last executing test programs: 1m31.360234687s ago: executing program 0 (id=162): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181142, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) dup3(r1, r1, 0x80000) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x1000, 0x101000}) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181142, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) dup3(r1, r1, 0x80000) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x1000, 0x101000}) (async) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) (async) ftruncate(r3, 0xffff) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) (async) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m31.247323166s ago: executing program 0 (id=164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x20, 0x25, 0x5, {0x5, 0x6, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff2f, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0}}, @register_looper], 0x25, 0x0, 0x0}) 1m30.715490279s ago: executing program 0 (id=172): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) socket(0x6, 0x2, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffffe, 0x1}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r1, 0x0, 0x1, r0}) r5 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0xe2, {0xe2, 0x21, "51f79ec5a802f42d145a703f3b75bc1ec99c1f977bc21270720b0a90968ec88c9b003cc0838f8cca814df20959dbfa04a680070f60f98c2d2769f8db0aa8140debbf305c5d0a15510a42e783e225b7068ceee009f1dcda04a50d4e75ad348373f1f57ad4e5166d5e4e1089d41b9d2938e7294b505699b320a5fe7b1c6e5e55073a3d9325d821f4a528d54cb29e2d93e22f5e66e12625848c4018a048988ff5a85066d31e494d065f2d562d253a87d2991ec7801050a7eead5905672cc798cb03e518e5c010a3d22a280a6a1adb1b7bb102b06897a2c5fc85429b26bb00ac3d6f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000400)={0x0, 0xf, 0x6d, {0x5, 0xf, 0x6d, 0x4, [@generic={0x3b, 0x10, 0xa, "e39ed6b33090bad9e1cb4e00e0fd4df05f4a648239ec49d86f5c82d221adc416973b659e43591078c43e01779980cc64a0d92216e2a0bd80"}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x7, 0x0, 0x7, [0xff0000, 0xf, 0xf]}, @generic={0xa, 0x10, 0x2, "69788728272475"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x2, 0xc, 0x3d16, 0x42}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x80, 0x4, 0x7, "9c4ba37e", "3e73ca95"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x1, 0x4, 0x3, 0x8, 0x5}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x7d, "ede914b90424a954628e18855a04f40de0f4c1feb9f8a6dabca021c150d190668462312a294a54d6b454c730869855f88fcf9b49c8953920f3120ca317e489a928afa4177f00350dadcef79273eb9816c360825aa3dad5f944dc765cd34943802668bd8a4a0ca3264b9de496e4f6884ea911ad48ce82dfc942c22b4967"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x49}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0xf1, 0x2, [0x0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "e2af"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xdf84}, &(0x7f0000000800)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, &(0x7f0000000840)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000880)={0x40, 0x19, 0x2, "5b15"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xfd}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a80)=0x0) sched_setattr(r6, &(0x7f0000000ac0)={0x38, 0x0, 0x22, 0x2, 0x1, 0x100000000, 0x8000000000000000, 0x0, 0x3, 0x1e96a37e}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xac, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x95, 0xa8, @random="c30b46b54d804b200cf3e6a455e7de90613152f122dbedfcf908ef002bd9ec014c4234c94ae5c6340e942cfdb5b75f41ea90ce77e0fec24c1dd781fcb2bd0ba0373be4cbcec6924c99d8e575857128f7cb1693d24c8facdfeb37957b5598668bedd3976bbd7af2a2ddaeeb22cb2f584c00ff1c59783ed7680e2c43f2a11a86294bd51e3feba57c263f924b484f31f56a86"}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000c80)) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000cc0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x6c, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa, 0x1b}}}}, [@NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8fbd}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) syz_usb_connect(0x1, 0x248, &(0x7f0000000f40)={{0x12, 0x1, 0x110, 0x7a, 0x73, 0x8f, 0x8, 0x458, 0x700f, 0x22a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x236, 0x1, 0x80, 0xf7, 0x40, 0x7, [{{0x9, 0x4, 0xc1, 0x73, 0x4, 0x6f, 0x96, 0xd3, 0x8, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "c432ef08"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x10, 0x2}, {0x6, 0x24, 0x1a, 0xfffc}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0xe, 0x7, 0xff}, @country_functional={0xe, 0x24, 0x7, 0x6, 0x0, [0x200, 0xa5d7, 0x4, 0x6a]}, @network_terminal={0x7, 0x24, 0xa, 0x90, 0x2, 0xb, 0x7}, @country_functional={0x6, 0x24, 0x7, 0x8, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x875e, 0x5, 0xe, 0x6, 0x3ff, 0x6}, @mdlm_detail={0xc7, 0x24, 0x13, 0x0, "8518a95d3e2d99ab46d5246369eeea44b372e0e37a66db16841756b95173b502c220048238591a9945c7cbdb625a17dab214c0463933b6a7b35bcb4ce33f62657143671563a35444a21c12617ab4ca1bc742ae78a75fb6af9d31689b77bf83d670c7c5a1e0db2bf802b6c2170c887ad7a253fbf219e05d7c5c8cea1fa05b6db81b4435589cdb49578b059ecaa556301fdea859af11936f37eb2f880cff3c4dc2246e9f7d79cc3dc3c8ebc49f8245eb20b47686eb5fc5e1d36cf7acf41c2063575aafdb"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0x0, 0xf8, 0x10}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x9, 0x0, 0x7, [@generic={0xe3, 0x24, "d461c17f1d05f7fcb91f3300b35ab508e1e9324a4badfdab483885d9f22aefe236805d2cd487397ab4d8dcebff7310a5c4dbd9293f9b9a0ca2abe9b1dd64c284543293957c9b3493b5eb7a452fefc28fae0ab9014bd8a354ae5a9d8c4fffb2b42553920ae1040a40a7862f9bdda6e36bf3bfc36a9381f3894db7063ccb4bccb4adac0ed7aea8713445b737061ed398d0f2375b0c3d72206abfc2748ec6ee6b1723ea6b983a1498d3b123183222e5e9a08e86a6a09b39dff830c1e2a967b3986324573b07e79541c2e922e9962b6673b96ce63d6079ee7f261616ea52fc6d05febb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x40}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x4, 0x28, 0x6}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x0, 0xae, 0xf3}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0x6, 0x9, 0x6, 0x40, 0x6}, 0x67, &(0x7f0000001200)={0x5, 0xf, 0x67, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x40, 0xf0f, 0x6, [0xf0, 0x30, 0xff00c0, 0x3f00, 0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0xc6, "0f4f5bba0dbaddf4941f53d664abcb78"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x3de, 0x11f00, 0x10, [0xc0, 0xff3f28, 0x3f30, 0x60, 0x3f30, 0xff3f]}]}, 0x5, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x422}}, {0x3a, &(0x7f00000012c0)=@string={0x3a, 0x3, "a36f417e7619f84b67ef7ad459ac46b06460458176de52bf9d28a992ca498c3bf1e8b8ed97d67852ad32dc82ffdc8e08bdc238518e821e40"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x41b}}]}) pipe2$9p(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8080) r10 = dup3(r9, r2, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f00000014c0), r0) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r11, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44050}, 0x0) creat(&(0x7f00000015c0)='./file0\x00', 0x4) r12 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x101) sendmsg$DEVLINK_CMD_SB_GET(r12, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x804) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001740)=@arm64={0x6, 0x0, 0x66, '\x00', 0x2}) 1m30.299165213s ago: executing program 3 (id=174): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x109000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m30.237336688s ago: executing program 3 (id=175): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x3000, 0x91, &(0x7f0000000000)=""/145}, {0x0, 0xe, &(0x7f0000000100)=""/14}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m30.236972168s ago: executing program 3 (id=176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="ded5fc", 0x3, r2) keyctl$read(0xb, r2, &(0x7f00000000c0)=""/40, 0x1001) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x400000) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x400000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000020000000000000000000000004000000000000000000000000000000000000000000000000eaffffff0000000000000200"/103], 0x68) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000020000000000000000000000004000000000000000000000000000000000000000000000000eaffffff0000000000000200"/103], 0x68) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.158335294s ago: executing program 0 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xd0, 0x7}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xd0, 0x7}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) 1m30.131774866s ago: executing program 3 (id=178): mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0xff, 0x8, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2325099, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900010000000000fbdbdf250a010900a985000012800c00f88008001200", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = dup3(r0, r0, 0x0) clock_gettime(0x3, &(0x7f0000000040)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de9d000040"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@llc={0x1a, 0x305, 0x5, 0x5f, 0x80, 0x3, @local}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b0000000000000001801000003000000812c0d7c107a76c228c1abee5cc6542822d34a8229140f4a7da559d9d6ccc13183d614150de04d497020aac08b281b448e3c143d933775331a1ed6378497d4f0405a29623bb2cd65481bd42d54ee10b913119d8b62bc270612b01699a4cb4556f9b6cf5b8aeb618cff9c244d930a6fd6db67506798e5ab0f5ccb80b010beb2f6d140de1943566d56804c14a8f3044478daf7a46ce75a806f9d7f51750f13c285"], 0xb0}}, {{&(0x7f00000003c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000680)="2cae8517299ed702a71e7625f48b1405c1e5c2935849d616bb37035fa19be183f7f2a49ce96824e6e41733f46a150034f91e7dd75311e983adbebb89a79ebc0bb9a44d1169e9a56c32a52828beb75f7727d9786a50267bdc78625296d4644bce215d996f3f9ab31d8c908a3361ba1d5388275b1c2b36ad97ae40ee29a2ec63e7d47dee29ce43d9697bd2f9adc3f21702eb9118584103c5377095920baade02cc7119bb121a4b91ac3fa7af708a99bcc433455f578b90f6f43b7b9c98df5fc7c1771474758dfddc72778bedb2a5a15a3fab59e11defcd3f3f8acb8c202ac201d44e119f4cf4677f3b2e023b0e496ef552280c54aec235b428e8ff85c60c907317f96007e609605c6dc4643a0d9f88f0991fe5c8128cc9c224c3d23162a0b1ef9a89384ad01e74bf24bf8905aa0325aa92bbf5bfc0ad2aeca2983e4b309718dd4011338147fc199d44aebb1bdc52dd49710364ae53c75892d2962a37c30c02dd6e5b098b460039ac0dab170a5407965523c84975d7fde095729f5d44dbdc50bf7e9f5b4b0cde97028fc87b1f03a9d7b75474d7d5f39e58900f220f8d7de564c7ca934c91a95601f9c64dcad774dbb54b3c77eac95c9447590ebcba1e71994b45aa21f99a877a5fdb781e508be61684b9a09843d6a5f863f49962c3d93723c64b1bcbd37425ab2be27cd2c141c03a48983959e5e5a88e4f91e276e0d0a157644323a7161d0dc2d3d2408ba5268bd8bca70cbbc5a55edfc02fb8f7b0c5c60c3bad3d2c2a549eeef4192abda87e40be6c31a0aa47eb41a15e52d96816f65c2a4f3a5386bf3a379aa5d8598af2bfbbce1769535025f5069e392121430fa9e597601f7520887bd7f29e5a39f00d502b4f20089f541e9de48fd64f6845ae77acf0e81a4c156ce55e4022c67a8ad351aef1dc84b89d1c339e1ec81aaf4d8405c7a166e370f9c2e93edd43c5c2b44a374b3544dbeea30bb7e1cfd1de71299f61acd827836c99115908f64764e59f47ee7f2cb69fcdd27c16c5be27f689b90c7a2ed3796c8d1d866da4e8d2cd6f6c5c709d293bc937ade32cb6297162521265cdeb9f3d140a5214f800f420fbd18a25515a3b13297669066ea89eb8c80ebc273d06ea9f7e1e21303a335bbc32a743e5636b68677b59970e48446c2d33a4f54ac8a802bf417fb14a94dfa9219a80dca4243fca20a26260da6efc6c4fcec1580fb9cb4b412f63b3570bff67fba7e5857d1c486e88f93f5be89b08a0b5c31e0c226ff1dc3fba92d89fefbb584ffa0ff14a587ad19b7bd542d42c92892dc45fb9d504e9c6cf1d95eb1e642fb8bc0cc96a696157a4ead8e6d5a715b1976f165cedeb0e444e13b337f82f52b71a7cde898833f468432d4a4cb50fe857e98cba0442e423cad0eb353e291d89f45dc1b7bf05d90f23058bcee165f37a0bfd78e1ef7ff9d95601f0055c833e8c82b72238b01cead9a9a1ea798cf41b708c474d2fb88ba897eba580bd4a6f038ee8077931e65e480e548ba3401662f8d533965056956a1c1c8631b482462c0b34f46f4eaa0666370a03f09bf89a6597f2232f3a041061ac457ba40d434a797de831d03e8f59667f9a9188f34eeb2859b6eabf97b39e964b4429841cc5266ab08689fcbadf80c78a622e5d0edf65dac3e0911aaa296325e8a683ca0bee01947c0cc73762864e527891d30130226dbbe1250269d9dd4fd8144ff8b7c460f86f507f084ff2a907693d175e6457b207569514e18e6ae4233800dfe4505d7a60b89b6e2979b00644d8939215a754a4d25b5cbca7bc777005440aa1b189e9fbc7a34e32584fc23b953ab7450f9bdddfa9683b205c54959361507d96b1d02557139d4e2366d3ac33cf007a28c3a1444e8fc785c94c10fd03ebf3d876e1cdf8315e9dcf9dbe0564c0c2f1dbb946c1faeb2f2a59c25d65d2a0bd6b3322aa4004a54aaf5d98e6442b0c8e36b306808ecd84ac51e72587e9994d4c80a486853106126f1b628c11a6f23ef783f9b6ad90ff765d34b2f4f3b72f5ed5ca903365ee9f8e91b06ea389b2b42b05074a2871a36d6e4edc037978160523df5d0b44dd143094d5c4c6e08cfd10bf63cdf45dbe80b103bbe00a591fbd1310b529d92ef39d1fe98aa645516c31897ad66e917ab17fcb32bd35e42df7563d0fbf1adc7d59e4c4ea8ff1c08b7464c941db6ea561459b61cfd06fb9ffc9c8661e288048fb94224e15d7d9baf33bd8321f1c9444e6d9df1b710d2286a50cf38db076b32444f8afd78377ad507a260dc7bd08c403fc7c6c9cd9965118db9a37e65340bccb31bb37c7576f6eb6dc79809d82bda744dcc394b9909a661fe9df3473e39837ce9eac014c18f4afdfd02c011b80ab948ef81228721d7468f1962362fc87a913a080e8611245a26868a663416235c40cd5932300e63af329a292d2c4b7c58db24cc5cc7fe6b7e7cbc43449b7a65e8a5ff89dccd0621bbd2e7ab0a024b1af56ae121de1db46d76d6b679455da9d94d7408c078c027d85c44d87d66b175aec9fbf151445bd6dccc73941ab655add8b6238abaf7e8a0631a57116c2f54e411819f0be9d190afc593f21eec24fbc726d886698a660ecd4566b6ded9c82a5bd56571c742836365a7b29a890af1ebcf9d2880a4539eb4d53aadfd369f8379e7ecc011365b4856568637de484712b5d727c8df702dacd981670bfaa8e13300f13fed23b3df5ade8eccd2ee88986bd8b6743e412609240f14fdcdf7a792ce02a040774840b6fc60a5ad0bb4405af9b8723bf7884cde641e34c426ffc2ac60c36e21fa0f82f7fd328a631e950c189d7fdd145fb40b9cd549a039309cff04c1ee304f2de2fe67dced2e2d23720bb8c579263a8325065bfaee151a30c20605a4b8539735f6773f2f52b900f3533f01189204360f3e9e786b7b22bbba9cab3b9c26a7dbde96e7c88c4ae1edcf66b51a2c0050ea4e60e4d7d1eca0db73a4a7a0e8063cd289761948c4480d65ffdb1bf5acd0b2093c4e89726a8016917b00ed688065bccb9ec65879e1db037e39b9f5fde5c00df5a3ba675ab50e73539d337e44d3a917b9afdd6f397fc1baeee4a799ec9eb632e3093172117d5c85afaefb48d96794a3cddf6085758411875c68930f49f3aa8e70dcc778088db62e4f022d31fa0e781da637c43b6891d093abbb026d9a446a9b8a0c6e4d5f3148db94198083aa1be4ae1697dcadf65cfa0b3f743e89f1d4d3a63b0876c27f8a640f0563b28b6deef53190cbcd3d04d20c026f40c75c6c49caebafd8035fb96f3dc668339d8c5c3d640e5d01240afb4059e6a12866efffc7068c9081ce20b485927cadb0a711cf2c672b46452f82c2f5864a27b23a1ded0e91df7a4682469218ec1059aad85882a7128f7bf53d9fcdde315ce3151f1ba3be2e3e72ff29815052924e1dc54b162542d9d19f94bf9448eb54d41745bc2f9340aacfe0301957d5383d172195c3716206fa8ba864d083f584e2f4483a37f63ac53731cc4e73b4242a594c2549af3282c3eb874e920312c06ee44c662d5a6444afd59fe685b7e1d8322347af9663e390ab45aa88bdc04da82db015ae729228ff72d258dc57bdd5c1f571e7c9271bc1480475141d73492dcee020011ab9b40d85165131291918aba12306d0296f1373bd2fa7fcd5bf6afb5cebf9a0e4fd4fb629cc0a786e011cc0e034e093273e277ba1de0745ba837025fda1b3cfa01fbc5fd7384291ae7b5b8b8da10aa08af9b83fc2a552291560cdb165f4d1fd13bcd9e96114ab489eba93a60b48f0ed177fb04ab7ca660a0d19d6e21dab34700d748a65423593c42000799766259c3047bbed6d07997d7d496659521c1d3593070ca1b92e32b8f3c7e6ee42fe859b747f59279076908202c092a6eda5ff3dd775ef4f9d2842c1d13b08f95dd7ded247d9999baf47edb79f4fb3e4e161a9fd022c4730408256ee28a3ca2fe1baf4b35fc499bb7b80942690384ced2369e38cce506c3665c4e282f5f0d4fb51bb850e7f1337fbae1bfd33f768fd54713d71b6b28b3bdcadc827cb2209440cba3c95c79dba7580e9c20e7a21004aaf031dda40100755c829407574325e3145ffa061b0c933529b1a3edc69d36d6ba8505d89b379e1424624799d81020118b0872093cb3a20a1393616c5230859b2b58ee6553fa2158e6fb011ce56f68bdb3a9b77a017e230a4864981b950ea195f834c8cfc6fc3f281c9da6b9978e7c3cbacfb6af83d9f4ddf55346040c234f8f586bc112fd28e898e74cb5ea4df04f1ea140740383d4bacc10574d002246165ea9d32493ca2e98d85b93eefe2bda7df590bba199eb12ea7ffc892577ce2868d845e25669df90b99fc9ff640c7c5f2eeac01015db32fa2180faeb929a079d187f3f7bbb09fc1749c6dac305de18d1a8d10df3cb360c95648ef2f7d590dc243efc981b4e7ecbb76005c9e706c94575688ce1071089fc219471327102dc58991b5975f14dfd072cb72e7602020900d92fc761749836469ece904c60344218a66c16c140d732a44b02770576302214d91196673a5c3d6f856e04cfa018e19141179fc01384d3b6fb7f1ed046d81c45b0f5564db10ed979cfabdbac19c7fcdc29e58918d12f03ce5415c17b8c6491b9950ff9cab8205121cfa0e49d92c95b4aedc1ed8dc31a284b83ac0272647ba73c65461ef720357e57cfaa57ae2c0d86d6ff70e28bb27c75f31c82b49a8e6d50070aa7d7bc74caaf2126864b19d1696c2ca96858599b7009b9aa581679cc70bfb81b4da7151cf8a92d7ab1e380cf42e1570dcce61f240d6a062f5ad893fa1d43726761e0fab4cb9ab4c701fcbc82f1483249f9365f18a54856e22858d88fc02b0bb8a66a0f91a99ee4f86036e957c1d6487769050f744cb3a16e518c5b28e2b1f5383aace2640a33ab7ff25b85a19617c424debc869917003f6ffbca8663a77025b6242cffbb1aa0df4a31a9d074349fba7b87b0db528aaa1018e3cf3df4b2a00cfc3a70918adb6bb7715e2954ddf9b7c13e313b51b91e734c432786e09eafaecbb2ab7597453d1ba66e8ef5670a7f11b5ddfa3f53c0effc7a96f7c7f555e6a515523c2bb24162ff4fe7f97808e0927974579aff427e86c8d80abf6d97cebbb65d7cc80a98cd9ef4dd7376686ec7cd9305cf79f77b3ab0c3d8c6520d766fcd6ebbd4025da2c1bdf97cf0ae5662b872eb6bdb3fa6c2501eaa2b6e67cafc218e6da76133ba4775f4d843776222446a29c7c92338e5e6cb9aa6b52ebf3bfaee35daa7f04976f8daab594906fd438330b8bfd53335d3c831e3d5ea0c84bb438c6bdc8d2db1c0c397231421d4e12e3b883f0009400f9a1d4cb822cc9778a7acd37d3579e943e8257389d048dfa82f307236ca477912fcb168bd7fb7b9e9639f85ff0d91d2d49875aef68df9ba47f626f98040f0e3526b891b19f417258d5f3c3f27c4c1aa3348f0629969cb2571a4e0bd51c2cefadb54fce145305365a975046c714b0e835064b862d0a89778ef5c00612a05a41f6956cdb3f5ea778a75e9cde96e09f84ced7117b1b80792821e013984f5a46e2cb78d0f1f37b115ffa548e5d0097af512b3fc1a8d0040d1b1b9809b658ebb1710b98d55b77ead829c8edbefb429e2e216cb4e02df74c8206611400a3dd08de774d7699b0645b188a3df913da1732b273613308893cb989dec08413d34d49e25876311d868df79f6492cb9bdfbb44bb8b0aa1f2bc7ea9d1b2dce61fe6da9c6ace2ee525d71272a3f996b045712232b038226f561bb9c68fea9156e05359cc4326f8e5b328cae36fdf485cd5a", 0x1000}], 0x1}}], 0x2, 0x1) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000001780)="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", 0x139) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) r9 = syz_open_procfs$userns(0x0, &(0x7f00000005c0)) setns(r9, 0x20000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r10, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1m30.065491922s ago: executing program 0 (id=179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 1m30.000063497s ago: executing program 3 (id=180): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1bd317fa474e30da5eaa486df8bd220fc4eeef73881e0140e302d5b6d01a9f72ccf2c1d6adacd676198c6f9be3a4c41cb4eedb498f65163431668a03d0f47597b325e83199a8785b2ad3342fdfd19fd5dc780f42ad07c3560d", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="5142000910780046260e56e6e90225f309ec1ab2b8e2c107d6362286ad0af61ccec26a4fb19809dc92b558a1b917bc4fbaf35e7a1329d0409f9dd8bf04b34cdefb668c40f0bb12900a38e29e6cc3d2a455a392d87c12bc75caedb3a0a33ee6ffdc0639f944a5b4a9da2cec56907794d7c2dc46e136e66028aaa1fc4deeec887e173f48c538ee957b49c3d5d5cf7f5c6da9472b6d6708bc6e30b1e00a8ebb942db520f425109ec0d73e85761b1649eefd0f"], 0x36) unshare(0x62040200) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005304"], 0x3c}, 0x1, 0x0, 0x0, 0x240248d1}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c0, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x13) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"]) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000080)) 1m29.945813312s ago: executing program 0 (id=181): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x18, r2, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x20132, 0xffffffffffffffff, 0x391e1000) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1000000) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r5, 0x0, 0x3) syz_fuse_handle_req(r3, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044802}, 0x40804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 1m29.890479746s ago: executing program 32 (id=181): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x18, r2, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x20132, 0xffffffffffffffff, 0x391e1000) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1000000) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r5, 0x0, 0x3) syz_fuse_handle_req(r3, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044802}, 0x40804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 1m29.849301939s ago: executing program 3 (id=183): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="a3773e971b7c8665f58efb420274bde35790000000000000000000"]) 1m29.829299641s ago: executing program 33 (id=183): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="a3773e971b7c8665f58efb420274bde35790000000000000000000"]) 1m16.449359527s ago: executing program 2 (id=354): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000400000200000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000003f01"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x400007}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) 1m16.448790207s ago: executing program 2 (id=355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c00)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x401) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000f060104000000040000000000000001050001000700000006000b00040000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x200000024}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m16.448416357s ago: executing program 2 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="8b330000f90005"], 0x34}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="f932bb68200043000000010000000000fedbdf25060000001b00000008000000", @ANYRES32, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x24, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 'veth1_macvtap\x00'}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x6c, 0x0, &(0x7f0000000180)=[@dead_binder_done, @decrefs, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0xfffffffffffffc64, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x1, 0x2, 0xc}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) 1m16.200767398s ago: executing program 2 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x50, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400c050300"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0x0, {0xffffffff, 0x0, 0x0, 0x200000}}, 0x0}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) rt_sigaction(0x1f, &(0x7f0000000080)={0x0, 0x98000004, 0x0, {[0xffffffffffff4926]}}, 0x0, 0x0, 0x0) (async, rerun: 32) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'pimreg1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x6, [{0xffffff4d, 0x1}, {0x7ff, 0x40}, {0x4, 0x5}, {0x2, 0x1}, {0x5, 0x3}, {0x7ff, 0x5}]}}) (async) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 1m16.117074464s ago: executing program 4 (id=364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000140)=[@increfs, @request_death], 0x0, 0x0, 0x0}) (async) setuid(0xee00) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) tkill(r1, 0x3c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) (async) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) clock_adjtime(0x1, &(0x7f00000001c0)={0x7, 0x0, 0x6138921d, 0x2, 0x2, 0x7, 0x5, 0x5e4daae7, 0x0, 0x4, 0x3, 0x5, 0x5, 0x85, 0x485fb539, 0x8, 0x5, 0x7, 0x6, 0x7, 0x7, 0x6, 0x1, 0x5f, 0xfffffffffffffffe, 0x8df}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x10000001, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1008, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x7ff, 0xfffffff7fffffffe, 0x7fffffffffffffff, 0x7fffffff, 0x3, 0x2000000007, 0x4, 0x80000002, 0xfffffffffffffffb], 0x2, 0x1100}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, r9, {0x101}}, 0x18) 1m16.116414664s ago: executing program 4 (id=365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_create_resource$binfmt(0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000001e80)={{0x12, 0x1, 0x200, 0x5d, 0x75, 0x50, 0x40, 0x46d, 0x8a1, 0x264, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x1, 0xd9, 0x10, 0xf, [{{0x9, 0x4, 0x37, 0x2f, 0x0, 0xc4, 0x11, 0xe3, 0x8}}, {{0x9, 0x4, 0x9e, 0x6, 0x0, 0xb0, 0x58, 0xdf, 0x9}}]}}]}}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x8}], 0x1, 0x40001041, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x8}], 0x1, 0x40001041, 0x0) clock_adjtime(0x0, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m16.017855933s ago: executing program 5 (id=366): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x4, &(0x7f00000004c0)) 1m15.994525594s ago: executing program 5 (id=367): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x13, 0x0, &(0x7f0000000240)=0xffffffffffffff94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) sendto$packet(r0, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r1, 0x1, 0x1}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r4], 0x20}}, 0x40816) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) memfd_secret(0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@binder={0x73622a85, 0xa}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1m15.098235376s ago: executing program 2 (id=369): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa81404, 0x0) r1 = fsopen(&(0x7f0000000000)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x30, r2, 0x1a240000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m15.057175299s ago: executing program 2 (id=370): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r0, 0xe6683000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x1, 0x4) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m14.825377698s ago: executing program 4 (id=371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) epoll_create1(0x80000) (async) fcntl$dupfd(r1, 0x0, r2) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m14.823984108s ago: executing program 4 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) (async, rerun: 64) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r3, @ANYRES64=r4, @ANYBLOB="0000000001000000"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) (async, rerun: 32) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0) (rerun: 64) fcntl$addseals(r5, 0x409, 0x7) ftruncate(r5, 0x2) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 1m14.788984561s ago: executing program 4 (id=373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(0xffffffffffffffff, 0x0, r4) ioctl$KVM_IRQFD(r3, 0x40806685, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = dup2(r5, r0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x5) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88003) setns(r8, 0x10000000) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r10 = dup(r9) syz_genetlink_get_family_id$tipc(0x0, r10) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000f7", @ANYRES16=r12, @ANYBLOB="b70b00000000000000002a000000"], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.770707523s ago: executing program 5 (id=374): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 32) readlink(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)=""/164, 0xa4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0xfffffffffffffffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 1m14.67726616s ago: executing program 5 (id=375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) socket$inet(0x2, 0x4, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x6, 0x2, 0x40}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 1m14.67647573s ago: executing program 5 (id=376): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x142, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x1, 0x1, 0x3, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x2, 0x6, 0x0, 0xd, {{0xa, 0x24, 0x6, 0x0, 0x0, "1e1f01117f"}, {0x5, 0x24, 0x0, 0x66}, {0xd, 0x24, 0xf, 0x1, 0xe0000, 0x7, 0xa, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x7fff, 0x6}, @mdlm_detail={0xe0, 0x24, 0x13, 0x8, "0bec2914cd78277f0acc3709b5ffa2a0c4304a823c65c5a46d4c229e4cf79a5eb6893abf76ebc5f8bd572820ade4a50499c43c12024480abc1517ddf34997315f9a0fa4b998d9cb290f3a85ea31e45cad1952dcd351cdd9316801cba1a15b6574ad0a0f1b7d590508128f842e5d3bb98a9ef6c27e8f13fd80e4728da5a0f7c90b1166cb8a21ebbf6447e879156951f99f8729e127f03ef5c16b644881069d601308871d6ad872dc55e60ae871c711baecabcea18a4c51d5aedcb24a7499ed31f1863bdd546ee99fc05cd0cec8781d24fd009128ac13106512a6ee1af"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x8d, 0xe8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4c, 0xff, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0xfc, 0x3}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x0, 0x3, 0x3, 0x20, 0x7}, 0x2e, &(0x7f0000000200)={0x5, 0xf, 0x2e, 0x3, [@generic={0x1c, 0x10, 0x1, "1756fdf25571c28dd7f134f938d7c030a05a9401a8345bfc6c"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x8, 0x9}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x810}}, {0x7a, &(0x7f00000002c0)=@string={0x7a, 0x3, "6e5a43c1a92c467c4ad92dc04e1baf3818a6517f4637f4cca4eee770ad0c6312608b05a9c0e5d53158095e80b2d809e18a87bb266f82ade29eb896b19215159408082c9e8166772d25ab7d8e4932492e81b727123b78e496c9dea1f87d08a3604c5766770a02ba75bb6ab54aaac5f6204efd9f356cd21a93"}}, {0xf2, &(0x7f0000000340)=@string={0xf2, 0x3, "9380477780aae69383a7d98e7608590f7837404afcc2873a2cc1ab032cb8d90d63bafab2763693cb5773d9393f978ddb570d7d6975ba8e11d489a033afc1eba5f8b35742f426fb1eeb09df7e858f06fe713fc670e0763043fa5832f3b797623125073b9054d1110f7d4f5ef884ef4e87f4a425843b685417c79dda4b038ac2eed2647c0bc8aafe567c8a376e16f7adc31b66d2dae11179898b7bc2734a80f60b53649cccf233bc08d6900794be5cc478c12e345c54455fc04269d4425841fa9e58c12031bce49638b620981a9b41d751a7d6939d255e9d4b377ad81640a4af6deb5fe98db69120fe136c00566c7665ce"}}, {0x3c, &(0x7f0000000440)=@string={0x3c, 0x3, "e769c98125d4bfa58d5f2fd3a497901bc8979b73548435d868fd461356984d5463082bb8e253b0ec1937395f61a3a522f9f3297e3eafd549e8e2"}}]}) syz_usb_ep_write(r1, 0x8, 0xb8, &(0x7f0000000500)="e265b93355dbbd197fe38dc4b4fa498d584b52c8c66cc00d016b658dfd86efe87963d4b81077f55097aa5d1c69f5092371731b03094cf75f5a6192a4db34390a8ca8c0e8498afc02c7b2661d232bcf2e071d6f4a9d2e53fc2b82d91e253ddf00fb48d1fbf9fbeee9e2bd533d930a816b0d8a34b01d70b6018ffac21a21e6675255dd935581f78057ab451d49f0ccc60962d7515a5cc0c6689dc9e6a996969f4b28cf29ebf73ac2aaac31d95902f7691f46787ef722f06d65") r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x101800, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000600)=0x1) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r3, &(0x7f0000000680)=""/102, 0x66) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0x4, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0x6, [{@multicast2, 0x9}]}, @ssrr={0x89, 0x1f, 0x30, [@private=0xa010100, @multicast1, @remote, @multicast1, @multicast2, @broadcast, @multicast1]}]}}}}}) sendmsg$xdp(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x2c, 0x5, r6, 0x1f}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000800)="a43c8bda7045074c4f6ba1845921ded1ffb29d5ee682b53b0246f2714095f6c7b2069801efe785c51304b33a1371f2abc13bf241a3e679b96124678a35f010e7f73d9cf70109cda941107d420e3dad55f33b3d5f59a98a38a4cce0360039bc742b8e1c0216675157aebc0a52b4f9dcde27f871c17a4704b1e27b3888b8f91f19d2f778b2148e579884cd3f73c6a02d3d71a4c4bc4ef064ac5bd6f576aa4d0dd37d603d4e7d64f97139ce084015d32665bed1297c665230666c740da10c56fb81ff07670712ec814eee26db8abba4aa69", 0xd0}], 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r6}, 0x14) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r5) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x80000001}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000c00)=0xe8) quotactl_fd$Q_GETQUOTA(r4, 0x0, r9, &(0x7f0000000c40)) r10 = socket$key(0xf, 0x3, 0x2) sendto$packet(r5, &(0x7f0000000cc0)="200b9cbd07fca133ba73971d60d92a943878bc73a82ed2105ad4f297fa685802d5e435ce4e2c3c22dd662364d1bc8045bf40a7c1132cd5c2113e9be6c211bbf1a445a59090ed94e63b7b83b236d2408f8849239766", 0x55, 0x1, &(0x7f0000000d40)={0x11, 0x6, r8, 0x1, 0x4, 0x6, @remote}, 0x14) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r4) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5e}]}, 0x1c}}, 0xb7ac3ba91400e1fa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000ec0)={'sit0\x00', r8, 0x40, 0x40, 0x9, 0x1, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0xd4, 0x2f, 0x0, @remote, @broadcast, {[@ra={0x94, 0x4}]}}}}}) bind$bt_hci(r4, &(0x7f0000000f40)={0x1f, 0x4, 0x3}, 0x6) clock_gettime(0x0, &(0x7f0000002d40)={0x0, 0x0}) recvmmsg(r10, &(0x7f0000002c40)=[{{&(0x7f0000000f80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/123, 0x7b}, {&(0x7f0000001080)=""/83, 0x53}, {&(0x7f0000001100)=""/178, 0xb2}], 0x3, &(0x7f0000001200)=""/113, 0x71}, 0x1b35}, {{&(0x7f0000001280), 0x80, &(0x7f00000026c0)=[{&(0x7f0000001300)=""/6, 0x6}, {&(0x7f0000001340)=""/71, 0x47}, {&(0x7f00000013c0)=""/120, 0x78}, {&(0x7f0000001440)=""/53, 0x35}, {&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000001540)=""/83, 0x53}, {&(0x7f00000015c0)=""/227, 0xe3}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x8, &(0x7f0000002740)=""/49, 0x31}, 0x4}, {{&(0x7f0000002780)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002800)=""/18, 0x12}, {&(0x7f0000002840)=""/22, 0x16}], 0x2, &(0x7f00000028c0)=""/97, 0x61}, 0x2}, {{&(0x7f0000002940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/243, 0xf3}, {&(0x7f0000002ac0)}], 0x2, &(0x7f0000002b40)=""/233, 0xe9}, 0x3}], 0x4, 0x0, &(0x7f0000002d80)={r12, r13+10000000}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r3) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)={0x84, r14, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "81bfbefb92d56b6875fed8638885c43e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1648aa0d4921b4f39de974ab9e03f8c7"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="bbb6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "da00b7c01b418c4b994f237ef9482af0"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044800}, 0x4008000) getsockopt$IP_SET_OP_GET_BYINDEX(r10, 0x1, 0x53, &(0x7f0000002f80), &(0x7f0000002fc0)=0x28) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000003000)) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003140)={&(0x7f0000003080)={0x98, r14, 0x90a, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x543}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "6f5d232ba093472717ddd99af357dd37"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="23a1d45da45e"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}, @NL80211_ATTR_PMK={0x14, 0xfe, "f898f4bd9bbf07f7ab1fd476052df10c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "dba06c92cb5d31c73f15cb57a7a0ba0b"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x4001010) 1m14.507296574s ago: executing program 1 (id=377): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfeffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c00140014"], 0x30}}, 0xc840) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8, 0xcca5, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f00000002c0)) 1m14.493206575s ago: executing program 1 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b8, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7ff00}, @CTA_ZONE={0x6}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffffffffffff7fff}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}]}}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x81}]}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x10001, 0x3, 0x81]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xbd}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x15}, 0x4000010) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x260, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb6c, 0x2}}}}, [@NL80211_ATTR_MESH_SETUP={0xf4, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0xe3, 0x3, "2b628a6ef8b850d6bcc0a47aa0def4420923dbce3b173b164c5efe08ffaae8e5c90e46b5798701c422aa60ec83f0b2f23a2ff2642a9fcc7dc753e70c4f8421aa0804069ef359b0fb5d4a8316086b88185a0f57b429361b694910a36aa3d7226f95873011eedc98dfd288c0d4c87046c31f288a148d564bb36e3deb05c045ce37bbbaca6a686d693a43b9c99674eb20638854bead67552a0ee29de162b4478b8638b9c99dc80b1c7ebf1587caebeda05ced4b1a60b58c3c94315df57e421787b4c754c4a5a4680bb00c3d9a51d107f8e6dbbf53b326d7c22529192daca37507"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x400, 0x3, 0x0, 0x1, 0x25, 0x3, 0x575]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x9}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x5, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xc9c, 0x7, 0x2, 0x5, 0x101, 0x3, 0xffff]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x1}, {0x0, 0x2}, {0x4, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x7, 0x8fb, 0x2, 0xb, 0x8000, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x5, 0x2, 0x1, 0x60, 0xb, 0x36, 0x4, 0x3, 0x30, 0x18, 0x1, 0x3, 0x30, 0x18, 0x24, 0x18, 0x24, 0x16, 0x1b, 0x1, 0x36, 0x18, 0xb, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0x18, 0x6c, 0x0, 0xb, 0x0, 0xc, 0x16, 0x2, 0x6, 0x16, 0x1b, 0x12]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x16, 0x60, 0x6, 0x48, 0x24, 0x24, 0x30, 0x60, 0x30, 0x35, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x0, 0x4, 0x8, 0x0, 0x9, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x4, 0x6}, {0x7, 0x7}, {0x3, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff, 0x6, 0x7, 0x186, 0x4, 0x9, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xb}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x260}, 0x1, 0x0, 0x0, 0x81}, 0x4000845) clock_nanosleep(0x3, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000640)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x2000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@debug={'debug', 0x3d, 0x6000000}}, {@access_uid={'access', 0x3d, r3}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ',*[\xd9#^'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}]}}) epoll_pwait2(r1, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000980), &(0x7f00000009c0)={[0x1]}, 0x8) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000a00)=0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000a40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000a80)={"60b8ff38ba9f986d713aa6f5a5cbb870", r4, r5, {0xe, 0x1}, {0xb3, 0xfffffffd}, 0x5, [0xc7d, 0x10001, 0xb5, 0x101, 0x0, 0x9, 0xff, 0x10, 0xc29, 0xd207, 0x1, 0x7ff, 0xb43, 0x1, 0x9, 0x9]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000b80)={0x1f, 0x1, 0x2}, 0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, r7, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x34}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x5, 0x0, {0x9, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x5, 0x6}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000d40)={'\x00', 0x2, 0x2, 0x3}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000dc0)={"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"}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001200), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4082) syz_genetlink_get_family_id$tipc(&(0x7f0000001340), r1) futex(&(0x7f0000001380)=0x2, 0x8, 0x0, &(0x7f00000013c0)={0x0, 0x3938700}, &(0x7f0000001400)=0x1, 0x1) ppoll(&(0x7f0000001440)=[{r6, 0xa0}], 0x1, &(0x7f0000001480)={0x77359400}, &(0x7f00000014c0)={[0xc0]}, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000001500), &(0x7f0000001540)=0x30) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xa4, r7, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x6b}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2e}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x37}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x51}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8800}, 0x40001) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001880)={0x1, 0x2, 0x1000, 0x46, &(0x7f0000001740)="f7a423f0da4e49fb5cfb9ff49338e31a377646984f359197fc6505b1155bf99e13419c8cd3a17e1eb6b09b5d2e62e7dad25c6a1df771888d1b9a21c5f7e2c8d26d1884b19a3e", 0x8b, 0x0, &(0x7f00000017c0)="aaf4fb011898ccc1e586f3bb624b8937b3690d107bdbfa5ea2c7c2205777b2ddc49d049edf02ca3220ecdf534062a10b9b2e8765ba70c587f2df7951dcb7e219d492e411c4e737ac34459a8affb2b5583997fe6947bc1c3ea295001880d59bdb35a1ab506856ba8389d3286af73a51d5943528347015f46bb64d7faa87f8c75c47520fe9578266fe79ec56"}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40a2c004}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x80, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x40000010) bind$netlink(r1, &(0x7f0000001a80)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040010) 1m13.580111888s ago: executing program 1 (id=379): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000480)=""/253) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x10f) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x900000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000000001000000643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x0, 0x6}}, 0x28) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x80c04b, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) lseek(r3, 0xca3, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f6e0f000) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xeaffffff, 0x40018}, 0x200000a0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmmsg$inet(r7, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a8}}], 0x2, 0x4008440) 1m13.579614318s ago: executing program 1 (id=380): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="30010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000f0ff00000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000008000000000100000000000080b4000000000000000500"], 0x130}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a00070000000000000b55cf8b5e2d71fd9a1ce5dd11914795000000fe80000000000000000000000000001be000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000300000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pread64(r2, &(0x7f00000003c0)=""/46, 0x2e, 0x8001) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) 1m13.467180197s ago: executing program 1 (id=381): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2000, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m13.199146499s ago: executing program 1 (id=382): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x40010, r0, 0x4dd97000) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220b000000660cbb92"], 0x0}, 0x0) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4) (rerun: 32) futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) (rerun: 32) sendfile(r2, r2, 0x0, 0x24002de8) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x100000000, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9ff, 0x0, 0x8, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf}) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000408"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m11.476426828s ago: executing program 5 (id=383): io_setup(0x82, &(0x7f0000000240)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) r2 = socket(0x11, 0x3, 0x8) sendmsg$unix(r2, &(0x7f00000007c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)="a016e817", 0x4}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20, 0x80}, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000001200)='N-', 0x2, 0x4}]) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1m7.807010283s ago: executing program 4 (id=384): syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee780102030109023c0001100010000904130001ff06d20005240600010524009a830d240f0100000000060091008106241a00000804250200090505030800090905"], 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close_range(r0, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 55.644547742s ago: executing program 34 (id=382): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x40010, r0, 0x4dd97000) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220b000000660cbb92"], 0x0}, 0x0) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4) (rerun: 32) futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) (rerun: 32) sendfile(r2, r2, 0x0, 0x24002de8) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x100000000, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9ff, 0x0, 0x8, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf}) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000408"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 38.348791054s ago: executing program 35 (id=370): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r0, 0xe6683000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x1, 0x4) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.277693033s ago: executing program 36 (id=384): syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee780102030109023c0001100010000904130001ff06d20005240600010524009a830d240f0100000000060091008106241a00000804250200090505030800090905"], 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close_range(r0, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 0s ago: executing program 37 (id=383): io_setup(0x82, &(0x7f0000000240)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) r2 = socket(0x11, 0x3, 0x8) sendmsg$unix(r2, &(0x7f00000007c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)="a016e817", 0x4}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20, 0x80}, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000001200)='N-', 0x2, 0x4}]) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ge_slave_0) entered disabled state [ 24.430744][ T290] bridge_slave_0: entered allmulticast mode [ 24.437294][ T290] bridge_slave_0: entered promiscuous mode [ 24.455957][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.463038][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.470294][ T290] bridge_slave_1: entered allmulticast mode [ 24.477005][ T290] bridge_slave_1: entered promiscuous mode [ 24.525727][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.533060][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.540911][ T292] bridge_slave_0: entered allmulticast mode [ 24.547235][ T292] bridge_slave_0: entered promiscuous mode [ 24.561402][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.568741][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.576012][ T292] bridge_slave_1: entered allmulticast mode [ 24.582397][ T292] bridge_slave_1: entered promiscuous mode [ 24.702952][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.710053][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.717431][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.724480][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.746850][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.754129][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.761416][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.768501][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.783399][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.790456][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.797719][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.804762][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.836075][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.844131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.851605][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.859840][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.867486][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.880914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.888010][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.916515][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.923741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.931533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.939140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.967821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.974912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.006663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.013788][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.021923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.029095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.038023][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.045238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.065121][ T291] veth0_vlan: entered promiscuous mode [ 25.079664][ T292] veth0_vlan: entered promiscuous mode [ 25.096069][ T290] veth0_vlan: entered promiscuous mode [ 25.112413][ T292] veth1_macvtap: entered promiscuous mode [ 25.121191][ T291] veth1_macvtap: entered promiscuous mode [ 25.132310][ T289] veth0_vlan: entered promiscuous mode [ 25.150497][ T290] veth1_macvtap: entered promiscuous mode [ 25.171789][ T289] veth1_macvtap: entered promiscuous mode [ 25.191540][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.355368][ T333] tipc: Started in network mode [ 25.360268][ T333] tipc: Node identity f63be8f8db4c, cluster identity 4711 [ 25.376661][ T333] tipc: Enabled bearer , priority 0 [ 25.393657][ T330] tipc: Resetting bearer [ 25.404084][ T330] tipc: Disabling bearer [ 25.514760][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.533506][ T64] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 25.594463][ T360] rust_binder: 15: no such ref 2 [ 25.694466][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.711253][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.723549][ T374] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.726216][ T373] ======================================================= [ 25.726216][ T373] WARNING: The mand mount option has been deprecated and [ 25.726216][ T373] and is ignored by this kernel. Remove the mand [ 25.726216][ T373] option from the mount to silence this warning. [ 25.726216][ T373] ======================================================= [ 25.741278][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 25.775928][ T373] binder: Unknown parameter 'ãpntext' [ 25.796853][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 25.807649][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 25.816100][ T45] usb 3-1: Product: syz [ 25.820442][ T45] usb 3-1: Manufacturer: syz [ 25.825188][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25966, setting to 8 [ 25.836480][ T45] usb 3-1: SerialNumber: syz [ 25.842481][ T64] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 25.850894][ T374] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 25.851631][ T374] rust_binder: Error in use_page_slow: EBUSY [ 25.852416][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.862648][ T374] rust_binder: use_range failure EBUSY [ 25.870049][ T334] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 25.876388][ T374] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 25.882545][ T64] hub 2-1:1.0: bad descriptor, ignoring hub [ 25.890399][ T374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 25.903519][ T374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:26 [ 25.907301][ T64] hub 2-1:1.0: probe with driver hub failed with error -5 [ 25.930102][ T64] cdc_wdm 2-1:1.0: skipping garbage [ 25.935389][ T64] cdc_wdm 2-1:1.0: skipping garbage [ 25.941897][ T64] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 25.947986][ T64] cdc_wdm 2-1:1.0: Unknown control protocol [ 26.014394][ T382] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 26.053314][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.055494][ T45] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.114510][ T334] tipc: Started in network mode [ 26.119394][ T334] tipc: Node identity 82683368c2db, cluster identity 4711 [ 26.127215][ T334] tipc: Enabled bearer , priority 0 [ 26.146154][ T334] tipc: Disabling bearer [ 26.159457][ T394] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20'. [ 26.205760][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.221741][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 26.230994][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 26.239142][ T9] usb 4-1: Product: syz [ 26.243587][ T379] usb 2-1: USB disconnect, device number 2 [ 26.249832][ T9] usb 4-1: Manufacturer: syz [ 26.254915][ T9] usb 4-1: SerialNumber: syz [ 26.291507][ T397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 26.407106][ T380] usb 3-1: USB disconnect, device number 2 [ 26.423771][ T380] usblp0: removed [ 26.462290][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.495649][ T404] rust_binder: 5: no such ref 1 [ 26.662864][ T376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=376 comm=syz.3.16 [ 26.678254][ T9] usb 4-1: USB disconnect, device number 2 [ 26.690423][ T9] usblp0: removed [ 26.692129][ T421] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.708176][ T421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 26.729566][ T423] rust_binder: Write failure EFAULT in pid:19 [ 27.064087][ T463] IPv6: syztnl0: Disabled Multicast RS [ 27.173308][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.323961][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 27.331377][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 27.340210][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.350634][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.361082][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.366440][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 27.366456][ T36] audit: type=1400 audit(1756382686.659:176): avc: denied { accept } for pid=481 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.370378][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.404346][ T9] usb 3-1: Product: syz [ 27.408531][ T9] usb 3-1: Manufacturer: syz [ 27.413142][ T9] usb 3-1: SerialNumber: syz [ 27.457953][ T36] audit: type=1400 audit(1756382686.759:177): avc: denied { read write } for pid=486 comm="syz.0.46" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.459653][ T380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.483478][ T36] audit: type=1400 audit(1756382686.759:178): avc: denied { read write } for pid=486 comm="syz.0.46" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.517846][ T380] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 27.539424][ T36] audit: type=1400 audit(1756382686.759:179): avc: denied { open } for pid=486 comm="syz.0.46" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.819712][ T9] usb 3-1: 0:2 : does not exist [ 27.943337][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.092063][ T36] audit: type=1400 audit(1756382687.389:180): avc: denied { ioctl } for pid=504 comm="syz.1.51" path="socket:[4962]" dev="sockfs" ino=4962 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.095336][ T64] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 28.125152][ T64] usb 1-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 28.135921][ T64] usb 1-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 28.149228][ T64] usb 1-1: config 1 interface 0 has no altsetting 0 [ 28.157324][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.166450][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.174586][ T64] usb 1-1: Product: Ë憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓êŠÝœã„¿â†¦è£ŒèŽ¡ê‰³îµ°å’†çº¥ã‰¸å¾žà®´è®§ê±¿â¨”亓뉭얄슀葋ä¤ë¹—馿㞘톷注栴享◗◧報ꓨèŽè—·â¢žë¥ï¯•ì¢¢ë–¸æž±å˜¯ë–¦æ‘µï¹§ê²¥éˆáœ‡ä¤¬îªŠîŒ¹æ¼³ [ 28.196203][ T64] usb 1-1: SerialNumber: syz [ 28.201035][ T510] netlink: 8568 bytes leftover after parsing attributes in process `syz.1.52'. [ 28.210914][ T36] audit: type=1400 audit(1756382687.509:181): avc: denied { ioctl } for pid=509 comm="syz.1.52" path="socket:[3766]" dev="sockfs" ino=3766 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.211633][ T510] rust_binder: Error while translating object. [ 28.236679][ T510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.236775][ T36] audit: type=1400 audit(1756382687.509:182): avc: denied { ioctl } for pid=509 comm="syz.1.52" path="socket:[3765]" dev="sockfs" ino=3765 ioctlcmd=0x4b3a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.242882][ T510] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 28.242909][ T510] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:45 [ 28.252420][ T36] audit: type=1400 audit(1756382687.509:183): avc: denied { bind } for pid=509 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.289238][ T45] rust_binder: 509: removing orphan mapping 0:24 [ 28.289602][ T36] audit: type=1400 audit(1756382687.509:184): avc: denied { transfer } for pid=509 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.342972][ T36] audit: type=1400 audit(1756382687.619:185): avc: denied { mounton } for pid=512 comm="syz.1.53" path="/14/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 28.453897][ T9] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 28.469400][ T9] usb 3-1: USB disconnect, device number 3 [ 29.012341][ T522] binder: Bad value for 'stats' [ 29.012882][ T521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.026280][ T521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.038179][ T525] netlink: 'syz.2.57': attribute type 29 has an invalid length. [ 29.046055][ T525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 29.079634][ T521] binder: Unknown parameter 'fscontext?}' [ 29.177690][ T537] Zero length message leads to an empty skb [ 29.183943][ T537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=537 comm=syz.1.60 [ 29.198201][ T537] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 29.274215][ T127] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.280905][ T539] Bluetooth: hci0: Frame reassembly failed (-90) [ 29.609189][ T544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.617812][ T544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.628711][ T544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.637616][ T544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.921310][ T547] exFAT-fs (rnullb0): invalid boot record signature [ 29.927956][ T547] exFAT-fs (rnullb0): failed to read boot sector [ 29.934383][ T547] exFAT-fs (rnullb0): failed to recognize exfat type [ 30.173290][ T542] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.229517][ T552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.239028][ T552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.323636][ T542] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 30.332234][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.343094][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.354069][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.365621][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.376438][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.387296][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.398270][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.409152][ T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.419746][ T542] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.32 [ 30.428981][ T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.437854][ T542] usb 3-1: config 0 descriptor?? [ 30.646174][ T31] usb 3-1: USB disconnect, device number 4 [ 30.764920][ T561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.773780][ T561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.937361][ T569] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 30.937381][ T569] rust_binder: Error while translating object. [ 30.946261][ T569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.952497][ T569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 31.160983][ T572] rust_binder: Error while translating object. [ 31.170557][ T572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.176986][ T572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 31.210396][ T576] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 31.323280][ T540] Bluetooth: hci0: command 0x1003 tx timeout [ 31.329448][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.369794][ T587] netlink: 'syz.0.78': attribute type 39 has an invalid length. [ 31.421769][ T593] tmpfs: Unknown parameter 'grpquota' [ 31.464095][ T595] __vm_enough_memory: pid: 595, comm: syz.0.81, bytes: 18014402804453376 not enough memory for the allocation [ 31.554673][ T601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.676862][ T608] mmap: syz.3.85 (608) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.753246][ T610] rust_binder: Error while translating object. [ 31.753292][ T610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.759628][ T610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 31.812368][ T617] FAT-fs (rnullb0): bogus number of reserved sectors [ 31.819116][ T617] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 31.844092][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 31.847844][ T293] rust_binder: 618: removing orphan mapping 0:24 [ 31.943271][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 32.091851][ T635] overlay: Unknown parameter 'fowner>18446744073709551615' [ 32.100443][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 32.111595][ T31] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 32.121166][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.133506][ T31] usb 4-1: config 0 descriptor?? [ 32.139153][ T608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.346617][ T651] rust_binder: Error while translating object. [ 32.346642][ T651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.353081][ T651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:65 [ 32.363495][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 32.379065][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.386477][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 32.386493][ T36] audit: type=1400 audit(1756382691.689:217): avc: denied { getopt } for pid=652 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.388216][ T31] usb 4-1: USB disconnect, device number 3 [ 32.517549][ T657] pim6reg1: entered promiscuous mode [ 32.522914][ T657] pim6reg1: entered allmulticast mode [ 32.530968][ T36] audit: type=1400 audit(1756382691.829:218): avc: denied { getopt } for pid=656 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.599385][ T659] binder: Binderfs stats mode cannot be changed during a remount [ 32.898626][ T674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.107'. [ 32.924442][ T674] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 33.097823][ T681] tmpfs: Unknown parameter 'ôhuge' [ 33.116602][ T683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.116637][ T683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:101 [ 33.117972][ T36] audit: type=1400 audit(1756382692.419:219): avc: denied { getopt } for pid=682 comm="syz.2.111" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.165042][ T687] rust_binder: 103: no such ref 1 [ 33.170625][ T687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 33.183117][ T690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.192372][ T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:106 [ 33.214753][ T36] audit: type=1400 audit(1756382692.519:220): avc: denied { read } for pid=692 comm="syz.2.114" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.248231][ T36] audit: type=1400 audit(1756382692.519:221): avc: denied { open } for pid=692 comm="syz.2.114" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.256793][ T64] cdc_ether 1-1:1.0: skipping garbage [ 33.277165][ T64] cdc_ether 1-1:1.0: skipping garbage [ 33.288694][ T36] audit: type=1400 audit(1756382692.519:222): avc: denied { ioctl } for pid=692 comm="syz.2.114" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.294363][ T697] binder: Unknown parameter 'contextÀ' [ 33.323190][ T64] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 33.338492][ T703] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 33.364958][ T36] audit: type=1400 audit(1756382692.669:223): avc: denied { bind } for pid=699 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.374514][ T708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 33.393413][ T36] audit: type=1400 audit(1756382692.669:224): avc: denied { write } for pid=699 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.394415][ T706] rust_binder: Got transaction with invalid offset. [ 33.416072][ T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.422799][ T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 33.462750][ T723] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.472928][ T724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.479878][ T723] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.482138][ T724] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 33.545683][ T732] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 376, limit: 4256, size: 4096) [ 33.555421][ T732] rust_binder: Error while translating object. [ 33.566597][ T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.572789][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 33.582431][ T36] audit: type=1400 audit(1756382692.869:225): avc: denied { append } for pid=738 comm="syz.2.129" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.621847][ T36] audit: type=1400 audit(1756382692.919:226): avc: denied { write } for pid=729 comm="syz.0.126" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.717651][ T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.761469][ T765] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 33.850554][ T776] fuse: Unknown parameter 'group_id?00000000000000000000' [ 33.853308][ T64] usb 4-1: device descriptor read/64, error -71 [ 33.893274][ T342] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 34.023293][ T342] usb 2-1: device descriptor read/64, error -71 [ 34.103316][ T64] usb 4-1: device descriptor read/64, error -71 [ 34.263279][ T342] usb 2-1: device descriptor read/64, error -71 [ 34.343308][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.473341][ T64] usb 4-1: device descriptor read/64, error -71 [ 34.503294][ T342] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 34.633274][ T342] usb 2-1: device descriptor read/64, error -71 [ 34.713336][ T64] usb 4-1: device descriptor read/64, error -71 [ 34.738037][ T786] rust_binder: Error while translating object. [ 34.738060][ T786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.744280][ T786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 34.760041][ T787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.770095][ T788] rust_binder: Error while translating object. [ 34.788136][ T788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.788164][ T788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 34.833627][ T64] usb usb4-port1: attempt power cycle [ 34.836490][ T799] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 34.893364][ T342] usb 2-1: device descriptor read/64, error -71 [ 34.911861][ T802] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 34.919659][ T802] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.147'. [ 34.928913][ T803] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 34.936615][ T803] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.147'. [ 34.970579][ T806] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 35.003431][ T342] usb usb2-port1: attempt power cycle [ 35.055159][ T811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'. [ 35.077785][ T813] random: crng reseeded on system resumption [ 35.099082][ T813] netlink: 'syz.2.151': attribute type 11 has an invalid length. [ 35.107262][ T813] exFAT-fs (rnullb0): invalid boot record signature [ 35.114013][ T813] exFAT-fs (rnullb0): failed to read boot sector [ 35.120436][ T813] exFAT-fs (rnullb0): failed to recognize exfat type [ 35.173283][ T64] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.195271][ T64] usb 4-1: device descriptor read/8, error -71 [ 35.197010][ T816] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 35.209080][ T816] rust_binder: Write failure EINVAL in pid:157 [ 35.324326][ T64] usb 4-1: device descriptor read/8, error -71 [ 35.343401][ T342] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 35.361390][ T824] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.364329][ T342] usb 2-1: device descriptor read/8, error -71 [ 35.387952][ T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.396622][ T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.504568][ T342] usb 2-1: device descriptor read/8, error -71 [ 35.573318][ T64] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.594301][ T64] usb 4-1: device descriptor read/8, error -71 [ 35.724438][ T64] usb 4-1: device descriptor read/8, error -71 [ 35.743276][ T342] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 35.764471][ T342] usb 2-1: device descriptor read/8, error -71 [ 35.833368][ T64] usb usb4-port1: unable to enumerate USB device [ 35.894747][ T342] usb 2-1: device descriptor read/8, error -71 [ 36.003523][ T342] usb usb2-port1: unable to enumerate USB device [ 36.310892][ T860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.319542][ T860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.328376][ T860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.328404][ T860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 36.337869][ T860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.347246][ T860] rust_binder: Read failure Err(EFAULT) in pid:186 [ 36.397386][ T380] rust_binder: 857: removing orphan mapping 0:8 [ 36.411918][ T864] binder: Bad value for 'max' [ 36.718940][ T380] rust_binder: 871: removing orphan mapping 0:24 [ 36.853320][ T64] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.875964][ T380] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.887734][ T881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.893947][ T380] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.900799][ T881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.003295][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 37.003961][ T885] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 37.009754][ T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.015533][ T885] rust_binder: inc_ref_done called when no active inc_refs [ 37.025722][ T885] rust_binder: 111: no such ref 3 [ 37.026137][ T64] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 37.032937][ T885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:111 [ 37.048235][ T64] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 37.067280][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.075293][ T64] usb 4-1: Product: syz [ 37.079539][ T64] usb 4-1: Manufacturer: syz [ 37.084196][ T64] usb 4-1: SerialNumber: syz [ 37.089441][ T64] usb 4-1: config 0 descriptor?? [ 37.313503][ T64] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.329677][ T64] asix 4-1:0.0: probe with driver asix failed with error -71 [ 37.339585][ T64] usb 4-1: USB disconnect, device number 8 [ 37.487099][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 37.597569][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 37.597893][ T36] audit: type=1400 audit(1756382696.899:255): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.650184][ T342] usb 1-1: USB disconnect, device number 2 [ 37.789483][ T911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.789715][ T36] audit: type=1400 audit(1756382697.089:256): avc: denied { read write } for pid=910 comm="syz.1.184" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.842633][ T915] /dev/rnullb0: Can't open blockdev [ 37.863398][ T36] audit: type=1400 audit(1756382697.089:257): avc: denied { open } for pid=910 comm="syz.1.184" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.903270][ T36] audit: type=1400 audit(1756382697.089:258): avc: denied { ioctl } for pid=910 comm="syz.1.184" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.952928][ T36] audit: type=1400 audit(1756382697.189:259): avc: denied { mounton } for pid=917 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.003446][ T917] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.010604][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.022859][ T917] bridge_slave_0: entered allmulticast mode [ 38.030197][ T917] bridge_slave_0: entered promiscuous mode [ 38.037016][ T917] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.044337][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.051718][ T917] bridge_slave_1: entered allmulticast mode [ 38.058204][ T917] bridge_slave_1: entered promiscuous mode [ 38.227777][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.235079][ T922] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.242293][ T922] bridge_slave_0: entered allmulticast mode [ 38.249024][ T922] bridge_slave_0: entered promiscuous mode [ 38.262980][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.270282][ T922] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.277815][ T922] bridge_slave_1: entered allmulticast mode [ 38.284488][ T922] bridge_slave_1: entered promiscuous mode [ 38.308706][ T917] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.315820][ T917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.323120][ T917] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.330995][ T917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.373103][ T946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.398726][ T946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.416445][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.424131][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.447089][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.454169][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.474920][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.481998][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.508525][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.515616][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.527666][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.534742][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.566262][ T917] veth0_vlan: entered promiscuous mode [ 38.583176][ T922] veth0_vlan: entered promiscuous mode [ 38.593153][ T917] veth1_macvtap: entered promiscuous mode [ 38.604107][ T64] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.621295][ T922] veth1_macvtap: entered promiscuous mode [ 38.640979][ T36] audit: type=1400 audit(1756382697.939:260): avc: denied { mounton } for pid=917 comm="syz-executor" path="/root/syzkaller.KwO5p7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.696948][ T36] audit: type=1400 audit(1756382697.999:261): avc: denied { mount } for pid=954 comm="syz.4.182" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 38.719334][ T955] devpts: called with bogus options [ 38.749449][ T965] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 38.763903][ T965] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 38.784059][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.799189][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 38.808618][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 38.819670][ T64] usb 2-1: Product: syz [ 38.827137][ T64] usb 2-1: Manufacturer: syz [ 38.832864][ T64] usb 2-1: SerialNumber: syz [ 38.858287][ T36] audit: type=1400 audit(1756382698.159:262): avc: denied { bind } for pid=970 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.040980][ T64] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 39.143388][ T542] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 39.263848][ T380] usb 2-1: USB disconnect, device number 7 [ 39.274845][ T380] usblp0: removed [ 39.294333][ T542] usb 6-1: config 0 has an invalid interface number: 189 but max is 0 [ 39.303350][ T379] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.305491][ T542] usb 6-1: config 0 has no interface number 0 [ 39.324364][ T542] usb 6-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 39.336872][ T542] usb 6-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 39.365235][ T542] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 39.375328][ T983] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 39.376725][ T984] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 39.394809][ T542] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 39.405043][ T542] usb 6-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 39.419706][ T542] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 39.428820][ T542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.437008][ T542] usb 6-1: Product: syz [ 39.441170][ T542] usb 6-1: Manufacturer: syz [ 39.446001][ T542] usb 6-1: SerialNumber: syz [ 39.456486][ T542] usb 6-1: config 0 descriptor?? [ 39.460016][ T36] audit: type=1400 audit(1756382698.759:263): avc: denied { create } for pid=985 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 39.470003][ T974] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 39.489217][ T379] usb 3-1: Using ep0 maxpacket: 32 [ 39.501779][ T379] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.519492][ T379] usb 3-1: config 10 has an invalid interface number: 238 but max is 0 [ 39.533283][ T379] usb 3-1: config 10 has no interface number 0 [ 39.539823][ T379] usb 3-1: config 10 interface 238 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.553351][ T379] usb 3-1: config 10 interface 238 has no altsetting 0 [ 39.561623][ T379] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice= c.c6 [ 39.571386][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.580095][ T379] usb 3-1: Product: Ј [ 39.584288][ T379] usb 3-1: Manufacturer: ဌ [ 39.593737][ T379] usb 3-1: SerialNumber: 喹淸í¦é’“뜕橘뛳䯿审쨖㺜㳲㨻鱇햜䗵솓编歛㾯ჾ୽냈뛲䖌옢뮜탢ꦉ⃻頻旎袸ä ìº‰â¿¤îŽ†Û‰â£‡ç”¥åƒ¥ [ 39.604521][ T36] audit: type=1400 audit(1756382698.899:264): avc: denied { wake_alarm } for pid=991 comm="syz.4.203" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.740749][ T999] __vm_enough_memory: pid: 999, comm: syz.4.206, bytes: 18014402804453376 not enough memory for the allocation [ 39.777188][ T1001] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 39.791515][ T1001] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 39.815275][ T1001] bridge0: port 3(ip6gretap0) entered blocking state [ 39.822457][ T1001] bridge0: port 3(ip6gretap0) entered disabled state [ 39.822963][ T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.830583][ T1001] ip6gretap0: entered allmulticast mode [ 39.845846][ T1001] ip6gretap0: entered promiscuous mode [ 39.851539][ T1001] bridge0: port 3(ip6gretap0) entered blocking state [ 39.853449][ T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.858409][ T1001] bridge0: port 3(ip6gretap0) entered forwarding state [ 39.885954][ T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.910313][ T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.922213][ T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.931682][ T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.943106][ T379] pl2303 3-1:10.238: required endpoints missing [ 39.953887][ T379] usb 3-1: USB disconnect, device number 5 [ 40.117969][ T542] ums-alauda 6-1:0.189: USB Mass Storage device detected [ 40.147933][ T542] scsi host1: usb-storage 6-1:0.189 [ 40.157063][ T542] usb 6-1: USB disconnect, device number 2 [ 40.475533][ T1010] rust_binder: Write failure EFAULT in pid:195 [ 40.476297][ T1010] rust_binder: Write failure EFAULT in pid:195 [ 40.575998][ T1026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.617391][ T1031] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 40.617411][ T1031] rust_binder: Error while translating object. [ 40.630197][ T1031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.636993][ T1031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 40.721250][ T1040] tmpfs: Bad value for 'size' [ 40.983353][ T542] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 41.124142][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 41.133803][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 41.134670][ T542] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 41.143944][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 41.155522][ T542] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.167410][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 41.175116][ T542] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 41.185356][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 41.205942][ T542] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 41.207266][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 41.224179][ T542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.232905][ T542] usb 6-1: config 0 descriptor?? [ 41.233585][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 41.239330][ T542] usb-storage 6-1:0.0: USB Mass Storage device detected [ 41.249529][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 41.264679][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 41.267729][ T542] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 41.280684][ T1048] kvm: kvm [1046]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 41.363890][ T1054] rust_binder: Error while translating object. [ 41.363946][ T1054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 41.382163][ T1054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 41.426308][ T1057] can0: slcan on ptm0. [ 41.703282][ T542] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 41.734804][ T64] usb 6-1: USB disconnect, device number 3 [ 41.804051][ T293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.854390][ T542] usb 3-1: config 0 has no interfaces? [ 41.859983][ T542] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 41.869098][ T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.877769][ T542] usb 3-1: config 0 descriptor?? [ 41.964495][ T293] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.979024][ T293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 41.988143][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 41.996252][ T293] usb 5-1: Product: syz [ 42.000408][ T293] usb 5-1: Manufacturer: syz [ 42.005017][ T293] usb 5-1: SerialNumber: syz [ 42.086892][ T379] usb 3-1: USB disconnect, device number 6 [ 42.155207][ T1057] can0 (unregistered): slcan off ptm0. [ 42.212618][ T293] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 42.322164][ T46] Bluetooth: hci0: Frame reassembly failed (-90) [ 42.328823][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.472629][ T64] usb 5-1: USB disconnect, device number 2 [ 42.481766][ T64] usblp0: removed [ 42.505660][ T1130] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 42.505678][ T1130] rust_binder: Error while translating object. [ 42.514482][ T1130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.520653][ T1130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 42.686776][ T1159] rust_binder: Error while translating object. [ 42.695999][ T1159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 42.702235][ T1159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:218 [ 42.724420][ T1161] 9pnet_fd: Insufficient options for proto=fd [ 42.750614][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 42.750630][ T36] audit: type=1400 audit(1756382702.049:297): avc: denied { ioctl } for pid=1162 comm="syz.2.242" path="socket:[9049]" dev="sockfs" ino=9049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.797311][ T1170] netlink: 'syz.4.244': attribute type 12 has an invalid length. [ 42.805628][ T1169] rust_binder: Got transaction with invalid offset. [ 42.805702][ T1169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.812614][ T1169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 42.822868][ T1169] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.832150][ T1169] rust_binder: Read failure Err(EFAULT) in pid:227 [ 42.843267][ T379] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 42.886658][ T36] audit: type=1400 audit(1756382702.189:298): avc: denied { read } for pid=1171 comm="syz.4.245" path="socket:[10249]" dev="sockfs" ino=10249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.890757][ T1172] tipc: Started in network mode [ 42.914766][ T1172] tipc: Node identity e62a89a91948, cluster identity 4711 [ 42.922010][ T1172] tipc: Enabled bearer , priority 0 [ 42.934625][ T1171] tipc: Disabling bearer [ 42.947178][ T1185] netlink: 80 bytes leftover after parsing attributes in process `syz.2.248'. [ 42.957110][ T36] audit: type=1400 audit(1756382702.259:299): avc: denied { create } for pid=1184 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 42.957323][ T1185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.977685][ T1185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 42.993270][ T379] usb 2-1: device descriptor read/64, error -71 [ 43.116844][ T36] audit: type=1400 audit(1756382702.419:300): avc: denied { mounton } for pid=1188 comm="syz.2.250" path="/proc/241/cgroup" dev="proc" ino=9557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 43.243319][ T379] usb 2-1: device descriptor read/64, error -71 [ 43.463359][ T293] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 43.483361][ T379] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 43.613359][ T379] usb 2-1: device descriptor read/64, error -71 [ 43.620843][ T293] usb 5-1: unable to get BOS descriptor or descriptor too short [ 43.629492][ T293] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 43.639545][ T293] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 43.649982][ T293] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 43.666009][ T293] usb 5-1: string descriptor 0 read error: -22 [ 43.672593][ T293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.681764][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.691531][ T1191] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 43.698975][ T1191] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 43.706711][ T293] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 43.788018][ T36] audit: type=1400 audit(1756382703.089:301): avc: denied { append } for pid=1193 comm="syz.2.252" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.863320][ T379] usb 2-1: device descriptor read/64, error -71 [ 43.909740][ T1191] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 43.909757][ T1191] rust_binder: Error while translating object. [ 43.918479][ T1191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.924724][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 43.935269][ T542] usb 5-1: USB disconnect, device number 3 [ 43.973657][ T379] usb usb2-port1: attempt power cycle [ 44.313340][ T379] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 44.334375][ T379] usb 2-1: device descriptor read/8, error -71 [ 44.363525][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.364123][ T540] Bluetooth: hci0: command 0x1003 tx timeout [ 44.474313][ T379] usb 2-1: device descriptor read/8, error -71 [ 44.594655][ T36] audit: type=1400 audit(1756382703.899:302): avc: denied { mount } for pid=1242 comm="syz.5.263" name="/" dev="ramfs" ino=9675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.713297][ T379] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 44.737219][ T379] usb 2-1: device descriptor read/8, error -71 [ 44.745615][ T1252] rust_binder: Error in use_page_slow: ESRCH [ 44.745634][ T1252] rust_binder: use_range failure ESRCH [ 44.752065][ T1252] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 44.758073][ T1252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.768316][ T1252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:58 [ 44.884578][ T379] usb 2-1: device descriptor read/8, error -71 [ 44.909571][ T36] audit: type=1400 audit(1756382704.209:303): avc: denied { write } for pid=1260 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.916374][ T1267] netlink: 104 bytes leftover after parsing attributes in process `syz.5.270'. [ 44.941547][ T1268] netlink: 104 bytes leftover after parsing attributes in process `syz.5.270'. [ 44.947603][ T36] audit: type=1400 audit(1756382704.219:304): avc: denied { append } for pid=1264 comm="syz.5.270" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.957045][ T1265] rust_binder: Error while translating object. [ 44.979249][ T1265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.983279][ T36] audit: type=1400 audit(1756382704.219:305): avc: denied { nlmsg_read } for pid=1264 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.986493][ T1265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 45.013351][ T36] audit: type=1400 audit(1756382704.259:306): avc: denied { mount } for pid=1264 comm="syz.5.270" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 45.046951][ T379] usb usb2-port1: unable to enumerate USB device [ 45.241539][ T1287] fuse: Bad value for 'group_id' [ 45.246565][ T1287] fuse: Bad value for 'group_id' [ 45.252732][ T1287] rust_binder: Error while translating object. [ 45.252755][ T1287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.259020][ T1287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 45.275081][ T542] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.281418][ T1290] netlink: 7 bytes leftover after parsing attributes in process `syz.5.280'. [ 45.322469][ T1294] netlink: 'syz.5.282': attribute type 29 has an invalid length. [ 45.354283][ T1299] capability: warning: `syz.5.284' uses deprecated v2 capabilities in a way that may be insecure [ 45.366838][ T1299] rust_binder: 90: no such ref 2 [ 45.372109][ T1299] rust_binder: Write failure EINVAL in pid:90 [ 45.383266][ T64] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.383759][ T1301] netlink: 108 bytes leftover after parsing attributes in process `syz.5.285'. [ 45.407738][ T1301] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 45.415223][ T542] usb 5-1: device descriptor read/64, error -71 [ 45.431917][ T1303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.286'. [ 45.440794][ T1303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.286'. [ 45.449869][ T1303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.286'. [ 45.553262][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 45.559586][ T64] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 45.568893][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.579115][ T64] usb 3-1: config 0 descriptor?? [ 45.588113][ T64] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 45.663289][ T542] usb 5-1: device descriptor read/64, error -71 [ 45.665737][ T1311] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 115) [ 45.669729][ T1311] rust_binder: Error while translating object. [ 45.680354][ T1311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.686719][ T1311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 45.793288][ T64] usb 3-1: Detected FT232B [ 45.913308][ T542] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.013279][ T342] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 46.043454][ T542] usb 5-1: device descriptor read/64, error -71 [ 46.174416][ T342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.184867][ T342] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.196165][ T64] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.206546][ T342] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.224948][ T342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.243333][ T342] usb 6-1: SerialNumber: syz [ 46.283315][ T542] usb 5-1: device descriptor read/64, error -71 [ 46.393423][ T542] usb usb5-port1: attempt power cycle [ 46.456647][ T1318] rust_binder: Error while translating object. [ 46.456697][ T1318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.463048][ T1318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:102 [ 46.475040][ T342] usb 6-1: 0:2 : does not exist [ 46.493512][ T342] usb 6-1: USB disconnect, device number 4 [ 46.545953][ T1281] rust_binder: Error in use_page_slow: ESRCH [ 46.545986][ T1281] rust_binder: use_range failure ESRCH [ 46.552032][ T1281] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 46.557703][ T1281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.565722][ T1281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:259 [ 46.624207][ T1323] SELinux: Context P is not valid (left unmapped). [ 46.645947][ T64] usb 3-1: USB disconnect, device number 7 [ 46.654419][ T64] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.664646][ T64] ftdi_sio 3-1:0.0: device disconnected [ 46.676689][ T1327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 46.743265][ T542] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.760917][ T1335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 46.774303][ T542] usb 5-1: device descriptor read/8, error -71 [ 46.787689][ T1337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.787718][ T1337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.904319][ T542] usb 5-1: device descriptor read/8, error -71 [ 46.933307][ T379] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.084445][ T379] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 47.095692][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.100137][ T1351] __vm_enough_memory: pid: 1351, comm: syz.5.300, bytes: 18014402804453376 not enough memory for the allocation [ 47.106893][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.127053][ T64] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.129263][ T379] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 47.153282][ T542] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 47.171790][ T379] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 47.174350][ T542] usb 5-1: device descriptor read/8, error -71 [ 47.183240][ T379] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 47.203239][ T379] usb 2-1: Manufacturer: syz [ 47.213470][ T379] usb 2-1: config 0 descriptor?? [ 47.293348][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 47.299991][ T64] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 47.308432][ T64] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 47.317176][ T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 47.326224][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.336314][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 47.346359][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 47.359599][ T64] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 47.368893][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.376965][ T542] usb 5-1: device descriptor read/8, error -71 [ 47.383987][ T64] usb 3-1: config 0 descriptor?? [ 47.493408][ T542] usb usb5-port1: unable to enumerate USB device [ 47.591853][ T64] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 47.604078][ T64] usb 3-1: USB disconnect, device number 8 [ 47.611028][ T64] usblp0: removed [ 47.620637][ T379] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 47.627918][ T379] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 47.636613][ T379] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 47.884442][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 47.884460][ T36] audit: type=1400 audit(1756382707.189:323): avc: denied { lock } for pid=1331 comm="syz.1.294" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.915380][ T379] usb 2-1: USB disconnect, device number 12 [ 48.290352][ T1399] /dev/rnullb0: Can't open blockdev [ 48.315478][ T1403] rust_binder: Error while translating object. [ 48.315580][ T1403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 48.321979][ T1403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:139 [ 48.345793][ T1405] netlink: 'syz.5.317': attribute type 29 has an invalid length. [ 48.362888][ T1405] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.317'. [ 48.373878][ T36] audit: type=1400 audit(1756382708.677:324): avc: denied { mount } for pid=1404 comm="syz.5.317" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.374823][ T1405] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 48.413592][ T36] audit: type=1400 audit(1756382708.717:325): avc: denied { unmount } for pid=922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.435147][ T1192] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 48.455069][ T1413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 48.464752][ T1413] bridge0: port 3(veth0_to_bridge) entered blocking state [ 48.471890][ T1413] bridge0: port 3(veth0_to_bridge) entered disabled state [ 48.479164][ T1413] veth0_to_bridge: entered allmulticast mode [ 48.485612][ T1413] veth0_to_bridge: entered promiscuous mode [ 48.491607][ T1413] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 48.504187][ T1413] bridge0: port 3(veth0_to_bridge) entered blocking state [ 48.511393][ T1413] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 48.544003][ T1417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.593253][ T1192] usb 5-1: Using ep0 maxpacket: 32 [ 48.606966][ T1192] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.623278][ T1192] usb 5-1: config 0 has no interface number 0 [ 48.629394][ T1192] usb 5-1: config 0 interface 184 has no altsetting 0 [ 48.647334][ T1192] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 48.661696][ T1192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.670932][ T1192] usb 5-1: Product: syz [ 48.675410][ T1192] usb 5-1: Manufacturer: syz [ 48.680112][ T1192] usb 5-1: SerialNumber: syz [ 48.690841][ T1192] usb 5-1: config 0 descriptor?? [ 48.703724][ T1192] smsc75xx v1.0.0 [ 48.741069][ T36] audit: type=1400 audit(1756382709.037:326): avc: denied { read } for pid=1420 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.877016][ T36] audit: type=1400 audit(1756382709.177:327): avc: denied { map } for pid=1429 comm="syz.5.325" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.920228][ T36] audit: type=1400 audit(1756382709.217:328): avc: denied { mount } for pid=1434 comm="syz.5.326" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 48.959007][ T36] audit: type=1400 audit(1756382709.247:329): avc: denied { unmount } for pid=922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 48.981178][ T1437] rust_binder: Error while translating object. [ 48.981212][ T1437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 48.987449][ T1437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:160 [ 49.079735][ T36] audit: type=1400 audit(1756382709.377:330): avc: denied { read } for pid=1447 comm="syz.5.332" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.154850][ T36] audit: type=1400 audit(1756382709.377:331): avc: denied { open } for pid=1447 comm="syz.5.332" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.205621][ T36] audit: type=1400 audit(1756382709.417:332): avc: denied { read write } for pid=1444 comm="syz.2.331" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.288779][ T1460] netlink: 240 bytes leftover after parsing attributes in process `syz.2.335'. [ 49.813667][ T1490] netlink: 76 bytes leftover after parsing attributes in process `syz.1.344'. [ 50.134609][ T1500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.347'. [ 50.197485][ T127] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.618031][ T1502] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 5) [ 50.618060][ T1502] rust_binder: Error while translating object. [ 50.646501][ T1502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.654164][ T1502] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 50.663817][ T1502] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:168 [ 50.682370][ T10] rust_binder: 1501: removing orphan mapping 0:24 [ 50.920055][ T1508] rust_binder: Error in use_page_slow: ESRCH [ 50.920080][ T1508] rust_binder: use_range failure ESRCH [ 50.933146][ T1508] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 50.945287][ T1508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.962334][ T1508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:173 [ 51.203324][ T1192] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 51.224192][ T1192] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 51.235722][ T1523] rust_binder: 317: no such ref 0 [ 51.240929][ T1523] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 51.248322][ T1192] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 51.259492][ T1192] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 51.269494][ T1523] rust_binder: Failed to allocate buffer. len:18446744073709550816, is_oneway:false [ 51.269553][ T1523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 51.279322][ T1192] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 51.299582][ T1523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:317 [ 51.299666][ T1192] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 51.318347][ T1192] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 51.327924][ T1192] usb 5-1: USB disconnect, device number 8 [ 51.417644][ T342] rust_binder: 1529: removing orphan mapping 0:8 [ 51.461991][ T1541] rust_binder: 132: no such ref 0 [ 51.467378][ T1541] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.475083][ T1542] rust_binder: 132: no such ref 0 [ 51.490626][ T1548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.623323][ T64] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.783309][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 51.783315][ T1192] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 51.797211][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.810075][ T64] usb 3-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 51.819139][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.827701][ T64] usb 3-1: config 0 descriptor?? [ 51.853300][ T342] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 51.933973][ T1192] usb 5-1: not running at top speed; connect to a high speed hub [ 51.942444][ T1192] usb 5-1: config 1 has an invalid interface number: 55 but max is 1 [ 51.950592][ T1192] usb 5-1: config 1 has an invalid interface number: 158 but max is 1 [ 51.958886][ T1192] usb 5-1: config 1 has no interface number 0 [ 51.965021][ T1192] usb 5-1: config 1 has no interface number 1 [ 51.971209][ T1192] usb 5-1: config 1 interface 55 has no altsetting 0 [ 51.977938][ T1192] usb 5-1: config 1 interface 158 has no altsetting 0 [ 51.986225][ T1192] usb 5-1: New USB device found, idVendor=046d, idProduct=08a1, bcdDevice= 2.64 [ 51.995503][ T1192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.003687][ T1192] usb 5-1: Product: syz [ 52.007850][ T1192] usb 5-1: Manufacturer: syz [ 52.012435][ T1192] usb 5-1: SerialNumber: syz [ 52.023265][ T342] usb 6-1: Using ep0 maxpacket: 16 [ 52.029668][ T342] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 52.040296][ T342] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 52.050591][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.058645][ T342] usb 6-1: Product: syz [ 52.062899][ T342] usb 6-1: Manufacturer: syz [ 52.067601][ T342] usb 6-1: SerialNumber: syz [ 52.072923][ T342] usb 6-1: config 0 descriptor?? [ 52.079125][ T342] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 52.087301][ T342] usb 6-1: Detected FT232B [ 52.203274][ T540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.221728][ T1547] rust_binder: Write failure EINVAL in pid:138 [ 52.229244][ T1192] usb 5-1: USB disconnect, device number 9 [ 52.243521][ T64] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 52.252904][ T64] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 52.261154][ T64] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 52.269350][ T64] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 52.277503][ T64] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 52.296101][ T342] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 52.304005][ T342] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 52.313541][ T342] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 52.323389][ T342] usb 6-1: USB disconnect, device number 5 [ 52.332366][ T342] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 52.346044][ T342] ftdi_sio 6-1:0.0: device disconnected [ 52.495449][ T1192] usb 3-1: USB disconnect, device number 9 [ 52.524444][ T1562] rust_binder: Error while translating object. [ 52.524495][ T1562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.530698][ T1562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326 [ 52.889758][ T1581] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 53.130232][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 53.130250][ T36] audit: type=1400 audit(1756382713.427:350): avc: denied { ioctl } for pid=1586 comm="syz.1.378" path="socket:[11634]" dev="sockfs" ino=11634 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.143369][ T1192] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 53.196105][ T36] audit: type=1400 audit(1756382713.497:351): avc: denied { getopt } for pid=1586 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.335446][ T1192] usb 6-1: config 1 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.346762][ T1192] usb 6-1: config 1 interface 0 altsetting 253 bulk endpoint 0x82 has invalid maxpacket 1024 [ 53.357098][ T1192] usb 6-1: config 1 interface 0 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 53.387110][ T1192] usb 6-1: config 1 interface 0 has no altsetting 0 [ 53.401909][ T1192] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.411251][ T1192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.424829][ T1192] usb 6-1: Product: 婮셃ⲩ籆쀭᭎㢯ꘘ网ã†ì³´îº¤çƒ§à²­á‰£è­ ê¤…㇕क़èžî„‰èžŠâš»è‰¯îŠ­ë¢žë†–á–’é•à ˆé¸¬æšâµ·ê¬¥è¹½ã‰‰â¹‰ëžáˆ§ç »é›¤ï¢¡à¡½æ‚£åŒç¦ÈŠç–ºæª»äªµì–ªâƒ¶ïµŽã–Ÿí‰¬éŒš [ 53.447755][ T1192] usb 6-1: Manufacturer: à  [ 53.452526][ T1192] usb 6-1: SerialNumber: è‚“ç‡êª€é¦êžƒè»™à¡¶à½™ã¸ä©€ì‹¼ãª‡ì„¬Î«ë ¬à·™ë©£ë‹ºã™¶ì®“ç—㧙霿ൗ楽멵ᆎ觔㎠솯ꗫë¸ä‰—⛴ỻ৫统辅︆㽱烆盠䌰壺鞷ㅢܥ逻텔༑佽èŽê“´è¥æ »á”鷇䯚訃擒୼꫈图詼渷쎭昛ᇡ襹箋ç‚èŠà¯¶æ‘“천ã²à¢¼éƒ–é‡å²¾ç£„â»å°´ä•”ìŸæ¥‚䋔䅘黺션ㄠ㢖₶᪘䆛凗횧鶓帥ä®ç¨·á›˜ê‘€æ¶¯å¿«è·©é†¶ï¸ æ°“嘀癬칥 [ 53.489335][ T1583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 53.750257][ T36] audit: type=1400 audit(1756382714.047:352): avc: denied { read } for pid=1582 comm="syz.5.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.800883][ T36] audit: type=1400 audit(1756382714.097:353): avc: denied { getopt } for pid=1582 comm="syz.5.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.965127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.977202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.989639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.001716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.003255][ T1595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 54.013886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.027503][ T36] audit: type=1400 audit(1756382714.317:354): avc: denied { mount } for pid=1594 comm="syz.1.380" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.034760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.068580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.080682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.092990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.105156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.291060][ T36] audit: type=1400 audit(1756382714.587:355): avc: denied { mounton } for pid=1596 comm="syz.1.381" path="/proc/230/cgroup" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.686701][ T379] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.086122][ T379] usb 2-1: Using ep0 maxpacket: 16 [ 55.129257][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.175645][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.213639][ T379] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 55.346590][ T379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.436040][ T379] usb 2-1: config 0 descriptor?? [ 56.123237][ T1192] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 56.214540][ T1602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.223080][ T1602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.645601][ T1602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.700647][ T1192] usb 6-1: USB disconnect, device number 6 [ 58.404432][ T1602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.412881][ T1602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.973240][ C1] net_ratelimit: 158907 callbacks suppressed [ 58.973261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 58.973291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.979336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 58.991614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.003420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 59.015577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.027542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 59.039591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 59.051569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 59.063684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.353227][ C0] sched: DL replenish lagged too much [ 60.495769][ T1602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.983249][ C1] net_ratelimit: 159422 callbacks suppressed [ 63.983271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 63.983335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.989352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 64.001330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.013322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 64.025741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.037645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 64.049900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.061640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 64.073602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.993257][ C0] net_ratelimit: 159899 callbacks suppressed [ 68.993280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.993296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 68.999505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.011273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 69.023299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.035400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 69.047434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 69.059305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 69.071434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.083156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 74.003255][ C1] net_ratelimit: 159689 callbacks suppressed [ 74.003276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 74.003286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.003345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 74.009345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 74.021533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.033288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 74.045154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.057229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 74.069319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 74.081253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 75.364406][ T379] usbhid 2-1:0.0: can't add hid device: -71 [ 75.370378][ T379] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 79.013215][ C1] net_ratelimit: 158449 callbacks suppressed [ 79.013236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 79.013262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.019304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 79.031311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 79.043275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 79.055364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.067196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 79.079332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.091429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 79.103436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.023253][ C0] net_ratelimit: 158176 callbacks suppressed [ 84.023276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.023291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 84.029366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.041277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 84.053244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.065227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 84.077337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.089063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 84.101006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.113046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 89.033222][ C0] net_ratelimit: 168800 callbacks suppressed [ 89.033244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.033277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 89.039520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.051334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 89.063287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.075463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 89.087405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.099290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 89.111257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.123233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 94.043210][ C0] net_ratelimit: 172586 callbacks suppressed [ 94.043232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.043238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 94.043290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 94.049317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.061219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 94.073139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.085187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 94.097209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.109113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 94.121152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.053247][ C1] net_ratelimit: 166089 callbacks suppressed [ 99.053269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 99.053277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.053320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.059338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 99.071501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.083296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 99.095332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.107318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 99.119279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.131267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 99.246047][ T379] usb 2-1: USB disconnect, device number 13 [ 104.063224][ C1] net_ratelimit: 161832 callbacks suppressed [ 104.063247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 104.063263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.069310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 104.081635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.093431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 104.105403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.117545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 104.129501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.141496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 104.153448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.073205][ C1] net_ratelimit: 161615 callbacks suppressed [ 109.073227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 109.073237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.073278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.079323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 109.091490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.103266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 109.115250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.127128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 109.138985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.151000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 114.083207][ C1] net_ratelimit: 161245 callbacks suppressed [ 114.083228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 114.083408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.089287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 114.101345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.113285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 114.125210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.137186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 114.149139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.161032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 114.173362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.093209][ C1] net_ratelimit: 157017 callbacks suppressed [ 119.093232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 119.093252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.093515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.099331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 119.111411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.123336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 119.135277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.147376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 119.159350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.171294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 124.103201][ C1] net_ratelimit: 155131 callbacks suppressed [ 124.103223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 124.103244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.109284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 124.121360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.133291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 124.145364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.157221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 124.169186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.181160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 124.193362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.113205][ C1] net_ratelimit: 158185 callbacks suppressed [ 129.113226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 129.113245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.119291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 129.131338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.143342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 129.155373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.167617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 129.179846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.191718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 129.203855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.123197][ C0] net_ratelimit: 158852 callbacks suppressed [ 134.123217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.123245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 134.129298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.141170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 134.153120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.165203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 134.177391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.189053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 134.201308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.213041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 139.133206][ C1] net_ratelimit: 157582 callbacks suppressed [ 139.133228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 139.133329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.139303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 139.151419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.163301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 139.175253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.187263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 139.199311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.211170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 139.223283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.143192][ C0] net_ratelimit: 164338 callbacks suppressed [ 144.143214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.143251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 144.149344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.161227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 144.173183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.185160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 144.197211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.209086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 144.221069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.233095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 147.189208][ T1606] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 147.613244][ T1606] CPU: 1 UID: 0 PID: 1606 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 147.613280][ T1606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.613297][ T1606] Call Trace: [ 147.613304][ T1606] [ 147.613318][ T1606] __dump_stack+0x21/0x30 [ 147.613353][ T1606] dump_stack_lvl+0x10c/0x190 [ 147.613376][ T1606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.613401][ T1606] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 147.613428][ T1606] dump_stack+0x19/0x20 [ 147.613451][ T1606] warn_alloc+0x1bc/0x2a0 [ 147.613476][ T1606] ? kasan_save_free_info+0x4a/0x60 [ 147.613503][ T1606] ? __cfi_warn_alloc+0x10/0x10 [ 147.613526][ T1606] ? __get_vm_area_node+0x1dc/0x3a0 [ 147.613550][ T1606] ? kcov_ioctl+0x5d/0x5c0 [ 147.613571][ T1606] __vmalloc_node_range_noprof+0x68e/0x1420 [ 147.613592][ T1606] ? locks_remove_posix+0x38b/0x580 [ 147.613613][ T1606] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 147.613637][ T1606] ? expand_files+0xd6/0x700 [ 147.613658][ T1606] vmalloc_user_noprof+0x77/0x90 [ 147.613680][ T1606] ? kcov_ioctl+0x5d/0x5c0 [ 147.613702][ T1606] kcov_ioctl+0x5d/0x5c0 [ 147.613725][ T1606] ? bpf_lsm_file_ioctl+0xd/0x20 [ 147.613752][ T1606] ? security_file_ioctl+0x34/0xd0 [ 147.613773][ T1606] ? __cfi_kcov_ioctl+0x10/0x10 [ 147.613796][ T1606] __se_sys_ioctl+0x135/0x1b0 [ 147.613818][ T1606] __x64_sys_ioctl+0x7f/0xa0 [ 147.613838][ T1606] x64_sys_call+0x1878/0x2ee0 [ 147.613864][ T1606] do_syscall_64+0x58/0xf0 [ 147.613888][ T1606] ? clear_bhb_loop+0x50/0xa0 [ 147.613909][ T1606] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.613928][ T1606] RIP: 0033:0x7f0bb478e7eb [ 147.613951][ T1606] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 147.613967][ T1606] RSP: 002b:00007ffddea34920 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.613989][ T1606] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f0bb478e7eb [ 147.614004][ T1606] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000df [ 147.614018][ T1606] RBP: 00007f0bb49b66c8 R08: 00000000000000da R09: 0000000000000000 [ 147.614031][ T1606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.614044][ T1606] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 147.614058][ T1606] [ 147.614070][ T1606] Mem-Info: [ 148.965198][ T1606] active_anon:12758 inactive_anon:3 isolated_anon:0 [ 148.965198][ T1606] active_file:17282 inactive_file:2238 isolated_file:0 [ 148.965198][ T1606] unevictable:0 dirty:20 writeback:0 [ 148.965198][ T1606] slab_reclaimable:3925 slab_unreclaimable:141335 [ 148.965198][ T1606] mapped:17581 shmem:165 pagetables:485 [ 148.965198][ T1606] sec_pagetables:0 bounce:0 [ 148.965198][ T1606] kernel_misc_reclaimable:0 [ 148.965198][ T1606] free:1471072 free_pcp:2892 free_cma:0 [ 149.153201][ C1] net_ratelimit: 149289 callbacks suppressed [ 149.153221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 149.153249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.159436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 149.171442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.183382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 149.195355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.207416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 149.219723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.231564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 149.243653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.195438][ T1606] Node 0 active_anon:51116kB inactive_anon:12kB active_file:69128kB inactive_file:8960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70416kB dirty:60kB writeback:28kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5600kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no [ 151.138857][ T1606] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:5752kB free_cma:0kB [ 154.163193][ C1] net_ratelimit: 154988 callbacks suppressed [ 154.163215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 154.163362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.169279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 154.181449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.193345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 154.205405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.217407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 154.229357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.241700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 154.253672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.393370][ T1606] lowmem_reserve[]: 0 3921 3921 [ 154.398281][ T1606] Normal free:3011524kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51960kB inactive_anon:12kB active_file:69128kB inactive_file:8968kB unevictable:0kB writepending:68kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1596kB local_pcp:308kB free_cma:0kB [ 155.633946][ T1606] lowmem_reserve[]: 0 0 0 [ 155.638351][ T1606] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 155.673589][ T1606] Normal: 126*4kB (ME) 104*8kB (ME) 1503*16kB (UME) 313*32kB (UME) 2761*64kB (UME) 1423*128kB (UME) 533*256kB (UME) 278*512kB (UME) 48*1024kB (UME) 13*2048kB (UME) 552*4096kB (UM) = 3009800kB [ 156.254908][ T1606] 19686 total pagecache pages [ 156.259636][ T1606] 3 pages in swap cache [ 156.304696][ T1606] Free swap = 124436kB [ 156.308891][ T1606] Total swap = 124996kB [ 156.313062][ T1606] 2097051 pages RAM [ 157.963946][ T1606] 0 pages HighMem/MovableOnly [ 157.968746][ T1606] 351530 pages reserved [ 157.972931][ T1606] 0 pages cma reserved [ 158.865786][ T1606] Memory allocations: [ 158.869853][ T1606] 0 B 0 init/main.c:1370 func:do_initcalls [ 159.173177][ C1] net_ratelimit: 159666 callbacks suppressed [ 159.173199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 159.173251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.179260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 159.191314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.203314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 159.215363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.227335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 159.239284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.251158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 159.263196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.696072][ T1606] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 164.183181][ C1] net_ratelimit: 169786 callbacks suppressed [ 164.183202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 164.183249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.189286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 164.201389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.213253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 164.225250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.237225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 164.249202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.261086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 164.273053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.923851][ T1606] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 164.931522][ T1606] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 169.193185][ C1] net_ratelimit: 170813 callbacks suppressed [ 169.193207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 169.193343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.199349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 169.211480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.223295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 169.235235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.247202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 169.259181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.271153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 169.283092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.203201][ C1] net_ratelimit: 169379 callbacks suppressed [ 174.203223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 174.203248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.209283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 174.221246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.233248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 174.245348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.257195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 174.269146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.281021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 174.293118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.253924][ T1606] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 175.261862][ T1606] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 175.334184][ T1606] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 175.342206][ T1606] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 175.529643][ T1606] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 175.864488][ T1606] 0 B 0 init/initramfs.c:101 func:find_link [ 179.213198][ C0] net_ratelimit: 154453 callbacks suppressed [ 179.213227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.213251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 179.219476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.231419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 179.243419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.255393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 179.267354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.279308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 179.291396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.303255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 181.054660][ T341] bridge_slave_1: left allmulticast mode [ 181.158057][ T341] bridge_slave_1: left promiscuous mode [ 181.233578][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.423988][ T341] bridge_slave_0: left allmulticast mode [ 181.453307][ T341] bridge_slave_0: left promiscuous mode [ 181.474646][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.774527][ T341] bridge_slave_1: left allmulticast mode [ 181.867860][ T341] bridge_slave_1: left promiscuous mode [ 181.933787][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.393891][ T341] bridge_slave_0: left allmulticast mode [ 182.524626][ T341] bridge_slave_0: left promiscuous mode [ 182.713404][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.223173][ C1] net_ratelimit: 148499 callbacks suppressed [ 184.223194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 184.223288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.229276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 184.241751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.253674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 184.265728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.277742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 184.289823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.301722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 184.313683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.233169][ C1] net_ratelimit: 159763 callbacks suppressed [ 189.233189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 189.233220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.239255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 189.251326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.263319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 189.275448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.287144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 189.299224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.311096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 189.323063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.243188][ C0] net_ratelimit: 159334 callbacks suppressed [ 194.243208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.243236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 194.249241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.261255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 194.273473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.285338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 194.297325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.309190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 194.321372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.333163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 199.253169][ C0] net_ratelimit: 159426 callbacks suppressed [ 199.253191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.253193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 199.253246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 199.259407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.271215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 199.283295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.295172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 199.307041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.319045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 199.331117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.263168][ C0] net_ratelimit: 160570 callbacks suppressed [ 204.263190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.263213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 204.269257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.281183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 204.293181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.305027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 204.317300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.329047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 204.341145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.352921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 207.566264][ T37] INFO: task syz.5.383:1603 blocked for more than 123 seconds. [ 207.664377][ T37] Not tainted syzkaller #0 [ 207.669355][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.754899][ T37] task:syz.5.383 state:D stack:0 pid:1603 tgid:1603 ppid:922 flags:0x00004004 [ 208.804956][ T37] Call Trace: [ 208.808274][ T37] [ 208.811203][ T37] __schedule+0x1322/0x1df0 [ 209.273172][ C1] net_ratelimit: 154766 callbacks suppressed [ 209.273193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 209.273293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.279335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 209.291320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.303349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 209.315403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.327264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 209.339245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.351138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 209.363201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.475154][ T37] ? __sched_text_start+0x10/0x10 [ 209.495496][ T37] ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10 [ 209.502223][ T37] ? __call_rcu_common+0x41f/0x700 [ 209.763208][ T37] schedule+0xc6/0x240 [ 209.803876][ T37] schedule_timeout+0xb2/0x3a0 [ 209.808696][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 209.907136][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 209.912785][ T37] ? __percpu_ref_switch_mode+0x345/0x5f0 [ 209.918636][ T37] wait_for_common+0x359/0x630 [ 209.923457][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 209.929366][ T37] ? wait_for_completion+0x40/0x40 [ 209.934605][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 209.940425][ T37] ? percpu_ref_kill_and_confirm+0xf4/0x220 [ 209.946457][ T37] ? kill_ioctx+0x2b0/0x3d0 [ 209.951005][ T37] wait_for_completion+0x1c/0x40 [ 209.955993][ T37] exit_aio+0x2df/0x3b0 [ 209.960158][ T37] ? __cfi_exit_aio+0x10/0x10 [ 209.964858][ T37] ? uprobe_clear_state+0x2cd/0x340 [ 209.970078][ T37] __mmput+0x30/0x320 [ 209.974201][ T37] ? mmput+0x4d/0x170 [ 209.978184][ T37] mmput+0x55/0x170 [ 209.981993][ T37] do_exit+0x918/0x2630 [ 209.986166][ T37] ? swake_up_one_online_ipi+0x30/0x30 [ 209.991635][ T37] ? __cfi_do_exit+0x10/0x10 [ 209.996251][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 210.002409][ T37] ? __kasan_check_write+0x18/0x20 [ 210.007564][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 210.012698][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 210.019012][ T37] do_group_exit+0x22a/0x300 [ 210.023633][ T37] ? __kasan_check_write+0x18/0x20 [ 210.028762][ T37] get_signal+0x139d/0x14f0 [ 210.033472][ T37] arch_do_signal_or_restart+0x96/0x720 [ 210.039121][ T37] ? blkcg_maybe_throttle_current+0x16c/0xb40 [ 210.045312][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 210.051585][ T37] ? __kasan_check_read+0x15/0x20 [ 210.056659][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 210.062741][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 210.068402][ T37] do_syscall_64+0x64/0xf0 [ 210.072829][ T37] ? clear_bhb_loop+0x50/0xa0 [ 210.077531][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 210.083442][ T37] RIP: 0033:0x7fdb7f58ebe9 [ 210.087860][ T37] RSP: 002b:00007ffd0e4b5788 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 210.096305][ T37] RAX: 0000000000000000 RBX: 000000000000e3f7 RCX: 00007fdb7f58ebe9 [ 210.104297][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 210.112275][ T37] RBP: 00007fdb7f7b7da0 R08: 0000000000000001 R09: 000000060e4b5a7f [ 210.120280][ T37] R10: 0000001b2cd20000 R11: 0000000000000246 R12: 00007fdb7f7b5fac [ 210.128288][ T37] R13: 00007fdb7f7b5fa0 R14: ffffffffffffffff R15: 00007ffd0e4b58a0 [ 210.136287][ T37] [ 210.163884][ T37] NMI backtrace for cpu 1 [ 210.163903][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 210.163930][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.163941][ T37] Call Trace: [ 210.163947][ T37] [ 210.163956][ T37] __dump_stack+0x21/0x30 [ 210.163984][ T37] dump_stack_lvl+0x10c/0x190 [ 210.164008][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 210.164033][ T37] dump_stack+0x19/0x20 [ 210.164056][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 210.164079][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 210.164102][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 210.164125][ T37] ? sched_show_task+0x379/0x560 [ 210.164150][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 210.164171][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 210.164195][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 210.164218][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 210.164242][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 210.164265][ T37] watchdog+0xd8f/0xed0 [ 210.164290][ T37] ? __cfi_watchdog+0x10/0x10 [ 210.164314][ T37] ? __kasan_check_read+0x15/0x20 [ 210.164339][ T37] ? __kthread_parkme+0x138/0x180 [ 210.164357][ T37] ? schedule+0xc6/0x240 [ 210.164382][ T37] kthread+0x2c7/0x370 [ 210.164400][ T37] ? __cfi_watchdog+0x10/0x10 [ 210.164424][ T37] ? __cfi_kthread+0x10/0x10 [ 210.164443][ T37] ret_from_fork+0x67/0xa0 [ 210.164468][ T37] ? __cfi_kthread+0x10/0x10 [ 210.164487][ T37] ret_from_fork_asm+0x1a/0x30 [ 210.164515][ T37] [ 210.164522][ T37] Sending NMI from CPU 1 to CPUs 0: [ 210.349562][ C0] NMI backtrace for cpu 0 [ 210.349576][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 210.349599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.349609][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 210.349649][ C0] RIP: 0010:stack_trace_consume_entry+0xa2/0x2a0 [ 210.349675][ C0] Code: 22 41 ff ce 41 0f b6 04 17 84 c0 0f 85 8d 01 00 00 45 89 34 24 b0 01 e9 a2 00 00 00 31 c0 e9 9b 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 10 00 48 89 75 c0 74 2b 49 89 ff 49 89 d4 4c 89 45 c8 4d 89 [ 210.349687][ C0] RSP: 0018:ffffc90000006ff0 EFLAGS: 00000a02 [ 210.349698][ C0] RAX: 1ffff92000000e20 RBX: 1ffff92000000e22 RCX: 0000000000007000 [ 210.349708][ C0] RDX: dffffc0000000000 RSI: ffffffff84957377 RDI: ffffc90000007100 [ 210.349720][ C0] RBP: ffffc90000007038 R08: ffffc90000007110 R09: ffffc90000007108 [ 210.349731][ C0] R10: 0000000000000006 R11: ffffffff81744340 R12: ffffc9000000710c [ 210.349741][ C0] R13: 1ffff92000000e21 R14: 0000000000000000 R15: 1ffff92000000e21 [ 210.349752][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 210.349765][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.349775][ C0] CR2: 00007f7b4fee8740 CR3: 0000000147062000 CR4: 00000000003526b0 [ 210.349788][ C0] Call Trace: [ 210.349793][ C0] [ 210.349800][ C0] ? __kernel_text_address+0x11/0x40 [ 210.349820][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 210.349841][ C0] arch_stack_walk+0x12d/0x170 [ 210.349863][ C0] ? netlink_broadcast_filtered+0x10e7/0x1200 [ 210.349886][ C0] stack_trace_save+0x9d/0xe0 [ 210.349905][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 210.349931][ C0] ? kmem_cache_free+0x1c1/0x510 [ 210.349954][ C0] ? netlink_broadcast_filtered+0x10e7/0x1200 [ 210.349974][ C0] ? nlmsg_notify+0xf1/0x1b0 [ 210.349993][ C0] ? rtnl_notify+0x9e/0xd0 [ 210.350015][ C0] ? fdb_notify+0xce/0x150 [ 210.350033][ C0] ? br_fdb_update+0x4b7/0x680 [ 210.350050][ C0] ? br_handle_frame_finish+0x39c/0x1720 [ 210.350071][ C0] ? br_handle_frame+0x5a6/0xba0 [ 210.350090][ C0] ? __netif_receive_skb_core+0xf4b/0x3940 [ 210.350110][ C0] kasan_save_track+0x3e/0x80 [ 210.350124][ C0] ? kasan_save_track+0x3e/0x80 [ 210.350137][ C0] ? kasan_save_free_info+0x4a/0x60 [ 210.350156][ C0] ? __kasan_slab_free+0x5f/0x80 [ 210.350170][ C0] ? kmem_cache_free+0x1c1/0x510 [ 210.350190][ C0] ? __kfree_skb+0x18f/0x210 [ 210.350211][ C0] ? consume_skb+0x65/0x1a0 [ 210.350234][ C0] kasan_save_free_info+0x4a/0x60 [ 210.350253][ C0] __kasan_slab_free+0x5f/0x80 [ 210.350268][ C0] kmem_cache_free+0x1c1/0x510 [ 210.350288][ C0] ? __kfree_skb+0x18f/0x210 [ 210.350307][ C0] __kfree_skb+0x18f/0x210 [ 210.350325][ C0] ? netlink_broadcast_filtered+0x10e7/0x1200 [ 210.350345][ C0] consume_skb+0x65/0x1a0 [ 210.350363][ C0] netlink_broadcast_filtered+0x10e7/0x1200 [ 210.350384][ C0] nlmsg_notify+0xf1/0x1b0 [ 210.350405][ C0] rtnl_notify+0x9e/0xd0 [ 210.350425][ C0] fdb_notify+0xce/0x150 [ 210.350442][ C0] br_fdb_update+0x4b7/0x680 [ 210.350460][ C0] ? __cfi_br_fdb_update+0x10/0x10 [ 210.350478][ C0] ? br_pass_frame_up+0x126/0x1c0 [ 210.350499][ C0] br_handle_frame_finish+0x39c/0x1720 [ 210.350521][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 210.350544][ C0] br_handle_frame+0x5a6/0xba0 [ 210.350565][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 210.350585][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 210.350604][ C0] ? ip6_mc_input+0x4f3/0x670 [ 210.350621][ C0] ? ip6_mc_input+0x4f3/0x670 [ 210.350638][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 210.350654][ C0] ? qdisc_run_end+0x120/0x120 [ 210.350671][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 210.350688][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 210.350703][ C0] ? ipv6_rcv+0xed/0x220 [ 210.350718][ C0] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 210.350738][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 210.350753][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 210.350768][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 210.350787][ C0] ? resched_curr+0x113/0x430 [ 210.350810][ C0] process_backlog+0x3e5/0xae0 [ 210.350831][ C0] __napi_poll+0xd3/0x610 [ 210.350849][ C0] net_rx_action+0x584/0xce0 [ 210.350869][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 210.350888][ C0] ? sched_clock+0x44/0x60 [ 210.350906][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 210.350930][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 210.350946][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 210.350966][ C0] handle_softirqs+0x1ab/0x630 [ 210.350988][ C0] __do_softirq+0xf/0x16 [ 210.351008][ C0] do_softirq+0xa6/0x100 [ 210.351028][ C0] [ 210.351032][ C0] [ 210.351037][ C0] ? __cfi_do_softirq+0x10/0x10 [ 210.351058][ C0] ? preempt_schedule_thunk+0x1a/0x40 [ 210.351074][ C0] __local_bh_enable_ip+0x74/0x80 [ 210.351095][ C0] wg_index_hashtable_insert+0x3e7/0x430 [ 210.351114][ C0] ? wg_index_hashtable_insert+0x107/0x430 [ 210.351134][ C0] wg_noise_handshake_create_initiation+0x5de/0x7f0 [ 210.351149][ C0] ? __kfree_skb+0x18f/0x210 [ 210.351167][ C0] ? __cfi_wg_noise_handshake_create_initiation+0x10/0x10 [ 210.351185][ C0] ? _raw_spin_lock+0x8c/0x120 [ 210.351204][ C0] ? __mod_timer+0x8ba/0xd60 [ 210.351225][ C0] ? __cfi_do_softirq+0x10/0x10 [ 210.351246][ C0] ? ktime_get_coarse_with_offset+0x157/0x1a0 [ 210.351266][ C0] wg_packet_handshake_send_worker+0x160/0x240 [ 210.351283][ C0] ? __kasan_check_read+0x15/0x20 [ 210.351303][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 210.351322][ C0] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 210.351346][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 210.351365][ C0] ? kick_pool+0xb9/0x550 [ 210.351381][ C0] process_scheduled_works+0x7d5/0x1020 [ 210.351405][ C0] worker_thread+0xc58/0x1250 [ 210.351421][ C0] kthread+0x2c7/0x370 [ 210.351435][ C0] ? __cfi_worker_thread+0x10/0x10 [ 210.351448][ C0] ? __cfi_kthread+0x10/0x10 [ 210.351462][ C0] ret_from_fork+0x67/0xa0 [ 210.351481][ C0] ? __cfi_kthread+0x10/0x10 [ 210.351496][ C0] ret_from_fork_asm+0x1a/0x30 [ 210.351519][ C0] [ 214.283155][ C1] net_ratelimit: 134354 callbacks suppressed [ 214.283176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 214.283226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.289253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 214.301386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.313459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 214.325455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.337462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 214.349509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.361278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:9b:65:4c:5c:5d, vlan:0) [ 214.373223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)