375fd021610552950299e3e728beb8ff8680e13b8754601400e758d704b035d31f777bbb392863c39c2656a9b40410cdcedfddbb5851f594fc5b814b8aaeefb29af247d0f5e4c02f77e7128873eeb69d96464b3c61bb2bc8d197539915dc6f7a5d625781de8924a1cfb426d9c69183e0176c86b5fc5db4ef2d80d5528fabcd656e4518b887c4cc30bd570f9a96f9bd5d40b73471fa9ca521cc9527efc806ffd607b5f0788014f890aaa07b2fa9a924313a4863a2e7791cbb000e1a25bdc56ca9244953c951d4070960b128a443eca68d19bf59cde7129230f70f602352579eb456e4195f9ddeb4ec89c7a3127395bd9778531cb366213e0ebb034c98b71f118abb873cb7097abe40a689d48de4e9658c9841cb75cd5b6e7ac558408eeb91e5712533c7a771a7a6a7670fcd2cdc6bbe8604681fca22ff0054e30e017f30d9c1dc00a161133d3404b39021e362ea3e4d9fa5ca06c4df93435e217e18d3921a92d67ba2997e0babcff20bc90d9ba8527721000df650caf4d32170e5d4758e83d446a92a98e4550d562008931243b96c4a5359d2387d85818583d38b25b7624548bbaca314d8463cc51d8a4267f9acae0a8f42cd599d0bc07843b9a28ebe001b17b85af7c06210a0538c9b170f01449968395d1100cfcbacb29711a7fc74d54791d84994fa10a02fd7b1502c37879f40c75267ee13fdb56526fe58d9e92f496d9fb4ef74387f664a0520bf38901410a752a18e9f10ae9b1130f8d68bc9f0ac821240cbd0e2021c1d79a5253b890c579d76a464e3df5f95c618feebd696490036052c8702c68f9ab36afc7a59146eb7501b9e8cec3d52e448440bf3890b061a8e8a85fe76eb68c9322845f7056641924b1a19575dde20d26cbfd0da64a0114bdd2597997bc930792eb76f47c68f89799e50a32687e6f0354ba2527b89de9cf1a91fe445a1a32e6145b1fd6ae51399a618e2df01f8e07594720496b5dddb7dd61b2968f2994e37262f6148f8df7c545083fb2e25e0acbcbfc58f810c71699eac11ffd67f75c9889497dd70ef2142936d92a4d2907e05f4ac4651a346781b008e9e16ce0758669311adf5d09ed40893d96d9fd9fd521620f98205052fd95e4eda7d5076eae1686282a21b91aafe300cdc52102bff249ec914ae4d71b5855fdc63f652cc897d427d3e49b2a2c68ee809debdcd7e7fa3b62cb0d9c225ffc6f2cc8ec8dad626c8a446cda388ea94c817f0f07f1b22c6caecb8c337adee9d379352d278bc404c1f0450c7781426e0a8917d7d0a6329ffb846eb2f79839b7e4946bf623b7b5144879b24253afe32745eebc9db3f48c4ae4c6583c1a4a4d27c83b9a6b439ef5e829a77ec216364105fc27983cf4e3d2976e9ea182bf950d12dcc550ad825caa559bdc502ca16e598141eb4220bf76559a9b8f24e0a191ab0fb15d8a4d8b54d5176a4574b317263dbe5ae71c7ae992e599c60f572548af1af732d9309aef126f9d1beb427c04c0ea01c3fdaa2e842b6ad88eab1330e353a2d39a77306536d2b5abffa353ef9eb5f9e9dec0dfe1c2a49baba9c7af7e365470b7bafbe31777d72bcf2b8221c76b5f9815e8fda0273e069687636773f58fe9b5e765db8c47302c0e7f3a9cc08d53cddd22a2743ebef491d20232c7e9916e07700fd76f191b38236eb2cc647e09f9a75fdf493b7fd107eda073e81da7f6c6945f2bb7f65055865c4473a9ab4", 0x1000}], 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) close_range(r0, 0xffffffffffffffff, 0x0) 2m50.509224712s ago: executing program 3 (id=1400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x6da, 0x0, &(0x7f0000001480)="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"}) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x37, 0x21, 0x70bd2d, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 2m50.486175624s ago: executing program 34 (id=1400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x6da, 0x0, &(0x7f0000001480)="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"}) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x37, 0x21, 0x70bd2d, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1m6.114298786s ago: executing program 1 (id=2633): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) (async) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101042, 0x42) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x8) (async) splice(r1, 0x0, r5, 0x0, 0x80, 0x8) write(r3, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x54, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e444416"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000400)}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1m5.873203696s ago: executing program 1 (id=2635): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8c4000, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) (async) futex(&(0x7f0000000000), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x77359400}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000430001000000000000000010000000001400018a60c6360b2b754e86aeacc187ec511119d84271d95e21931381e7f14a283577a6c1896f702dec6ee8b87e9495298ff05dc69e69d6a2c95146ed151f76b201e42c905f37f2bb9f13b51a627bf575d649a5bc625a3b87af36e37900bd3510c1a5ee67668dde220000000000000000"], 0x28}}, 0x40) (async) sendfile(r0, r0, 0x0, 0x400000026) 1m5.781041493s ago: executing program 5 (id=2636): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x101) (async) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x4c, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/161, 0xa1, 0x2, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}, @flat=@binder={0x73622a85, 0xb, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m5.682652711s ago: executing program 5 (id=2637): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') getdents(r0, &(0x7f00000010c0)=""/4135, 0x1027) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async, rerun: 32) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000020101010000000000000000020000000400018018000a801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x1ffcc35c6ab96c2b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) sendto$inet(r4, &(0x7f0000000d40)='<', 0x1, 0x4000805, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="0c94", 0x2}], 0x1}, 0x8000) (async, rerun: 32) recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x32b}], 0x1, 0x22, 0x0) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m5.538376333s ago: executing program 5 (id=2638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xe3, 0xbc, 0xa7, 0xff, 0xffad, 0xa001, 0xe077, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x1, 0x80, 0x6, [{{0x9, 0x4, 0x78, 0x4, 0x0, 0xff, 0x32, 0x1, 0xb0, [@hid_hid={0x9, 0x21, 0x2, 0xb, 0x1, {0x22, 0x20d}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x3bf58234e915ee2c, 0x29, 0x5, 0xb, 0x8, 0x3}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x7, 0xd, 0x8}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x61, &(0x7f0000000180)=@string={0x61, 0x3, "e27d89bd352f8aad7b7c22369ade3e356807513c0e267a1c4e61041f5ab4cee72ebcee51b1a038f65e179b209f6ab1248162a902be462b9e4f161e83dc3aa406ec8338a32bded4c69d647fdb66938fc59a3073cf56dd98c71d2e01ae49e41b"}}, {0xb7, &(0x7f0000000200)=@string={0xb7, 0x3, "7b51e9d858f9ffc8c32cd3512d557c0a5ef3bc1fa009f2cc9e458fd2e211e7ec8a9d75522b6d3968656d618d5cef03593c617b03ff4be2d96df71604c4ed0662fdca8757435fe5125e37c54729cb22e9a189fcbdb54a8aba4242bb7978dbbba91ec333b6c54548423b14ae5ce942ec6a42b50c3dd2778a7c1c64e7c49acf1275afe4dcae2ef5efaa9a645b028385fefc3c1c5cdad8fb7337635e4f0cba5def7cf30e9af018fc1b726e04bb189e63d570f04a1eebf8"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1m5.011303916s ago: executing program 1 (id=2640): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x9, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r1, 0x5501) socket(0x28, 0x5, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000002840)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000007c0)={{0x1, 0x0, 0x80, {0x4000, 0xdddd1000, 0x6}}, "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", "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"}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), &(0x7f0000000140)='./cgroup/../file0\x00', 0x12, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) write$uinput_user_dev(r5, &(0x7f0000002880)={'syz1\x00', {0xffff, 0x3, 0x1, 0x1}, 0x11, [0x9, 0xfffffff9, 0x7fff, 0x5ca8, 0x7, 0x6, 0x1, 0x2, 0x0, 0x400, 0x6, 0x0, 0x4, 0xfffffffe, 0x8000, 0x8000, 0x0, 0x3, 0x3, 0x401, 0x7ff, 0x1ca, 0xfffffff9, 0xfffffffe, 0x5, 0x9, 0x65b0, 0x5, 0xffffffff, 0x1, 0x60, 0x7, 0x8e, 0x6, 0x5, 0x0, 0x1, 0x0, 0x7f, 0x5287, 0x9, 0x4, 0xf478, 0x1, 0xde3, 0x7fffffff, 0x5, 0xd, 0x2, 0x9, 0x8, 0x8, 0x1, 0xffffffff, 0x78, 0x3, 0x0, 0x3, 0x3, 0x2, 0x10000, 0x0, 0x8, 0x6], [0xf6, 0x101, 0x6, 0x5, 0x7, 0x0, 0x8, 0x10, 0x0, 0x78, 0x1, 0x9, 0x4, 0x8000, 0x5, 0x9, 0x1, 0x6, 0x5, 0x10, 0x9, 0xfffffffb, 0x0, 0xcf5d, 0x0, 0x32, 0x6, 0x9, 0x7f, 0xe3ae, 0x6a, 0x5, 0x3, 0x2, 0xfffffffb, 0x1000, 0xfffffffc, 0x75, 0x1, 0x9, 0x6, 0x181b2d91, 0x3, 0xedb, 0x6, 0x81, 0xb, 0x10000, 0x2, 0x0, 0x6, 0xffff, 0x5, 0x3, 0xffffff01, 0xffffffff, 0x6, 0x401, 0xffffffaf, 0x1, 0xffffffff, 0x8, 0xc, 0x713], [0x22, 0x80000001, 0x2, 0x6, 0x7fff, 0x8000, 0x7f, 0x6, 0x3, 0x5, 0x7, 0x0, 0xa5, 0x7, 0x1, 0x7, 0xa8, 0x800, 0x6, 0x101, 0x1, 0x1, 0xc, 0x1000, 0x4, 0xfff, 0xc214, 0x7, 0x2d6, 0x8001, 0x2, 0x0, 0x3ff, 0x8, 0x8, 0x3, 0x7fffffff, 0x2, 0xfffffffd, 0xe4, 0x7f8da749, 0x3, 0x200, 0x800, 0x2, 0x80000001, 0x4, 0xfffffff7, 0xcb9, 0xb58, 0x3, 0x5, 0xa5, 0x0, 0x5, 0x3e3, 0x6, 0x3, 0x800, 0x3, 0x1, 0x0, 0x6, 0x2], [0x8, 0x2, 0x7ff, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x7, 0x6, 0x4, 0xa4, 0x8001, 0x8001, 0x8, 0x9, 0x2, 0x8, 0x7, 0x2, 0x61c8, 0xfff0, 0x1, 0x7, 0x2, 0x5000, 0x4, 0x8, 0x3, 0x8, 0x7, 0xfffffff9, 0x4, 0x800, 0x6, 0x7, 0x2, 0x4, 0xfffffff9, 0x7, 0x8001, 0x9c, 0x2, 0x200, 0x8001, 0x5, 0xff, 0x2, 0xffff73d2, 0x5, 0x7, 0x0, 0x2, 0xffffffff, 0xfffffffa, 0x2, 0x7, 0x2, 0x7, 0x5253, 0xfffffffb, 0x10, 0x2, 0x2]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x8, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m4.908846974s ago: executing program 5 (id=2641): r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x501000, 0xe, 0x2}, 0x18) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x56, 0x4630, 0xa, {0x7fff, 0xc8}, {0x800, 0x5b1}, @ramp={0x8, 0x9, {0x6, 0x4, 0x93dc, 0x400}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.783783904s ago: executing program 6 (id=2643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1bc}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000940)={'bond_slave_1\x00', &(0x7f00000008c0)=@ethtool_coalesce={0xf, 0x6, 0x7, 0x7, 0x6, 0x8, 0x3, 0x0, 0xfffffff9, 0x1, 0x0, 0x4, 0x3, 0xc5d, 0x3, 0x6, 0x5, 0x3, 0x4, 0x2, 0x8, 0xffff, 0xffffc000}}) mmap(&(0x7f00000a4000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r3, 0x406d2000) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0xabd506dca8bf41fb, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000080)={{r2}, 0xc000000000000, 0x3, 0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fdf, 0x6, 0x400, 0x401, 0x6, 0x6, 0xff, 0x5, 0x1000005, 0x0, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28eb, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x0, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0xfffffffd, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x8f, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0xffffffff, 0x3ff, 0x3, 0x1, 0xa, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r8, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) setresuid(0xee00, 0xee00, 0x0) sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) pwrite64(r2, &(0x7f00000002c0)="e781d0795ba8b24e9a71fcaedcd831cc4b60810ec634e1f293165edd86ffa8ef582aaaf68de8fe68b9222d725c72e02b5a8d42ddc29828d50a3a4ae3e097b58a638b28fbe5095bf1dbd30a491ac1ad7b3d3379c90169133a1906e210aaad009f4dd9245a08aa212141ac2719abd5cdb378ea30f6451d60fb6e", 0x79, 0x0) write$UHID_INPUT(r9, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) 1m3.818022492s ago: executing program 6 (id=2644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x158, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x505e}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r4) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x2, 0xc, 0x16b, &(0x7f0000000340)="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"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002060102000000000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff00c}, {0x20, 0x0, 0x0, 0xdffff010}, {0x6}]}, 0x10) ptrace(0x4207, r3) sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, &(0x7f0000000140)}) 1m3.765923007s ago: executing program 6 (id=2645): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000004500), 0x0, 0x0) dup3(r1, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 1m3.651007296s ago: executing program 6 (id=2646): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000740)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x100000001, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @clear_death], 0x0, 0x0, 0x0}) 1m3.506421297s ago: executing program 6 (id=2647): openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, r3, 0x960, 0x0) write$binfmt_elf64(r4, 0x0, 0x18c6) 1m3.505717258s ago: executing program 1 (id=2648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0xc, 0x7a8, 0x6}, 0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) ppoll(&(0x7f0000000100)=[{r1, 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x1010, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f000099f000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) fcntl$addseals(r0, 0x409, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x30f84000) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r7 = fsmount(r5, 0x0, 0x0) fchdir(r7) creat(0x0, 0x6a) r8 = openat(0xffffffffffffff9c, 0x0, 0x92000, 0x8) lseek(r8, 0x3, 0x0) getdents(0xffffffffffffff9c, 0x0, 0x0) 1m3.46671112s ago: executing program 1 (id=2649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000240)="0f2b13ccf08081aa00d9f20fb908c4e3f5ceef9a0f3266b8010000000f01c13ef30f09f20f70775fc9660f3a0d48077a", 0x30}], 0x1, 0x16, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x128}}, 0x20008800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) signalfd(r5, &(0x7f0000000040)={[0x2]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.11107826s ago: executing program 5 (id=2650): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x54, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e444416"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000400)}) (async) prctl$PR_GET_SECCOMP(0x15) (async) syz_usb_connect(0x1, 0x39, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x59, 0xab, 0x18, 0x10, 0x19d2, 0xff6f, 0x18cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xb}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x4, 0xd, 0xfffc, 0xd, 0xc5}]}]}}]}}]}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) gettid() (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = timerfd_create(0x0, 0x80000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000180)=0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) socket(0x2, 0x2, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x400000) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000080)) (async) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0xec}) 1m2.448642953s ago: executing program 1 (id=2651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x4}, 0x3ff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000940)={{0x1, 0x0, 0x80, {0x5000, 0xf000}}, "c8c43f442cdbba78395c5773b4beab352b92f3c670db272b79ffcd34eea63c4e6581270d4096fb4c848259e5160c6add0aaf498a83f5719a208b5a27fc38b4073b162eab821f628361add0ceb16939cc37438c7925b4ad8e9f0e1ccc387bbe952a2949d41a51465ffd4984c7678d2c66a7010572b1ffc8111a084a0f05d84ea19fead5033d712ae6a94846be1318971fc8e65dd701e2a7d48104b795d7148ab232c7270a9b9453d8d1199c7437c0b58617d5ff2d81d16174aea75b567d2a6421caeea1011c6a91d59dd340cd09c3787763095d8fd1fab331eb2179b59e22eff52012395439c76af5c495771597632946a4145a81522686ce6828f4c356aef76a76216fa20179c9bfab89868205613db26c6396f06773d5db4a28ce385a452b7e528d5277fc4e6ed5ae0b1226e6a329d086c92ae1cda466971784896cb855be3147af1752ab07485c8f8e13afa7c24cdfc6169b568a4d860fb811d18d5b6a15d2ffc0b802bec12b183a668cbfd1b9e38fb5c299d9882472a96d68aa918c8e6382a03715377003ce12c0c1e50831558ab9f42cd8a99b0185ae15958ab3f24c17f242b1b464b52c904f92ed09133fdb9d3b57e2ae3d6c2f644469bb79b935fa22166f618b78fcf18b2f20b9e274ba9e6f85faa285730c418589c073656884980e1ba012a57bf4c412bca8273a2d552271296243ce0d5b0670048ebaa83a8d36e52b717a329ec5ec2b8ff4d4634a04c400bab4edc58ba3929a39dec8c29b071896b242d46bc88cfde67639c920da95891832269317b695c4d38b31bd59cbd5f84cbfd78c116afda81e8a6846dc219021c0253db0ff0788ac7917204d2245bdc48a14a3065ac73244c5c06b0f84864b079f4165f38729dee6eca417089b7b650d074811ddd0d96f8371f62cc74ec19ef66c6d31e9c1982de19dee9e1be8e141e65dc5d023d85bc8fe84e75be5643c1c2c194e36ce2ad91863bb2f5daeba418efe71c864a0b7c98eb38f618dee82e0466261c91874d43d78c502a5386bc8e84d09400f6fd0a6c3e537282ed1063179811bb8d601fee9a65d9c9893c05fbd1141e0d5a3f1894e6aa1afde421d2a2ee0fa42bdfc0070a7b36f2760da364f2be17468e5caa855efe2f63567380d1e95cb5e808ff9bca0643dc3402ed298b37fbffd857e394560e8517d00b99820a9d2f12eff3ff1d3320e6391837687b25d0932cf878c3647ad520080526c24a0a7d028a7fb76f7773af6c23b07200fe83948decb7786f2ceb76a84774cbb9ab02a2f811f8fde8e123cbe9d7ed61b887ab53407165d28b31d493c6da0763e2c7cb2cb90a48dc524db6b7a62a84f0d3df82c72c0a632fe190feed0e89a447bf695e96e8bfa718d278afd7a3fee005cfcca377f0f6eaae401012dac444046d7c2671d74fa3ed7c2353b487942c46be53dc45cba24c5980efb87b5629ed3edeb2b81c972fcecdf1b2c85a0c6ba9a06f347fd96e363db1c592c5e8ce8a4a5fb56819319c3e680e3eddf6d2ec9fc237bbe28ab728719646d9b300b611b5901d5fcd6f9d2e0d4e26eafe17d146d4457ee044852c9e35f28142ab06b05d1d34fbd126b5b16a70df7d04140240c39f5921b8b4aed6342d7403daeb8cce30283bf217e59d90914de68e4a9ac86e66d00484bd8ec570af604796b4eb61a23a6bc459c6083ce57d6c428d78266631c50c51a198d5f7a9ef789542fa2692a3633aca66e0f794d7db2bec74673630c9717afcf87e893fe3064d49902ba9f045ad7eac25ff789c419f81d06da1716ebc3c5da26dd3476dd50feb5e09b9d935813a34240495240222898d650dfe744c9b28f7b028f1c49da3b0b00fa5da780cd3d69556d29688136807629c53ce671a132c96169a7a18eec5c0111efc1f25daf13f1ae334ba9902edcec08351d449c2ff50878f59a68bd36b6e421b4b711a06acb7e0ff33630227281aadda2e5112b2012b940fab09749ba87f81b76dc9be99513ef2f2afa539869832ea158d0366a593020c6c3edf4170d59c81163e61def0c6e37eb0002e4f9952afc2404b95c22e92886373fbc2313e0d889a64bb50eca14b61dd117873d2e064ac79e84ca261aa320f96eb4c77ef8b2965c7d354d39411b771b8ffb8a2299be2eb283647790cddbc3f755c0dde7723ef8200f7b2f8e3560273065516409b128a8e0a343a6bf78ffd2754c924e874b6c95e83e094ef8f6339a9b2abf7d85b23348c706728884317e477c5756ca2633b9b590e5d3aa3de79f4e770aa8416a08ac60573fe8b2f62ea52955b61919886eece800b1a14318cc519193db66e1c6ea87a8b3d101d0e4974131861815e77d2eb956e485fafb126fb809b65f3b50312a627e6d78ff64bc08185e0f12aae923fe0bf09d930ff30042cb7489229bc0c4ede9ed2eab8013c79a037ab28fd9054a36c2788925392e6ac728bafcd6f452277f2988e580768cf533d74dabb0eca2d12a91492207dc3283f2fda6a4b89032215801c774c462dffabf27887764dbd4777aa3b4332cefb32eabf0827f3cf12161b6c915bc49e7fd95f251b1ec4b7fdfc48350203135d2e50feaaf327f1cbba1c7d5c81f53b0857cb2048e4b496ab1a81184e3981d60092d28898c55323fb74d53ea4cb1d396c0ebc129aa64299de7ddb74759aa1637db85454e41496c96006c59ab9684bf50918888e27ee00d966b822aa02593a9ad2fa850b1d4aa87f3427e69b4af2f80aac1e06db4a1826b2006dcdf1e87648f5c39f2c16c1b0a0d435e547951dbf7f8d2b0538f2f37d3ed7ebd047efaa4ce0fe26291b332668189a6c50927bdb76c562b0b4a5a8adae2faf6868b9ce20722a35c5d12768a46c67cd6aa403b3baec0eb7ad8129cdd231e6c67a684492eb1cad9d8ab7fce072e5f747767bfcd0ca4a0d937e54cd517d477b9bff81534428e53bb07fef5c8aaa86f8204d3bd0dcacd17beb600f800b30ba8a133e3399a7a6b249d88febebecd7ba9da45f5d441cfb2951c81d89afa034c83aaf31c9fc092e36dc14ec54e202150dbca7a02f08edff0394e59de9bfe4421b695fee488b7c6407fc3c89f897fbb7d190acc13f0355de9ed9a1c36b4dacef95102ddbe69b1226a3f155455ffc80c03198c136170e58b7fdea3780f2f20679671c1275ce7c2663adba99916c81fe1c1cbaf536083ee06a3589f10b34629f464ec9a9f8e4338e0149cf250271db9139491413647b8b6ff60749aa3c01a1a8ee956d927bfcd3f472b4b53fa6dd9546851ac4008286a72331cdf7559eb731ad181e0ee4d7db2f68f852ec512664f13fed1d14eae1220955eca74d43294f3289ff7541f6fa7a5e79f14ef1f9ae883ebfd5aaf61326505929b42e0e9ff67f87de656f30eb6196c4fe584e5c10b340746eb85ccc09c147e5589a79fb6a84c5b4172d23d274a5ac774deff226e203eed85ae77a0d351a0ac5d7fe693304945528e0d06c684bc75257518f6074ea3495e3d66232b90ba2b1254fdd43dd6d540172973712cb773f018b83e3695167ffd547e62b10207c293b69258ebfa2c3a229eaa9dc2cf611ad68a2413994d06cfb903f8fd9febe0dc1df7f7e7109447b43194d25b9500b1481327d73d63f0d1d49682863699f69a377b381f1a3f231d034dfd088b3b3f2bfd0ca66417012bc2d8eb9fa681530b87b457a46faefcdc59d05dc0daeee1ccc7d53aae029c806ed032440a7e6f65742acaafe2e09660ff6af7ad85610e1cc71707b7af3343651bb8957f3500ab45ca6b7575e779f3865d1ca7570a1e1b623f8cb9b249c1e3dd63a7b59e1405e9e15541fa07689142f5bed86e183fa0915718d4b78a3a27c8a4831b2e07031f0ab7e10c7991b7f527ad1288263e43628aeace1fac59eba4376b958c9b246139794f3ca7b9647ff8a87884eef41afc99a0184701ec4a4a7dd3d8afc3ccc4a25a27b7cc9c750a0be80d0133693c8393d2f14ea2c99e46cf19612725e99db4faa0d575211412b8f8b2561c0768e004b6ea1da75a1df71f3d9f5af6e8bd33cc6ddeca56ea928b81faac076fa13c751e14940a6dedaa15f78f85844bee2c80ee17d36f7f22020f8df0ad62101b11914c5f9967c63e9be997ee2a0be1b3f9d7d001eeb2bb5ccf3f7129e24f23db74a4089a07828c3418e8276c76fe214b7082f66b09efecb1ed9ed947a88b57b1963ba9c7b4fd3e01c4e8a0ef07a6321459c1f2043cfb41b84a3abc1cd669a98e83832785ea76fdc69826e5e09c790d6e1dbd2e842fe857aa6b332bae754cd7213ed9f765d30bb777860181d95df7cbe7a52de1a0aa1041ec98a199a7ca636609f8081e53b061ee3b89119a8023de144fd7b39ac1f9f61ddf5cf4b19acded9ffdfa29b4dd6d12012c95052a7037e9eb3286663583189b20af1cb1adb1968a542323e0d2770ba09ab7056816a50e46557571f579171234f64dcac80dee77951992a35e15c073696f306a1536652e1153e2f0a713d395325e60761622b709692ffeb746d5d98d29f1e75adbe6d641e47be5b35f44af1b5a8d14e86f8c971a73da7b1ccd43d159eabbb386274ddbe328fa28e3db462737197268cb74cb808567a59c0b0647531258c258c001e9f0603b85622302b828313041683b0d0d5ed422d62a1575c84c9f9127e3631d7dec9252b07fd7ddeefd4fb561f8718d69131b52b6a456bd6c8231022915a322dcc0706fe68238000c3e5d6743fbb51ac88fa8d0f09d7515f7fd4ce3c43c8bb5e055d138832c991f8aed56bd4ea8e6fa842219af6eda26a163ce2331e2219b67fc2a846e3918efe8822d9ec26d362c0f74ffb30f7abeb2f5884b0961d6bfec109726509ebb022f5758b696e88a8442230ee9bb4a18bcc2f55efef03c8c7c579553c112ff51ec3284b4b3a4e4148473dbd692deb186b75bd274d8b98847382ae0ff121b656207fc0ae41740d80dbec31418fa3ef4440cb9303adf8ffd580d526363f58b661b9e74dc083506ceb59198322bcc3f8317fa062c9cbfaabe645950637a845df56e46ad0ce0d13c8b4315823d642578ea0447ba80a4a2fa8db626e0127c71b94d670f6648c2a97d72ba744f5f3fb22a19fd69056085f6b55b2edb219afb6509b53f0e5ba49a26e5a48e3070b76455a2a95ac10590845ef90e34d4a967d3e11ae596130808410ddf651d7bc3350ec68eeb7831200e3b328e8dfef747c79097dec75e51714db68242264032b39daa6414ef9cb52be334c6c8971420896d9345d3a77d9f22f878779910eca92e0546e94b672375cd05fbbf543e9c19ed8a80e5d93327f7acd5e9860cb0d6120037ce76a734f8056611cb5781b00977d3f979470b91d635b4cd03d011ee5dce24741a6c5eba65d3e549b5965ff8b50f6d7e086db1bb69ca5a4adbb81a37d24dc9ddfa95f737718a14f1dd3abcf83fc93dcf18484e7212e82201a8dbbb6cf5819bac9201d85eea7316ad9cd50240cb7a75394fa0eeb07b206cbe88b626f6c369e92ff8cf88dfe0558323f039b80c87f24deea3f6a85328319ef38ed3135a06a661137aee34d189edd1748b730f087ac19d9ff67e35746db0312c4d999ad188b31210573868ce65d467694a03660663cce894f37c9c971b35d5b6d18b841640fa1a0e90adf54181a44085c79ca97c3287102a30cb58857f135d4f329982c274c929618933f553f2d9ed3521f2e8e26fc222975e1e156236275cbec7623f0b344b9be2e33592244d992a12cbf40d9e6bb56377362d6cb0a7975799fd597a747c29ea4411e71e3772c59dce239541616ffc2dc8f016fa593f6d95f9091e13c9", "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"}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='\x00'}], 0x1}}], 0x1, 0x9200000000000000) ioctl$FITHAW(r2, 0xc0045878) close_range(r1, 0xffffffffffffffff, 0x0) 1m2.281064617s ago: executing program 4 (id=2652): socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="185067d8", 0xfffffffffffffe42}], 0x1, 0x9) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) clock_settime(0xfffffffa, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x1, 0x5, 0x5, 0x9, 0x0, 0x2084cb, 0x200000000000, 0x100000001, 0x8, 0xfffffffffffffffd, 0x101, 0x5, 0x0, 0x1000000, 0xf13], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20401, 0x100) ioctl$TUNSETIFF(r5, 0x40806685, &(0x7f0000000000)={'sit0\x00', 0x200}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000000)={0x3, 0x3d}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x4, &(0x7f00000004c0)) 1m2.214429152s ago: executing program 4 (id=2653): setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x400c810) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) fstat(r2, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r3) (async) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}], 0x1}, 0x70040000}, {{0x0, 0x0, 0x0}}], 0x3, 0x4048841) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x800) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) 1m2.091242532s ago: executing program 4 (id=2654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000100)={'veth1_to_hsr\x00', @link_local}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.876880539s ago: executing program 4 (id=2655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x301440) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{r2, r3/1000+60000}, 0x1, 0x7fff, 0x2}, {{r4, r5/1000+60000}, 0x1f, 0x16de, 0x1}, {{0x0, 0xea60}, 0x17, 0x7, 0x12}, {{0x0, 0x2710}, 0x17, 0x7, 0x7}], 0x60) r6 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 64) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 54.607211528s ago: executing program 4 (id=2657): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4000004}}], 0x1, 0x4000001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x7, 0x2, 0x7, 0x1, 0x6, 0x2128, 0xffff}]}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d2c26006, 0x12, 0xffffffffffffffff, 0xff92000) 52.72853853s ago: executing program 6 (id=2658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r1, r3, 0x0, 0x1000000201004) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) unshare(0x62040200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) write$tun(r4, 0x0, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x1, 0x0) (async) fchdir(r2) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) ftruncate(r3, 0x2007ffb) (async) sendfile(r1, r3, 0x0, 0x1000000201004) (async) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) (async) unshare(0x62040200) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) write$tun(r4, 0x0, 0x14) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 49.03160699s ago: executing program 5 (id=2659): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0x1801, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000034c0)="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", 0x3e9}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7ffefffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) timer_getoverrun(r6) ioctl$UFFDIO_API(r5, 0xff03, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x4c, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/161, 0xa1, 0x2, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}, @flat=@binder={0x73622a85, 0xb, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 46.541310491s ago: executing program 4 (id=2660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x559, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x2, 0x3}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x0, "d3001c33"}, @local=@item_4={0x3, 0x2, 0x7, "837004d7"}, @local=@item_012={0x2, 0x2, 0x7, '-\x00'}]}}, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x9, &(0x7f0000000180)=[{0x0, 0x7, 0xeb, 0xffff}, {0x8, 0xff, 0x8, 0x6}, {0x9, 0x2, 0xef}, {0x40, 0x20, 0xc}, {0xe0c, 0x9, 0x8, 0x1}, {0x79d, 0x7, 0x8, 0x6}, {0x0, 0x1, 0x6, 0x6}, {0x6, 0x8, 0x1, 0x2}, {0xa, 0x9, 0x0, 0x3}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x5, {0x5, 0x32, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={r9, 0x3, r7, 0xfffffffa}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000200)={r9, 0x2, r4, 0x21, 0x80000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)={0x2}) 32.036367296s ago: executing program 35 (id=2658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r1, r3, 0x0, 0x1000000201004) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) unshare(0x62040200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) write$tun(r4, 0x0, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x1, 0x0) (async) fchdir(r2) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) ftruncate(r3, 0x2007ffb) (async) sendfile(r1, r3, 0x0, 0x1000000201004) (async) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) (async) unshare(0x62040200) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) write$tun(r4, 0x0, 0x14) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 16.29835532s ago: executing program 36 (id=2659): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0x1801, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000034c0)="204e7d25dd8162c1041612527dea42c1e1a1ba019a58717c7c3b5567282e1e87d968105875028e9cba05bd7e53f1aabd9dc23b0700bcca8537d4c67bfdf578d20378482027dcd057ec6b20aa4b196d32654b5f1b3d71bda6540e62e566117c0eccf15bc399b8b7c07b1363c306406671c5b54ee6cf9e6ae5f78b62a885f187b1b43fc53d66561d9580fcd99294db834f61711ae72f2cb72d2b7b793be812f7bd575c59aa2c41b7b7c64787a67df2911f3c97a42bce334ff191f6a10c738eb05e75148253b1ff3bf336ed751c70446307ecbcf32d4edf0ecb41a13138578d0bd57fea5230037c25b564760edf95b08cf09e842e8a01bfd785b44618f3f954e0ca72fd4bb69da0a8cdd6d2f630be936d9ed0c0eefaaf499482bbfa34b2f07ac8b36119ffece197bbceb701c17daa8e420dfe1dd4980fd820fc25459e9988b12313841186cca73ab5f968b44a7eb7b6f80949ece3d74dafb2adb9f1e8512c7a331df5ed0f6799abd6f9fef5342aeca1eeaccf776b88030fa6beff976f61005d5afc5ecbc0c840f91485c2dee7a3ab33d8f9dfdca8573d08fff4b993c14540298a85c344b0480021d62876ccd602f232380bf064d255fc6007a4ce84486c5c0a7fca045b57ae1fb68b516ea88f713f470b80f8e3a45cb0a6eb67375843733627f18df96ffc0b27b33713837275d072bfb8da205629d324254e7970e8404d847c13b378eee59d69bc4fe61c08543daa0c5476b68a76619f8b5f9c2ed715fe6978a9c5c4ecd005dbcabc142273bc7ff737b0f784b2f25bf71730f3f6a8c1cb810f483da73f985d4eb04e2162fef94843ce225d9c2cf5e84d4fc20ffb7151e08e7b2e1858c711c158b071b6c4cb44663c6f3c15beb0efa9bf0b275335535c5d580b28c715dfcfe18b91ab61c4bd15c253ab1bf7bf9ad3c0840a7e4b598959e4992306dc7127fccf330d60eb60d93e0d5ead5cefd12360edb9bdc72a37d8b23d136f4105fd4b276c0eb42082b732484eadc27c457f5242264c899c82dcd0501462c6f8bfbfbd200ab2ce3b6b6411ead84fb97753ff13572c37dee0628ffdae5ee3697c10377a015614dcdd14c1f88fbd40169c504b1d1ab3d0b9ade0dcbe14c7cc5b6ac98b39dd2860da7f968aa3f38642cd7f9681b81a1ee4e995fdb554ab130c030c2fe1d6e3f5d71ccc956a0487577b0effe7c2d5ca991d263503687af1f29c2498945ae7e29389f51d98e2f2a20f73fc19fed946c1c10aec332db1f97d34e005229d2fbd9dd0417bdade54f6d107eb9a1827e5e977deb9ab8ed0a662569e7476bea00946667afb3a04e700a407119b912d4fc854fe497fe5ba19dd492b6a8792ca51dde08afa9990b6c5206b029ede021b107c68d42b7bb473201a279348ac07bfdb113f1b8320610f5f61", 0x3e9}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7ffefffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) timer_getoverrun(r6) ioctl$UFFDIO_API(r5, 0xff03, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x4c, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/161, 0xa1, 0x2, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}, @flat=@binder={0x73622a85, 0xb, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 37 (id=2660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x559, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x2, 0x3}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x0, "d3001c33"}, @local=@item_4={0x3, 0x2, 0x7, "837004d7"}, @local=@item_012={0x2, 0x2, 0x7, '-\x00'}]}}, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x9, &(0x7f0000000180)=[{0x0, 0x7, 0xeb, 0xffff}, {0x8, 0xff, 0x8, 0x6}, {0x9, 0x2, 0xef}, {0x40, 0x20, 0xc}, {0xe0c, 0x9, 0x8, 0x1}, {0x79d, 0x7, 0x8, 0x6}, {0x0, 0x1, 0x6, 0x6}, {0x6, 0x8, 0x1, 0x2}, {0xa, 0x9, 0x0, 0x3}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x5, {0x5, 0x32, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={r9, 0x3, r7, 0xfffffffa}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000200)={r9, 0x2, r4, 0x21, 0x80000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)={0x2}) kernel console output (not intermixed with test programs): xt=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 217.884761][ T36] audit: type=1400 audit(1755105178.200:1000): avc: denied { accept } for pid=7149 comm="syz.6.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.935475][ T7151] overlayfs: failed to clone upperpath [ 217.982696][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 218.132675][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 218.138859][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 218.147606][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.157726][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.168053][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.177121][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.185105][ T10] usb 6-1: Product: syz [ 218.189303][ T10] usb 6-1: Manufacturer: syz [ 218.193935][ T10] usb 6-1: SerialNumber: syz [ 218.460867][ T36] audit: type=1400 audit(1755105178.770:1001): avc: denied { write } for pid=7165 comm="syz.1.1997" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 218.601410][ T10] usb 6-1: 0:2 : does not exist [ 218.722695][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 218.772496][ T7179] pipefs: Unknown parameter 'max' [ 218.873679][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 218.883548][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 218.893309][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 218.903020][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 218.914203][ T9] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 218.923395][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.931732][ T9] usb 2-1: Product: syz [ 218.935924][ T9] usb 2-1: Manufacturer: syz [ 218.940552][ T9] usb 2-1: SerialNumber: syz [ 218.945756][ T9] usb 2-1: config 0 descriptor?? [ 218.951554][ T9] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 219.153345][ T7166] 9pnet_fd: Insufficient options for proto=fd [ 219.161561][ T9] scsi host1: usb-storage 2-1:0.0 [ 219.168492][ T9] usb 2-1: USB disconnect, device number 75 [ 219.671125][ T7214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.676885][ T570] Bluetooth: hci1: Frame reassembly failed (-84) [ 219.690482][ T570] Bluetooth: hci1: Frame reassembly failed (-84) [ 219.810650][ T10] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 219.823387][ T10] usb 6-1: USB disconnect, device number 33 [ 219.831394][ T2799] udevd[2799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.065734][ T7220] overlayfs: failed to clone upperpath [ 220.411301][ T7257] tipc: Enabling of bearer rejected, failed to enable media [ 220.475281][ T7262] rust_binder: validate_parent_fixup: new_min_offset=17179869202, sg_entry.length=0 [ 220.475308][ T7262] rust_binder: Error while translating object. [ 220.484950][ T7262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 220.491259][ T7262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:551 [ 220.502724][ T7263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.522440][ T36] audit: type=1400 audit(1755105180.830:1002): avc: denied { append } for pid=7265 comm="syz.5.2032" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.812728][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 220.963775][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.974719][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.984495][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 220.993554][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.002042][ T9] usb 6-1: config 0 descriptor?? [ 221.209186][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 221.215258][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 221.227165][ T9] usb 6-1: USB disconnect, device number 34 [ 221.327681][ T7287] bridge0: port 3(macsec0) entered blocking state [ 221.334360][ T7287] bridge0: port 3(macsec0) entered disabled state [ 221.340910][ T7287] macsec0: entered allmulticast mode [ 221.346435][ T7287] veth1_macvtap: entered allmulticast mode [ 221.353127][ T7287] macsec0: entered promiscuous mode [ 221.358598][ T7287] bridge0: port 3(macsec0) entered blocking state [ 221.365090][ T7287] bridge0: port 3(macsec0) entered forwarding state [ 221.379546][ T36] audit: type=1326 audit(1755105181.690:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.403147][ T36] audit: type=1326 audit(1755105181.690:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.426519][ T36] audit: type=1326 audit(1755105181.690:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.450007][ T36] audit: type=1326 audit(1755105181.690:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.473456][ T36] audit: type=1326 audit(1755105181.690:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.497021][ T36] audit: type=1326 audit(1755105181.690:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.520447][ T36] audit: type=1326 audit(1755105181.690:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.543897][ T36] audit: type=1326 audit(1755105181.690:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.567981][ T36] audit: type=1326 audit(1755105181.690:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7fc00000 [ 221.585294][ T7296] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2041'. [ 221.615594][ T7300] /dev/rnullb0: Can't open blockdev [ 221.712777][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 221.712922][ T500] Bluetooth: hci1: command 0x1003 tx timeout [ 221.982684][ T31] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 222.002667][ T331] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 222.132680][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 222.138966][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 222.147399][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 222.156034][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 222.165051][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.165926][ T331] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.174771][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.174806][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 222.184954][ T331] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.194263][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 222.207519][ T331] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.216867][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.217634][ T31] usb 2-1: config 0 descriptor?? [ 222.228152][ T331] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 222.267308][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 222.275836][ T331] usb 6-1: Product: syz [ 222.280138][ T331] usb 6-1: Manufacturer: syz [ 222.285147][ T331] usb 6-1: SerialNumber: syz [ 222.359887][ T7330] incfs: Backing dir is not set, filesystem can't be mounted. [ 222.361635][ T7331] 9pnet_fd: Insufficient options for proto=fd [ 222.383062][ T7330] incfs: mount failed -2 [ 222.464451][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 222.485525][ T31] usb 2-1: USB disconnect, device number 76 [ 222.495469][ T331] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.495675][ T31] usblp0: removed [ 222.800510][ T7372] 9pnet_fd: Insufficient options for proto=fd [ 222.839383][ T7382] overlayfs: missing 'lowerdir' [ 222.844596][ T7382] overlayfs: missing 'lowerdir' [ 222.849635][ T7382] overlayfs: missing 'lowerdir' [ 222.854713][ T7382] overlayfs: missing 'lowerdir' [ 222.859782][ T7382] overlayfs: missing 'lowerdir' [ 222.865994][ T7382] overlayfs: missing 'lowerdir' [ 222.871266][ T7382] overlayfs: missing 'lowerdir' [ 222.876413][ T7382] overlayfs: missing 'lowerdir' [ 222.881447][ T7382] overlayfs: missing 'lowerdir' [ 222.886547][ T7382] overlayfs: missing 'lowerdir' [ 222.891638][ T7382] overlayfs: missing 'lowerdir' [ 222.896731][ T7382] overlayfs: missing 'lowerdir' [ 222.901771][ T7382] overlayfs: missing 'lowerdir' [ 222.906905][ T7382] overlayfs: missing 'lowerdir' [ 222.912039][ T7382] overlayfs: missing 'lowerdir' [ 222.918159][ T7382] overlayfs: missing 'lowerdir' [ 222.923234][ T7382] overlayfs: missing 'lowerdir' [ 222.928232][ T7382] overlayfs: missing 'lowerdir' [ 222.933552][ T7382] overlayfs: missing 'lowerdir' [ 222.938559][ T7382] overlayfs: missing 'lowerdir' [ 222.943691][ T7382] overlayfs: missing 'lowerdir' [ 222.948686][ T7382] overlayfs: missing 'lowerdir' [ 222.953752][ T7382] overlayfs: missing 'lowerdir' [ 222.958938][ T7382] overlayfs: missing 'lowerdir' [ 222.963995][ T7382] overlayfs: missing 'lowerdir' [ 222.968983][ T7382] overlayfs: missing 'lowerdir' [ 222.974056][ T7382] overlayfs: missing 'lowerdir' [ 222.979073][ T7382] overlayfs: missing 'lowerdir' [ 222.984150][ T7382] overlayfs: missing 'lowerdir' [ 222.989157][ T7382] overlayfs: missing 'lowerdir' [ 222.994555][ T31] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 223.002318][ T7382] overlayfs: missing 'lowerdir' [ 223.037832][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2074'. [ 223.152698][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 223.159079][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 223.167698][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 223.176576][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 223.185725][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.195498][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.205171][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.218174][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.227212][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.236052][ T31] usb 2-1: config 0 descriptor?? [ 223.349131][ T7402] overlayfs: failed to clone lowerpath [ 223.444292][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 223.447175][ T7418] netlink: 'syz.6.2083': attribute type 1 has an invalid length. [ 223.479083][ T7420] overlayfs: failed to clone upperpath [ 223.555772][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.572859][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.589626][ T31] usb 2-1: USB disconnect, device number 77 [ 223.601502][ T31] usblp0: removed [ 223.743934][ T7450] 9pnet_fd: Insufficient options for proto=fd [ 224.667413][ T31] usb 6-1: USB disconnect, device number 35 [ 224.678426][ T31] usblp1: removed [ 232.626372][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 232.626390][ T36] audit: type=1400 audit(1755105192.943:1074): avc: denied { read write } for pid=7506 comm="syz.1.2115" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 232.658459][ T36] audit: type=1400 audit(1755105192.943:1075): avc: denied { open } for pid=7506 comm="syz.1.2115" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 232.721772][ T7513] /dev/rnullb0: Can't open blockdev [ 232.739924][ T7511] usb usb8: usbfs: process 7511 (syz.5.2116) did not claim interface 0 before use [ 232.763160][ T36] audit: type=1400 audit(1755105193.083:1077): avc: denied { read } for pid=7518 comm="syz.5.2118" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 232.787334][ T36] audit: type=1400 audit(1755105193.083:1076): avc: denied { read } for pid=7518 comm="syz.5.2118" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 232.812065][ T36] audit: type=1400 audit(1755105193.103:1078): avc: denied { read } for pid=93 comm="acpid" name="event3" dev="devtmpfs" ino=1011 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 232.834518][ T36] audit: type=1400 audit(1755105193.103:1079): avc: denied { open } for pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1011 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 232.857283][ T36] audit: type=1400 audit(1755105193.103:1080): avc: denied { ioctl } for pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1011 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 233.042683][ T495] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 233.192697][ T495] usb 6-1: Using ep0 maxpacket: 16 [ 233.198924][ T495] usb 6-1: config index 0 descriptor too short (expected 49, got 18) [ 233.209042][ T495] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 233.218302][ T495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.226369][ T495] usb 6-1: Product: syz [ 233.230577][ T495] usb 6-1: Manufacturer: syz [ 233.235176][ T495] usb 6-1: SerialNumber: syz [ 233.240223][ T495] usb 6-1: config 0 descriptor?? [ 233.246114][ T495] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 233.253999][ T495] usb 6-1: Detected FT4232H [ 233.283441][ T7530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7530 comm=syz.4.2122 [ 233.296137][ T7530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7530 comm=syz.4.2122 [ 233.317963][ T36] audit: type=1400 audit(1755105193.633:1081): avc: denied { listen } for pid=7532 comm="syz.4.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.348743][ T7535] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7535 comm=syz.4.2124 [ 233.449535][ T495] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 233.460443][ T495] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 233.468545][ T495] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 233.480392][ T495] usb 6-1: USB disconnect, device number 36 [ 233.487637][ T495] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.501876][ T495] ftdi_sio 6-1:0.0: device disconnected [ 233.738165][ T7580] overlay: ./file0 is not a directory [ 233.767849][ T7582] cgroup: Name too long [ 233.823996][ T7588] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 233.842708][ T36] audit: type=1400 audit(1755105194.153:1082): avc: denied { relabelto } for pid=7587 comm="syz.4.2141" name="file0" dev="tmpfs" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 233.872678][ T36] audit: type=1400 audit(1755105194.153:1083): avc: denied { associate } for pid=7587 comm="syz.4.2141" name="file0" dev="tmpfs" ino=2214 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 233.929808][ T7595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.940975][ T7597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1458 [ 234.044525][ T7606] syzkaller0: entered allmulticast mode [ 234.050684][ T7606] syzkaller0: entered promiscuous mode [ 234.056625][ T7606] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2148'. [ 234.095495][ T7605] syzkaller0: left promiscuous mode [ 234.100981][ T7605] syzkaller0: left allmulticast mode [ 234.862161][ T7626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7626 comm=syz.1.2156 [ 234.932709][ T331] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 234.993335][ T7629] 9pnet_fd: p9_fd_create_tcp (7629): problem connecting socket to 127.0.0.1 [ 235.010505][ T7632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.010560][ T7632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1469 [ 235.024463][ T7634] overlay: filesystem on ./bus is read-only [ 235.061476][ T7639] pim6reg1: entered promiscuous mode [ 235.066855][ T7639] pim6reg1: entered allmulticast mode [ 235.082671][ T331] usb 6-1: Using ep0 maxpacket: 32 [ 235.089025][ T331] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 235.097476][ T331] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 235.106182][ T331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 235.115228][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.124903][ T331] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.134628][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.147614][ T331] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 235.157135][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.165643][ T331] usb 6-1: config 0 descriptor?? [ 235.362714][ T495] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 235.374834][ T331] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 235.386728][ T7644] overlayfs: failed to clone upperpath [ 235.390292][ T331] usb 6-1: USB disconnect, device number 37 [ 235.402488][ T331] usblp0: removed [ 235.435265][ T7654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7654 comm=syz.4.2167 [ 235.512701][ T495] usb 2-1: Using ep0 maxpacket: 32 [ 235.518954][ T495] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 235.527504][ T495] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 235.536236][ T495] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 235.545385][ T495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.555680][ T495] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.565586][ T495] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.579779][ T495] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 235.588887][ T495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.600045][ T495] usb 2-1: config 0 descriptor?? [ 235.650012][ T7682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 235.658895][ T7682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.676911][ T7684] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 235.761023][ T7694] overlayfs: failed to clone lowerpath [ 235.811904][ T495] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 235.832666][ T31] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 235.841670][ T495] usb 2-1: USB disconnect, device number 78 [ 235.852862][ T495] usblp0: removed [ 235.992697][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 236.006407][ T31] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 236.030742][ T31] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 236.040811][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 236.060560][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.070535][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.082675][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 236.102676][ T31] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 236.111871][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.123011][ T31] usb 6-1: config 0 descriptor?? [ 236.332359][ T31] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 236.343265][ T495] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 236.502714][ T495] usb 2-1: Using ep0 maxpacket: 32 [ 236.508951][ T495] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 236.517398][ T495] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 236.526096][ T495] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 236.535111][ T495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.543779][ T331] usb 6-1: USB disconnect, device number 38 [ 236.544866][ T495] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.570660][ T495] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 236.576760][ T331] usblp0: removed [ 236.585018][ T495] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 236.606647][ T495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.624837][ T7720] devpts: called with bogus options [ 236.627800][ T495] usb 2-1: config 0 descriptor?? [ 236.842036][ T495] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 237.044123][ T495] usb 2-1: USB disconnect, device number 79 [ 237.052160][ T495] usblp0: removed [ 237.676479][ T7754] devpts: called with bogus options [ 237.786540][ T7766] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2206'. [ 237.842691][ T495] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 238.003727][ T495] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 238.011312][ T495] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 238.022070][ T495] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.037525][ T495] usb 2-1: string descriptor 0 read error: -22 [ 238.043727][ T495] usb 2-1: New USB device found, idVendor=0eef, idProduct=7302, bcdDevice= 0.40 [ 238.052758][ T495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.063119][ T7752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.272895][ T495] usbhid 2-1:1.0: can't add hid device: -71 [ 238.279188][ T495] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 238.287909][ T495] usb 2-1: USB disconnect, device number 80 [ 238.480888][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 238.480908][ T36] audit: type=1400 audit(1755105198.793:1089): avc: denied { getopt } for pid=7776 comm="syz.6.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 239.022673][ T31] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 239.173682][ T31] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 239.183986][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.192874][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.207068][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.216196][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.224216][ T31] usb 2-1: Product: syz [ 239.228403][ T31] usb 2-1: Manufacturer: syz [ 239.234116][ T31] usb 2-1: SerialNumber: syz [ 239.273518][ T7787] tipc: Started in network mode [ 239.278439][ T7787] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 239.287401][ T7787] tipc: Enabling of bearer rejected, failed to enable media [ 239.308182][ T36] audit: type=1326 audit(1755105199.623:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.6.2216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b7838ebe9 code=0x0 [ 239.445361][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 239.452500][ T31] cdc_ncm 2-1:1.0: bind() failure [ 239.458884][ T31] usb 2-1: USB disconnect, device number 81 [ 239.961221][ T7795] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.970577][ T7796] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 239.970600][ T7796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 239.978660][ T7796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1493 [ 240.043574][ T7814] tmpfs: Cannot retroactively limit inodes [ 240.059184][ T7814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.059525][ T7814] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 240.065992][ T7814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 240.074018][ T7814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1512 [ 240.255100][ T36] audit: type=1326 audit(1755105200.573:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.2234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f600298ebe9 code=0x0 [ 240.306290][ T7845] incfs: Options parsing error. -22 [ 240.311562][ T7845] incfs: mount failed -22 [ 240.316508][ T7845] >: renamed from veth0_vlan (while UP) [ 240.630734][ T7849] rust_binder: Error while translating object. [ 240.630760][ T7849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 240.637154][ T7849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:626 [ 240.738855][ T7863] netlink: 'syz.6.2240': attribute type 4 has an invalid length. [ 241.096739][ T7868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.101856][ T7868] SELinux: failed to load policy [ 241.352678][ T494] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 241.502666][ T494] usb 2-1: Using ep0 maxpacket: 32 [ 241.509031][ T494] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 241.517193][ T494] usb 2-1: config 0 has no interface number 0 [ 241.525075][ T494] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 241.534267][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.542721][ T494] usb 2-1: Product: syz [ 241.547268][ T494] usb 2-1: Manufacturer: syz [ 241.551934][ T494] usb 2-1: SerialNumber: syz [ 241.557967][ T494] usb 2-1: config 0 descriptor?? [ 241.564166][ T494] smsc95xx v2.0.0 [ 241.681048][ T7878] can0: slcan on ptm1. [ 241.728442][ T7878] can0 (unregistered): slcan off ptm1. [ 241.805737][ T7897] incfs: Error accessing: ./file0. [ 241.811126][ T7897] incfs: mount failed -20 [ 241.862004][ T7908] bridge0: port 3(veth1_macvtap) entered blocking state [ 241.869184][ T7908] bridge0: port 3(veth1_macvtap) entered disabled state [ 241.876598][ T7908] veth1_macvtap: entered allmulticast mode [ 241.883222][ T7908] veth1_macvtap: left allmulticast mode [ 241.892490][ T36] audit: type=1326 audit(1755105202.203:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.6.2248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b7838ebe9 code=0x0 [ 241.964214][ T494] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 241.975075][ T494] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 242.680230][ T7920] overlayfs: failed to resolve './file1/file0': -2 [ 242.787410][ T494] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 242.798295][ T494] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 242.809527][ T494] usb 2-1: USB disconnect, device number 82 [ 242.954244][ T7953] sit0: entered promiscuous mode [ 242.960050][ T7953] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 242.968000][ T7953] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2263'. [ 243.320307][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2264'. [ 243.330068][ T7957] rust_binder: Error while translating object. [ 243.330104][ T7957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 243.337005][ T7957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:643 [ 243.344654][ T7959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.364896][ T7959] rust_binder: Failed to allocate buffer. len:4304, is_oneway:false [ 243.364931][ T7959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 243.373351][ T7959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1534 [ 243.389455][ T7962] KVM: debugfs: duplicate directory 7962-6 [ 243.394803][ T7964] binder: Bad value for 'max' [ 243.413371][ T7964] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 243.422226][ T7965] binder: Bad value for 'max' [ 243.438248][ T7969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.478824][ T7975] fuse: Unknown parameter 'oK' [ 243.499850][ T7977] incfs: Options parsing error. -22 [ 243.508319][ T7977] incfs: mount failed -22 [ 243.672683][ T494] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 243.822674][ T494] usb 2-1: Using ep0 maxpacket: 32 [ 243.828805][ T494] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 243.837141][ T494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.847236][ T494] usb 2-1: config 0 has no interface number 0 [ 243.854886][ T494] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 243.864006][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.871993][ T494] usb 2-1: Product: syz [ 243.876297][ T494] usb 2-1: Manufacturer: syz [ 243.880890][ T494] usb 2-1: SerialNumber: syz [ 243.886142][ T494] usb 2-1: config 0 descriptor?? [ 243.891858][ T494] plusb 2-1:0.231: probe with driver plusb failed with error -22 [ 244.093077][ T7969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1542 [ 244.093414][ T331] usb 2-1: USB disconnect, device number 83 [ 244.359515][ T36] audit: type=1400 audit(1755105204.673:1093): avc: denied { getopt } for pid=8026 comm="syz.5.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.421806][ T8040] overlayfs: failed to clone upperpath [ 244.437869][ T8042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8042 comm=syz.4.2295 [ 244.495347][ T8048] Bluetooth: hci1: Frame reassembly failed (-84) [ 244.502346][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 244.508808][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 245.282669][ T31] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 245.433836][ T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.445579][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.456596][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.467951][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 245.477054][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.491026][ T8061] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.873577][ T8080] overlayfs: missing 'lowerdir' [ 245.881623][ T8081] overlayfs: missing 'lowerdir' [ 246.038715][ T36] audit: type=1326 audit(1755105206.358:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfef8ebe9 code=0x7fc00000 [ 246.062273][ T36] audit: type=1326 audit(1755105206.358:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfef8ebe9 code=0x7fc00000 [ 246.302910][ T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 246.310486][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input40 [ 246.323007][ T31] usb 2-1: USB disconnect, device number 84 [ 246.512768][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 246.842721][ T494] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 246.993829][ T494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 247.004806][ T494] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 247.013851][ T494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.022805][ T494] usb 2-1: config 0 descriptor?? [ 247.028072][ T8096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.176326][ T31] rust_binder: 8103: removing orphan mapping 0:24 [ 247.182990][ T31] rust_binder: 8103: removing orphan mapping 24:1120 [ 247.432667][ T331] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 247.445187][ T494] hid-generic 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 247.562681][ T331] usb 6-1: device descriptor read/64, error -71 [ 247.644350][ T9] usb 2-1: USB disconnect, device number 85 [ 247.802667][ T331] usb 6-1: device descriptor read/64, error -71 [ 248.042693][ T331] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 248.172693][ T331] usb 6-1: device descriptor read/64, error -71 [ 248.360446][ T8123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.412823][ T331] usb 6-1: device descriptor read/64, error -71 [ 248.532781][ T331] usb usb6-port1: attempt power cycle [ 248.662682][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 248.813786][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.823518][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.833191][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.847358][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 248.856547][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 248.864642][ T9] usb 2-1: Product: syz [ 248.868808][ T9] usb 2-1: Manufacturer: syz [ 248.873428][ T331] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 248.880995][ T9] usb 2-1: SerialNumber: syz [ 248.903679][ T331] usb 6-1: device descriptor read/8, error -71 [ 249.033642][ T331] usb 6-1: device descriptor read/8, error -71 [ 249.087934][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 249.138772][ T8136] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2324'. [ 249.155035][ T8138] netlink: 'syz.4.2325': attribute type 4 has an invalid length. [ 249.163275][ T8138] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2325'. [ 249.272689][ T331] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 249.293769][ T331] usb 6-1: device descriptor read/8, error -71 [ 249.423867][ T331] usb 6-1: device descriptor read/8, error -71 [ 249.532792][ T331] usb usb6-port1: unable to enumerate USB device [ 250.010032][ T8180] overlayfs: failed to clone upperpath [ 250.016029][ T8180] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 250.025859][ T36] audit: type=1400 audit(1755105210.338:1096): avc: denied { relabelto } for pid=8179 comm="syz.6.2339" name="file0" dev="tmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 250.033959][ T8180] overlayfs: failed to clone upperpath [ 250.052803][ T36] audit: type=1400 audit(1755105210.338:1097): avc: denied { associate } for pid=8179 comm="syz.6.2339" name="file0" dev="tmpfs" ino=1502 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:newrole_exec_t:s0" [ 250.089417][ T36] audit: type=1400 audit(1755105210.408:1098): avc: denied { rmdir } for pid=5238 comm="syz-executor" name="file0" dev="tmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 250.116308][ T36] audit: type=1400 audit(1755105210.408:1099): avc: denied { ioctl } for pid=8184 comm="syz.6.2340" path="socket:[48785]" dev="sockfs" ino=48785 ioctlcmd=0x5427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.375879][ T495] usb 2-1: USB disconnect, device number 86 [ 251.386088][ T495] usblp0: removed [ 251.412677][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 251.427926][ T36] audit: type=1400 audit(1755105211.738:1100): avc: denied { create } for pid=8205 comm="syz.1.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.428101][ T8206] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.450605][ T8206] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 251.457101][ T8206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 251.465158][ T8206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1576 [ 251.564063][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.573219][ T8213] __vm_enough_memory: pid: 8213, comm: syz.1.2352, bytes: 18014402804453376 not enough memory for the allocation [ 251.575592][ T36] audit: type=1326 audit(1755105211.888:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.6.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7ffc0000 [ 251.617057][ T36] audit: type=1326 audit(1755105211.888:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.6.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7ffc0000 [ 251.618768][ T8226] netlink: 'syz.1.2355': attribute type 28 has an invalid length. [ 251.641043][ T36] audit: type=1326 audit(1755105211.888:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.6.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2b7838ebe9 code=0x7ffc0000 [ 251.671855][ T36] audit: type=1326 audit(1755105211.888:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.6.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7ffc0000 [ 251.671860][ T9] usb 6-1: config 84 has an invalid interface number: 111 but max is 0 [ 251.671884][ T9] usb 6-1: config 84 has an invalid descriptor of length 0, skipping remainder of the config [ 251.695704][ T36] audit: type=1326 audit(1755105211.888:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.6.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7ffc0000 [ 251.703554][ T9] usb 6-1: config 84 has no interface number 0 [ 251.743957][ T9] usb 6-1: config 84 interface 111 has no altsetting 0 [ 251.752562][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 251.761721][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.769769][ T9] usb 6-1: Product: syz [ 251.773967][ T9] usb 6-1: Manufacturer: syz [ 251.778577][ T9] usb 6-1: SerialNumber: syz [ 251.986300][ T8204] overlayfs: missing 'lowerdir' [ 252.038296][ T9] usb 6-1: bad CDC descriptors [ 252.043188][ T494] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 252.053086][ T9] usb 6-1: USB disconnect, device number 43 [ 252.203743][ T494] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.213594][ T494] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.223352][ T494] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.237490][ T494] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 252.246590][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 252.254708][ T494] usb 2-1: Product: syz [ 252.258873][ T494] usb 2-1: Manufacturer: syz [ 252.263506][ T494] usb 2-1: SerialNumber: syz [ 252.471508][ T494] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.436250][ T8253] overlayfs: failed to clone upperpath [ 253.492478][ T8267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.492773][ T8267] /dev/rnullb0: Can't open blockdev [ 253.557055][ T8272] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 253.581881][ T8277] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 253.601826][ T8277] 9pnet_fd: Insufficient options for proto=fd [ 253.608812][ T8278] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 254.765628][ T494] usb 2-1: USB disconnect, device number 87 [ 254.773901][ T494] usblp0: removed [ 254.831465][ T8303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.831816][ T8303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1595 [ 254.838689][ T8301] syz.4.2381: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 254.863467][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.4.2381 Not tainted 6.12.38-syzkaller-g454183172bed #0 f73b668817a3abbf230866a03117773ee56fc203 [ 254.863533][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.863547][ T8301] Call Trace: [ 254.863555][ T8301] [ 254.863564][ T8301] __dump_stack+0x21/0x30 [ 254.863608][ T8301] dump_stack_lvl+0x10c/0x190 [ 254.863651][ T8301] ? __cfi_dump_stack_lvl+0x10/0x10 [ 254.863687][ T8301] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 254.863726][ T8301] dump_stack+0x19/0x20 [ 254.863756][ T8301] warn_alloc+0x1bc/0x2a0 [ 254.863784][ T8301] ? stack_depot_save_flags+0x38/0x800 [ 254.863820][ T8301] ? __cfi_warn_alloc+0x10/0x10 [ 254.863848][ T8301] ? kasan_save_track+0x4f/0x80 [ 254.863870][ T8301] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 254.863902][ T8301] ? xskq_create+0x68/0x2a0 [ 254.863931][ T8301] ? xsk_init_queue+0xb6/0x120 [ 254.863958][ T8301] ? xsk_setsockopt+0x43f/0x6f0 [ 254.863985][ T8301] ? do_sock_setsockopt+0x26d/0x400 [ 254.864014][ T8301] ? __x64_sys_setsockopt+0x1b8/0x250 [ 254.864042][ T8301] ? x64_sys_call+0x2adc/0x2ee0 [ 254.864074][ T8301] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 254.864107][ T8301] __vmalloc_node_range_noprof+0x135/0x1420 [ 254.864141][ T8301] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 254.864171][ T8301] ? avc_has_perm+0x144/0x220 [ 254.864200][ T8301] ? kasan_save_alloc_info+0x40/0x50 [ 254.864229][ T8301] ? __kasan_kmalloc+0x96/0xb0 [ 254.864259][ T8301] vmalloc_user_noprof+0x77/0x90 [ 254.864287][ T8301] ? xskq_create+0xdb/0x2a0 [ 254.864315][ T8301] xskq_create+0xdb/0x2a0 [ 254.864387][ T8301] xsk_init_queue+0xb6/0x120 [ 254.864426][ T8301] xsk_setsockopt+0x43f/0x6f0 [ 254.864454][ T8301] ? __cfi_xsk_setsockopt+0x10/0x10 [ 254.864482][ T8301] ? do_futex+0x309/0x500 [ 254.864505][ T8301] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 254.864532][ T8301] ? security_socket_setsockopt+0x33/0xd0 [ 254.864553][ T8301] ? __cfi_xsk_setsockopt+0x10/0x10 [ 254.864581][ T8301] do_sock_setsockopt+0x26d/0x400 [ 254.864611][ T8301] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 254.864641][ T8301] ? xfd_validate_state+0x68/0x150 [ 254.864670][ T8301] ? __kasan_check_read+0x15/0x20 [ 254.864717][ T8301] __x64_sys_setsockopt+0x1b8/0x250 [ 254.864750][ T8301] x64_sys_call+0x2adc/0x2ee0 [ 254.864782][ T8301] do_syscall_64+0x58/0xf0 [ 254.864809][ T8301] ? clear_bhb_loop+0x50/0xa0 [ 254.864830][ T8301] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 254.864863][ T8301] RIP: 0033:0x7f6cfef8ebe9 [ 254.864883][ T8301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.864903][ T8301] RSP: 002b:00007f6cffd74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 254.864930][ T8301] RAX: ffffffffffffffda RBX: 00007f6cff1b5fa0 RCX: 00007f6cfef8ebe9 [ 254.864948][ T8301] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 254.864962][ T8301] RBP: 00007f6cff011e19 R08: 0000000000000004 R09: 0000000000000000 [ 254.864977][ T8301] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.864992][ T8301] R13: 00007f6cff1b6038 R14: 00007f6cff1b5fa0 R15: 00007ffc4993a2a8 [ 254.865012][ T8301] [ 254.865111][ T8301] Mem-Info: [ 255.181761][ T8301] active_anon:32966 inactive_anon:775 isolated_anon:0 [ 255.181761][ T8301] active_file:8818 inactive_file:18177 isolated_file:0 [ 255.181761][ T8301] unevictable:2043 dirty:80 writeback:0 [ 255.181761][ T8301] slab_reclaimable:5661 slab_unreclaimable:75234 [ 255.181761][ T8301] mapped:24502 shmem:25249 pagetables:1556 [ 255.181761][ T8301] sec_pagetables:0 bounce:0 [ 255.181761][ T8301] kernel_misc_reclaimable:0 [ 255.181761][ T8301] free:1482861 free_pcp:4726 free_cma:0 [ 255.227695][ T8301] Node 0 active_anon:131804kB inactive_anon:3100kB active_file:35272kB inactive_file:72708kB unevictable:8172kB isolated(anon):0kB isolated(file):0kB mapped:98060kB dirty:320kB writeback:0kB shmem:101036kB shmem_thp:16384kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6888kB pagetables:6176kB sec_pagetables:0kB all_unreclaimable? no [ 255.261498][ T8301] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965968kB mlocked:0kB bounce:0kB free_pcp:13820kB local_pcp:6388kB free_cma:0kB [ 255.291937][ T8301] lowmem_reserve[]: 0 3921 3921 [ 255.297004][ T8301] Normal free:2968652kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:134304kB inactive_anon:3100kB active_file:35272kB inactive_file:79408kB unevictable:8172kB writepending:320kB present:5242880kB managed:4016120kB mlocked:8172kB bounce:0kB free_pcp:6368kB local_pcp:2024kB free_cma:0kB [ 255.329494][ T8301] lowmem_reserve[]: 0 0 0 [ 255.334044][ T8301] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 255.349658][ T8301] Normal: 3*4kB (UME) 88*8kB (UME) 1598*16kB (UME) 684*32kB (UME) 739*64kB (UE) 101*128kB (UE) 24*256kB (UME) 9*512kB (UE) 8*1024kB (UE) 8*2048kB (UE) 689*4096kB (UM) = 2965868kB [ 255.367555][ T8301] 54738 total pagecache pages [ 255.372228][ T8301] 775 pages in swap cache [ 255.376559][ T8301] Free swap = 121168kB [ 255.380735][ T8301] Total swap = 124996kB [ 255.384978][ T8301] 2097051 pages RAM [ 255.388787][ T8301] 0 pages HighMem/MovableOnly [ 255.393749][ T8301] 351529 pages reserved [ 255.397915][ T8301] 0 pages cma reserved [ 255.403513][ T8301] Memory allocations: [ 255.407523][ T8301] 0 B 0 init/main.c:1370 func:do_initcalls [ 255.414773][ T8301] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 255.422867][ T8301] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 255.430480][ T8301] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 255.438405][ T8301] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 255.446403][ T8301] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 255.455108][ T8301] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 255.463015][ T8301] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 255.470895][ T8301] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 255.478829][ T8301] 0 B 0 init/initramfs.c:101 func:find_link [ 255.510214][ T8315] binder: Unknown parameter 'contextÀ' [ 255.665770][ T8322] netlink: 'syz.4.2385': attribute type 4 has an invalid length. [ 255.699428][ T8324] can0: slcan on ptm0. [ 255.916551][ T8368] overlayfs: failed to clone upperpath [ 255.942665][ T331] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 256.092659][ T331] usb 6-1: Using ep0 maxpacket: 16 [ 256.098912][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.109863][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.122712][ T331] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 256.131736][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.140357][ T331] usb 6-1: config 0 descriptor?? [ 256.312662][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 256.462685][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 256.468910][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.479072][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.488073][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.497184][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.505916][ T9] usb 2-1: config 0 descriptor?? [ 256.729774][ T411] usb 2-1: USB disconnect, device number 88 [ 256.737653][ T8379] can0 (unregistered): slcan off ptm0. [ 257.040655][ T8407] overlayfs: failed to clone upperpath [ 257.114704][ T8410] 9pnet_fd: Insufficient options for proto=fd [ 257.252252][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 257.252274][ T36] audit: type=1400 audit(1755105217.558:1109): avc: denied { ioctl } for pid=8411 comm="syz.1.2404" path="socket:[49014]" dev="sockfs" ino=49014 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 257.374133][ T36] audit: type=1400 audit(1755105217.688:1110): avc: denied { watch watch_reads } for pid=8416 comm="syz.1.2406" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 257.685430][ T8421] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2408'. [ 258.683802][ T331] usbhid 6-1:0.0: can't add hid device: -71 [ 258.690891][ T331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 258.700660][ T331] usb 6-1: USB disconnect, device number 44 [ 258.710046][ T8429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 258.710083][ T8429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:714 [ 258.730017][ T8432] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 258.792687][ T31] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 258.942663][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 258.948432][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.956911][ T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 258.965788][ T31] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 258.976379][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.988111][ T31] usb 2-1: config 1 has no interface number 1 [ 258.994740][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 258.995071][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2414'. [ 259.007627][ T31] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.007663][ T31] usb 2-1: config 1 interface 2 has no altsetting 0 [ 259.040489][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.049759][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.060693][ T31] usb 2-1: Product: syz [ 259.064943][ T31] usb 2-1: Manufacturer: syz [ 259.069610][ T31] usb 2-1: SerialNumber: syz [ 259.276507][ T8427] __vm_enough_memory: pid: 8427, comm: syz.1.2410, bytes: 18014402804453376 not enough memory for the allocation [ 259.300424][ T31] usb 2-1: USB disconnect, device number 89 [ 259.401416][ T8462] bridge0: port 3(veth0_to_bridge) entered blocking state [ 259.408615][ T8462] bridge0: port 3(veth0_to_bridge) entered disabled state [ 259.415838][ T8462] veth0_to_bridge: entered allmulticast mode [ 259.422145][ T8462] veth0_to_bridge: entered promiscuous mode [ 259.428226][ T8462] bridge0: port 3(veth0_to_bridge) entered blocking state [ 259.435365][ T8462] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 259.451587][ T8464] netlink: 'syz.4.2423': attribute type 21 has an invalid length. [ 259.459459][ T8464] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2423'. [ 259.574421][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 260.061165][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 261.039005][ T8508] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2440'. [ 261.056945][ T8510] netlink: 'syz.4.2441': attribute type 7 has an invalid length. [ 261.064781][ T8510] netlink: 'syz.4.2441': attribute type 5 has an invalid length. [ 261.072569][ T8510] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2441'. [ 261.088970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.101044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.113169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.125233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.137339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.149415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.161463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.173501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.185574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.197631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.258789][ T8518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8518 comm=syz.4.2443 [ 261.632671][ T500] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 261.638953][ T1359] Bluetooth: hci1: command 0x1003 tx timeout [ 261.820900][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8528 comm=syz.6.2447 [ 261.841503][ T8528] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2447'. [ 262.113491][ T1359] Bluetooth: hci2: command 0x1003 tx timeout [ 262.119634][ T53] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 262.254451][ T8535] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.286080][ T8535] rust_binder: pid 8535 performed invalid decrement on ref [ 262.309236][ T8535] rust_binder: 721: no such ref 3 [ 262.325996][ T8535] rust_binder: 721: no such ref 4294967295 [ 262.346569][ T8535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:721 [ 262.454658][ T8539] 9pnet_fd: Insufficient options for proto=fd [ 263.137665][ T8560] 9pnet_fd: Insufficient options for proto=fd [ 263.423660][ T36] audit: type=1400 audit(1755105223.718:1111): avc: denied { setattr } for pid=8569 comm="syz.5.2462" name="NETLINK" dev="sockfs" ino=50013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.782298][ T8586] 9pnet_fd: Insufficient options for proto=fd [ 263.957999][ T8589] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2468'. [ 263.987411][ T8589] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2468'. [ 264.016829][ T8589] netlink: 'syz.6.2468': attribute type 6 has an invalid length. [ 264.053956][ T8589] netlink: 'syz.6.2468': attribute type 5 has an invalid length. [ 264.081981][ T8589] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2468'. [ 264.334646][ T8597] 9pnet_fd: Insufficient options for proto=fd [ 264.398530][ T8600] 9pnet_fd: Insufficient options for proto=fd [ 264.561711][ T8610] binder: Unknown parameter '18446744073709551615' [ 264.983541][ T495] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 265.193778][ T495] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.203639][ T495] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.232044][ T495] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.278583][ T495] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 265.291983][ T495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 265.318824][ T495] usb 6-1: Product: syz [ 265.331734][ T495] usb 6-1: Manufacturer: syz [ 265.347004][ T495] usb 6-1: SerialNumber: syz [ 265.578788][ T495] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.974816][ T8628] can0: slcan on ptm0. [ 266.059565][ T8628] can0 (unregistered): slcan off ptm0. [ 266.092694][ C0] net_ratelimit: 59783 callbacks suppressed [ 266.092719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.110792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.122978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.135133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.147167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.159238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.171339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.183427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.195490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.207513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.467130][ T8649] random: crng reseeded on system resumption [ 266.505798][ T36] audit: type=1400 audit(1755105226.818:1112): avc: denied { write } for pid=8648 comm="syz.1.2489" name="/" dev="configfs" ino=2544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.554888][ T8653] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.589766][ T8657] /dev/rnullb0: Can't open blockdev [ 266.737091][ T8671] overlayfs: failed to clone upperpath [ 267.310501][ T36] audit: type=1400 audit(1755105227.618:1113): avc: denied { create } for pid=8677 comm="syz.4.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 267.702687][ T495] usb 6-1: USB disconnect, device number 45 [ 267.723765][ T495] usblp0: removed [ 267.877180][ T8703] UHID_CREATE from different security context by process 761 (syz.5.2507), this is not allowed. [ 267.949567][ T8710] batadv_slave_1: entered promiscuous mode [ 267.961229][ T8709] batadv_slave_1: left promiscuous mode [ 268.044277][ T8712] KVM: debugfs: duplicate directory 8712-8 [ 268.221870][ T8726] overlayfs: failed to resolve './file0': -2 [ 268.307464][ T8731] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2518'. [ 268.361563][ T8732] netlink: 'syz.1.2517': attribute type 4 has an invalid length. [ 268.394454][ T8732] netlink: 'syz.1.2517': attribute type 4 has an invalid length. [ 268.554143][ T8739] 9pnet_fd: Insufficient options for proto=fd [ 268.762753][ T36] audit: type=1400 audit(1755105229.058:1114): avc: denied { accept } for pid=8740 comm="syz.5.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.851753][ T8752] fuse: Unknown parameter 'Vd' [ 268.863942][ T8753] fuse: Unknown parameter 'grHC' [ 269.059370][ T8762] 9pnet_fd: Insufficient options for proto=fd [ 269.621350][ T8777] netlink: 'syz.6.2531': attribute type 1 has an invalid length. [ 269.637021][ T8777] netlink: 'syz.6.2531': attribute type 2 has an invalid length. [ 269.735282][ T8783] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 269.938486][ T8782] /dev/md0: Can't lookup blockdev [ 270.002668][ T411] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 270.443579][ T36] audit: type=1400 audit(1755105230.758:1115): avc: denied { associate } for pid=8812 comm="syz.1.2543" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 270.712817][ T8833] cgroup: No subsys list or none specified [ 270.762667][ T495] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 270.801191][ T8821] overlayfs: missing 'lowerdir' [ 270.898351][ T36] audit: type=1400 audit(1755105231.208:1116): avc: denied { read } for pid=8835 comm="syz.6.2552" name="file0" dev="tmpfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.921533][ T8836] 9pnet_fd: Insufficient options for proto=fd [ 270.943818][ T495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.967903][ T495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.000998][ T495] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 271.024838][ T495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.044216][ T495] usb 2-1: config 0 descriptor?? [ 271.102683][ C0] net_ratelimit: 69975 callbacks suppressed [ 271.102710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.120845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.132910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.144999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.157127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.169402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.181600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.193837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.205911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.217989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.356481][ T8853] overlayfs: failed to clone lowerpath [ 271.477784][ T495] usbhid 2-1:0.0: can't add hid device: -71 [ 271.497141][ T495] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 271.512181][ T495] usb 2-1: USB disconnect, device number 90 [ 272.173031][ T36] audit: type=1326 audit(3510210466.488:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.1.2580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f600298ebe9 code=0x0 [ 274.322673][ T495] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 274.419202][ T8960] 9pnet_fd: Insufficient options for proto=fd [ 274.495741][ T495] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 274.505129][ T495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.515520][ T495] usb 2-1: config 0 descriptor?? [ 274.619105][ T8971] can0: slcan on ptm0. [ 274.862708][ T495] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 275.043776][ T495] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.062666][ T495] usb 6-1: config 1 has no interfaces? [ 275.075424][ T495] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 275.097755][ T411] usb 2-1: USB disconnect, device number 91 [ 275.112678][ T495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.145215][ T36] audit: type=1326 audit(3510210469.458:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.1.2603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f600298ebe9 code=0x0 [ 275.338855][ T36] audit: type=1400 audit(3510210469.648:1119): avc: denied { shutdown } for pid=8970 comm="syz.5.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.401197][ T411] usb 6-1: USB disconnect, device number 47 [ 275.544732][ T9016] can0 (unregistered): slcan off ptm0. [ 275.563441][ T36] audit: type=1400 audit(3510210469.878:1120): avc: denied { bind } for pid=9035 comm="syz.5.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.619023][ T36] audit: type=1400 audit(3510210469.898:1121): avc: denied { connect } for pid=9035 comm="syz.5.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.698721][ T36] audit: type=1400 audit(3510210469.908:1122): avc: denied { read } for pid=9037 comm="syz.5.2609" path="socket:[53093]" dev="sockfs" ino=53093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.914600][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 275.940101][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 275.952691][ T9062] devpts: called with bogus options [ 276.071471][ T9076] 9p filesystem being mounted at /590/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 276.112637][ C0] net_ratelimit: 62010 callbacks suppressed [ 276.112664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.130938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.143102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.155352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.167613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.179731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.191763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.203856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.215940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.228031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.556917][ T9095] overlayfs: failed to clone upperpath [ 276.680349][ T9104] /dev/rnullb0: Can't open blockdev [ 276.782696][ T1098] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 276.846478][ T9106] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2626'. [ 276.953819][ T1098] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.964213][ T1098] usb 6-1: config 0 has no interfaces? [ 276.974491][ T1098] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.987411][ T1098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.003338][ T1098] usb 6-1: config 0 descriptor?? [ 277.227552][ T1098] usb 6-1: USB disconnect, device number 48 [ 277.551795][ T9125] No source specified [ 277.967355][ T9140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 277.967394][ T9140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:866 [ 278.793772][ T9152] input: syz0 as /devices/virtual/input/input42 [ 278.829478][ T9154] can0: slcan on ptm0. [ 279.102664][ T1098] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 279.283763][ T1098] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.307455][ T1098] usb 6-1: config 0 has no interfaces? [ 279.324483][ T1098] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 279.357009][ T1098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.380970][ T1098] usb 6-1: config 0 descriptor?? [ 279.595995][ T1098] usb 6-1: USB disconnect, device number 49 [ 279.805142][ T36] audit: type=1326 audit(3510210474.108:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 279.882702][ T36] audit: type=1326 audit(3510210474.108:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 279.989717][ T36] audit: type=1326 audit(3510210474.108:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.066769][ T9153] can0 (unregistered): slcan off ptm0. [ 280.126334][ T36] audit: type=1326 audit(3510210474.108:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.301082][ T36] audit: type=1326 audit(3510210474.108:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.374850][ T36] audit: type=1326 audit(3510210474.108:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.449547][ T36] audit: type=1326 audit(3510210474.108:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.568789][ T36] audit: type=1326 audit(3510210474.108:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.687574][ T36] audit: type=1326 audit(3510210474.108:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.820621][ T36] audit: type=1326 audit(3510210474.108:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 280.902891][ T1098] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 280.949631][ T36] audit: type=1326 audit(3510210474.108:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 281.062478][ T36] audit: type=1326 audit(3510210474.108:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 281.122685][ C0] net_ratelimit: 58370 callbacks suppressed [ 281.122708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.141002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.153347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.165679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.177885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.189997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.202122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.202669][ T36] audit: type=1326 audit(3510210474.108:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 281.214298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.249803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.261943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.350093][ T36] audit: type=1326 audit(3510210474.108:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7838ebe9 code=0x7fc00000 [ 282.491850][ T1098] usb 6-1: Invalid ep0 maxpacket: 16 [ 283.697487][ T1098] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 286.132628][ C1] net_ratelimit: 100687 callbacks suppressed [ 286.132652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.132733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.138785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.150816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.162707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.174603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.186536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.198573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.210527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.222390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.058049][ C0] sched: DL replenish lagged too much [ 291.142622][ C1] net_ratelimit: 110700 callbacks suppressed [ 291.142646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.142717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.148857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.160842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.172835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.184835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.196919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.208803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.221022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.233019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.152612][ C0] net_ratelimit: 136477 callbacks suppressed [ 296.152639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.152644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.152698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.158747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.170923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.182918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.194785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.206719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.218780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.230743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.881506][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 298.881530][ T36] audit: type=1326 audit(3510210493.160:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.5.2659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9458ebe9 code=0x7ffe0000 [ 299.030823][ T9255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 299.030863][ T9255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:883 [ 301.162650][ C0] net_ratelimit: 150409 callbacks suppressed [ 301.162676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.162692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.162776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.172007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.178003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.189918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.201954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.214063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.226059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.238168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.172615][ C1] net_ratelimit: 148704 callbacks suppressed [ 306.172656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.172701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.178736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.190853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.202899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.214863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.227073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.239085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.251066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.263150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.182639][ C0] net_ratelimit: 156873 callbacks suppressed [ 311.182663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.182703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.188857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.200833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.212934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.224890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.236841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.248802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.260806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.272776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.192608][ C0] net_ratelimit: 152784 callbacks suppressed [ 316.192633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.192682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.198746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.210641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.222843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.234696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.246682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.258741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.270739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.282793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.202609][ C0] net_ratelimit: 152889 callbacks suppressed [ 321.202636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.202638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.202693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.208911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.220907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.232898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.244881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.257062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.269137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.281266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.212602][ C1] net_ratelimit: 152550 callbacks suppressed [ 326.212627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.212690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.218731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.230731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.242606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.254792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.266743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.278711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.290725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.302754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.222625][ C1] net_ratelimit: 151201 callbacks suppressed [ 331.222650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.222662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.222784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.228749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.240775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.252643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.264656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.276615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.288577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.300450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.232592][ C1] net_ratelimit: 153716 callbacks suppressed [ 336.232616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.232682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.238748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.250665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.262701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.274748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.286766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.298662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.310658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.322799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.242614][ C1] net_ratelimit: 152150 callbacks suppressed [ 341.242637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.242697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.248699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.260715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.272703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.284589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.296452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.308451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.320441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.332372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.252660][ C0] net_ratelimit: 154306 callbacks suppressed [ 346.252685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.252712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.258820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.270738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.282649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.294589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.312659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.318771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.330699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.342738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.262612][ C0] net_ratelimit: 148208 callbacks suppressed [ 351.262636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.262665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.268715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.280711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.292833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.304716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.316605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.328482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.340512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.352365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.272603][ C1] net_ratelimit: 154958 callbacks suppressed [ 356.272629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.272658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.278791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.290897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.302885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.315291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.327239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.339298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.351376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.363262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.282606][ C1] net_ratelimit: 154029 callbacks suppressed [ 361.282630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.282711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.288724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.300702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.312532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.324542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.336593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.348487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.360507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.372492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.292600][ C0] net_ratelimit: 145966 callbacks suppressed [ 366.292634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.292646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.292700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.298768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.310831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.322826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.334677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.346664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.358648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.370831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.302595][ C1] net_ratelimit: 156813 callbacks suppressed [ 371.302620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.302717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.308731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.320640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.332619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.344978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.356955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.368922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.380954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.393051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.312594][ C0] net_ratelimit: 155779 callbacks suppressed [ 376.312620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.312634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.312686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.318739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.330661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.342746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.354592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.366601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.378565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.390533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.322589][ C1] net_ratelimit: 153445 callbacks suppressed [ 381.322613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.322681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.328699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.340786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.352789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.364692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.376619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.388623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.400604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.412611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.338956][ T568] bridge_slave_1: left allmulticast mode [ 384.355775][ T568] bridge_slave_1: left promiscuous mode [ 384.432770][ T568] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.483285][ T568] bridge_slave_0: left allmulticast mode [ 384.496099][ T568] bridge_slave_0: left promiscuous mode [ 384.565760][ T568] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.332582][ C0] net_ratelimit: 149770 callbacks suppressed [ 386.332605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.332619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.332672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.338726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.350642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.362690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.374482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.386406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.398371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.410432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.342585][ C1] net_ratelimit: 152899 callbacks suppressed [ 391.342610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.342622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.342706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.348685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.360696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.372706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.384758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.396613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.408791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.420769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.352578][ C1] net_ratelimit: 150637 callbacks suppressed [ 396.352602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.352611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.352698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.358677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.370848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.382977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.394852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.406717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.418799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.430783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.362603][ C1] net_ratelimit: 150400 callbacks suppressed [ 401.362629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.362717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.368829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.380750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.392720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.404740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.416861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.428794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.440756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.452757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.372575][ C0] net_ratelimit: 150304 callbacks suppressed [ 406.372599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.372637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.378735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.390763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.402719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.414689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.426701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.438578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.450464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.462348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.382576][ C1] net_ratelimit: 149201 callbacks suppressed [ 411.382607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.382670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.388682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.400705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.412647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.424582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.436887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.449226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.461197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.473093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.392576][ C0] net_ratelimit: 149501 callbacks suppressed [ 416.392609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.392642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.398770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.410803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.422771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.434652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.446635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.458500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.470411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.482339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.402578][ C0] net_ratelimit: 149321 callbacks suppressed [ 421.402602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.402624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.408730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.420877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.432783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.444724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.456727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.468723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.480600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.492644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.412897][ C1] net_ratelimit: 150773 callbacks suppressed [ 426.412922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.412970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.418997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.431023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.443043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.454872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.466948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.478964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.490835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.502804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.422586][ C1] net_ratelimit: 150922 callbacks suppressed [ 431.422612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.422620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.422721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.428682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.440724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.452683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.464657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.476517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.488512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.500576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.432557][ C1] net_ratelimit: 147812 callbacks suppressed [ 436.432582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.432648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.438657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.450687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.462610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.474497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.486341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.498432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.510412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.522296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.442566][ C1] net_ratelimit: 152509 callbacks suppressed [ 441.442592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.442641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.448661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.460702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.472678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.484618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.496595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.508604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.520449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.532427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.452545][ C0] net_ratelimit: 152165 callbacks suppressed [ 446.452571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.452625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.458696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.470744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.482845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.494796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.506763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.518720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.530738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.542616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.462546][ C1] net_ratelimit: 151850 callbacks suppressed [ 451.462570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.462589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.468661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.480608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.492566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.504629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.516611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.528551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.540401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.552395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.413206][ T37] INFO: task syz.4.1193:4551 blocked for more than 122 seconds. [ 452.420911][ T37] Not tainted 6.12.38-syzkaller-g454183172bed #0 [ 453.385976][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.605026][ T37] task:syz.4.1193 state:D stack:0 pid:4551 tgid:4551 ppid:3509 flags:0x00004006 [ 453.634211][ T37] Call Trace: [ 453.637551][ T37] [ 453.640509][ T37] __schedule+0x1322/0x1df0 [ 453.664451][ T37] ? __sched_text_start+0x10/0x10 [ 453.669540][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 453.763257][ T37] ? rcu_barrier_entrain+0x350/0x4d0 [ 453.768623][ T37] schedule+0xc6/0x240 [ 454.064215][ T37] schedule_timeout+0xb2/0x3a0 [ 454.069064][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 454.283103][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 454.288745][ T37] ? generic_exec_single+0x20a/0x500 [ 454.294132][ T37] ? get_signal+0x139d/0x14f0 [ 454.298844][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 454.304515][ T37] wait_for_common+0x359/0x630 [ 454.309306][ T37] ? wait_for_completion+0x40/0x40 [ 454.314470][ T37] wait_for_completion+0x1c/0x40 [ 454.319468][ T37] rcu_barrier+0x415/0x530 [ 454.324012][ T37] rcu_sync_dtor+0xaf/0x170 [ 454.328555][ T37] percpu_free_rwsem+0x44/0x90 [ 454.333364][ T37] hci_uart_tty_close+0x210/0x230 [ 454.338425][ T37] ? __cfi_hci_uart_tty_close+0x10/0x10 [ 454.344007][ T37] tty_ldisc_release+0x2ad/0x600 [ 454.348972][ T37] tty_release_struct+0x2d/0xe0 [ 454.353891][ T37] tty_release+0xc0a/0x1230 [ 454.358449][ T37] ? __cfi_tty_release+0x10/0x10 [ 454.363517][ T37] __fput+0x1fb/0xa00 [ 454.367524][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 454.373108][ T37] ____fput+0x20/0x30 [ 454.377110][ T37] task_work_run+0x1e0/0x250 [ 454.381721][ T37] ? __cfi_task_work_run+0x10/0x10 [ 454.386880][ T37] ? __kasan_check_write+0x18/0x20 [ 454.392022][ T37] do_exit+0x9bc/0x2630 [ 454.396212][ T37] ? __sched_text_start+0x10/0x10 [ 454.401287][ T37] ? __cfi_do_exit+0x10/0x10 [ 454.405916][ T37] ? __kasan_check_write+0x18/0x20 [ 454.411059][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 454.416207][ T37] ? __kasan_check_read+0x15/0x20 [ 454.421276][ T37] ? cgroup_update_frozen+0x160/0x990 [ 454.426680][ T37] do_group_exit+0x22a/0x300 [ 454.431480][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 454.436794][ T37] get_signal+0x139d/0x14f0 [ 454.441335][ T37] arch_do_signal_or_restart+0x96/0x720 [ 454.446944][ T37] ? common_nsleep+0x93/0xb0 [ 454.451561][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 454.457757][ T37] ? __se_sys_clock_nanosleep+0x300/0x390 [ 454.463519][ T37] ? __kasan_check_read+0x15/0x20 [ 454.468567][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 454.474677][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 454.480335][ T37] do_syscall_64+0x64/0xf0 [ 454.484874][ T37] ? clear_bhb_loop+0x50/0xa0 [ 454.489576][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 454.495686][ T37] RIP: 00fb:0x294e66b3c7c44cb4 [ 454.501719][ T37] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 454.510218][ T37] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 454.518272][ T37] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 454.526303][ T37] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 454.534330][ T37] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 454.542322][ T37] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 454.550334][ T37] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 454.812097][ T36] audit: type=1400 audit(3510210649.120:1167): avc: denied { write } for pid=280 comm="syz-executor" path="pipe:[1456]" dev="pipefs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 455.160204][ T37] NMI backtrace for cpu 1 [ 455.160226][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g454183172bed #0 f73b668817a3abbf230866a03117773ee56fc203 [ 455.160266][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.160279][ T37] Call Trace: [ 455.160286][ T37] [ 455.160295][ T37] __dump_stack+0x21/0x30 [ 455.160329][ T37] dump_stack_lvl+0x10c/0x190 [ 455.160356][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 455.160385][ T37] dump_stack+0x19/0x20 [ 455.160411][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 455.160437][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 455.160463][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 455.160486][ T37] ? sched_show_task+0x379/0x560 [ 455.160513][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 455.160536][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.160562][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.160589][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 455.160614][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 455.160640][ T37] watchdog+0xd8f/0xed0 [ 455.160668][ T37] ? __cfi_watchdog+0x10/0x10 [ 455.160695][ T37] ? __kasan_check_read+0x15/0x20 [ 455.160724][ T37] ? __kthread_parkme+0x138/0x180 [ 455.160745][ T37] ? schedule+0xc6/0x240 [ 455.160771][ T37] kthread+0x2ca/0x370 [ 455.160791][ T37] ? __cfi_watchdog+0x10/0x10 [ 455.160817][ T37] ? __cfi_kthread+0x10/0x10 [ 455.160837][ T37] ret_from_fork+0x67/0xa0 [ 455.160864][ T37] ? __cfi_kthread+0x10/0x10 [ 455.160885][ T37] ret_from_fork_asm+0x1a/0x30 [ 455.160916][ T37] [ 455.160925][ T37] Sending NMI from CPU 1 to CPUs 0: [ 455.357748][ C0] NMI backtrace for cpu 0 [ 455.357765][ C0] CPU: 0 UID: 0 PID: 9278 Comm: kworker/u8:7 Not tainted 6.12.38-syzkaller-g454183172bed #0 f73b668817a3abbf230866a03117773ee56fc203 [ 455.357790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.357801][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 455.357828][ C0] RIP: 0010:__asan_memset+0x39/0x50 [ 455.357855][ C0] Code: d3 41 89 f6 49 89 ff 48 8b 4d 08 48 89 d6 ba 01 00 00 00 e8 39 e4 ff ff 84 c0 74 10 4c 89 ff 44 89 f6 48 89 da e8 87 c2 af 03 02 31 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 0f 1f 80 00 00 00 [ 455.357868][ C0] RSP: 0018:ffffc90000007698 EFLAGS: 00000246 [ 455.357883][ C0] RAX: ffffc90000007740 RBX: 0000000000000050 RCX: 0000000000000000 [ 455.357895][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000007790 [ 455.357907][ C0] RBP: ffffc900000076b0 R08: ffffc9000000778f R09: 0000000000000000 [ 455.357919][ C0] R10: ffffc90000007740 R11: fffff52000000ef2 R12: ffff8881148643c8 [ 455.357931][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000007740 [ 455.357944][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 455.357958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.357971][ C0] CR2: 00007f1560ee7d60 CR3: 000000013b046000 CR4: 00000000003526b0 [ 455.357988][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.357999][ C0] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 455.358010][ C0] Call Trace: [ 455.358016][ C0] [ 455.358024][ C0] ip_route_input_rcu+0x376/0x2520 [ 455.358047][ C0] ? br_pass_frame_up+0x126/0x1c0 [ 455.358068][ C0] ? ip_route_input_noref+0x130/0x130 [ 455.358090][ C0] ? arpt_do_table+0x74b/0x1d50 [ 455.358105][ C0] ? __asan_memcpy+0x5a/0x80 [ 455.358126][ C0] ? arpt_do_table+0x1b6c/0x1d50 [ 455.358141][ C0] ip_route_input_noref+0xbf/0x130 [ 455.358160][ C0] ? __cfi_ip_route_input_noref+0x10/0x10 [ 455.358182][ C0] ? __asan_memcpy+0x5a/0x80 [ 455.358202][ C0] arp_process+0x89d/0x1740 [ 455.358218][ C0] ? __cfi_arp_process+0x10/0x10 [ 455.358234][ C0] ? __cfi_arp_process+0x10/0x10 [ 455.358249][ C0] NF_HOOK+0x157/0x1b0 [ 455.358263][ C0] ? __cfi_arp_process+0x10/0x10 [ 455.358279][ C0] ? arp_xmit+0x1f0/0x1f0 [ 455.358293][ C0] ? __cfi_arp_process+0x10/0x10 [ 455.358309][ C0] arp_rcv+0x2f8/0x490 [ 455.358325][ C0] ? __cfi_arp_rcv+0x10/0x10 [ 455.358340][ C0] process_backlog+0x553/0xae0 [ 455.358362][ C0] __napi_poll+0xd3/0x610 [ 455.358379][ C0] net_rx_action+0x584/0xce0 [ 455.358399][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 455.358418][ C0] ? sched_clock+0x44/0x60 [ 455.358437][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 455.358457][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 455.358475][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 455.358495][ C0] handle_softirqs+0x1ab/0x630 [ 455.358518][ C0] __do_softirq+0xf/0x16 [ 455.358539][ C0] do_softirq+0xa6/0x100 [ 455.358559][ C0] [ 455.358565][ C0] [ 455.358571][ C0] ? __cfi_do_softirq+0x10/0x10 [ 455.358601][ C0] __local_bh_enable_ip+0x74/0x80 [ 455.358623][ C0] _raw_read_unlock_bh+0x2d/0x40 [ 455.358642][ C0] wg_socket_send_skb_to_peer+0x176/0x1e0 [ 455.358661][ C0] wg_socket_send_buffer_to_peer+0x11c/0x170 [ 455.358681][ C0] wg_packet_handshake_send_worker+0x1d8/0x240 [ 455.358699][ C0] ? __kasan_check_read+0x15/0x20 [ 455.358720][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 455.358741][ C0] ? wake_up_process+0x14/0x20 [ 455.358762][ C0] ? kick_pool+0x3d8/0x550 [ 455.358779][ C0] process_scheduled_works+0x7d2/0x1020 [ 455.358805][ C0] worker_thread+0xc58/0x1250 [ 455.358821][ C0] ? schedule+0xc6/0x240 [ 455.358841][ C0] kthread+0x2ca/0x370 [ 455.358857][ C0] ? __cfi_worker_thread+0x10/0x10 [ 455.358871][ C0] ? __cfi_kthread+0x10/0x10 [ 455.358887][ C0] ret_from_fork+0x67/0xa0 [ 455.358906][ C0] ? __cfi_kthread+0x10/0x10 [ 455.358922][ C0] ret_from_fork_asm+0x1a/0x30 [ 455.358946][ C0] [ 456.472577][ C0] net_ratelimit: 138305 callbacks suppressed [ 456.472601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.472633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.478719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.490634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.502546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.514366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.526392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.538439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.550319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.562274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.482543][ C1] net_ratelimit: 150662 callbacks suppressed [ 461.482574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.482587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.482674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.488647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.500722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.512654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.524547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.536753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.548856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.560806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)