last executing test programs: 4m12.191644724s ago: executing program 0 (id=719): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xfffffffffffffffc) (async) fcntl$setsig(r0, 0xa, 0x12) (async) dup2(r0, r1) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) socket$can_raw(0x1d, 0x3, 0x1) 4m12.191295714s ago: executing program 0 (id=720): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x2, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x500, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x6}, 0xf, 0x1}, 0xe) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) (async, rerun: 32) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async, rerun: 32) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/45, &(0x7f0000000100)=0x2d) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x20, 0x4, 0xff, {{0x3e, 0x4, 0x1, 0x5, 0xf8, 0x65, 0x0, 0x9e, 0x2f, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x2b, 0x69, [@rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @multicast1, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1]}, @rr={0x7, 0x1b, 0x41, [@multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}, @noop, @cipso={0x86, 0x41, 0x0, [{0x0, 0xc, "9afb2f4d43a261f8efac"}, {0x0, 0x6, "3daa64b9"}, {0x0, 0x2}, {0x7, 0xe, "e1bd4896301bda1cdecd2e83"}, {0x3, 0x8, "476944170a46"}, {0x5, 0x11, "cc2cf0ed29befda585b82a98b6b655"}]}, @timestamp_addr={0x44, 0x34, 0x46, 0x1, 0x0, [{@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xfffffffc}, {@loopback, 0x12}, {@remote, 0x24}]}, @generic={0x88, 0x10, "ad9b6c096da9d41a4ef12088e521"}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x2, 0xd, "aac2d9e1410ede62416634"}]}, @ra={0x94, 0x4}]}}}}}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, r4}, 0xc) (async) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) (async, rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000540)={[{0x2d, 'cpuacct'}, {0x2d, 'freezer'}]}, 0x12) (rerun: 32) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r0, 0x88515000) r6 = signalfd4(r5, &(0x7f0000000580)={[0x60000000000000]}, 0x8, 0x40400) accept$inet6(r6, &(0x7f00000005c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000600)=0x1c) (async) socket(0x27, 0x2, 0x1000) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000640), 0x4) (async, rerun: 32) clock_adjtime(0x2, &(0x7f0000000680)={0x7, 0x5, 0x4, 0x4, 0x8, 0x4, 0x8, 0x9, 0xfffffffffffff151, 0xffff, 0x6, 0x7, 0x2, 0x9, 0x8, 0x3580, 0x2, 0x1, 0x53c, 0x3, 0x5, 0x6, 0x5, 0x2, 0x6c8f5075, 0x3}) (async, rerun: 32) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000780)=0xdd4, &(0x7f00000007c0)=0x2) (async) r8 = accept4$bt_l2cap(r6, &(0x7f0000000800)={0x1f, 0x0, @none}, &(0x7f0000000840)=0xe, 0x800) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) (async) r9 = accept$nfc_llcp(r2, &(0x7f0000001880), &(0x7f0000001900)=0x60) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001940)={0x0, r9, 0xa, 0xe0000000, 0x800, 0x5}) (async) shutdown(r6, 0x0) (async) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000019c0)=0x95c2, 0x2) 4m12.191076254s ago: executing program 0 (id=721): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = dup(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x9, 0x0, 0x8, r2, 0x4}) write$selinux_context(r6, 0x0, 0x0) write$selinux_context(r6, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 4m12.190693504s ago: executing program 0 (id=722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xd, 0x8) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x727c4000) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000180)={0x2, "08d9fca767e3ff09cc69bbd7d1a5b37daeaf79a756439e64c61a30f117a3fba5b31a96513eb0213b3df7942dab008e8acbcd63660826f0926109085ca90b2967"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffffdf) r6 = syz_open_dev$hidraw(&(0x7f0000000380), 0x4000, 0x80000) ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f00000003c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0xb, 0x9, 0x1, {0x22, 0x9d3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x80, 0xc0}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0xff, 0x6, 0x40, 0x8}, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000e6d9053cfe1bf0bee30bc156d27a9ad210f99715a92ab59f6fbe8b803cfa0aa228b777209948c338e903406ab4b94011523ce2d8b1bc0996d8bfad5b1ebda7b15ef2434600bd2110eef945be536325ffd984838e53260731eaed045829398a1daa63ddf8cd805ee2aa2cd6d840b0e939404da42c66afb24feb1b8852f21a036bb40f5d4ed2be81ac23676f9b13eff8ec898c7368941e4108850d15122a43266b481c17b6c227e56a13"], 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1007}}, {0xc2, &(0x7f0000000180)=@string={0xc2, 0x3, "c8684d45119472257e3371535da4c19921c720541fe01dc7d9ac074606e517272b3437e9517eedc97717ca09139790291deba66e4c6da8a3d2f3b4091adae21c8f2510ad7f1b307c750e80060907fd97be3a18d5ed3bf693558f37455aeb43c186364983da15567bae3440d06f8a94c20c0899715d283883295e48b11b03b38f8184f6304bbfc40367a983d47340332ceb8dde48d77f35ee42644f8e49b7a75d1e0865e749b602194b13e9117f0b3143075bf9871a62ef5a1a126ad648d23c01"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) r9 = syz_io_uring_setup(0x11c7, &(0x7f0000000400)={0x0, 0x5683, 0x80}, &(0x7f0000000080), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r9}, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) setuid(0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000600)="75f9dc336e77cfc9b3edbce59793b5a7717ff823c5f44b03983476de703f5cab0eb015de55ed5a6a61edd265fa9c30aaf70d59c85ce184f57a20d73cd1ae50074dd85b65c034969bf2cd6b5f828a75255999d90dd751fcb2118ad92f2b66a12a5d9584bd4852ee1320ecf237ae0cd2d79f748025204e71f3150dff1d1aa9829397a7843dbeaa6fff6f14ea793b3e5653c689a4334bd8e13314c028f80b41", 0x9e}, {&(0x7f0000000540)="0064c9b1aae3dde5a88916e11628562d7961500a57b8c3f7d8cf3a918ad4bf9abed55e68197829b4db10d13314eeb7446c6dfa09937c7091b5ff439de3024e21d67bfb806171a2", 0x47}], 0x2, 0x3) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f80)={0x14, r10, 0x2eae5a70e8ad07e7, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r2, 0x2000) 4m11.654755632s ago: executing program 0 (id=733): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80070002000300000000000000040037"], 0x34}], 0x1}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) splice(r1, &(0x7f0000000000)=0x9, r1, &(0x7f0000000040)=0x2000002, 0x50c, 0x2) fadvise64(r1, 0xe, 0x0, 0x7) openat$ashmem(0xffffffffffffff9c, 0x0, 0x88a001, 0x0) (async, rerun: 64) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) (async) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x14, 0x0, &(0x7f0000001380)) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (rerun: 32) getdents64(r3, &(0x7f00000002c0)=""/31, 0xffa5) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) renameat2(r7, &(0x7f0000000080)='./bus\x00', r8, &(0x7f0000000100)='./bus\x00', 0x7) r9 = getpid() fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) 4m11.565774174s ago: executing program 0 (id=734): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="99b13137321d3a5fcf0e9741d0ad6080cd1665742669c6c14e0cd2e278798c00024c8afcbed42156cb26c1ccde413a1ca0ce79c97d2530cf78a9c3cd5d407b6068c8529729002b131c37ac80ab7e5ecb6fcf2b8269e623ea5687b58c122b0b1e7d987aba1123071fae8c6e43551e7d14add13e75b80a4090dd31b378910cb25833acfb", 0x83}, {&(0x7f0000001900)="0015ea625040ef6f7a102f60a3ff1a96be32501c298445a33ea182e2f6849a89af9ecef8e84bbdb8e9ba03ab7ae011d02be50e40fbe76170d6cbf1ccad73997fd95b", 0x42}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="5d8c439a8ea26c68cb163bfe3b09323675f4875f2c88ecef40f492ad85dba4f0de00975a56c72610f7af3b5f741a4c6a510e31cb3eeafaa1e0b0beb74ac1db4c8b7077d4fc8c0c593ec81a0dc8889d51b3abb676e84be3f434455555447ba12291352c9d2fd1adcccb69c7cbd91e76b806337fd808a571bd7e127b7d4a2a234d0e09a2a2ad0b902f9e0df74863436c7d59db6c6e0557d0c99bb96483a8ce73964985a99790d836e0830e99e5dbf0441019eaa76bc363de3cb9687ac6a5d1c62aea2dac6818c05a33669a9ef2fd298038c5", 0xd1}, {&(0x7f0000000540)="0434423bdb1b67647884bfaf3ef128343d3cb33d771391f86778f6156c48ee09df9dbf31646f774e18f72c33265f943c65e00c5ecb7066ef73ecc96e8d48c1003c28aa3c8684d99fd379638782c12ac8caa64e7f379c69c4b369288134f037fd6e2aa2e8514ac9f46d0f53e3cd5681cc4a315c57688ca50e2c5ad2dc0d96e7f06e39440d6e", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="9d4056589af80ac9d99fbaf781d00f0c38fa55c28c2048489d4db38ffd827c8b38a9dcbd6b1b66661cdc4ccec9fde9492946f9e687a2ab71e126d077b897578ff008894d2cff3c43a46b4a5a9c4545ac9ce26f25bb8a4a702a82d64bdba06b948afd608f0c0e4263faddcaf5b50c926932edefa5573135a850fc3530854679bc3ff78126558b0bf9", 0x88}, {&(0x7f0000000780)="bba5cae23f7d723a019aeea156ffcbceea1a4352706ca9d15173c517ee8920e314d29285075dc27524b5f0d2ba99db16ebc93df9d538e997bcf537f1782b4bdd8c3980c61dec6b29866815407538aecc2da1f462626cb4eda120a2a15ab1d69a7a8f69f5e7293e66dc77c7b30b012bef4965fd4231097007a899c7ce7edd377f35639bdc4753", 0x86}, {&(0x7f0000000980)="fe58666f157e1183f6410434", 0xc}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d80)="7eb991b8e666f59d441bb3cc3bea3e0e908e28479c14e90d52bcc18cc73f2ea61653f3ca23cb6d584e9d9a3c2279083ab88f54cb2cf6302cb3754866c8e67abac04aa9e7a92766725953de0d323a8dbb817664b70c3d4ac9ad712804cf6f3297cdf60e453bab9132964eecc82e79f93007e7f98947ff246db33f79ceb583924c40bd6b359765a193c58892e18e7104bbdc8f1a4023613821ea8050354cf29754", 0xa0}, {&(0x7f0000000cc0)="435cedc7cf6335bab1ae01bd28a617a47d", 0x11}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000013c0)}}, {{&(0x7f0000001680)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000017c0)}}], 0x6, 0x805) (rerun: 32) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2", 0xa9}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x770a, 0x0) 4m11.505124575s ago: executing program 32 (id=734): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="99b13137321d3a5fcf0e9741d0ad6080cd1665742669c6c14e0cd2e278798c00024c8afcbed42156cb26c1ccde413a1ca0ce79c97d2530cf78a9c3cd5d407b6068c8529729002b131c37ac80ab7e5ecb6fcf2b8269e623ea5687b58c122b0b1e7d987aba1123071fae8c6e43551e7d14add13e75b80a4090dd31b378910cb25833acfb", 0x83}, {&(0x7f0000001900)="0015ea625040ef6f7a102f60a3ff1a96be32501c298445a33ea182e2f6849a89af9ecef8e84bbdb8e9ba03ab7ae011d02be50e40fbe76170d6cbf1ccad73997fd95b", 0x42}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="5d8c439a8ea26c68cb163bfe3b09323675f4875f2c88ecef40f492ad85dba4f0de00975a56c72610f7af3b5f741a4c6a510e31cb3eeafaa1e0b0beb74ac1db4c8b7077d4fc8c0c593ec81a0dc8889d51b3abb676e84be3f434455555447ba12291352c9d2fd1adcccb69c7cbd91e76b806337fd808a571bd7e127b7d4a2a234d0e09a2a2ad0b902f9e0df74863436c7d59db6c6e0557d0c99bb96483a8ce73964985a99790d836e0830e99e5dbf0441019eaa76bc363de3cb9687ac6a5d1c62aea2dac6818c05a33669a9ef2fd298038c5", 0xd1}, {&(0x7f0000000540)="0434423bdb1b67647884bfaf3ef128343d3cb33d771391f86778f6156c48ee09df9dbf31646f774e18f72c33265f943c65e00c5ecb7066ef73ecc96e8d48c1003c28aa3c8684d99fd379638782c12ac8caa64e7f379c69c4b369288134f037fd6e2aa2e8514ac9f46d0f53e3cd5681cc4a315c57688ca50e2c5ad2dc0d96e7f06e39440d6e", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="9d4056589af80ac9d99fbaf781d00f0c38fa55c28c2048489d4db38ffd827c8b38a9dcbd6b1b66661cdc4ccec9fde9492946f9e687a2ab71e126d077b897578ff008894d2cff3c43a46b4a5a9c4545ac9ce26f25bb8a4a702a82d64bdba06b948afd608f0c0e4263faddcaf5b50c926932edefa5573135a850fc3530854679bc3ff78126558b0bf9", 0x88}, {&(0x7f0000000780)="bba5cae23f7d723a019aeea156ffcbceea1a4352706ca9d15173c517ee8920e314d29285075dc27524b5f0d2ba99db16ebc93df9d538e997bcf537f1782b4bdd8c3980c61dec6b29866815407538aecc2da1f462626cb4eda120a2a15ab1d69a7a8f69f5e7293e66dc77c7b30b012bef4965fd4231097007a899c7ce7edd377f35639bdc4753", 0x86}, {&(0x7f0000000980)="fe58666f157e1183f6410434", 0xc}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d80)="7eb991b8e666f59d441bb3cc3bea3e0e908e28479c14e90d52bcc18cc73f2ea61653f3ca23cb6d584e9d9a3c2279083ab88f54cb2cf6302cb3754866c8e67abac04aa9e7a92766725953de0d323a8dbb817664b70c3d4ac9ad712804cf6f3297cdf60e453bab9132964eecc82e79f93007e7f98947ff246db33f79ceb583924c40bd6b359765a193c58892e18e7104bbdc8f1a4023613821ea8050354cf29754", 0xa0}, {&(0x7f0000000cc0)="435cedc7cf6335bab1ae01bd28a617a47d", 0x11}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000013c0)}}, {{&(0x7f0000001680)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000017c0)}}], 0x6, 0x805) (rerun: 32) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2", 0xa9}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x770a, 0x0) 4m8.406970884s ago: executing program 4 (id=793): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001300032e"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009b000040"]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) close_range(r2, 0xffffffffffffffff, 0x0) 4m8.329842645s ago: executing program 4 (id=796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x9) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffe2e, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @fd, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/211, 0xd3, 0x0, 0x33}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m8.238278516s ago: executing program 4 (id=800): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000a9f000/0x2000)=nil, 0x2000, 0x4) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x8000000000000000, 0x3) 4m8.207605397s ago: executing program 4 (id=803): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0xff, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0x400a, 0x0, {0x1, 0x0, 0xbdd7, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x9, 0x44, 0x0, 0xf, 0x0, 0x0, 0xfffffff9, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000100)='./file0\x00', 0x0) chown(0x0, 0x0, 0xee00) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 4m8.097234569s ago: executing program 4 (id=807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000003e00"], 0x18}, 0x4080) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 4m7.96214382s ago: executing program 4 (id=811): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22a800, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64], 0x22c}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$TIOCCONS(r4, 0x541d) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0xfffffed6, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x100}) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) (async) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r5, &(0x7f00000000c0)="93", 0x1) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @loopback, 0x1ff}, 0x1c) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r0, 0x4d75a000) 4m7.917096872s ago: executing program 33 (id=811): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22a800, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64], 0x22c}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$TIOCCONS(r4, 0x541d) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0xfffffed6, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x100}) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) (async) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r5, &(0x7f00000000c0)="93", 0x1) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @loopback, 0x1ff}, 0x1c) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r0, 0x4d75a000) 2m0.289602377s ago: executing program 5 (id=3057): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00001ec000/0x2000)=nil, 0x2000}, 0x5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m0.186177139s ago: executing program 5 (id=3064): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x20, r2, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) write$selinux_attr(r5, &(0x7f00000003c0)='system_u:object_r:hald_log_t:s0\x00', 0x20) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000009c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x2b4365ff, 0x401, 0x3b4f, 0x3}, {0x0, 0x8, 0x1, 0x7f, 0x0, 0x10}], ['\x00']}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x100000f9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0), 0xff, 0x200) bind$bt_hci(r7, &(0x7f0000000880)={0x1f, 0x2, 0x3}, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000280)=[@acquire={0x40046305, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x19}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @release], 0x0, 0x0, 0x0}) 2m0.042158352s ago: executing program 5 (id=3066): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000240)=0x3, 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) futex_waitv(&(0x7f000000b140)=[{0xfe45, &(0x7f000000a780)=0x2, 0x82}], 0x1, 0x0, &(0x7f000000b500)={0x77359400}, 0x1) recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/217, 0xd9}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004000)=""/9, 0x9}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/237, 0xed}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000280)=""/211, 0xd3}], 0x8}, 0x2}, {{0x0, 0x0, 0x0}, 0x737ec86d}, {{0x0, 0x0, 0x0}, 0x800}], 0x6, 0x40000020, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000000)={'geneve0\x00'}) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x80000040, 0x4) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x9eb9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @local, 0x6}, 0x1c) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0xdac49000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') socket$inet6(0xa, 0x58c6283b84b9c84, 0x80000000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001200)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5.\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\x03\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1m59.236711804s ago: executing program 5 (id=3085): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000640)='./file1\x00', 0x48080, 0x0) openat$cgroup_ro(r7, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a442, 0x0) mount$9p_fd(0x0, &(0x7f0000000780)='./bus\x00', 0x0, 0x200a1, 0x0) linkat(r6, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./bus\x00', 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) setsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, &(0x7f0000000080)=0x2, 0x2) ptrace(0x10, r9) 1m59.146228215s ago: executing program 5 (id=3086): getrandom(&(0x7f0000002340)=""/286, 0x11e, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x2044441) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) memfd_secret(0xfba92a94987a13a2) (async) r1 = memfd_secret(0xfba92a94987a13a2) close(r1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) (async) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) (async) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xb, 0x0, 0x81, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xb, 0x0, 0x81, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}}, 0x50) vmsplice(r4, &(0x7f0000000140), 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000021c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000021c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000419000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r6, &(0x7f0000000040)="25728e0b00000700", 0x8, 0x804, &(0x7f0000002100)={0x2, 0x4e22, @local}, 0x10) r7 = fcntl$dupfd(r3, 0x0, r5) read$FUSE(r7, &(0x7f00000044c0)={0x2020}, 0x202d) (async) read$FUSE(r7, &(0x7f00000044c0)={0x2020}, 0x202d) write$binfmt_script(r5, &(0x7f0000002140)={'#! ', '', [], 0xa, "52b28699c2a75697a4c7b5908f92154186242b8ea6be3d73510edb8d703035e1d0f65a60343143b354ddbc41449adfa006d32f952b0f61fd85b564a4a453f4dc4e5d12681c614952dd3f"}, 0x4e) (async) write$binfmt_script(r5, &(0x7f0000002140)={'#! ', '', [], 0xa, "52b28699c2a75697a4c7b5908f92154186242b8ea6be3d73510edb8d703035e1d0f65a60343143b354ddbc41449adfa006d32f952b0f61fd85b564a4a453f4dc4e5d12681c614952dd3f"}, 0x4e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) userfaultfd(0x1) (async) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00008a8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 1m59.061028307s ago: executing program 5 (id=3087): syz_usb_connect(0x2, 0xfe, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x6c, 0x65, 0x60, 0x8, 0x148f, 0x3572, 0x40f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x4, 0x4, 0x40, 0x6, [{{0x9, 0x4, 0xe7, 0x40, 0x1, 0x6, 0x2a, 0xe8, 0x19, [@generic={0xa7, 0x8, "12933de7bfeb3e0214aac789a862247707ddd7f220783daf329bbad53826c40cf2861b41f0eb2ccfe266c9ddcf673be3daf485d124b4205892bb318d646263dd9f2764332b9a23d2a3f0b112c239b925b70984d39caa407b68e24be4f123d54a1160d710c4a60abae236d32203506cc746576fadb79c5897cc525a5f6945fe605f3b8e39f6263115b6ca17a6d1c04d9c69ac95334849b1f2edb72e32ac854ac2e94558a895"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9049c082, 0x76, 0x0, 0xc0}, {0x6, 0x24, 0x1a, 0x1ff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x11, 0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x1, 0x7}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x10, 0x9, 0x4, 0x50, 0x2}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x5f, &(0x7f0000000300)=@string={0x5f, 0x3, "2f922f344eceb03c67647f93e8d5d15cb1144e926cafd1b4c0bb02baba18c9579ccd466444fb6aad9659de5088f53d6e2c69cde1daeb45bf2452a3c5d099f94b6fca82ee7fad2a97e45fccd3eac9960759dc2ba6ad66618722aa1687c1"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41f}}]}) (async) syz_usb_connect(0x2, 0xfe, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x6c, 0x65, 0x60, 0x8, 0x148f, 0x3572, 0x40f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x4, 0x4, 0x40, 0x6, [{{0x9, 0x4, 0xe7, 0x40, 0x1, 0x6, 0x2a, 0xe8, 0x19, [@generic={0xa7, 0x8, "12933de7bfeb3e0214aac789a862247707ddd7f220783daf329bbad53826c40cf2861b41f0eb2ccfe266c9ddcf673be3daf485d124b4205892bb318d646263dd9f2764332b9a23d2a3f0b112c239b925b70984d39caa407b68e24be4f123d54a1160d710c4a60abae236d32203506cc746576fadb79c5897cc525a5f6945fe605f3b8e39f6263115b6ca17a6d1c04d9c69ac95334849b1f2edb72e32ac854ac2e94558a895"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9049c082, 0x76, 0x0, 0xc0}, {0x6, 0x24, 0x1a, 0x1ff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x11, 0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x1, 0x7}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x10, 0x9, 0x4, 0x50, 0x2}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x5f, &(0x7f0000000300)=@string={0x5f, 0x3, "2f922f344eceb03c67647f93e8d5d15cb1144e926cafd1b4c0bb02baba18c9579ccd466444fb6aad9659de5088f53d6e2c69cde1daeb45bf2452a3c5d099f94b6fca82ee7fad2a97e45fccd3eac9960759dc2ba6ad66618722aa1687c1"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41f}}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001400)=ANY=[], 0x18}}], 0x1, 0x4000084) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "99c48bb2cd1000d3", "18230c000000001e0600", "00aed100", "0e23f8ee9788e7db"}, 0x28) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r0, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m58.990698348s ago: executing program 34 (id=3087): syz_usb_connect(0x2, 0xfe, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x6c, 0x65, 0x60, 0x8, 0x148f, 0x3572, 0x40f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x4, 0x4, 0x40, 0x6, [{{0x9, 0x4, 0xe7, 0x40, 0x1, 0x6, 0x2a, 0xe8, 0x19, [@generic={0xa7, 0x8, "12933de7bfeb3e0214aac789a862247707ddd7f220783daf329bbad53826c40cf2861b41f0eb2ccfe266c9ddcf673be3daf485d124b4205892bb318d646263dd9f2764332b9a23d2a3f0b112c239b925b70984d39caa407b68e24be4f123d54a1160d710c4a60abae236d32203506cc746576fadb79c5897cc525a5f6945fe605f3b8e39f6263115b6ca17a6d1c04d9c69ac95334849b1f2edb72e32ac854ac2e94558a895"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9049c082, 0x76, 0x0, 0xc0}, {0x6, 0x24, 0x1a, 0x1ff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x11, 0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x1, 0x7}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x10, 0x9, 0x4, 0x50, 0x2}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x5f, &(0x7f0000000300)=@string={0x5f, 0x3, "2f922f344eceb03c67647f93e8d5d15cb1144e926cafd1b4c0bb02baba18c9579ccd466444fb6aad9659de5088f53d6e2c69cde1daeb45bf2452a3c5d099f94b6fca82ee7fad2a97e45fccd3eac9960759dc2ba6ad66618722aa1687c1"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41f}}]}) (async) syz_usb_connect(0x2, 0xfe, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x6c, 0x65, 0x60, 0x8, 0x148f, 0x3572, 0x40f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x4, 0x4, 0x40, 0x6, [{{0x9, 0x4, 0xe7, 0x40, 0x1, 0x6, 0x2a, 0xe8, 0x19, [@generic={0xa7, 0x8, "12933de7bfeb3e0214aac789a862247707ddd7f220783daf329bbad53826c40cf2861b41f0eb2ccfe266c9ddcf673be3daf485d124b4205892bb318d646263dd9f2764332b9a23d2a3f0b112c239b925b70984d39caa407b68e24be4f123d54a1160d710c4a60abae236d32203506cc746576fadb79c5897cc525a5f6945fe605f3b8e39f6263115b6ca17a6d1c04d9c69ac95334849b1f2edb72e32ac854ac2e94558a895"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9049c082, 0x76, 0x0, 0xc0}, {0x6, 0x24, 0x1a, 0x1ff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x11, 0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x1, 0x7}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x10, 0x9, 0x4, 0x50, 0x2}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x5f, &(0x7f0000000300)=@string={0x5f, 0x3, "2f922f344eceb03c67647f93e8d5d15cb1144e926cafd1b4c0bb02baba18c9579ccd466444fb6aad9659de5088f53d6e2c69cde1daeb45bf2452a3c5d099f94b6fca82ee7fad2a97e45fccd3eac9960759dc2ba6ad66618722aa1687c1"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41f}}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001400)=ANY=[], 0x18}}], 0x1, 0x4000084) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "99c48bb2cd1000d3", "18230c000000001e0600", "00aed100", "0e23f8ee9788e7db"}, 0x28) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r0, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m51.82839384s ago: executing program 3 (id=3226): syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') syz_open_procfs(0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$hidraw(0x0, 0x8, 0x8201) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="74c130896ae8edc1c97266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) read$FUSE(r1, 0x0, 0x0) 1m51.770220331s ago: executing program 3 (id=3227): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000007bc0)=""/4099, 0x1003}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000002180)=""/258, 0x102}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x8, 0x0, 0x1e}, 0x81}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2100, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 1m51.769934051s ago: executing program 3 (id=3228): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c1341, 0x0) read(r2, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f00000000c0)=[@register_looper, @clear_death={0x400c630f, 0x3}, @acquire_done, @dead_binder_done, @clear_death={0x400c630f, 0x1}, @exit_looper, @acquire], 0x57, 0x0, &(0x7f0000000140)="5e785f59c58867d8d727e8a259f3999e61dddcc18e8e5719f879be812d9f7e06b3623bb128e523d3180f6cbea4efccdf4229992cc5fb39539fcd72cc13f38820d0e9f8f0f8866a38d8e13c1b4d59671c2408f22a3a4b46"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f00000000c0)=[@register_looper, @clear_death={0x400c630f, 0x3}, @acquire_done, @dead_binder_done, @clear_death={0x400c630f, 0x1}, @exit_looper, @acquire], 0x57, 0x0, &(0x7f0000000140)="5e785f59c58867d8d727e8a259f3999e61dddcc18e8e5719f879be812d9f7e06b3623bb128e523d3180f6cbea4efccdf4229992cc5fb39539fcd72cc13f38820d0e9f8f0f8866a38d8e13c1b4d59671c2408f22a3a4b46"}) 1m50.898149755s ago: executing program 3 (id=3240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x26, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff5500"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000005472000040"]) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x2d}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2a, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@binder={0x73622a85, 0x80, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) signalfd(r0, &(0x7f0000000080)={[0x2]}, 0x8) 1m50.846625746s ago: executing program 3 (id=3241): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) chdir(&(0x7f00000000c0)='./cgroup\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"bf64aaa3d228889e734a21279699c083", 0x0, 0x0, {0x1, 0x400}, {0x81, 0x4bda}, 0xfff, [0x0, 0x0, 0xffffffff80000001, 0x2, 0x4, 0xd8, 0x8000000000000001, 0x2, 0x8000, 0x54fc9b97, 0x50c3, 0x73ef, 0x2899, 0x2, 0x5, 0x7]}) ppoll(&(0x7f0000000040), 0x22, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0xffffffffffffff4e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x8000) pipe2$9p(&(0x7f0000000100), 0x4080) 1m50.730027738s ago: executing program 3 (id=3242): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r0, 0x45809000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) 1m50.684265479s ago: executing program 35 (id=3242): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r0, 0x45809000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) 1m40.680937236s ago: executing program 2 (id=3417): r0 = socket(0x27, 0x4, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be180205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = dup3(r2, r1, 0x0) connect$inet(r3, &(0x7f0000005340)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x80000000000004, 0x40) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x0, r7, 0x2a}, 0x10) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000180)=0x4) 1m40.600893597s ago: executing program 2 (id=3418): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, 0x0) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = memfd_secret(0x80000) mmap(&(0x7f00001be000/0x2000)=nil, 0x2000, 0x2, 0x12, r7, 0x6c08e000) ftruncate(r7, 0x3) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, 0x0, 0x20000000) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_START_REQ(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x24044082) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080027bd7000ffdbdf25150000000c00a600003300000000000000002c002d010000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000600)) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d0225bd7037b3eb73ebb35800ffdbdf251c0000000c00000000030000000c00060002000000020000000c00060000000000000000000c0006000200000000000000", @ANYRESOCT=r10, @ANYBLOB="6097e3f9693010c2374c16b6d1d9ac087986131eedb9d33c8820d15c6e6092a16f29446c9be21816945513478f61357acf3b07"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x20008000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f3d739a22efa42407ca833e8cfa64a78486e6d2cd301f37cc979bb95ed0dbf3d242c77acbbb", @ANYRESHEX=r5, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYRES64=0x0]) r11 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r11, r1, 0x0, 0x80000000) 1m40.600547627s ago: executing program 2 (id=3419): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x4000000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m40.599723037s ago: executing program 2 (id=3420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @broadcast}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x5ad200, 0x0) timer_create(0x2, &(0x7f0000000200)={0x0, 0x24, 0x4, @thr={&(0x7f0000000600)="06ab34f5a9148d76f7856433049f50300d7bdfd702c95ec2924cbc83b090bc26caea2a34a93fa5b4caf2bc251b6f0b70f41880184047734d009f216ce68b7dcc63a4d2347b2f44e51f551b6842c96ac0ebd53c1231d6228f928c4b79a1f1f3024ae3e71832141ee1ec94c8007aea04cf1cebf1e325bb75300fdb40f75e3551aa41bfc808c767c5db40af98094c8ea6f208b8a5bbe46d34c1cb5ad1b9a77d05bd48e03c15464100600949090468477165cb4876023ce29b1133b92a3733a9103812964d97ebd9d3efb73659bf6c29437690989dd29e909e2e2f8006a9f51738c66f3d63d9f6143656", &(0x7f0000000280)="75b1c1b7fd8fc24944f7064af8155d2e469a64732d363170270dc22fcf561eaac047f5308c9b10e3033f82cb919de7b66f06da250dc410fc4bbacfb003aa511ae25bf56ce041344879ccc1c8a9534db102e8"}}, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000440)={0xed, 0x0, 0x202}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x0, 0x1, 0x12}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x111000, 0x0) 1m40.507251329s ago: executing program 2 (id=3421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)={0x3, {{0xa, 0x4e22, 0x1, @mcast1, 0x1}}, 0x0, 0x2, [{{0xa, 0x4e24, 0x4, @private0, 0x4}}, {{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}]}, 0x190) write(r1, &(0x7f0000000000)="1c0000001a005f0014f9f40700090400810000000001400000000000", 0x1c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setrlimit(0xc, &(0x7f0000000100)={0xfffffffffffffeff, 0x248}) open_tree(0xffffffffffffffff, 0x0, 0xd101) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 1m40.505398549s ago: executing program 2 (id=3422): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000140)) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x6b) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) (async) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x3, &(0x7f0000000380)) 1m25.568751594s ago: executing program 36 (id=3422): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000140)) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x6b) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) (async) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x3, &(0x7f0000000380)) 1m10.512824151s ago: executing program 1 (id=4002): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x181040, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000380)=""/204) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) (async) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r1, 0x0, 0x80000000) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)=0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000180)=0x4) 1m10.455870701s ago: executing program 1 (id=4003): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x84944000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x8, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000081000/0x400000)=nil) 1m10.042230718s ago: executing program 1 (id=4013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x3, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x40a}}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4}) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.416879498s ago: executing program 1 (id=4037): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x5000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009b000040"]) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.178147622s ago: executing program 1 (id=4040): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x44001) write(r0, &(0x7f0000000000)="1c0000001a005f0015f9f40700090400810000008001400000000000", 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x7, {{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x33}}}, {{0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}, 0x108) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100004000000000000014000000180001801c00020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) readlinkat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/223, 0xdf) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 1m9.159033342s ago: executing program 1 (id=4043): r0 = socket(0x22, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002180)=""/4078, 0xfee}, {&(0x7f0000001080)=""/255, 0xff}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000001a40)=""/149, 0x95}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f00000003c0)=""/80, 0x50}], 0x9}, 0x81}], 0x3, 0x2102, 0x0) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000001) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20010, r2, 0xe3de1000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r8, 0x0) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4) 53.856266073s ago: executing program 37 (id=4043): r0 = socket(0x22, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002180)=""/4078, 0xfee}, {&(0x7f0000001080)=""/255, 0xff}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000001a40)=""/149, 0x95}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f00000003c0)=""/80, 0x50}], 0x9}, 0x81}], 0x3, 0x2102, 0x0) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000001) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20010, r2, 0xe3de1000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r8, 0x0) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4) 38.572902083s ago: executing program 9 (id=4668): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 38.329454807s ago: executing program 9 (id=4672): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(r2, r3, 0x0, 0x0, 0x1000) openat(r2, &(0x7f0000000000)='./file0\x00', 0x22840, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 38.223764129s ago: executing program 9 (id=4676): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) r1 = socket$inet6(0xa, 0xa, 0x4) sendto$inet6(r1, &(0x7f0000000040)="44672b805d75abb510271cb9c7efa426725f1533cf2f42eefcf63eea6486c2b034daf8fe1d580cc41a90850d701f232922f9d0ce0317780c931f3a70a3ba633edbc20b66f4ef46edfe069bd7f3325ff3cbce8ce1a6c49803edb245eafd3907b612a6e3fbc020fc2dce21360c7c932466b289d20667b4a8f8442d0114b9b53593172370c1fd791837532b37e8a3b39221310a2c5376a756f091e793550df54c2d8daf4dbcd58b81dcf1211424d92e4579b9d1333ae098fa27", 0xb8, 0x4, 0x0, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000100)=[@cpuid={0x2, 0x18, {0xc75, 0x3}}, @cpuid={0x2, 0x18, {0x0, 0x9}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x6c, {"3e440f35b8010000000f01c10f00d2f044836eab0466b82a010f00d848b8d9652169797a64190f23c00f21f835010004000f23f8b805000000b90c0000000f01d90f00de66baf80cb8369f8189ef66bafc0c66b8b66066ef0f01c4"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x50, {"b9800000c00f3235002000000f303ef3420fc7b002000000410f01c8c42109d3de66410fc29e0000000049410f01c9c423cdce3a040f72d3650f79d5450f30"}}, @code={0x1, 0x62, {"48b800800000000000000f23d80f21f835000000000f23f8c4a238f3970a00000066420f38dd4f0026660f38823ab8010000000f01d96564660fc4a222c70000470f0666b8e0000f00d8f3440fa6d0db1b"}}, @cpuid={0x2, 0x18, {0x1, 0xfffffffb}}, @cpuid={0x2, 0x18, {0x9, 0x8000}}, @cpuid={0x2, 0x18, {0x0, 0x2}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x4a, {"4133ba58000000d3e266bad004ec6665d9f7c4c229bc23b92b020000b800000000ba008000000f300f3266baa000edc403f9797a009d45de13"}}, @uexit={0x0, 0x18, 0x8000}, @uexit={0x0, 0x18, 0xaa}, @cpuid={0x2, 0x18, {0xfffffffd, 0x80000001}}, @cpuid={0x2, 0x18, {0x7ff, 0x9be2}}], 0x2a0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x28000000, 0x8, 0x25, 0x6e1d, 0x5, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff, 0xffffffffffffec97, 0x5, 0x7, 0x6, 0x10001, 0x7, 0x6, 0x4780], 0x4000, 0x1000}) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000640)={[&(0x7f00000004c0)='(\x00', &(0x7f0000000500)='\xc1,^*\\{\x00', &(0x7f0000000540)='.%{\x00', &(0x7f0000000580)='/.&%{-\x00', &(0x7f00000005c0)='\'/\x00', &(0x7f0000000600)='+[%^#\x00']}, &(0x7f0000000880)={[&(0x7f0000000680)='$\x00', &(0x7f00000006c0)='!\x00', &(0x7f0000000700)='.+!-@-\x00', &(0x7f0000000740)='i\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='-\x00', &(0x7f0000000800)='&.\x00', &(0x7f0000000840)='\x00']}, 0x1000) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000900)="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", 0x1000) r3 = syz_open_dev$hiddev(&(0x7f0000001900), 0x3, 0x88200) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000001940)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000001980)={{0xff, @empty, 0x4e23, 0x3, 'lc\x00', 0x12, 0x40, 0x6b}, {@rand_addr=0x64010100, 0x4e21, 0x2000, 0x1, 0x6, 0x9}}, 0x44) r5 = syz_open_dev$mouse(&(0x7f0000001a00), 0xce, 0x100) r6 = syz_create_resource$binfmt(&(0x7f0000001a40)='./file0\x00') execveat$binfmt(r5, r6, &(0x7f0000001c00)={[&(0x7f0000001a80)=',\x00', &(0x7f0000001ac0)='.%{\x00', &(0x7f0000001b00)='\xe4\x00', &(0x7f0000001b40)='+[%^#\x00', &(0x7f0000001b80)='\xd0\x00', &(0x7f0000001bc0)='@-!\x00']}, &(0x7f0000001d40)={[&(0x7f0000001c40)='\x00', &(0x7f0000001c80)=']{\x00', &(0x7f0000001cc0)='.%{\x00', &(0x7f0000001d00)='$\x00']}, 0x1000) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000001d80)={0x3, 0x200, 0x7}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001dc0)={{0x0, 0x0, 0x80, {0x3000, 0xa000, 0x3}}, "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", "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"}) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003e40), 0x1, 0x0) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000003e80)) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000003ec0)=""/16, 0x10}, {&(0x7f0000003f00)=""/110, 0x6e}, {&(0x7f0000003f80)=""/166, 0xa6}], 0x3, 0x4, 0xfff) pipe2$watch_queue(&(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0xd7, 0x4) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000040c0)={0x7, 0x0, [{0x9e5, 0x0, 0x6}, {0xb22, 0x0, 0x5b820ee}, {0x874, 0x0, 0x9}, {0xbbb, 0x0, 0x8000000000000001}, {0x12c09eb861db8ade, 0x0, 0xb2}, {0x4b564d01, 0x0, 0x9}, {0xbcc, 0x0, 0x6}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x80000, &(0x7f0000004140)="e87e4b3fa3d00f8d311eb4b9fbfc582fda5d700f5f858f4f0425a19a42dc678834e0ab607df4e7367c8b04148e86a6edb6b4ceea74fb521327ea28c3333b253b1537408455172efd76ae836d4a06ecc7b8befad978f3459d614405d8c0a390d8b92264fc132f11c7b3bc652a24ecabb2d728025e69d1872d6e92c5a634c8ab99a518faf1e69fe04b4866c5e29c4fe2f37280be5e6b7bee4f199c290c9e363dac2c019a256839d44f58b9d4f0c8b6420b4002e2451928fb8520afbc38461bf6a579661183a8d018d8d7eed4b32703daf95933203e54ebec5cb789ed839c752153082c6e6272cad2576f2a1c532d2c811a68a10dc1e7033545fd104581e429b4614b79f8dc901df0ed326a7b4a602a89399e17750b42b7ce6757424c9c56e67cbf03cf1747c6897f70375c6544fd96f0b3898491e748a251bc740c96c8752416bb31161744a4880bbb3977215429142ed9392a612369287d8bcb5e9ea5f606219797b450489c19682ae28e3a51371c2fa4b1491c24a015640a5335b633f51e45417fa8956d84b9e0cbde086717b41c5e7ca089c9816b9a020e85c9db9d763217e76b730fa1776c4755ad82639406117223676087fb2e8d93bd3c0c2e52b5dceb186ac9423a438ee47839a2a2bd48cab0e2b53ef17f29c876770d0a897ea5046b556f38ce04c4e1eb27fa1cfe912bd87b6f1bc36ea30503597d1f21249bc57c49e0939bf6766b9ea89bb5b2eea0bcdd4c2151e664e34ba6e2392455f826f093a70473f17a7c82076f89a9349ee940f8d254a7ea5be75789062fe895587ccdaa4886fa40a3bfb7221d67ef65b7393b36818612750328a5bf22d3ddde17e96274361658846a05f479b5aea9801799a24f35fbf408c3afcd2b686d4f84287d2d9fa464855da99a19884be196584945ba9c0bfcf64e920a69d7cc08b606cc9b53da5873b4e10d1f99999878bc083726a362f9d0a6654d8895bd0aa999b25a243897e92c46cc5c9b2a40554779a237533f618fc2406d27ac0ccabb530bff49d686f46356fbaf2fd81f0913beddd3ed26ce88f7ded52d963a7fb33105c323299cc76885a871b5e9d7ddd953b236f411ec5207878ae376e00f9f6723c84a71ea34bcb282c58763690db3647eba27f909202acb8c0038932fcf676e64271396b83b5f624cda81154ccdb129e1765905e986a84ec5b02807028bc2ec671a7835e79b62ef98cdff0a52944696ad543e58287813ecadd52ecd90adbdc2e00df1f51c6d801e0f39cb0c5089394d9ca0cab5c926131e522ee81744f13c6a44bfed2c21bf6ad1573c120d93379275920580d75bf5b082b3919e16057747172564d65aad2d2cc5fa9185f6ade9a1fde7ed37d3039140683c9b7562f0fdb18f4ba87d30d52d7184a20e6ad5daac65ed96995b7317fef3e47104dfc5319a7321179888b8706358e5706251e5cf0ea7c708de8727b82fae3a8ced08f8b0186470968fbf6547c7c93d1ff25325b0239e83df5d6bed2f33ff6c95380379e293d52adc8cc4b177af249520fc390698f4b053965e431128e314dbd2679eefb851d00ba701977ea1ae02f22f584b1e7d6d296a871dcd66d5a379ae11eab364ed9e3a28cfd2aa367f180bbbf020c6a84912b42d4c8a4190df5d665273b62326f3a7133f7c8536223196d05ba44c6e8bd6fb1459d23425a5665cf5eb5769b2163638f7b4486fe397c1bd69e6990b16081bf9f1fdc5cee4eef34f7d61c1ef9a48a67b150a6b37715f503131e4ccc1f81efc0a85fc70e101c77690ca7c80995cfddf448331f64ca0270e6bd84b5825e5ece4ca340b9ad3a0bfde14c652b616c79f6d64cbb171a191e14bf0c69866d3b96594db58b9b71031f7b8862858ff5f5f7bd1bdee5ad7eb5cb5c4b52763c391e83351019ce9e9b95fb2d745371c74f529d04018a7e1595a826caeef4c9a83431d88c6952b23beddf6a86bf3b58a7d13ce2c2e1cd44c33d28fb89b9156fc74994d1d71a103b9e2f7cbb356a9e498bc28b4f678b18119545f21facb3ebfb22df4cc70f4a5d1f4b5d68b1fa9dae5960ccd54711699e87c744a690c40c94c8eb9567305ab7ccfa40986c80c10d4a917bbc7d8a6b5d8bcd20ab7c4005b736d8c9a8cfcebd2dfc8b2aa35ec3b86634f8312b4d93d103974cabc5e0e2286e06121b993a6ef3571b916377624fb1dbfed8cddf73bea642ce1596f702e4eed0bd9c1e43b0d75890e62b39ea87495738b590233dc36aa62456aa362354007242a0bcb676a343a2737aa84f4325e74b3b7999867a25619cdc523b4817172d015302ba87ec6daf9dee8e0b0c0e0813b9b5c2ad9878b3ccda02b06c2b37d433d6f3430d57dd0387f50cca0b4a99fbfbeeb9bfeeb34781230b047cbdf45a7a843627b3f0494f52f4deb28041778977149dee019911acce485c1c4b178f54d542dceaccd15ee57ebd1de40046f9941b13eb0ba775d786dba61a3e5a49e76b3bc48251b909a37826f21b96a06085c4c47a45ec1c6e043beb3f092e61f4438e0581ed157bff4d08140af39259346fee103757e7cccb88a6ba9dd282c2601861b0ee5b987a58697f3ff57e35629a728535e219e6a6c9ab17e84b4f09e19cdea1008c5c6a47025c42cfb33b4e841db8563fcb797eea68b64c468147fab68a0d1945a6ddf8c03f2bd4c8e3be401d0bd88223151e4dc82e2bf4665485da999515152c2cd2b62f591ac40f1d0a9f9e5bed2e475fbc4988d3034dd4b0a3c3e26779f0654847313fec17c1dab64324d30b499a5597f899a97b4fabec57065920a5d71fa0320392a7a9cd53754aa1bede86f56ebf6bf2084364a28bd8319eeb38c374228f94cd006b6ecf6c58a2b03a79e8795426713f209b44cc3ec78e8d33a845a687d4713e21d74f3d50f2ea79664dad51ac30001f9b7edcbc124f2574921a1079167ee443ecb0a850efe71545af7d030884e271eba629e614d709ab530a028345fed54ba950cf70726ad6a5794b850c302d64b8e28162883da9e690b6c28b2fe3a94858297f810601f0bb49d8538c19f17f690772ccd18e0e9f936f367c55b3f2eb6711f5cbe9e671dcdbbee57c05c38f9c5e735598565286de2ea5416149c47f313eb9925cf63f59b69177341e7c31aaafe7b083c0dab6663d33679295502b2260c756fafb442167ad5b7a3584643cb3ef3359f7d630401281105f4d621af9bed992966f45159b41a613cd3e68f6836d702e7e5e8cef2eb6409f63b72cf86e42e3e85c98e310e4841f3396310d752fcf2dac725f3fbaf8fc0b994f06c47dcd0236ff0cfadc6ccdc22adf6d1974d913b4842a69efeb62883f2c960153aff9647e445974c3a4bfdd6e4bd92532036a98481a691b27c5bed3ac6d99efc3db4fd89a45bf51de5e80af9051b4da231ff6fb1df3d0904fe63b09bccc8e8ddc9ac3a48ba25dc49fed253afd3e9501a49916d83938dd80f89c9584fe6a181ac8d708d4749018baedac9ab2a5468159f3c58ef22abefca8388cc5bc7ba037d961faa8795af046c5a943fff69b2f20e1b7bfa128bd5585d594c3297015ce01e154df297941d00c0610272f4b04219e2afedbbe081806294eefe82828e91666c79120c07083d2c865bf8e6906e08106d2889a3841f8987bd0e6426e5080707639ff61b35c4f7f5fa00506e9884c61464afdd54b632bc192f1154e410f599a6c7e5852485d364428f77a4b4a21f487df563bcd9862b894b588955ef97c0c35ca5658da4901102c9ba73d0f04fc24af4813460188a184ca55ceed4d2b3cc1df77296c3d3070019cd8148cf09e8bf9a3d1d42d49adcc297e24497ac9d34a1206e9e80ba71c6cc70e8476e1b81d17ffd50f81564de34901e9490b3c4024d85c8bd7482c7ef5629b73172617b992c7ad26ea003cfe1499f8b3f7c9927ac20e962e9e676e0d63a40424677ba17ea99b4cf18ce75d6aa2a915a04361ae7689b61932d6df8c38a03d3956cfcbabd61771df7a8daad61d627b207b834c368a44cf3423f89977d8c55ab2bfff76dc3a63c60debfaabce539e674b72d9578645470c095cc093ad18cf0a4cbe67f2363ae982b56d67aad75ed5a5cd54b287745969f07283eb9683342bdb4690e15e7bb6437d9b3fcc0b63ddfa182ebc9eead6f7f800f7cdee5ed7b3de9ad873d7409b5a1aed67914c909e4550f5042bf6c80fef88cdb88fa5257416ae1c0072e2e7ee2a973185fb2c1bfb663f64873029bc3c909bc97599b4c36ca6167d8eb13b2759bcffc52a0165fa58237a03567c03570c52c34f843ba4b6aaf092904c468897b6b7b5cf4d2b3042f084e59cdcd1a55018470397f5650c45ce664f17392e5b310e49292efcaa9ccaa50b2adafc35fef848719283121743ff958e96bd7b67313c902680effe6505a049190172a03895843a05aa89940fcd4f8ae7dcd0374788f98ea5905b2da777bf7f6b10e700660d47ea5e53c2992c3508cba7cf698885ca7215ed505a8179667420bb762473c271d790da16c3fe0179cb6d272a49878e6ca3e1c07034623e08ec342326fa5c7b64fc8edc697487c40fa4f2d69287392d2361134a017d4597e5e0e31c8966a0b60b7846d796a367405174f644775f8112d756bb419cb068cdacfad4e547ab47d480286484f9b1a4a13ad23788937b903e9080579aeecce3661fd20058bccc0e608ff35189f1d7c627133bfa1ce1acab61589718255ef36cf4e66293a1af50f082299771331185bad3e2c9499a6dc64e036c16b1db394fba0c2780fdaa288f717330c3b75235170e9ccc73bdbcbd059707a44702d3a0f77b10f71aba2d90e2808aa92760085ba99df47703e81f985a4dc021a92df1d0334d26c71b163e22efd50bd1f0fc5abc947e7a12ee4ce60628d463495e12049014afe8bd382f0b9e65bc60e5e2e938cc799132d1b5f5032d63b8c46dab27785f1ed1ef7ed6f3d88c6febfbb497ca7d4a7401312e69151ee7c0079204773e8a5531e3335bb542f05c961c2ffdbe4ea342947e471c84bea370101f1f251b828f725142e141c917888d97a796f6906fd058975c988b83f8ae64cd4ee1587e2df8cb77c2e2330e92398168dcc51d8527a3fed49d11c84308ba1f2e022ba9835470f84b8710de3aecb3adc442516a6879752acd8b6eb2d271903a64c5fa0ae78b7d2172323eefccf8935999e74c67cc8e066b965c8766b570f944da10dbbbb760893758442abf2c0f12fa94904cc87a1ab084e25a91266c99aceb9e57164862278d3abaf9841a6c074e58b65179f77363cc9e24247d38382ffbebd5bd455a64987983ea2118e2411105ea2dd9b60c48098b3af84b16e84a8eb33204f5a66dca852ad7dbed67a54f148b336b927979a541455e53336cfec8ec7d39e42478d3ef7ecee7b4d2772350a7e5addc8b840bb3f7ebf3fa25529634afaa1fc6c4db0819ea715dae2f32797ea0720515834a699f55c49c22c8146729530989127ba42bc8d6c46457924a1cad384055670292541e084e229cfcc1e305c3703f4df2d2e1c20358421e239b30b32b3e5c48d555fd5c617d44f7a9557ad9e9da3ff4fb3fd38ff1ed09c89b42e9fa67204a355c4a633cea820ee22c36f3f8c66ce93897fc537a5554003eee72121406b22c5d0187d9ffc45c944947c607c818b453ffce05b0fa4704b419451b87e265b0de6c50667cba6cf42311eea81cda50b95037fdfb6f2a49d9ce881f0221fe78a1a31710c7a76a2531cf5645f055f2352ab417dedbd78ba9e15a0e3be0a51dc47ae2e6450a6bcd183b4878e7a42d2853c5595690f93f332c570ad5e9a43", 0x1000, &(0x7f0000005140), &(0x7f0000005180), &(0x7f00000051c0)="bb27972d29734e55eef5d9b9e8d88420cb797b19829aaf68f6623d9aa19bfaf954279527a7c2958d2aebecedb50a850647637bdd69d8aaf758e3e8b0a9e4117e6d4f97351926bff9ea6bf2f39619ffb9b3a2dc41b452cf517e9dc540d036b431cca18c50b33e0b1a6ea6385e2b4864e5c6105cdb7add2dd96030a61d0bc64212b8a0264ccff70218bada14483a44116f2571c6f556cf5ded6883782f05b625") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) inotify_add_watch(r5, &(0x7f0000005280)='./file0\x00', 0x10) symlink(&(0x7f00000052c0)='./file0\x00', &(0x7f0000005300)='./file0\x00') set_tid_address(&(0x7f0000005340)) 38.219445049s ago: executing program 9 (id=4677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = epoll_create1(0x80000) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2000000a}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 38.17031832s ago: executing program 9 (id=4678): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x200000007ffff000) 37.944957073s ago: executing program 9 (id=4681): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffffffffc) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe, 0x0, 0x0, '\x00', 0x400000000000008}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 34.408774839s ago: executing program 8 (id=4743): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0xa82) creat(&(0x7f0000000000)='./file0\x00', 0x54) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x54) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x1, 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) (async) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) dup3(r1, r1, 0x0) (async) r3 = dup3(r1, r1, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x9, 0x9, 0x0, 0x5, 0x3c6e, 0xffffffffffffffff}) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r1, 0x0) (async) r6 = pidfd_getfd(r5, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000240)=0x1, 0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000280)=0xb9b8) socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x1a800) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0xa, 0xf, 0x9, "a63bf1b39a60eec14033123134cdec419104a656adfe707ff5e9012a917c25e7fd8b6d17ad3324be0b15db6c52e84e5d0ae086e8f774bc843619c0e0842d847e", "10e4a8aefa36d42f8d56f1e1930d4fb60d3c1af0438d54ac4f45824cfcc90dd24d943c0a1e4e0e9f26037cc36107475cf2b8fae1af02b59bef9db024ecc077c1", "24fa8ebcea01c104fc3f5363679f727b565c0245b29e3e2ceb16dab85f5121be", [0xbd, 0xf3]}) sched_setaffinity(r4, 0x8, &(0x7f0000000400)=0x8) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000400)=0x8) syz_clone(0x42202000, &(0x7f0000000440)="cf9e8c8949f1f28935a7b5c24a4aceef4d571d7e567facf03b2bdbb1d7bda24a9650a3f783e0d33a558148ff79f51ee79ca6ee28a86b7bad834938458366001b0c65f6f86d22296a3820d6694e7711a400d23b20de04a8c9ff03fc02319253468223d016d3cbaab04ae00a826dee336326f1038f61621332ee8f09", 0x7b, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="aa629c670a44fe89309ad248a8cfbd7920809a35c133792531fbeaa4c311584167d25c80d268884213dfec506afeaf953a708807bfb7643e975067b9368b00e8ed71aefd989fe59365f503c2c1fef8a8cbaafe0b3b") (async) r8 = syz_clone(0x42202000, &(0x7f0000000440)="cf9e8c8949f1f28935a7b5c24a4aceef4d571d7e567facf03b2bdbb1d7bda24a9650a3f783e0d33a558148ff79f51ee79ca6ee28a86b7bad834938458366001b0c65f6f86d22296a3820d6694e7711a400d23b20de04a8c9ff03fc02319253468223d016d3cbaab04ae00a826dee336326f1038f61621332ee8f09", 0x7b, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="aa629c670a44fe89309ad248a8cfbd7920809a35c133792531fbeaa4c311584167d25c80d268884213dfec506afeaf953a708807bfb7643e975067b9368b00e8ed71aefd989fe59365f503c2c1fef8a8cbaafe0b3b") ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000005c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x1}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='attr/prev\x00') r10 = openat$cgroup_int(r1, &(0x7f0000000640)='cpuset.mem_exclusive\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r10, &(0x7f0000000680)={0x60000000}) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000006c0)) (async) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000006c0)) ioctl$SNDRV_TIMER_IOCTL_CREATE(r9, 0xc02054a5, &(0x7f0000000700)={0x0, r10, 'id1\x00'}) ioctl$TUNGETVNETHDRSZ(r11, 0x800454d7, &(0x7f0000000780)) (async) ioctl$TUNGETVNETHDRSZ(r11, 0x800454d7, &(0x7f0000000780)) syz_usb_connect(0x2, 0x107, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0xc1, 0x1f, 0xcf, 0x30, 0x4b4, 0x5500, 0x2b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x1, 0x8, 0xd8, 0x80, 0xff, [{{0x9, 0x4, 0xb2, 0xc7, 0x7, 0x53, 0xc9, 0x89, 0x5, [@generic={0x10, 0xd, "4a5531b5baed396d25a7589bca99"}, @uac_control={{0xa, 0x24, 0x1, 0x1000, 0x3}, [@mixer_unit={0x7, 0x24, 0x4, 0x1, 0x8, "5fc2"}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x5}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x0, 0x3, "49b67659"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x3, 0x8b, 0xf, 0x7}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0xae, "ead2ccbe0f"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x0, 0x6, "a680b352"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0x8, 0x2c, [@generic={0x7, 0xc, "0234cff9d0"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0xaf, 0x7, 0xa}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xc, 0xa}}, {{0x9, 0x5, 0xf, 0xa, 0x20, 0x1, 0xf1, 0xfe}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xdd, 0x7f, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x9, 0x40, 0x4}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0xbb, 0x7, 0x0, [@generic={0x43, 0xc, "8f49d12e0c9eb0d986e7566cc265238afd27cdd0fc9de5edcb175d5ea8b78eb655ca88b8dee5fa0566fdb829f99b6047ba14e6f0d468141a6acdae9214c9a88905"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xa7a}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x81, 0xb, 0x4, 0xff, 0x8}, 0x209, &(0x7f0000000940)={0x5, 0xf, 0x209, 0x6, [@generic={0xdf, 0x10, 0xa, "1b46c3d73a4247d4efb801606a7222141d20b5e2a980ae1e81358539f7a6bba8b8fe0a26d0d6c14bef278ba092fc06531f325c3cb26754251535f22fa3b5461ff1449a4bda282d688890890342f6a3bdf11398b0dcc79056ae9d569c2161d54df7322cef4217eba91e590e216cd4bfb2e1404dd243ec4db6aac705cf00746faa6f8277943e83d53f0effc1adeddacc5f4f4119695a176af988b58e1b8a5d9b6f64ae880d2e3025e970f943aeb57d5aa670bf14a4a6afc7bdd81af6f00905ae946a6d419965e187b8ab60fe2d26d8071abf8508fa78c28f12a7411664"}, @generic={0xfd, 0x10, 0x3, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x37, "d6f942853dfa4b3fd702c6243f10dba4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0xd, 0x1}, @ptm_cap={0x3}]}, 0x5, [{0x6a, &(0x7f0000000b80)=@string={0x6a, 0x3, "1802deabc6bf830800746bca9465869ff42ea55a82cf0e7e6d0dfc7eb408eb3cbbab4711e9231d5464ed068c852b7adab1a316a7f1d29606e196a09a7d433efbf8e07b224aacf8e80c19cd8ac95d134e9983f639088498739683d237f4455c43a91e3265add81628"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0xcce8}}, {0x89, &(0x7f0000000c80)=@string={0x89, 0x3, "4f24cbf745e533e1a37fb852ec1b89130dc639d4695da7dac87f82bde65365bf85c818940713554c7773e312c5cd33a192cd8b8317c32a7de5983701cf1b7f4ce1ca96d542c7909b709d6d93fb97c7b629be688d97e29994be319fb244529ef2ee9ec09f3f3601e4aa480f6688ded3dbf3b0fd871105af404fc5eac17308fc43e715f5e5383352"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x410}}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000e00), 0x84e4e22c059e5c3b, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x61, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x7, 0x80, 0xea, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "e83f364d"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0xf801, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x200, 0x81}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x0, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xff, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x81, 0x8}}}}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x110, 0x35, 0x5, 0xd, 0x8, 0xbe}, 0x2f, &(0x7f0000000f00)={0x5, 0xf, 0x2f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x52, 0x4c, 0x9, 0x1, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x90, 0x16}, @wireless={0xb, 0x10, 0x1, 0x4, 0x150, 0x9, 0xa, 0x4, 0x10}]}, 0x4, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x427}}, {0x4b, &(0x7f0000000f80)=@string={0x4b, 0x3, "55507e758a4a18fef83beabe0f0ce6db9d6e2057ed851b37aaf69053eac86565a56a639e2f490461db60a96d5b804465abfc88df12494b6d37062b66bb2b9d075204ff53d213af2d45"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x804}}, {0x34, &(0x7f0000001040)=@string={0x34, 0x3, "28aa427d7d8ae6b4c0319fbeb1de857738413abaf1378d22b80a9fe3adbabe1e4476b7de996980b43915bbe09fd9e759bef8"}}]}) (async) r12 = syz_usb_connect$cdc_ecm(0x2, 0x61, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x7, 0x80, 0xea, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "e83f364d"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0xf801, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x200, 0x81}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x0, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xff, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x81, 0x8}}}}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x110, 0x35, 0x5, 0xd, 0x8, 0xbe}, 0x2f, &(0x7f0000000f00)={0x5, 0xf, 0x2f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x52, 0x4c, 0x9, 0x1, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x90, 0x16}, @wireless={0xb, 0x10, 0x1, 0x4, 0x150, 0x9, 0xa, 0x4, 0x10}]}, 0x4, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x427}}, {0x4b, &(0x7f0000000f80)=@string={0x4b, 0x3, "55507e758a4a18fef83beabe0f0ce6db9d6e2057ed851b37aaf69053eac86565a56a639e2f490461db60a96d5b804465abfc88df12494b6d37062b66bb2b9d075204ff53d213af2d45"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x804}}, {0x34, &(0x7f0000001040)=@string={0x34, 0x3, "28aa427d7d8ae6b4c0319fbeb1de857738413abaf1378d22b80a9fe3adbabe1e4476b7de996980b43915bbe09fd9e759bef8"}}]}) syz_usb_control_io$cdc_ecm(r12, &(0x7f00000011c0)={0x14, &(0x7f0000001100)={0x20, 0x0, 0x76, {0x76, 0x10, "b1b4277609e5f6eae5b7f16e1dcb7c892e31bde012f2c1b02ec87f3825167536e343bfe352dc9cb96026022e000093ab20275633185a705f8d53d121b86c4b790f1f737541fdaab6ba3342d7943c3a3a8b8cec49b033e83a88589476cfba3696f942c55973b65e10d13bc14cf21ea0f27b00b162"}}, &(0x7f0000001180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001300)={0x1c, &(0x7f0000001200)={0x20, 0x16, 0x41, "58d7b5e956711e4897adeb3cf70e20a86f0461aa3ae47ecb7e66ec89f7134f8b4028e3cbddcb2fd98df7d7faa490b78841d1962bbf752bce0a8883e72f9fcb0e56"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x22}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x2}}) setxattr$system_posix_acl(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)='system.posix_acl_access\x00', &(0x7f0000001500)={{}, {0x1, 0x4}, [{0x2, 0x2, r2}, {0x2, 0x0, r2}], {0x4, 0x2}, [{0x8, 0x2}], {0x10, 0x6}, {0x20, 0x1}}, 0x3c, 0x3) 34.115758834s ago: executing program 6 (id=4744): r0 = syz_socket_connect_nvme_tcp() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f0000000240)='vfat\x00', 0x2204080, 0x0) 34.085378844s ago: executing program 6 (id=4745): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, 0xfffffffffffffffe) sendto$inet(r3, &(0x7f0000000040)="384f4ba613e624ebf132255f5a03204f8e0b", 0x6, 0x80, &(0x7f0000000080)={0x2, 0x4e2a, @multicast1=0xe000006a}, 0x10) sendfile(r2, r2, 0x0, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000100)={0x1, 0x0, [{}]}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fcf000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x30, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) r11 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4, 0x0, 0x0, 0x18, 0x40, 0x15, 0x4d}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1f) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 33.769395679s ago: executing program 8 (id=4746): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@uuid_auto}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000000)=0x3) 33.660880811s ago: executing program 8 (id=4747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="9d0f01bf020066b8010000000f01c16766c7442400110000006766c74424026f0000006766c744240600000000670f011c242e660fc736000064f30f300faa0f019af1000f3566b8010000000f01d9", 0x4f}], 0x1, 0x49, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r3, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee81") write$P9_RVERSION(r5, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="006bbf91af996a4f73d96524a9ee42c5992b"]) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r9, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) creat(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.427369824s ago: executing program 8 (id=4748): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='zonefs\x00', 0x200000, 0x0) 33.266010157s ago: executing program 8 (id=4749): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)={0x24, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x10, 0xd7, 0x0, 0x1, [@nested={0xc, 0xbe, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x4008000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='autogroup\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 33.153878699s ago: executing program 6 (id=4750): r0 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futex(0x0, 0xb, 0x2, 0x0, &(0x7f0000006340)=0x2, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan1\x00', 0x4000}) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2], 0x1}, 0x58) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x200000, 0x0) 33.06561312s ago: executing program 8 (id=4751): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) sendfile(r1, r4, &(0x7f0000000140)=0x8000000000000000, 0x8001) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 32.917745773s ago: executing program 6 (id=4752): r0 = socket(0x10, 0xa, 0x0) write(r0, &(0x7f0000000040), 0x0) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000100)={'veth0_vlan\x00', 0x3e}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000140)={0xa, "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"}) 32.915169713s ago: executing program 6 (id=4753): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x16, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) r2 = socket(0x11, 0xa, 0xffffffd) getpeername$packet(r2, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000000c0)) setns(r1, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r3 = syz_open_procfs(r0, &(0x7f00000001c0)='net/tcp6\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) renameat(0xffffffffffffff9c, 0x0, r3, &(0x7f0000000000)='./file1\x00') mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) rt_sigqueueinfo(0x0, 0x16, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) (async) getpid() (async) syz_pidfd_open(r0, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) (async) socket(0x11, 0xa, 0xffffffd) (async) getpeername$packet(r2, 0x0, 0x0) (async) syz_open_procfs$userns(r0, &(0x7f00000000c0)) (async) setns(r1, 0x24020000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') (async) syz_open_procfs(r0, &(0x7f00000001c0)='net/tcp6\x00') (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) renameat(0xffffffffffffff9c, 0x0, r3, &(0x7f0000000000)='./file1\x00') (async) 32.893116823s ago: executing program 6 (id=4754): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchmodat(r4, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) accept4$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x80000) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 31.380921616s ago: executing program 7 (id=4757): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xfffde000) r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r1) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x36, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = pidfd_getfd(r1, r2, 0x0) close_range(r0, r3, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 31.376769667s ago: executing program 7 (id=4758): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdf3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c5342, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="e8000000000101040000000000000000020000002400018014000180080001004eb6098823a2227ee000000108000200ac"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0ae92920", @ANYRES16=r1, @ANYBLOB="e60f177133cdc96bed01d5b3952e6d98", @ANYRES64=r3, @ANYBLOB="0c001a804800030001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket(0x10, 0x3, 0xfffffffc) write(r4, &(0x7f0000000280)="aefc00801a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71f76936ede498534108e58342fa94a235a2a441f9", 0xbc1b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() syz_usb_connect(0x3, 0x51, &(0x7f00000029c0)=ANY=[@ANYBLOB="12010003e5c22420bb0430095dcb0102030109023f000200f8400109042480008b5c0d040904810603ffffff0209240202060062000409050200200008070109050c0340000108e409050a08000401d846"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0xff, 0xa}, 0x2f, &(0x7f0000000040)=ANY=[@ANYBLOB="050f2f00030b10010c40000b08010003141004088471a1cc6feb1534b2e18db7304cb1570b10010432000f076a1c0e"], 0x1, [{0x7, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']}]}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) syz_pidfd_open(r5, 0x0) ioprio_set$pid(0x0, 0x0, 0x4000) syz_clone(0x692a0880, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() r8 = getpid() rt_tgsigqueueinfo(r8, r7, 0x3a, &(0x7f0000000000)={0x3e, 0xfffffffd, 0x3}) r9 = gettid() r10 = getpid() rt_tgsigqueueinfo(r10, r9, 0x5, &(0x7f0000000340)={0x2, 0xca84}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) 30.867971825s ago: executing program 7 (id=4759): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0xffffffff, 0xffffffff, 0x7, 0x2bcd}) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 30.854250485s ago: executing program 7 (id=4760): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) rt_sigtimedwait(&(0x7f0000000440)={[0x40]}, 0x0, 0xfffffffffffffffe, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475411f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1", 0x1001}], 0x1) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) close(r1) pread64(0xffffffffffffffff, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006491e0089", 0xd, 0x4008000, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") tkill(r6, 0xf) syz_open_dev$usbmon(&(0x7f0000000540), 0x3179d5ea, 0x163d01) syz_open_dev$usbmon(0x0, 0x0, 0x4582) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x8000, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x20005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x40008, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x11, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xffffffff, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000e, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x2, 0x8, 0x6, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x1ff, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0xdace, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x5, 0x938, 0x6, 0x6, 0x1ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x7, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x21, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) 30.781591746s ago: executing program 7 (id=4761): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_create1(0x0) (async) epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x7fff, 0xb, 0xfff, 0x3ff, 0xa7}}, 0x120) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="84", 0x1}, {&(0x7f0000000180)="ca701a", 0x3}], 0x2}}], 0x1, 0x4400c800) (async) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="84", 0x1}, {&(0x7f0000000180)="ca701a", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f00000003c0)="0600009eda", 0x39, 0x24001340, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x2108c0, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x2108c0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 30.780908786s ago: executing program 7 (id=4762): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/vlan/vlan1\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}]}}) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10b942, 0x81) sendfile(r5, r1, 0x0, 0x80000000) unshare(0x20000000) 21.822113577s ago: executing program 38 (id=4681): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffffffffc) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe, 0x0, 0x0, '\x00', 0x400000000000008}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 16.622948769s ago: executing program 39 (id=4754): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchmodat(r4, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) accept4$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x80000) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 11.642042707s ago: executing program 40 (id=4751): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) sendfile(r1, r4, &(0x7f0000000140)=0x8000000000000000, 0x8001) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="380100000000808101acfb38005227ed3fcb91f1064674bde10cd1038866158ea320104a1e257009f5747e6ca14748e234c93f21bc1b410533f2f26f3ddb8ed836fedfa4912b1fbcbad211ae9491217c339ded7b69c3eeb6896e40b85a5a72156edb1c0a41c11e44a5c709207e456523f3179b2838dc0b827ac5b8d834f7f6a7c57e3dc3be1a211dd03015359cb771e196378a5bcf881a136c56e0051b1f3f68346ecd7575dedf42964bb06f1eddd78a1467d0ff030c553f7f3000926bdc0af84c6f0e90f9d53ae76b12edf98d3ffb17833426aac8ff00b4da19f347be63d94e7eb546419566e5bce656d74eb9dd7e5418c18b9125bdc2c537da2c8f61e2a7b433fb6e86f6b0abd1118c4558c0fc71900d7e64ecf2badd365d2e8683d307a7ff71b4aac956394be0dd2a7860b009865679c3f2f20e6a5dec"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 0s ago: executing program 41 (id=4762): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/vlan/vlan1\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}]}}) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10b942, 0x81) sendfile(r5, r1, 0x0, 0x80000000) unshare(0x20000000) kernel console output (not intermixed with test programs): 00 audit(1753077684.494:727): avc: denied { mounton } for pid=10355 comm="syz.3.3082" path="/33/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 199.667788][ T36] audit: type=1400 audit(1753077684.514:728): avc: denied { remount } for pid=10355 comm="syz.3.3082" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 199.690431][T10352] overlayfs: failed to clone upperpath [ 200.014550][ T305] bridge_slave_1: left allmulticast mode [ 200.024024][ T305] bridge_slave_1: left promiscuous mode [ 200.030080][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.037870][ T305] bridge_slave_0: left allmulticast mode [ 200.043753][ T305] bridge_slave_0: left promiscuous mode [ 200.049562][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.190063][ T305] veth1_macvtap: left promiscuous mode [ 200.202350][ T305] veth0_vlan: left promiscuous mode [ 200.443019][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.460235][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.472403][T10371] bridge_slave_0: entered allmulticast mode [ 200.478973][T10371] bridge_slave_0: entered promiscuous mode [ 200.491369][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.498954][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.513033][T10371] bridge_slave_1: entered allmulticast mode [ 200.525785][T10371] bridge_slave_1: entered promiscuous mode [ 200.681652][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.688774][T10371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.696116][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.703186][T10371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.732753][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.740437][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.754992][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.762101][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.789525][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.796665][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.881595][T10371] veth0_vlan: entered promiscuous mode [ 200.898738][T10371] veth1_macvtap: entered promiscuous mode [ 201.023843][T10392] fuse: Unknown parameter '§©p<0x0000000000000005' [ 201.193706][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 201.362157][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 201.368453][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.378630][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.389212][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.398643][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.406704][ T10] usb 7-1: Product: syz [ 201.410933][ T10] usb 7-1: Manufacturer: syz [ 201.415571][ T10] usb 7-1: SerialNumber: syz [ 201.533784][T10432] fuse: Bad value for 'fd' [ 201.995384][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 201.995401][ T36] audit: type=1400 audit(1753077686.844:730): avc: denied { create } for pid=10436 comm="syz.2.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 202.068136][ T36] audit: type=1400 audit(1753077686.914:731): avc: denied { shutdown } for pid=10449 comm="syz.1.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.156986][T10457] sit0: entered promiscuous mode [ 202.172836][T10457] netlink: 'syz.6.3114': attribute type 1 has an invalid length. [ 202.180981][T10457] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3114'. [ 202.285772][T10457] kvm: kvm [10456]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000008) = 0x0 [ 202.380653][T10462] rust_binder: Write failure EFAULT in pid:135 [ 202.517219][ T3429] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 202.575737][ T3429] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.197769][ T36] audit: type=1400 audit(1753077688.044:732): avc: denied { create } for pid=10486 comm="syz.3.3123" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 203.236509][ T36] audit: type=1400 audit(1753077688.044:733): avc: denied { append } for pid=10486 comm="syz.3.3123" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.502085][ T311] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 203.653229][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.664497][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.677710][ T311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.687079][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.696154][ T311] usb 4-1: config 0 descriptor?? [ 203.947944][T10539] 9pnet_fd: Insufficient options for proto=fd [ 203.971160][T10541] x_tables: duplicate underflow at hook 2 [ 204.079540][ T36] audit: type=1400 audit(1753077688.924:734): avc: denied { create } for pid=10555 comm="syz.6.3147" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 204.104693][ T311] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 204.125739][ T311] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 204.273536][T10576] sock: sock_set_timeout: `syz.6.3152' (pid 10576) tries to set negative timeout [ 204.379321][ T36] audit: type=1400 audit(1753077689.224:735): avc: denied { lock } for pid=10577 comm="syz.2.3153" path="socket:[56077]" dev="sockfs" ino=56077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 204.457275][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3152'. [ 204.519776][ T36] audit: type=1326 audit(1753077689.364:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10591 comm="syz.1.3157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05e4d8e9a9 code=0x0 [ 204.716726][T10595] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 204.717150][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.740063][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.751003][ T36] audit: type=1400 audit(1753077689.594:737): avc: denied { create } for pid=10597 comm="syz.6.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 204.828527][ T36] audit: type=1326 audit(1753077689.674:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.6.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621118e9a9 code=0x7fc00000 [ 205.105897][ T36] audit: type=1400 audit(1753077689.954:739): avc: denied { append } for pid=10619 comm="syz.6.3165" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.157216][T10624] /dev/rnullb0: Can't open blockdev [ 205.230753][T10629] rust_binder: 10626 RLIMIT_NICE not set [ 205.264278][T10639] fuse: Bad value for 'fd' [ 205.323450][T10649] netlink: 'syz.2.3176': attribute type 25 has an invalid length. [ 205.366534][T10651] overlayfs: failed to resolve './bus': -2 [ 205.437125][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.446093][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.855407][T10668] 9pnet_fd: Insufficient options for proto=fd [ 205.944212][T10682] fuse: Bad value for 'fd' [ 205.976871][T10687] loop7: detected capacity change from 0 to 7 [ 205.985378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.994584][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.002558][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.011775][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.019688][ T6084] loop7: unable to read partition table [ 206.032817][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 206.043089][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.052309][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.052543][T10693] proc: Unknown parameter ' ' [ 206.061001][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.068395][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.074111][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.075151][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.091945][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.099605][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.115403][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.124612][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.132759][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.142076][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.251833][ T311] usb 4-1: USB disconnect, device number 20 [ 206.387768][T10711] rust_binder: 10711: no such ref 2 [ 206.394361][T10711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 206.474772][ T10] usb 7-1: 0:2 : does not exist [ 206.495589][ T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 206.653387][T10730] rust_binder: Write failure EFAULT in pid:77 [ 206.808702][T10734] 9pnet_fd: Insufficient options for proto=fd [ 206.854541][T10737] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3208'. [ 207.033284][T10760] overlayfs: failed to clone upperpath [ 207.086343][T10768] tipc: Enabling of bearer rejected, media not registered [ 207.185153][T10779] overlayfs: disabling nfs_export due to verity=require [ 207.204802][T10779] overlayfs: missing 'lowerdir' [ 207.325064][T10788] binder: Unknown parameter 'defcontext01777777777777777777777' [ 207.349097][T10791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.350276][T10791] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 207.364272][T10792] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 207.371385][T10792] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 207.378513][T10791] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 207.502401][T10796] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 207.560172][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.569650][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.043823][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 208.043843][ T36] audit: type=1400 audit(1753077692.889:778): avc: denied { shutdown } for pid=10815 comm="syz.1.3237" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.050833][T10816] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3237'. [ 208.083997][T10816] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3237'. [ 208.092963][T10816] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 208.192290][T10824] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.234977][T10824] incfs: iterate_incfs_dir / -22 [ 208.247179][T10824] rust_binder: Error in use_page_slow: ESRCH [ 208.247197][T10824] rust_binder: use_range failure ESRCH [ 208.253252][T10824] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 208.258740][T10824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 208.266495][T10824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:163 [ 208.281805][ T36] audit: type=1400 audit(1753077693.119:779): avc: denied { unlink } for pid=9745 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.356953][ T5497] bridge_slave_1: left allmulticast mode [ 208.362749][ T5497] bridge_slave_1: left promiscuous mode [ 208.368410][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.376196][ T5497] bridge_slave_0: left allmulticast mode [ 208.381846][ T5497] bridge_slave_0: left promiscuous mode [ 208.387647][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.539292][T10829] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.546581][T10829] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.554050][T10829] bridge_slave_0: entered allmulticast mode [ 208.560444][T10829] bridge_slave_0: entered promiscuous mode [ 208.568120][ T5497] veth1_macvtap: left promiscuous mode [ 208.573802][ T5497] veth0_vlan: left promiscuous mode [ 208.619860][T10829] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.627019][T10829] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.634414][T10829] bridge_slave_1: entered allmulticast mode [ 208.641025][T10829] bridge_slave_1: entered promiscuous mode [ 208.757098][T10829] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.764234][T10829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.771586][T10829] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.778674][T10829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.841072][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.848552][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.863894][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.871017][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.885588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.892699][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.933612][T10829] veth0_vlan: entered promiscuous mode [ 208.955782][T10829] veth1_macvtap: entered promiscuous mode [ 209.022882][T10864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=10864 comm=syz.6.3253 [ 209.134047][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3257'. [ 209.792134][ T311] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 209.942111][ T311] usb 8-1: Using ep0 maxpacket: 8 [ 209.948942][ T311] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 209.957728][ T311] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 209.967886][ T311] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.978368][ T311] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.987473][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.995529][ T311] usb 8-1: Product: à°š [ 209.999707][ T311] usb 8-1: Manufacturer: 쬀喚Ù줋밡塼왉铈곊é¯ìƒ¨åŒ¡ã‰©å¯ˆá¯‚弧裺须ﱵ닇 [ 210.010005][ T311] usb 8-1: SerialNumber: 爛핪ꣲ⾼ꠀ漩鿱骛鋪멧ì€ã‚‘鎕¾ⵟ섰椳➺ä†â¾Ÿéªªç”£á¯¿ë»¨å ¬â¥‚å¹ãŽ¯ç…‰î²ƒê¥„㞪 [ 210.226404][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.244517][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.279739][ T311] usb 8-1: 0:2 : does not exist [ 210.328511][ T311] usb 8-1: USB disconnect, device number 2 [ 210.380693][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 210.802084][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 210.962184][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 210.968667][ T10] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 210.977144][ T10] usb 8-1: config 0 has no interface number 0 [ 210.989652][ T10] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.008324][ T36] audit: type=1326 audit(1753077695.836:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e4d8e9a9 code=0x7fc00000 [ 211.052753][ T10] usb 8-1: config 0 interface 85 has no altsetting 0 [ 211.060070][T10977] 9pnet_fd: Insufficient options for proto=fd [ 211.067283][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 211.078954][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.087871][ T10] usb 8-1: Product: syz [ 211.092458][ T10] usb 8-1: Manufacturer: syz [ 211.097100][ T10] usb 8-1: SerialNumber: syz [ 211.106865][ T10] usb 8-1: config 0 descriptor?? [ 211.514369][T10953] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 211.514692][ T10] usb 8-1: USB disconnect, device number 3 [ 211.640286][T11006] overlayfs: failed to clone upperpath [ 211.788469][ T36] audit: type=1400 audit(1753077696.636:781): avc: denied { bind } for pid=11018 comm="syz.1.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.114294][T11044] rust_binder: 11042 RLIMIT_NICE not set [ 212.114672][T11042] rust_binder: Write failure EINVAL in pid:16 [ 212.274690][ T36] audit: type=1400 audit(1753077697.126:782): avc: denied { create } for pid=11057 comm="syz.2.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 212.472536][ T471] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 212.489934][T11064] netlink: 'syz.6.3322': attribute type 1 has an invalid length. [ 212.529818][T11074] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3325'. [ 212.578388][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3327'. [ 212.623119][ T471] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 212.632975][ T471] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 212.645196][ T471] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.654345][ T471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.662675][ T471] usb 8-1: Product: syz [ 212.666898][ T471] usb 8-1: Manufacturer: syz [ 212.671559][ T471] usb 8-1: SerialNumber: syz [ 212.677526][ T471] usb 8-1: config 0 descriptor?? [ 212.893270][T11055] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 212.921670][ T471] usb 8-1: USB disconnect, device number 4 [ 212.935629][ T6082] udevd[6082]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 213.000721][ T36] audit: type=1400 audit(1753077697.846:783): avc: denied { mounton } for pid=11116 comm="syz.1.3338" path="/file0" dev="ramfs" ino=58830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 213.273823][T11147] binder: Unknown parameter 'obj_type' [ 213.376832][ T36] audit: type=1326 audit(1753077698.226:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.3354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd25638e9a9 code=0x0 [ 213.458396][T11170] overlayfs: failed to clone upperpath [ 213.476483][T11173] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3360'. [ 213.974480][T11204] incfs: Options parsing error. -22 [ 213.979816][T11204] incfs: mount failed -22 [ 213.998741][T11206] fuse: Invalid rootmode [ 214.014094][T11208] netlink: 'syz.1.3371': attribute type 16 has an invalid length. [ 214.014094][T11209] netlink: 'syz.1.3371': attribute type 3 has an invalid length. [ 214.014116][T11209] netlink: 'syz.1.3371': attribute type 1 has an invalid length. [ 214.022148][T11208] netlink: 'syz.1.3371': attribute type 3 has an invalid length. [ 214.029749][T11209] netlink: 64030 bytes leftover after parsing attributes in process `syz.1.3371'. [ 214.039344][T11208] netlink: 'syz.1.3371': attribute type 1 has an invalid length. [ 214.062368][T11208] netlink: 64030 bytes leftover after parsing attributes in process `syz.1.3371'. [ 214.356722][T11223] rust_binder: 11222 RLIMIT_NICE not set [ 214.357695][T11224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.542259][T11236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 214.756677][T11262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3388'. [ 214.787246][T11264] overlayfs: failed to clone upperpath [ 214.852119][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 214.923900][T11267] 9pnet_fd: Insufficient options for proto=fd [ 214.982081][ T10] usb 8-1: device descriptor read/64, error -71 [ 215.222072][ T10] usb 8-1: device descriptor read/64, error -71 [ 215.462077][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 215.592126][ T10] usb 8-1: device descriptor read/64, error -71 [ 215.842090][ T10] usb 8-1: device descriptor read/64, error -71 [ 215.952195][ T10] usb usb8-port1: attempt power cycle [ 216.292084][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 216.313588][ T10] usb 8-1: device descriptor read/8, error -71 [ 216.398737][T11293] cgroup: Invalid name [ 216.444168][ T10] usb 8-1: device descriptor read/8, error -71 [ 216.682114][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 216.713269][ T10] usb 8-1: device descriptor read/8, error -71 [ 216.843129][ T10] usb 8-1: device descriptor read/8, error -71 [ 216.952210][ T10] usb usb8-port1: unable to enumerate USB device [ 218.012102][ T31] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 218.162071][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 218.168452][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.178655][ T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.188953][ T31] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.198062][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.206105][ T31] usb 8-1: Product: syz [ 218.210276][ T31] usb 8-1: Manufacturer: syz [ 218.214935][ T31] usb 8-1: SerialNumber: syz [ 218.421912][ T31] usb 8-1: 0:2 : does not exist [ 218.431351][ T31] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 218.446154][ T31] usb 8-1: USB disconnect, device number 9 [ 218.460360][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 218.493124][T11345] 9pnet_fd: Insufficient options for proto=fd [ 218.804724][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3423'. [ 219.172116][ T471] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 219.302110][ T471] usb 8-1: device descriptor read/64, error -71 [ 219.542140][ T471] usb 8-1: device descriptor read/64, error -71 [ 219.753101][T11387] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3432'. [ 219.763059][ T36] audit: type=1326 audit(1753077704.616:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.3432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05e4d8e9a9 code=0x0 [ 219.782134][ T471] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 219.922085][ T471] usb 8-1: device descriptor read/64, error -71 [ 220.172132][ T471] usb 8-1: device descriptor read/64, error -71 [ 220.282282][ T471] usb usb8-port1: attempt power cycle [ 220.301411][T11402] netlink: 'syz.6.3437': attribute type 11 has an invalid length. [ 220.622140][ T471] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 220.643137][ T471] usb 8-1: device descriptor read/8, error -71 [ 220.716882][ T36] audit: type=1400 audit(1753077705.566:786): avc: denied { accept } for pid=11428 comm="syz.1.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 220.773209][ T471] usb 8-1: device descriptor read/8, error -71 [ 220.778032][T11435] fuse: Bad value for 'rootmode' [ 220.785191][T11435] netlink: 'syz.1.3450': attribute type 13 has an invalid length. [ 220.951691][T11465] overlayfs: failed to clone upperpath [ 220.957768][T11464] overlayfs: failed to clone upperpath [ 221.012120][ T471] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 221.033232][ T36] audit: type=1400 audit(1753077705.886:787): avc: denied { ioctl } for pid=11478 comm="syz.6.3465" path="socket:[59328]" dev="sockfs" ino=59328 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.063107][ T471] usb 8-1: device descriptor read/8, error -71 [ 221.193058][ T471] usb 8-1: device descriptor read/8, error -71 [ 221.302309][ T471] usb usb8-port1: unable to enumerate USB device [ 221.661173][T11518] netlink: 'syz.6.3479': attribute type 11 has an invalid length. [ 221.669087][T11518] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3479'. [ 221.691024][T11524] overlayfs: failed to clone upperpath [ 221.697126][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3480'. [ 221.957009][T11554] netlink: 316 bytes leftover after parsing attributes in process `syz.7.3489'. [ 222.020660][T11555] overlayfs: maximum fs stacking depth exceeded [ 222.027512][T11555] netlink: 316 bytes leftover after parsing attributes in process `syz.7.3489'. [ 222.586091][ T36] audit: type=1326 audit(1753077707.436:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.1.3490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05e4d8e9a9 code=0x0 [ 222.686131][T11570] overlayfs: missing 'lowerdir' [ 222.703781][T11572] netlink: 'syz.1.3496': attribute type 4 has an invalid length. [ 222.802515][ T36] audit: type=1400 audit(1753077707.656:789): avc: denied { read write } for pid=11575 comm="syz.7.3498" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.826304][ T36] audit: type=1400 audit(1753077707.656:790): avc: denied { open } for pid=11575 comm="syz.7.3498" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.858794][ T36] audit: type=1400 audit(1753077707.656:791): avc: denied { map } for pid=11575 comm="syz.7.3498" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.172078][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 223.322071][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 223.328283][ T10] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 223.336514][ T10] usb 8-1: config 0 has no interface number 0 [ 223.343980][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 223.353581][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.361682][ T10] usb 8-1: Product: syz [ 223.365919][ T10] usb 8-1: Manufacturer: syz [ 223.370524][ T10] usb 8-1: SerialNumber: syz [ 223.375997][ T10] usb 8-1: config 0 descriptor?? [ 223.586720][ T10] usb 8-1: USB disconnect, device number 14 [ 224.102275][T11610] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 224.538709][T11619] overlayfs: failed to clone upperpath [ 224.582103][ T522] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 224.734057][ T522] usb 8-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 224.752068][ T522] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.771183][ T522] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 224.782330][ T522] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 224.803556][ T522] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.812777][ T522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.820796][ T522] usb 8-1: Product: syz [ 224.832072][ T522] usb 8-1: Manufacturer: Р [ 224.836696][ T522] usb 8-1: SerialNumber: syz [ 225.022895][T11638] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11638 comm=syz.6.3518 [ 225.140316][T11660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3526'. [ 225.256385][T11617] __vm_enough_memory: pid: 11617, comm: syz.7.3511, bytes: 1152922604118523904 not enough memory for the allocation [ 225.874668][ T522] usb 8-1: 0:2 : does not exist [ 225.896769][ T522] usb 8-1: USB disconnect, device number 15 [ 225.898055][T11684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.935609][T11696] binder: Unknown parameter 'contextÀ' [ 225.983078][ T471] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.012199][ T471] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.119051][T11718] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3543'. [ 226.298189][T11736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 226.380691][T11742] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 226.481934][ T36] audit: type=1400 audit(1753077711.326:792): avc: denied { ioctl } for pid=11752 comm="syz.7.3552" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.695817][T11757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.714585][T11757] rust_binder: Error while translating object. [ 226.721205][T11757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 226.727565][T11757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:100 [ 226.932819][ T36] audit: type=1400 audit(1753077711.786:793): avc: denied { getopt } for pid=11764 comm="syz.6.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 226.962246][ T36] audit: type=1400 audit(1753077711.786:794): avc: denied { setattr } for pid=11764 comm="syz.6.3557" name="NETLINK" dev="sockfs" ino=61030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 226.992075][ T3429] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 227.037796][ T36] audit: type=1400 audit(1753077711.886:795): avc: denied { audit_write } for pid=11780 comm="syz.6.3562" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 227.059076][ T36] audit: type=1107 audit(1753077711.886:796): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 227.142076][ T3429] usb 8-1: Using ep0 maxpacket: 32 [ 227.148353][ T3429] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.156601][ T3429] usb 8-1: config 0 has no interface number 0 [ 227.164578][ T3429] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.174591][ T3429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.182693][ T3429] usb 8-1: Product: syz [ 227.186935][ T3429] usb 8-1: Manufacturer: syz [ 227.191529][ T3429] usb 8-1: SerialNumber: syz [ 227.197037][ T3429] usb 8-1: config 0 descriptor?? [ 227.202895][ T3429] smsc95xx v2.0.0 [ 227.219833][T11811] overlayfs: failed to clone upperpath [ 227.964039][T11813] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3571'. [ 227.991640][T11815] overlayfs: failed to clone lowerpath [ 228.005259][ T3429] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 228.016091][ T3429] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.046989][T11819] overlayfs: failed to clone upperpath [ 228.172513][T11842] overlayfs: failed to clone upperpath [ 228.289696][ T36] audit: type=1400 audit(1753077713.136:797): avc: denied { sys_module } for pid=11865 comm="syz.1.3590" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 228.408602][ T3429] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 228.419419][ T3429] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 228.428542][ T3429] usb 8-1: USB disconnect, device number 16 [ 229.212076][ T10] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 229.373170][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 229.381863][ T10] usb 8-1: config 3 has an invalid interface number: 212 but max is 2 [ 229.390383][ T10] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 229.399344][ T10] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 229.408235][ T10] usb 8-1: config 3 has an invalid interface number: 134 but max is 2 [ 229.416652][ T10] usb 8-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 229.425598][ T10] usb 8-1: config 3 has an invalid interface number: 102 but max is 2 [ 229.434238][ T10] usb 8-1: config 3 has no interface number 0 [ 229.440404][ T10] usb 8-1: config 3 has no interface number 1 [ 229.446868][ T10] usb 8-1: config 3 has no interface number 2 [ 229.453226][ T10] usb 8-1: config 3 interface 212 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 229.464464][ T10] usb 8-1: config 3 interface 212 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 229.475748][ T10] usb 8-1: config 3 interface 212 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 229.487002][ T10] usb 8-1: config 3 interface 134 altsetting 147 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 229.498405][ T10] usb 8-1: config 3 interface 134 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 229.529936][ T10] usb 8-1: config 3 interface 134 altsetting 147 endpoint 0xB has invalid maxpacket 1032, setting to 64 [ 229.541345][ T10] usb 8-1: config 3 interface 134 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 229.552411][ T10] usb 8-1: config 3 interface 134 altsetting 147 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 229.564184][ T10] usb 8-1: config 3 interface 134 altsetting 147 has a duplicate endpoint with address 0xC, skipping [ 229.575228][ T10] usb 8-1: config 3 interface 134 altsetting 147 has a duplicate endpoint with address 0xB, skipping [ 229.586156][ T10] usb 8-1: config 3 interface 134 altsetting 147 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 229.600498][ T10] usb 8-1: config 3 interface 134 altsetting 147 has a duplicate endpoint with address 0xB, skipping [ 229.611922][ T10] usb 8-1: config 3 interface 134 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 229.620534][T11967] netlink: 'syz.6.3621': attribute type 20 has an invalid length. [ 229.623923][ T10] usb 8-1: config 3 interface 134 altsetting 147 has a duplicate endpoint with address 0x2, skipping [ 229.642016][ T36] audit: type=1400 audit(1753077714.476:798): avc: denied { create } for pid=11966 comm="syz.6.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 229.661565][ T10] usb 8-1: config 3 interface 102 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 229.672427][ T10] usb 8-1: config 3 interface 134 has no altsetting 0 [ 229.679235][ T10] usb 8-1: config 3 interface 102 has no altsetting 0 [ 229.688095][ T10] usb 8-1: Dual-Role OTG device on HNP port [ 229.694308][ T10] usb 8-1: New USB device found, idVendor=413c, idProduct=81b1, bcdDevice=86.1d [ 229.703411][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.711423][ T10] usb 8-1: Product: 맘帆齱í—癴ሟêºç‚™áª†ì®¨ì¡Šêƒ³ã…¦âµî§›ë“鞫魇왾橡㽠ãºì„ªå¢¬âŠ¬áŒ—낄䙚쪵èŒî œë†„ꋲ₫넩콆ã•Çžë†¼ç¸â¨ºî¾…軅拳㔠媸阭ꈴ닭뙃韋à¾ì½µí…™ÞŽÜˆí„¾éŒ”蜰訓ï¹î¶³è¥¸ê¡¬â®“ꥒì࿃ꡈ黈ㄿ햙å¤ì‰¹è—Šé¯®î¨†èž™ì‰¸ê°‰æ‘›â‹•æ¨‘ڗ튗䃜襥æ±á­ä³ êŒê¦µè ¤á¯á¨µ [ 229.740077][ T10] usb 8-1: Manufacturer: Ð [ 229.744641][ T10] usb 8-1: SerialNumber: 䙞㰂뇽⬵è±ïº€ê­Žë¡œæ”¢ëŒŒÖ§æ¶–鮤á½ã˜¦ëšì§¨âª‹ë–ªá™¹å·¬è§‹ê˜©åž»é›³åŽ²ì€“⺠哹瑰욆⧷ᗹ㑿찎器è㳈곇歉啞쿕ãŸÍ“勥㙢怦Ԟצּè½ïš´ã„‹ï¢½ïž€ï«¤ï„¯ [ 230.293728][T11978] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3625'. [ 230.450427][ T36] audit: type=1400 audit(1753077715.296:799): avc: denied { mounton } for pid=12011 comm="syz.6.3636" path="/175/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 230.450484][T12012] incfs: Options parsing error. -22 [ 230.478837][T12012] incfs: mount failed -22 [ 230.566822][T12026] overlayfs: missing 'lowerdir' [ 230.613612][T12032] overlayfs: failed to clone upperpath [ 230.735278][T12047] netlink: 'syz.1.3649': attribute type 3 has an invalid length. [ 230.735278][T12046] netlink: 'syz.1.3649': attribute type 16 has an invalid length. [ 230.735303][T12047] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 230.735316][T12047] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 230.743128][T12046] netlink: 'syz.1.3649': attribute type 3 has an invalid length. [ 230.751302][T12047] netlink: 'syz.1.3649': attribute type 2 has an invalid length. [ 230.758810][T12046] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 230.766652][T12047] netlink: 64006 bytes leftover after parsing attributes in process `syz.1.3649'. [ 230.774241][T12046] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 230.806737][T12046] netlink: 'syz.1.3649': attribute type 2 has an invalid length. [ 230.814772][T12046] netlink: 64006 bytes leftover after parsing attributes in process `syz.1.3649'. [ 232.006390][ T10] usb 8-1: USB disconnect, device number 17 [ 232.095084][T12113] /dev/rnullb0: Can't open blockdev [ 232.202176][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3675'. [ 232.582088][ T522] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 232.733118][ T522] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.743988][ T522] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 232.754984][ T522] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.769357][ T522] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 232.778476][ T522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.786516][ T522] usb 8-1: Product: syz [ 232.790691][ T522] usb 8-1: Manufacturer: syz [ 232.795358][ T522] usb 8-1: SerialNumber: syz [ 232.800615][ T522] usb 8-1: config 0 descriptor?? [ 232.805918][T12125] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 233.014585][T12125] netlink: 276 bytes leftover after parsing attributes in process `syz.7.3676'. [ 233.024159][ T10] usb 8-1: USB disconnect, device number 18 [ 233.583750][ T36] audit: type=1326 audit(1753077718.426:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.7.3685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d2918e9a9 code=0x0 [ 233.726436][T12150] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.735875][T12150] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.743288][T12150] bridge_slave_0: entered allmulticast mode [ 233.749941][T12150] bridge_slave_0: entered promiscuous mode [ 233.757157][T12150] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.764607][T12150] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.771806][T12150] bridge_slave_1: entered allmulticast mode [ 233.779772][T12150] bridge_slave_1: entered promiscuous mode [ 233.856631][T12150] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.863705][T12150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.870978][T12150] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.878059][T12150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.900317][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.907885][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.918577][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.925664][ T5497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.937144][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.944240][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.980523][T12150] veth0_vlan: entered promiscuous mode [ 233.995724][T12150] veth1_macvtap: entered promiscuous mode [ 234.148079][T12187] overlayfs: failed to clone upperpath [ 234.162773][ T36] audit: type=1400 audit(1753077719.016:801): avc: denied { nlmsg_read } for pid=12188 comm="syz.8.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 234.587786][ T36] audit: type=1400 audit(1753077719.436:802): avc: denied { mounton } for pid=12224 comm="syz.7.3705" path="/syzcgroup/unified/syz7" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 234.741427][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3709'. [ 234.808833][T12251] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.817736][T12251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.826775][T12253] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.837079][T12253] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.011692][T12274] fuse: Invalid gid '00000000000037777777777' [ 235.116007][ T36] audit: type=1400 audit(1753077719.966:803): avc: denied { ioctl } for pid=12288 comm="syz.8.3725" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 235.192092][ T3429] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 235.208112][T12297] 9pnet_fd: Insufficient options for proto=fd [ 235.352169][ T3429] usb 8-1: Using ep0 maxpacket: 16 [ 235.367498][ T3429] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.378389][ T3429] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.389143][ T3429] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.398428][ T3429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.406861][ T3429] usb 8-1: Product: syz [ 235.411385][ T3429] usb 8-1: Manufacturer: syz [ 235.416183][ T3429] usb 8-1: SerialNumber: syz [ 235.625277][ T3429] usb 8-1: 0:2 : does not exist [ 235.634347][ T3429] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 235.649059][ T3429] usb 8-1: USB disconnect, device number 19 [ 235.666415][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 235.892968][T12322] tipc: Started in network mode [ 235.903442][T12322] tipc: Node identity 2, cluster identity 2 [ 235.915611][T12322] tipc: Node number set to 2 [ 235.959950][T12325] overlayfs: failed to clone upperpath [ 235.972733][T12324] overlayfs: failed to clone upperpath [ 236.029025][T12328] overlayfs: failed to clone upperpath [ 236.514365][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3748'. [ 236.677546][T12380] /dev/rnullb0: Can't open blockdev [ 237.093695][ T36] audit: type=1400 audit(1753077721.946:804): avc: denied { unmount } for pid=12150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 237.387596][ T36] audit: type=1400 audit(1753077722.236:805): avc: denied { accept } for pid=12408 comm="syz.8.3762" path="socket:[63300]" dev="sockfs" ino=63300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.596784][ T36] audit: type=1400 audit(1753077722.446:806): avc: denied { write } for pid=3429 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63331 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.671808][T12438] SELinux: security_context_str_to_sid () failed with errno=-22 [ 237.744788][T12445] kvm: kvm [12444]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 237.753820][T12445] kvm: kvm [12444]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 237.787578][T12445] syzkaller0: entered promiscuous mode [ 237.793135][T12445] syzkaller0: entered allmulticast mode [ 238.047980][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.048011][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.054554][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.061065][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.067666][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.074265][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.080768][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.087313][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.093855][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.100354][T12456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.120327][T12460] overlay: ./bus is not a directory [ 238.162089][ T31] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 238.178340][T12466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 238.192299][T12470] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 238.201425][T12470] rust_binder: Read failure Err(EFAULT) in pid:82 [ 238.302511][ T31] usb 8-1: device descriptor read/64, error -71 [ 238.602084][ T31] usb 8-1: device descriptor read/64, error -71 [ 238.661156][T12479] kvm: pic: non byte write [ 238.685828][T12482] overlayfs: failed to clone upperpath [ 238.723875][T12490] overlayfs: missing 'lowerdir' [ 238.842177][ T31] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 238.972132][ T31] usb 8-1: device descriptor read/64, error -71 [ 239.212110][ T31] usb 8-1: device descriptor read/64, error -71 [ 239.322191][ T31] usb usb8-port1: attempt power cycle [ 239.665273][ T36] audit: type=1400 audit(1753077724.516:807): avc: denied { nlmsg_write } for pid=12523 comm="syz.1.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 239.672307][ T31] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 239.686383][ T36] audit: type=1107 audit(1753077724.516:808): pid=12523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 239.723128][ T31] usb 8-1: device descriptor read/8, error -71 [ 239.796415][T12541] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3802'. [ 239.829961][T12541] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3802'. [ 239.838878][T12541] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 239.950206][ T31] usb 8-1: device descriptor read/8, error -71 [ 239.980452][T12562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3808'. [ 240.192107][ T31] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 240.222761][ T31] usb 8-1: device descriptor read/8, error -71 [ 240.295503][T12603] 9pnet_fd: Insufficient options for proto=fd [ 240.317047][T12605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12605 comm=syz.1.3821 [ 240.327263][T12607] 9pnet_fd: Insufficient options for proto=fd [ 240.363110][ T31] usb 8-1: device descriptor read/8, error -71 [ 240.471891][T12631] overlayfs: failed to clone upperpath [ 240.477601][ T31] usb usb8-port1: unable to enumerate USB device [ 240.478704][T12631] futex_wake_op: syz.1.3831 tries to shift op by -1; fix this program [ 240.863415][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3832'. [ 240.986424][T12662] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 240.996549][ T36] audit: type=1400 audit(1753077725.846:809): avc: denied { relabelto } for pid=12661 comm="syz.6.3840" name="238" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 241.036390][ T36] audit: type=1400 audit(1753077725.876:810): avc: denied { associate } for pid=12661 comm="syz.6.3840" name="238" dev="tmpfs" ino=1342 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 241.064133][ T36] audit: type=1400 audit(1753077725.876:811): avc: denied { write } for pid=10371 comm="syz-executor" name="238" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 241.090808][ T36] audit: type=1400 audit(1753077725.876:812): avc: denied { remove_name } for pid=10371 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 241.122092][ T36] audit: type=1400 audit(1753077725.876:813): avc: denied { rmdir } for pid=10371 comm="syz-executor" name="238" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 241.344363][ T36] audit: type=1400 audit(1753077726.196:814): avc: denied { execute } for pid=12689 comm="syz.6.3848" path="pipe:[63879]" dev="pipefs" ino=63879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 241.502064][ T31] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 241.653140][ T31] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 241.661538][ T31] usb 8-1: config 1 has no interface number 0 [ 241.667939][ T31] usb 8-1: config 1 interface 105 has no altsetting 0 [ 241.676762][ T31] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 241.686159][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.695312][ T31] usb 8-1: Product: syz [ 241.700672][ T31] usb 8-1: Manufacturer: syz [ 241.705600][ T31] usb 8-1: SerialNumber: syz [ 241.791231][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3857'. [ 241.910080][ T36] audit: type=1400 audit(1753077726.756:815): avc: denied { bind } for pid=12734 comm="syz.8.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 241.935691][ T31] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 241.946916][ T31] usb 8-1: USB disconnect, device number 24 [ 242.065147][ T36] audit: type=1400 audit(1753077726.916:816): avc: denied { write } for pid=12742 comm="syz.8.3865" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.065210][T12743] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3865'. [ 242.486134][T12756] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3869'. [ 242.543092][T12762] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 242.552902][T12762] kvm: pic: non byte read [ 242.557618][T12762] kvm: pic: level sensitive irq not supported [ 242.557685][T12762] kvm: pic: non byte read [ 242.568398][T12762] kvm: pic: level sensitive irq not supported [ 242.568445][T12762] kvm: pic: non byte read [ 242.579321][T12762] kvm: pic: level sensitive irq not supported [ 242.579374][T12762] kvm: pic: non byte read [ 242.665965][T12766] fuse: Bad value for 'user_id' [ 242.668570][T12767] fuse: Bad value for 'user_id' [ 242.671289][T12766] fuse: Bad value for 'user_id' [ 242.681086][T12767] fuse: Bad value for 'user_id' [ 242.722341][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 242.872067][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 242.878925][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.889066][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.899360][ T31] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.908461][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.916492][ T31] usb 9-1: Product: ã°Š [ 242.920653][ T31] usb 9-1: Manufacturer: ÑŠ [ 242.925182][ T31] usb 9-1: SerialNumber: Ћ [ 243.082097][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 243.212087][ T10] usb 8-1: device descriptor read/64, error -71 [ 243.352149][T12757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 243.452114][ T10] usb 8-1: device descriptor read/64, error -71 [ 243.519799][T12794] overlayfs: failed to clone upperpath [ 243.626920][T12810] overlayfs: failed to clone upperpath [ 243.702089][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 243.832274][ T10] usb 8-1: device descriptor read/64, error -71 [ 243.856666][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3888'. [ 243.865728][T12816] sit0: entered promiscuous mode [ 243.870704][T12816] sit0: entered allmulticast mode [ 244.072109][ T10] usb 8-1: device descriptor read/64, error -71 [ 244.125914][T12821] cgroup: fork rejected by pids controller in /syz6 [ 244.182210][ T10] usb usb8-port1: attempt power cycle [ 244.562084][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 244.583131][ T10] usb 8-1: device descriptor read/8, error -71 [ 244.691389][T12873] sock: sock_set_timeout: `syz.1.3897' (pid 12873) tries to set negative timeout [ 244.713306][ T10] usb 8-1: device descriptor read/8, error -71 [ 244.952935][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 244.973113][ T10] usb 8-1: device descriptor read/8, error -71 [ 245.103187][ T10] usb 8-1: device descriptor read/8, error -71 [ 245.213479][ T10] usb usb8-port1: unable to enumerate USB device [ 245.475270][ T31] usb 9-1: 0:2 : does not exist [ 245.485316][ T31] usb 9-1: USB disconnect, device number 2 [ 245.496892][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 245.521953][T12919] fuse: Unknown parameter 'FÊ' [ 245.903738][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 245.903755][ T36] audit: type=1400 audit(1753077730.756:818): avc: denied { ioctl } for pid=12950 comm="syz.7.3923" path="pid:[4026532430]" dev="nsfs" ino=4026532430 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.934936][T12951] /dev/rnullb0: Can't open blockdev [ 245.940663][ T36] audit: type=1400 audit(1753077730.786:819): avc: denied { mounton } for pid=12950 comm="syz.7.3923" path="/syzcgroup/unified/syz7" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 245.996344][T12954] overlay: Unknown parameter 'obj_type' [ 246.397444][ T36] audit: type=1400 audit(1753077731.246:820): avc: denied { append } for pid=12979 comm="syz.7.3932" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.444116][ T36] audit: type=1400 audit(1753077731.296:821): avc: denied { add_name } for pid=12982 comm="syz.7.3933" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.452853][T12985] 9pnet_fd: Insufficient options for proto=fd [ 246.466410][T12983] overlayfs: upper fs does not support tmpfile. [ 246.477828][ T36] audit: type=1400 audit(1753077731.296:822): avc: denied { create } for pid=12982 comm="syz.7.3933" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 246.500317][ T36] audit: type=1400 audit(1753077731.296:823): avc: denied { associate } for pid=12982 comm="syz.7.3933" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 246.592987][T12995] overlayfs: failed to clone lowerpath [ 246.864737][T13012] overlay: ./file0 is not a directory [ 247.024274][T13019] overlayfs: failed to clone upperpath [ 247.058225][T13023] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 247.156503][T13027] syz.7.3949(13027): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 247.170384][ T36] audit: type=1400 audit(1753077732.016:824): avc: denied { mounton } for pid=13026 comm="syz.7.3949" path="/90/file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 247.619158][T13073] overlayfs: failed to clone upperpath [ 247.625847][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3966'. [ 247.655155][T13075] cgroup: none used incorrectly [ 247.825169][ T36] audit: type=1400 audit(1753077732.676:825): avc: denied { read } for pid=13093 comm="syz.6.3973" name="file0" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.868868][T13097] netlink: 'syz.1.3974': attribute type 4 has an invalid length. [ 247.884619][T13097] netlink: 'syz.1.3974': attribute type 5 has an invalid length. [ 247.893970][T13097] netlink: 'syz.1.3974': attribute type 1 has an invalid length. [ 248.082769][T13127] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.091593][T13127] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 248.099891][T13127] overlayfs: missing 'lowerdir' [ 248.643512][ T36] audit: type=1326 audit(1753077733.496:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.6.4004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621118e9a9 code=0x0 [ 248.784465][T13201] overlayfs: failed to clone upperpath [ 249.316732][T13227] overlayfs: failed to clone upperpath [ 249.343275][T13231] netlink: 4432 bytes leftover after parsing attributes in process `syz.6.4017'. [ 249.490074][T13267] devpts: called with bogus options [ 249.508719][T13271] syz.7.4031 (13271): attempted to duplicate a private mapping with mremap. This is not supported. [ 249.546807][T13273] netlink: 'syz.8.4029': attribute type 12 has an invalid length. [ 249.569411][T13277] overlay: Unknown parameter 'subj_type' [ 249.690455][T13296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=556 sclass=netlink_route_socket pid=13296 comm=syz.7.4039 [ 250.020488][ T36] audit: type=1400 audit(1753077734.866:827): avc: denied { mounton } for pid=13316 comm="syz.6.4048" path="/310/file0" dev="tmpfs" ino=1751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 250.884175][T13337] tipc: Enabling of bearer rejected, failed to enable media [ 250.984269][T13355] netlink: 'syz.7.4062': attribute type 5 has an invalid length. [ 251.008822][T13361] overlayfs: failed to clone upperpath [ 251.011350][ T36] audit: type=1326 audit(1753077735.856:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.042162][ T36] audit: type=1326 audit(1753077735.856:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.067968][ T36] audit: type=1326 audit(1753077735.856:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.093769][ T36] audit: type=1326 audit(1753077735.856:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.117211][ T36] audit: type=1326 audit(1753077735.856:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.140835][ T36] audit: type=1326 audit(1753077735.856:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.167102][ T36] audit: type=1326 audit(1753077735.856:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.191339][ T36] audit: type=1326 audit(1753077735.856:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.219915][ T36] audit: type=1326 audit(1753077735.856:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.245981][ T36] audit: type=1326 audit(1753077735.856:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f621118e9a9 code=0x7ffc0000 [ 251.312547][T13393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11037 sclass=netlink_route_socket pid=13393 comm=syz.6.4076 [ 251.334159][T13398] tipc: Started in network mode [ 251.339127][T13398] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 251.348293][T13398] tipc: Enabling of bearer rejected, failed to enable media [ 251.986209][T13453] overlayfs: failed to clone upperpath [ 252.070754][T13478] netlink: 'syz.6.4104': attribute type 6 has an invalid length. [ 252.560947][T13483] fuseblk: Unknown parameter 'rd' [ 252.600831][T13492] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4110'. [ 252.618029][T13492] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4110'. [ 252.627561][T13495] overlay: ./file0 is not a directory [ 252.631836][T13492] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 253.583753][T13556] fuse: Unknown parameter '00000000000000000000000ÿÿÿÿÿ00000000000000000000€' [ 253.792743][T13566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.799987][T13566] IPv6: NLM_F_CREATE should be set when creating new route [ 253.807248][T13566] IPv6: NLM_F_CREATE should be set when creating new route [ 254.332266][T13585] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4140'. [ 254.345585][T13585] netlink: 'syz.7.4140': attribute type 6 has an invalid length. [ 254.354543][T13585] netlink: 'syz.7.4140': attribute type 5 has an invalid length. [ 254.362740][T13585] netlink: 'syz.7.4140': attribute type 4 has an invalid length. [ 254.592381][T13621] overlayfs: failed to clone upperpath [ 255.128793][T13638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13638 comm=syz.8.4159 [ 255.148907][T13638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=13638 comm=syz.8.4159 [ 256.396096][T13696] veth1_vlan: mtu greater than device maximum [ 256.403459][T13698] veth1_vlan: mtu greater than device maximum [ 256.464067][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4183'. [ 257.314635][T13722] batadv_slave_0: mtu less than device minimum [ 257.357417][T13729] overlayfs: failed to clone upperpath [ 257.701499][T13772] tipc: Enabling of bearer rejected, failed to enable media [ 257.842260][T13796] netlink: 'syz.6.4215': attribute type 12 has an invalid length. [ 257.910477][T13810] tipc: Failed to remove unknown binding: 66,1,1/0:2608112297/2608112299 [ 257.920276][T13810] tipc: Failed to remove unknown binding: 66,1,1/0:2608112297/2608112299 [ 257.928806][T13810] tipc: Failed to remove unknown binding: 66,1,1/0:2608112297/2608112299 [ 258.131435][T13819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29819 sclass=netlink_route_socket pid=13819 comm=syz.8.4222 [ 258.667461][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4223'. [ 258.683554][T13825] binder: Unknown parameter 'ë' [ 258.707645][T13833] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4228'. [ 258.758341][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 258.758359][ T36] audit: type=1400 audit(1753077743.606:842): avc: denied { map } for pid=13841 comm="syz.7.4231" path="socket:[68854]" dev="sockfs" ino=68854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 258.822526][T13850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34398 sclass=netlink_route_socket pid=13850 comm=syz.8.4232 [ 258.862089][ T36] audit: type=1400 audit(1753077743.706:843): avc: denied { read } for pid=13848 comm="syz.7.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.280516][T13867] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4239'. [ 259.471096][ T36] audit: type=1326 audit(1753077744.316:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.7.4242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d2918e9a9 code=0x0 [ 259.667718][ T36] audit: type=1326 audit(1753077744.516:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.8.4247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbf6f8e9a9 code=0x0 [ 260.192160][T13902] 9pnet_virtio: no channels available for device syz [ 260.192600][T13901] 9pnet: Could not find request transport: xen [ 260.530091][T13975] 9pnet_fd: Insufficient options for proto=fd [ 260.572720][T13985] netlink: 'syz.8.4278': attribute type 28 has an invalid length. [ 260.955236][T14001] overlayfs: failed to resolve './file1': -2 [ 261.434281][T14052] 9pnet_fd: Insufficient options for proto=fd [ 261.438753][T14051] 9pnet_fd: Insufficient options for proto=fd [ 261.501121][T14067] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4304'. [ 261.510561][T14067] overlayfs: failed to resolve './file1': -2 [ 261.532977][T14069] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 262.000915][T14112] tipc: Started in network mode [ 262.006344][T14112] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 262.015473][T14112] tipc: Enabling of bearer rejected, failed to enable media [ 262.240944][T14132] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4325'. [ 263.496558][ T36] audit: type=1400 audit(1753077748.341:846): avc: denied { mounton } for pid=14156 comm="syz.6.4337" path="/398/file0" dev="tmpfs" ino=2232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.628977][T14169] netlink: 'syz.6.4340': attribute type 33 has an invalid length. [ 263.636969][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4340'. [ 263.726309][T14178] 9pnet_fd: Insufficient options for proto=fd [ 263.732775][T14178] overlay: ./file0 is not a directory [ 263.808311][T14191] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4348'. [ 264.730848][T14232] overlayfs: failed to clone upperpath [ 264.814648][T14238] netlink: 196 bytes leftover after parsing attributes in process `syz.8.4366'. [ 265.416700][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.423998][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.431121][T14250] bridge_slave_0: entered allmulticast mode [ 265.437965][T14250] bridge_slave_0: entered promiscuous mode [ 265.444851][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.451919][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.459258][T14250] bridge_slave_1: entered allmulticast mode [ 265.466100][T14250] bridge_slave_1: entered promiscuous mode [ 265.523239][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.530288][T14250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.537590][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.544658][T14250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.567722][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.575193][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.585499][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.592582][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.605137][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.612223][ T5497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.638851][T14250] veth0_vlan: entered promiscuous mode [ 265.650777][T14250] veth1_macvtap: entered promiscuous mode [ 265.697413][ T36] audit: type=1400 audit(1753077750.541:847): avc: denied { accept } for pid=14276 comm="syz.8.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.769894][T14299] 9pnet_fd: Insufficient options for proto=fd [ 266.138463][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4406'. [ 266.154127][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4407'. [ 266.360481][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4415'. [ 266.369809][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4415'. [ 266.402509][T14416] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4417'. [ 266.424888][T14418] tipc: Cannot configure node identity twice [ 266.778292][T14441] netlink: 'syz.6.4426': attribute type 4 has an invalid length. [ 266.789541][T14441] netlink: 'syz.6.4426': attribute type 4 has an invalid length. [ 266.895779][T14448] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4429'. [ 266.955750][T14450] SELinux: security_context_str_to_sid () failed with errno=-22 [ 266.982181][T14453] rust_binder: Error in use_page_slow: ESRCH [ 266.982203][T14453] rust_binder: use_range failure ESRCH [ 266.993868][T14453] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 266.993889][T14453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 267.001737][T14453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:26 [ 267.039851][T14455] rust_binder: Got transaction with invalid offset. [ 267.039885][T14455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 267.046578][T14455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 267.114774][T14457] overlay: Unknown parameter 'mask' [ 267.273319][T14463] incfs: Can't find or create .index dir in ./bus [ 267.280079][T14463] incfs: mount failed -1 [ 267.284937][T14463] incfs: Can't find or create .index dir in ./bus [ 267.291534][T14463] incfs: mount failed -1 [ 267.307018][T14460] 9p: Unknown Cache mode or invalid value 2eadahead [ 267.356102][ T36] audit: type=1400 audit(1753077752.201:848): avc: denied { setcheckreqprot } for pid=14458 comm="syz.9.4434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 267.400153][T14480] 9pnet_fd: Insufficient options for proto=fd [ 267.434210][T14484] overlayfs: failed to clone upperpath [ 267.458412][T14491] overlayfs: missing 'lowerdir' [ 267.476735][T14494] bridge0: port 3(veth0_to_bridge) entered blocking state [ 267.484144][T14494] bridge0: port 3(veth0_to_bridge) entered disabled state [ 267.491340][T14494] veth0_to_bridge: entered allmulticast mode [ 267.498083][T14494] veth0_to_bridge: entered promiscuous mode [ 267.504213][T14494] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.516761][T14494] bridge0: port 3(veth0_to_bridge) entered blocking state [ 267.523937][T14494] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 267.533722][T14494] cgroup: none used incorrectly [ 267.545576][T14498] cgroup: Invalid name [ 267.550262][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4448'. [ 267.626984][T14500] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 267.986600][T14509] overlayfs: failed to clone lowerpath [ 268.732054][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 268.867265][T14538] netlink: 'syz.6.4462': attribute type 4 has an invalid length. [ 268.882171][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 268.888664][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.899229][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.909830][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.919041][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.927137][ T9] usb 10-1: Product: syz [ 268.931405][ T9] usb 10-1: Manufacturer: syz [ 268.936153][ T9] usb 10-1: SerialNumber: syz [ 269.115565][T14548] 9pnet_fd: Insufficient options for proto=fd [ 269.153095][ T9] usb 10-1: 0:2 : does not exist [ 269.161333][ T9] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 269.175808][ T9] usb 10-1: USB disconnect, device number 2 [ 269.184801][T14555] udevd[14555]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 269.333019][T14573] fuse: Bad value for 'user_id' [ 269.338080][T14573] fuse: Bad value for 'user_id' [ 269.827761][ T36] audit: type=1326 audit(1753077754.673:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.8.4478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbf6f8e9a9 code=0x0 [ 270.191130][T14594] overlayfs: missing 'lowerdir' [ 270.197615][T14594] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4482'. [ 270.772060][ T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 270.862960][ T36] audit: type=1326 audit(1753077755.713:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.8.4499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbf6f8e9a9 code=0x0 [ 270.932055][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 270.942990][ T31] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 270.962037][ T31] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 270.979032][ T31] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.993613][ T31] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.002988][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.011379][ T31] usb 10-1: SerialNumber: syz [ 271.012554][T14667] tipc: Cannot configure node identity twice [ 271.023101][T14626] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 271.030293][T14626] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 271.075858][ T36] audit: type=1400 audit(1753077755.923:851): avc: denied { setattr } for pid=14676 comm="syz.8.4510" name="" dev="pipefs" ino=71145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 271.243869][ T31] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 271.251852][ T31] cdc_acm 10-1:1.0: This needs exactly 3 endpoints [ 271.258478][ T31] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -22 [ 271.271318][ T31] usb 10-1: USB disconnect, device number 3 [ 271.633685][T14698] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 271.642597][T14698] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 271.651613][T14698] overlayfs: conflicting options: userxattr,verity=require [ 271.707256][T14717] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4525'. [ 271.771207][T14731] rust_binder: Write failure EINVAL in pid:55 [ 271.780067][T14735] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4531'. [ 272.002064][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 272.162174][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 272.171062][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 272.179269][ T10] usb 10-1: no configurations [ 272.184573][ T10] usb 10-1: can't read configurations, error -22 [ 272.255141][T14780] overlayfs: failed to clone lowerpath [ 272.277819][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4547'. [ 272.529381][ T36] audit: type=1326 audit(1753077757.373:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14815 comm="syz.7.4557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d2918e9a9 code=0x0 [ 272.969901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.982137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.994244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.006278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.018373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.030488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.042588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.054601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.066679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.078698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.163756][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 273.343200][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 273.363133][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.376083][T14851] @ÿ: renamed from veth0_vlan (while UP) [ 273.402510][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.422788][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.431945][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.505503][ T10] usb 10-1: config 0 descriptor?? [ 273.523702][ T10] hub 10-1:0.0: USB hub found [ 273.719368][ T10] hub 10-1:0.0: 1 port detected [ 274.009417][T14862] cgroup: Unknown subsys name 'permit_directio' [ 274.156813][T14866] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 274.210677][T14870] fuse: Bad value for 'fd' [ 274.325533][ T10] hub 10-1:0.0: activate --> -90 [ 274.796056][ T45] usb 10-1: USB disconnect, device number 5 [ 275.114541][T14914] netlink: 'syz.6.4589': attribute type 4 has an invalid length. [ 275.182176][T14921] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4593'. [ 275.531215][T14936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14936 comm=syz.9.4598 [ 275.533570][ T36] audit: type=1400 audit(1753077766.374:853): avc: denied { associate } for pid=14935 comm="syz.9.4598" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 275.893959][T14949] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 276.154900][T14980] fuse: Unknown parameter 'e' [ 276.194680][T14980] fuse: Unknown parameter 'e' [ 276.941077][ T36] audit: type=1400 audit(1753077767.784:854): avc: denied { execute } for pid=15021 comm="syz.9.4627" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 276.990477][T15027] tipc: Started in network mode [ 277.001260][T15027] tipc: Node identity 2, cluster identity 2 [ 277.013808][T15027] tipc: Node number set to 2 [ 277.045881][T15034] bridge0: port 3(syz_tun) entered blocking state [ 277.053024][T15034] bridge0: port 3(syz_tun) entered disabled state [ 277.059593][T15034] syz_tun: entered allmulticast mode [ 277.065770][T15034] syz_tun: entered promiscuous mode [ 277.071210][T15034] bridge0: port 3(syz_tun) entered blocking state [ 277.077705][T15034] bridge0: port 3(syz_tun) entered forwarding state [ 277.630922][T15060] rust_binder: 15052 RLIMIT_NICE not set [ 277.631127][T15060] rust_binder: 15060: no such ref 3 [ 277.642810][T15060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 277.972096][ C0] net_ratelimit: 106433 callbacks suppressed [ 277.972115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.999438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.011483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.023588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.035657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.047754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.059789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.071888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.083956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.096071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.229547][T15071] 9pnet: Unknown protocol version 9/binder0 [ 278.691432][T15091] x_tables: duplicate underflow at hook 1 [ 279.112709][T15105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 279.140709][T15108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 280.196121][T15129] netlink: 'syz.9.4661': attribute type 4 has an invalid length. [ 280.290604][T15134] rust_binder: Error while translating object. [ 280.290667][T15134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 280.297292][T15134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 280.385823][T15137] rust_binder: 15136 RLIMIT_NICE not set [ 280.395394][T15136] rust_binder: Error while translating object. [ 280.401153][T15136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 280.407879][T15136] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 280.417756][T15136] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:156 [ 280.431891][T15137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.484253][T15145] SELinux: security_context_str_to_sid () failed with errno=-22 [ 280.548812][T15149] random: crng reseeded on system resumption [ 280.570680][T15147] 9pnet_fd: Insufficient options for proto=fd [ 280.924241][T15176] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 282.351681][T15232] overlayfs: conflicting options: nfs_export=on,index=off [ 282.773689][ T36] audit: type=1400 audit(2000000000.340:855): avc: denied { map } for pid=15227 comm="syz.6.4692" path="socket:[72688]" dev="sockfs" ino=72688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 282.970250][T15274] netlink: 'syz.8.4702': attribute type 58 has an invalid length. [ 282.982067][ C0] net_ratelimit: 98667 callbacks suppressed [ 282.982094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.000152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.012217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.024380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.036440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.048575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.060646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.072773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.084841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.096963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.234603][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4708'. [ 283.317450][T15298] 9pnet: Could not find request transport: GrÊTΕeÆr0xffffffffffffffff [ 283.494652][T15313] /dev/rnullb0: Can't lookup blockdev [ 284.039240][T15324] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 284.068993][T15324] overlay: Unknown parameter 'fsmagic' [ 284.325923][ T36] audit: type=1400 audit(2000000001.890:856): avc: denied { map } for pid=15344 comm="syz.7.4729" path="socket:[72876]" dev="sockfs" ino=72876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.472920][T15350] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 284.482502][T15350] overlayfs: failed to clone upperpath [ 285.365022][T15390] overlayfs: failed to clone upperpath [ 285.535444][ T36] audit: type=1326 audit(2000000003.100:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 285.609557][ T36] audit: type=1326 audit(2000000003.100:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 285.700265][ T36] audit: type=1326 audit(2000000003.120:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 285.774743][ T36] audit: type=1326 audit(2000000003.120:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 285.849004][ T36] audit: type=1326 audit(2000000003.140:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 285.915191][T15396] 9pnet_fd: Insufficient options for proto=fd [ 285.925696][ T36] audit: type=1326 audit(2000000003.140:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 285.995831][ T36] audit: type=1326 audit(2000000003.150:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 286.069858][ T36] audit: type=1326 audit(2000000003.150:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.8.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcbf6f8e9a9 code=0x7ffc0000 [ 286.862017][ C0] sched: DL replenish lagged too much [ 287.992065][ C0] net_ratelimit: 103709 callbacks suppressed [ 287.992099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.010136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.022244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.034254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.046347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.058336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.070402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.082404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.094499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.106522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.002042][ C0] net_ratelimit: 97030 callbacks suppressed [ 293.002068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.020061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.032174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.044220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.056355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.068422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.080529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.092548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.104644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.116659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.012022][ C1] net_ratelimit: 87981 callbacks suppressed [ 298.012047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 298.012128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.018326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 298.030114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.042321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 298.054044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.066282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 298.078013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.090204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 298.102036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.022090][ C0] net_ratelimit: 86697 callbacks suppressed [ 303.022114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.022164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 303.028181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.040418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 303.052453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.064351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 303.076072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.088244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 303.100024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.112183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 303.475865][ T311] usb 7-1: USB disconnect, device number 2 [ 303.773292][T14250] bridge0: port 3(syz_tun) entered disabled state [ 308.032056][ C0] net_ratelimit: 85301 callbacks suppressed [ 308.032079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.032142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 308.038122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.050353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 308.062103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.074216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 308.085887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.098176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 308.109883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.122060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 309.933442][T14250] syz_tun (unregistering): left allmulticast mode [ 310.075747][T14250] syz_tun (unregistering): left promiscuous mode [ 310.343682][T14250] bridge0: port 3(syz_tun) entered disabled state [ 313.042104][ C0] net_ratelimit: 87245 callbacks suppressed [ 313.042127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.042144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 313.042434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 313.048126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.060389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 313.072159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.084407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 313.096077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.108217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 313.119894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.052065][ C0] net_ratelimit: 88813 callbacks suppressed [ 318.052089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.052181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 318.058107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.070398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 318.082195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.094287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 318.106069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.118162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 318.129886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.142142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 323.062062][ C0] net_ratelimit: 88858 callbacks suppressed [ 323.062086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.062272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 323.068212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.080450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 323.092245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.104322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 323.116073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.128339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 323.140060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.152232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 328.072060][ C0] net_ratelimit: 85255 callbacks suppressed [ 328.072084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.072200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 328.078194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.090537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 328.102267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.114438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 328.126193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.138297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 328.150028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.162394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 333.082011][ C0] net_ratelimit: 92587 callbacks suppressed [ 333.082036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.082114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 333.088085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.100357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 333.112272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.124335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 333.136114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.148359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 333.160103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.172275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 338.092011][ C0] net_ratelimit: 87859 callbacks suppressed [ 338.092035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.092248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 338.098039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.110267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 338.122054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.134195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 338.146060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.158187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 338.169984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.182252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 343.102074][ C0] net_ratelimit: 91588 callbacks suppressed [ 343.102099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.102234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 343.108151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.120379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 343.132189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.144305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 343.156016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.168273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 343.180002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.192209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 348.112006][ C0] net_ratelimit: 91313 callbacks suppressed [ 348.112032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.112384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 348.118048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.130390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 348.142058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.162284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 348.165878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.178307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 348.189928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.202307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 353.121997][ C0] net_ratelimit: 85024 callbacks suppressed [ 353.122022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.122314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 353.128197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.140798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 353.152166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.164776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 353.176162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.188727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 353.200117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.212618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 358.132025][ C0] net_ratelimit: 83725 callbacks suppressed [ 358.132050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.132058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 358.132558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 358.138123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.150419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 358.162008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.174383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 358.185983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.198336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 358.210067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.142022][ C0] net_ratelimit: 81355 callbacks suppressed [ 363.142047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.142055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 363.142448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 363.148056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.160191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 363.172105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.184358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 363.195916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.208007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 363.219881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.152008][ C1] net_ratelimit: 89665 callbacks suppressed [ 368.152044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 368.152099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.158612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 368.170198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.182205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 368.194052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.206544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 368.217991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.230125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 368.242032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.162041][ C0] net_ratelimit: 90191 callbacks suppressed [ 373.162067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.162080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 373.162266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 373.168167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.180470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 373.192275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.204337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 373.216118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.228400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 373.240355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.171988][ C0] net_ratelimit: 90807 callbacks suppressed [ 378.172012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.172337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 378.178029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.190089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 378.201990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.214148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 378.225874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.237832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 378.249732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.262573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 383.181968][ C0] net_ratelimit: 83107 callbacks suppressed [ 383.181993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.182067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 383.188081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.200029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 383.211983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.224236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 383.235937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.248099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 383.260072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.272250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 388.191991][ C0] net_ratelimit: 84075 callbacks suppressed [ 388.192015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.192144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 388.198072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.210368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 388.222057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.234160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 388.246071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.258327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 388.269906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.282036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 389.035410][T15442] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 393.202006][ C0] net_ratelimit: 82510 callbacks suppressed [ 393.202033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.202175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 393.211070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.217034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 393.229043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.241502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 393.252968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.265017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 393.276875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.289140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 398.212011][ C0] net_ratelimit: 89319 callbacks suppressed [ 398.212036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.212112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 398.218139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.230147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 398.242085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.254342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 398.266049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.278092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 398.289959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.302285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 403.221983][ C0] net_ratelimit: 90535 callbacks suppressed [ 403.222007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.222086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 403.228041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.240158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 403.252060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.264228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 403.275935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.287918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 403.299845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.312126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 408.232012][ C0] net_ratelimit: 88045 callbacks suppressed [ 408.232036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.232362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 408.238172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.250203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 408.262148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.274257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 408.285925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.298469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 408.310347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.322540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 411.514711][ T37] INFO: task kworker/u8:4:305 blocked for more than 122 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 411.832712][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 411.832737][ T36] audit: type=1400 audit(2000000129.180:882): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[618]" dev="pipefs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 411.864612][ T37] Not tainted 6.12.30-syzkaller-g73009db42b37 #0 [ 411.871537][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.031199][ T37] task:kworker/u8:4 state:D stack:0 pid:305 tgid:305 ppid:2 flags:0x00004000 [ 412.041484][ T37] Workqueue: netns cleanup_net [ 412.046365][ T37] Call Trace: [ 412.049662][ T37] [ 412.052623][ T37] __schedule+0x132b/0x1e00 [ 412.057179][ T37] ? __sched_text_start+0x10/0x10 [ 412.062251][ T37] ? kthread_data+0x54/0xc0 [ 412.066821][ T37] ? wq_worker_sleeping+0x69/0x260 [ 412.072024][ T37] ? trace_contention_begin+0xc0/0xc0 [ 412.077435][ T37] schedule+0xc6/0x240 [ 412.081608][ T37] schedule_preempt_disabled+0x14/0x30 [ 412.087116][ T37] __mutex_lock+0x81e/0x1b50 [ 412.091741][ T37] ? __kernel_text_address+0x11/0x40 [ 412.097081][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 412.103911][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 412.109401][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 412.115338][ T37] ? stack_depot_save_flags+0x38/0x800 [ 412.120826][ T37] ? ref_tracker_free+0x4d7/0x7d0 [ 412.125907][ T37] ? __cfi_ref_tracker_free+0x10/0x10 [ 412.131311][ T37] ? worker_thread+0xc58/0x1250 [ 412.136234][ T37] ? kthread+0x2c7/0x370 [ 412.140497][ T37] ? ret_from_fork+0x64/0xa0 [ 412.145140][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 412.150111][ T37] __mutex_lock_slowpath+0xe/0x20 [ 412.155190][ T37] mutex_lock+0x102/0x1c0 [ 412.159584][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 412.164489][ T37] ? __kasan_check_write+0x18/0x20 [ 412.169633][ T37] rcu_barrier+0x4d/0x530 [ 412.174029][ T37] netdev_run_todo+0x10e/0xcb0 [ 412.178829][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 412.184168][ T37] ? mutex_is_locked+0x1b/0x50 [ 412.188957][ T37] ? nexthop_net_exit_batch_rtnl+0x22d/0x290 [ 412.195004][ T37] ? br_net_exit_batch_rtnl+0x157/0x1a0 [ 412.200581][ T37] rtnl_unlock+0x12/0x20 [ 412.204872][ T37] cleanup_net+0x632/0xc70 [ 412.209309][ T37] ? __cfi_cleanup_net+0x10/0x10 [ 412.214292][ T37] ? kick_pool+0xb9/0x550 [ 412.218640][ T37] process_scheduled_works+0x7d5/0x1020 [ 412.224259][ T37] worker_thread+0xc58/0x1250 [ 412.228977][ T37] kthread+0x2c7/0x370 [ 412.233296][ T37] ? __cfi_worker_thread+0x10/0x10 [ 412.238442][ T37] ? __cfi_kthread+0x10/0x10 [ 412.243081][ T37] ret_from_fork+0x64/0xa0 [ 412.247526][ T37] ? __cfi_kthread+0x10/0x10 [ 412.252170][ T37] ret_from_fork_asm+0x1a/0x30 [ 412.256968][ T37] [ 412.337383][ T37] INFO: task syz.6.4754:15411 blocked for more than 123 seconds. [ 412.627453][ T37] Not tainted 6.12.30-syzkaller-g73009db42b37 #0 [ 412.634472][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.643179][ T37] task:syz.6.4754 state:D stack:0 pid:15411 tgid:15410 ppid:10371 flags:0x00004004 [ 412.653393][ T37] Call Trace: [ 412.656696][ T37] [ 412.659645][ T37] __schedule+0x132b/0x1e00 [ 412.664245][ T37] ? __sched_text_start+0x10/0x10 [ 412.669297][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 412.674444][ T37] ? __kasan_check_write+0x18/0x20 [ 412.679589][ T37] ? trace_contention_begin+0xc0/0xc0 [ 412.685002][ T37] schedule+0xc6/0x240 [ 412.689092][ T37] schedule_preempt_disabled+0x14/0x30 [ 412.694608][ T37] __mutex_lock+0x81e/0x1b50 [ 412.699232][ T37] ? arch_stack_walk+0x10b/0x170 [ 412.704222][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 412.711106][ T37] ? stack_depot_save_flags+0x38/0x800 [ 412.716635][ T37] ? kasan_save_track+0x4f/0x80 [ 412.721522][ T37] ? kasan_save_track+0x3e/0x80 [ 412.726417][ T37] ? kasan_save_free_info+0x4a/0x60 [ 412.731639][ T37] ? __kasan_slab_free+0x5f/0x80 [ 412.736629][ T37] ? kfree+0x158/0x440 [ 412.740741][ T37] ? p9_client_destroy+0xcb/0x480 [ 412.745835][ T37] ? v9fs_session_close+0x52/0x1d0 [ 412.750990][ T37] ? v9fs_kill_super+0x60/0x90 [ 412.755825][ T37] ? __cleanup_mnt+0x1d/0x40 [ 412.760451][ T37] ? task_work_run+0x1e3/0x250 [ 412.765267][ T37] ? resume_user_mode_work+0x36/0x50 [ 412.770578][ T37] ? syscall_exit_to_user_mode+0x64/0xb0 [ 412.776257][ T37] ? do_syscall_64+0x64/0xf0 [ 412.780870][ T37] __mutex_lock_slowpath+0xe/0x20 [ 412.785971][ T37] mutex_lock+0x102/0x1c0 [ 412.790336][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 412.795235][ T37] ? __kasan_check_write+0x18/0x20 [ 412.800391][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 412.805898][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 412.811828][ T37] rcu_barrier+0x4d/0x530 [ 412.816231][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 412.822087][ T37] flush_rcu_work+0x71/0x90 [ 412.826630][ T37] kvfree_rcu_barrier+0x18c/0x2f0 [ 412.831730][ T37] ? p9_client_destroy+0x42b/0x480 [ 412.836896][ T37] kmem_cache_destroy+0x32/0x170 [ 412.841874][ T37] p9_client_destroy+0x42b/0x480 [ 412.846879][ T37] ? __cfi_p9_client_destroy+0x10/0x10 [ 412.852398][ T37] v9fs_session_close+0x52/0x1d0 [ 412.857366][ T37] v9fs_kill_super+0x60/0x90 [ 412.862265][ T37] deactivate_locked_super+0xd8/0x2a0 [ 412.867664][ T37] deactivate_super+0xb8/0xe0 [ 412.872402][ T37] cleanup_mnt+0x3f1/0x480 [ 412.876853][ T37] __cleanup_mnt+0x1d/0x40 [ 412.881297][ T37] task_work_run+0x1e3/0x250 [ 412.885926][ T37] ? __cfi_task_work_run+0x10/0x10 [ 412.891062][ T37] ? __kasan_check_write+0x18/0x20 [ 412.896222][ T37] resume_user_mode_work+0x36/0x50 [ 412.901351][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 412.906865][ T37] do_syscall_64+0x64/0xf0 [ 412.911309][ T37] ? clear_bhb_loop+0x50/0xa0 [ 412.916034][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 412.922143][ T37] RIP: 0033:0x7f621118e9a9 [ 412.926610][ T37] RSP: 002b:00007f6212060038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 412.935204][ T37] RAX: fffffffffffffffe RBX: 00007f62113b5fa0 RCX: 00007f621118e9a9 [ 412.943217][ T37] RDX: 0000200000004500 RSI: 0000200000000200 RDI: 0000000000000000 [ 412.951210][ T37] RBP: 00007f6211210d69 R08: 0000200000000300 R09: 0000000000000000 [ 412.959244][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.967258][ T37] R13: 0000000000000000 R14: 00007f62113b5fa0 R15: 00007ffff6033188 [ 412.975277][ T37] [ 413.095101][ T37] INFO: task syz.7.4762:15431 blocked for more than 124 seconds. [ 413.150845][ T37] Not tainted 6.12.30-syzkaller-g73009db42b37 #0 [ 413.157802][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.166507][ T37] task:syz.7.4762 state:D stack:0 pid:15431 tgid:15430 ppid:10829 flags:0x00004004 [ 413.176725][ T37] Call Trace: [ 413.180026][ T37] [ 413.182992][ T37] __schedule+0x132b/0x1e00 [ 413.187536][ T37] ? __sched_text_start+0x10/0x10 [ 413.192601][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 413.197733][ T37] ? __kasan_check_write+0x18/0x20 [ 413.202930][ T37] ? trace_contention_begin+0xc0/0xc0 [ 413.208338][ T37] schedule+0xc6/0x240 [ 413.212445][ T37] schedule_preempt_disabled+0x14/0x30 [ 413.217927][ T37] __mutex_lock+0x81e/0x1b50 [ 413.222555][ T37] ? arch_stack_walk+0x10b/0x170 [ 413.227532][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 413.234360][ T37] ? stack_depot_save_flags+0x38/0x800 [ 413.239857][ T37] ? kasan_save_track+0x4f/0x80 [ 413.241971][ C0] net_ratelimit: 79070 callbacks suppressed [ 413.241992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.244755][ T37] ? kasan_save_track+0x3e/0x80 [ 413.250758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.262624][ T37] ? kasan_save_free_info+0x4a/0x60 [ 413.267587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.279448][ T37] ? __kasan_slab_free+0x5f/0x80 [ 413.284826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.296572][ T37] ? kfree+0x158/0x440 [ 413.301566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.313473][ T37] ? p9_client_destroy+0xcb/0x480 [ 413.317685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.329412][ T37] ? v9fs_session_close+0x52/0x1d0 [ 413.334587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.346389][ T37] ? v9fs_kill_super+0x60/0x90 [ 413.351631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.363482][ T37] ? vfs_get_tree+0xa1/0x290 [ 413.368367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.380109][ T37] ? do_new_mount+0x251/0xb40 [ 413.384827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.396689][ T37] ? path_mount+0x688/0x1050 [ 413.417959][ T37] ? __se_sys_mount+0x2bd/0x480 [ 413.422871][ T37] ? __x64_sys_mount+0xc3/0xf0 [ 413.427678][ T37] __mutex_lock_slowpath+0xe/0x20 [ 413.432758][ T37] mutex_lock+0x102/0x1c0 [ 413.437116][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 413.442020][ T37] ? __kasan_check_write+0x18/0x20 [ 413.447166][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 413.452668][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 413.458592][ T37] rcu_barrier+0x4d/0x530 [ 413.463024][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 413.468950][ T37] flush_rcu_work+0x71/0x90 [ 413.473504][ T37] kvfree_rcu_barrier+0x18c/0x2f0 [ 413.478569][ T37] ? p9_client_destroy+0x42b/0x480 [ 413.483739][ T37] kmem_cache_destroy+0x32/0x170 [ 413.488714][ T37] p9_client_destroy+0x42b/0x480 [ 413.493705][ T37] ? __cfi_p9_client_destroy+0x10/0x10 [ 413.499196][ T37] ? bdi_put+0x12f/0x190 [ 413.503503][ T37] v9fs_session_close+0x52/0x1d0 [ 413.508474][ T37] v9fs_kill_super+0x60/0x90 [ 413.513186][ T37] deactivate_locked_super+0xd8/0x2a0 [ 413.518595][ T37] v9fs_mount+0x764/0xa00 [ 413.522986][ T37] ? __cfi_v9fs_mount+0x10/0x10 [ 413.527875][ T37] ? selinux_capable+0x38/0x50 [ 413.532695][ T37] legacy_get_tree+0x106/0x1b0 [ 413.537489][ T37] ? __cfi_v9fs_mount+0x10/0x10 [ 413.542402][ T37] vfs_get_tree+0xa1/0x290 [ 413.546854][ T37] do_new_mount+0x251/0xb40 [ 413.551392][ T37] ? security_capable+0xcf/0xf0 [ 413.556290][ T37] path_mount+0x688/0x1050 [ 413.560740][ T37] ? putname+0x113/0x150 [ 413.565031][ T37] __se_sys_mount+0x2bd/0x480 [ 413.569762][ T37] ? __x64_sys_mount+0xf0/0xf0 [ 413.574589][ T37] ? __kasan_check_write+0x18/0x20 [ 413.579743][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 413.585516][ T37] __x64_sys_mount+0xc3/0xf0 [ 413.590146][ T37] x64_sys_call+0x2021/0x2ee0 [ 413.594968][ T37] do_syscall_64+0x58/0xf0 [ 413.599412][ T37] ? clear_bhb_loop+0x50/0xa0 [ 413.604145][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 413.610067][ T37] RIP: 0033:0x7f4d2918e9a9 [ 413.614515][ T37] RSP: 002b:00007f4d29f48038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.622967][ T37] RAX: ffffffffffffffda RBX: 00007f4d293b5fa0 RCX: 00007f4d2918e9a9 [ 413.630977][ T37] RDX: 0000200000004500 RSI: 0000200000000440 RDI: 0000000000000000 [ 413.639003][ T37] RBP: 00007f4d29210d69 R08: 00002000000005c0 R09: 0000000000000000 [ 413.647139][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.655155][ T37] R13: 0000000000000000 R14: 00007f4d293b5fa0 R15: 00007ffc2eafa6a8 [ 413.663177][ T37] [ 413.666298][ T37] NMI backtrace for cpu 1 [ 413.666318][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 413.666350][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.666365][ T37] Call Trace: [ 413.666373][ T37] [ 413.666383][ T37] __dump_stack+0x21/0x30 [ 413.666416][ T37] dump_stack_lvl+0x10c/0x190 [ 413.666444][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 413.666473][ T37] dump_stack+0x19/0x20 [ 413.666499][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 413.666524][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 413.666548][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 413.666609][ T37] ? sched_show_task+0x379/0x560 [ 413.666636][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 413.666670][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 413.666697][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 413.666722][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 413.666749][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 413.666776][ T37] watchdog+0xd8f/0xed0 [ 413.666805][ T37] ? __cfi_watchdog+0x10/0x10 [ 413.666831][ T37] ? __kasan_check_read+0x15/0x20 [ 413.666860][ T37] ? __kthread_parkme+0x138/0x180 [ 413.666892][ T37] ? schedule+0xc6/0x240 [ 413.666919][ T37] kthread+0x2c7/0x370 [ 413.666940][ T37] ? __cfi_watchdog+0x10/0x10 [ 413.666966][ T37] ? __cfi_kthread+0x10/0x10 [ 413.666987][ T37] ret_from_fork+0x64/0xa0 [ 413.667016][ T37] ? __cfi_kthread+0x10/0x10 [ 413.667037][ T37] ret_from_fork_asm+0x1a/0x30 [ 413.667071][ T37] [ 413.667080][ T37] Sending NMI from CPU 1 to CPUs 0: [ 413.885356][ C0] NMI backtrace for cpu 0 [ 413.885371][ C0] CPU: 0 UID: 0 PID: 15442 Comm: syz-executor Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 413.885393][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.885403][ C0] RIP: 0010:__find_rr_leaf+0x156/0x790 [ 413.885428][ C0] Code: 8b 1b 89 df 44 8b 64 24 44 44 89 e6 e8 c3 cc a4 fc 44 39 e3 0f 85 83 03 00 00 e8 f5 ca a4 fc eb 05 e8 ee ca a4 fc 49 8d 5e 64 <49> 89 df 49 c1 ef 03 43 0f b6 04 2f 84 c0 0f 85 9f 02 00 00 48 89 [ 413.885441][ C0] RSP: 0018:ffffc900000072c0 EFLAGS: 00000246 [ 413.885456][ C0] RAX: ffffffff84e0e00b RBX: ffff88811688f464 RCX: ffff888123579300 [ 413.885468][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000100 [ 413.885477][ C0] RBP: ffffc90000007418 R08: ffffc90000007540 R09: ffffc90000007550 [ 413.885489][ C0] R10: ffffc900000076b0 R11: fffff52000000eda R12: 0000000000000100 [ 413.885500][ C0] R13: dffffc0000000000 R14: ffff88811688f400 R15: ffffc90000007518 [ 413.885512][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 413.885525][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.885535][ C0] CR2: 0000558c3df12b90 CR3: 000000012904e000 CR4: 00000000003526b0 [ 413.885549][ C0] Call Trace: [ 413.885554][ C0] [ 413.885561][ C0] ? rt6_check_expired+0x250/0x250 [ 413.885580][ C0] ? __siphash_unaligned+0x26e/0x3c0 [ 413.885604][ C0] fib6_table_lookup+0x2c5/0x9b0 [ 413.885626][ C0] ? __cfi_flow_hash_from_keys+0x10/0x10 [ 413.885643][ C0] ? __cfi_fib6_table_lookup+0x10/0x10 [ 413.885664][ C0] ? ipv6_rcv+0xed/0x220 [ 413.885686][ C0] ip6_pol_route+0x167/0x12c0 [ 413.885707][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 413.885724][ C0] ? __cfi_ip6_pol_route+0x10/0x10 [ 413.885745][ C0] ? netif_receive_skb+0x161/0x7b0 [ 413.885761][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 413.885776][ C0] ? br_flood+0x67e/0x730 [ 413.885792][ C0] ? br_pass_frame_up+0x126/0x1c0 [ 413.885809][ C0] ip6_pol_route_input+0x5a/0x80 [ 413.885838][ C0] fib6_rule_lookup+0x4cc/0x6b0 [ 413.885857][ C0] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 413.885879][ C0] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 413.885898][ C0] ? ip6t_do_table+0x1dc/0x14d0 [ 413.885914][ C0] ip6_route_input+0x59f/0x8d0 [ 413.885927][ C0] ? __cfi_ip6_route_input+0x10/0x10 [ 413.885941][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 413.885955][ C0] ? ip6_mc_input+0x4f3/0x670 [ 413.885977][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 413.885994][ C0] ip6_rcv_finish+0x15a/0x3c0 [ 413.886015][ C0] ipv6_rcv+0xed/0x220 [ 413.886035][ C0] ? update_irq_load_avg+0xcb/0xe60 [ 413.886052][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 413.886072][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 413.886093][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 413.886108][ C0] ? __kasan_check_read+0x15/0x20 [ 413.886127][ C0] process_backlog+0x44b/0xae0 [ 413.886144][ C0] ? run_posix_cpu_timers+0x2c5/0x620 [ 413.886168][ C0] __napi_poll+0xd0/0x610 [ 413.886182][ C0] net_rx_action+0x584/0xce0 [ 413.886199][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 413.886214][ C0] ? sched_clock+0x44/0x60 [ 413.886230][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 413.886246][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 413.886270][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 413.886286][ C0] handle_softirqs+0x1ae/0x630 [ 413.886307][ C0] __do_softirq+0xf/0x16 [ 413.886323][ C0] do_softirq+0xa6/0x100 [ 413.886341][ C0] [ 413.886346][ C0] [ 413.886352][ C0] ? __cfi_do_softirq+0x10/0x10 [ 413.886370][ C0] ? _raw_spin_lock_bh+0x90/0x120 [ 413.886385][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 413.886400][ C0] ? preempt_schedule_thunk+0x1a/0x40 [ 413.886424][ C0] __local_bh_enable_ip+0x74/0x80 [ 413.886442][ C0] _raw_spin_unlock_bh+0x54/0x60 [ 413.886458][ C0] addrconf_ifdown+0x608/0x1940 [ 413.886473][ C0] ? tun_chr_close+0x93/0x150 [ 413.886492][ C0] ? addrconf_cleanup+0x150/0x150 [ 413.886507][ C0] ? __kasan_check_write+0x18/0x20 [ 413.886524][ C0] ? mutex_unlock+0x8b/0x240 [ 413.886562][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 413.886600][ C0] ? __cfi_device_cmp+0x10/0x10 [ 413.886624][ C0] ? masq_device_event+0xe0/0xe0 [ 413.886648][ C0] addrconf_notify+0x17a/0xea0 [ 413.886669][ C0] ? __cfi_addrconf_notify+0x10/0x10 [ 413.886688][ C0] notifier_call_chain+0x10e/0x2c0 [ 413.886711][ C0] raw_notifier_call_chain+0x31/0x40 [ 413.886732][ C0] dev_close_many+0x33a/0x4f0 [ 413.886752][ C0] ? timer_update_keys+0xd0/0xd0 [ 413.886776][ C0] ? __cfi_dev_close_many+0x10/0x10 [ 413.886796][ C0] ? __kasan_check_read+0x15/0x20 [ 413.886815][ C0] unregister_netdevice_many_notify+0x4bb/0x1bd0 [ 413.886838][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 413.886856][ C0] ? __mod_timer+0x8ba/0xd60 [ 413.886875][ C0] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 413.886892][ C0] ? add_timer_global+0x84/0xb0 [ 413.886911][ C0] ? __queue_delayed_work+0x1b0/0x240 [ 413.886929][ C0] ? queue_delayed_work_on+0x163/0x1e0 [ 413.886946][ C0] ? __kasan_check_read+0x15/0x20 [ 413.886965][ C0] unregister_netdevice_queue+0x339/0x380 [ 413.886989][ C0] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 413.887014][ C0] ? linkwatch_fire_event+0x1fb/0x260 [ 413.887032][ C0] __tun_detach+0xca1/0x1460 [ 413.887053][ C0] tun_chr_close+0x93/0x150 [ 413.887071][ C0] ? __cfi_tun_chr_close+0x10/0x10 [ 413.887089][ C0] __fput+0x1fe/0xa00 [ 413.887104][ C0] ? call_rcu+0x14/0x20 [ 413.887125][ C0] ____fput+0x20/0x30 [ 413.887140][ C0] task_work_run+0x1e3/0x250 [ 413.887156][ C0] ? __cfi_task_work_run+0x10/0x10 [ 413.887172][ C0] ? free_nsproxy+0x223/0x290 [ 413.887192][ C0] do_exit+0x9b4/0x2630 [ 413.887208][ C0] ? __kasan_check_write+0x18/0x20 [ 413.887228][ C0] ? __cfi_do_exit+0x10/0x10 [ 413.887243][ C0] ? __kasan_check_write+0x18/0x20 [ 413.887261][ C0] ? put_pid+0xe2/0x120 [ 413.887283][ C0] ? netlink_sendmsg+0x835/0xaf0 [ 413.887303][ C0] ? __kasan_check_write+0x18/0x20 [ 413.887322][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 413.887338][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 413.887355][ C0] do_group_exit+0x22a/0x300 [ 413.887372][ C0] ? __kasan_check_write+0x18/0x20 [ 413.887391][ C0] get_signal+0x139d/0x14f0 [ 413.887411][ C0] arch_do_signal_or_restart+0x96/0x720 [ 413.887433][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 413.887457][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 413.887480][ C0] do_syscall_64+0x64/0xf0 [ 413.887497][ C0] ? clear_bhb_loop+0x50/0xa0 [ 413.887518][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 413.887538][ C0] RIP: 0033:0x7f4269f907e3 [ 413.887551][ C0] Code: Unable to access opcode bytes at 0x7f4269f907b9. [ 413.887560][ C0] RSP: 002b:00007ffdd58e97a8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 413.887577][ C0] RAX: 000000000000003c RBX: 00007f426ace4620 RCX: 00007f4269f907e3 [ 413.887591][ C0] RDX: 000000000000003c RSI: 00007f426ace4670 RDI: 0000000000000003 [ 413.887602][ C0] RBP: 0000000000000001 R08: 00007ffdd58e97c4 R09: 000000000000000c [ 413.887612][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 413.887622][ C0] R13: 0000000000000000 R14: 00007f426ace4670 R15: 0000000000000000 [ 413.887635][ C0] [ 418.251981][ C1] net_ratelimit: 74498 callbacks suppressed [ 418.252006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 418.252079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.258205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 418.270148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.282438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 418.294090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.306284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 418.318185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.330369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:82:b9:42:a1:26, vlan:0) [ 418.342023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)