last executing test programs: 1m50.896579674s ago: executing program 1 (id=732): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1b5, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa73b9f8563614d21ec008a11a9275d116faffb02f56e62e8c511ab117003350a8e34e0dff85abe85dfe7e00e8c6ba573ff8486c5cdf8649bab88c46026c722950ce298158974ff93f7ed107cb334e4fbbb2b823d56b4a4d0140834e20ef50092717fc2caae69b05add4a77cb88aade9eb1b305f6ebb618eebdad37297eba61173942d0d0dd95e6fc656a78eef2ec45f1aefc0f7a027f8ea631ead5a502d4b74feae74acc8dba104d0d5ce4dcbc98a3f23740500d2ad8e098c138db2f972bc2739136471c4bcd5c33e00103ffe3e83fbb48accb1aad2fdb59aa0661bc029d544b5c7df3f5f3641389f178a5430ccac02c0ccfa1aba45feb79cb29cfa9143348c9bbc0bbec90c647a5059d8bcc8e2d9294b1e25d5c23886bdf31b9bc4e9a07f0ed7055513d466bbe880f9f13e9cf83b7b2be68100bf96c6df973b636843b7b6c74328377fc8f02ff8124c163bf1fbb12748b91ba70ed9c64ea5db30303"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000008c0)={0x73622a85, 0x1381, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x0, r3, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x44, 0x0, &(0x7f0000000900)=[@reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m50.881710404s ago: executing program 1 (id=734): ftruncate(0xffffffffffffffff, 0xc17a) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x0, 0x0}, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0xc}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m50.829038335s ago: executing program 1 (id=736): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x0, 0x20}}}, 0x10, 0x0}, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 1m50.827408265s ago: executing program 1 (id=739): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}]}}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 1m50.793277245s ago: executing program 1 (id=741): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x285}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) dup3(r1, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r4, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m50.605494138s ago: executing program 1 (id=743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x7, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000401, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) r4 = socket(0x11, 0x3, 0x40000) (rerun: 64) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r4, 0x836f3000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) (rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x0, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x8c}}}], 0x0, 0x0, 0x0}) 1m30.440178057s ago: executing program 32 (id=743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x7, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000401, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) r4 = socket(0x11, 0x3, 0x40000) (rerun: 64) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r4, 0x836f3000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) (rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x0, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x8c}}}], 0x0, 0x0, 0x0}) 26.285346883s ago: executing program 2 (id=2137): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b301d506", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/239, 0x4c}}], 0x1, 0x10162, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000000, 0x50, r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="7b000f20d86635080000000f9f41b30f70876f9d0066b9800000c00f326635008000000f300f01c9f30f01ac1c006565de767137363e260f3806aba30066b9ba03000066b87000000066ba000000000f30", 0x51}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c7766646e6f3d14f8d7e24ead30f9d658ad84396cf559dbe7d0d72beb470232f07079850075ccc8e1898acbec6d0e88904a653b29c5b8ff8614c1c96e6f65a6065d7a658661513725ca", @ANYRESHEX=r9, @ANYBLOB=',ignoreqv,directio,afid=0x0000000000000008,\x00']) r11 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendfile(r11, r1, 0x0, 0x80000000) 26.234453684s ago: executing program 3 (id=2138): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r5], 0x1}, 0x58) sendto$inet6(r3, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) listen(r1, 0x0) listen(r1, 0xe55) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000001f00)={'binder0\x00'}) 26.133258565s ago: executing program 3 (id=2139): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)={0x20, 0x12, 0xc9222ec23c9a640f, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x14e, 0x0, 0x1, [@nested={0x4, 0x77}]}, @generic="17ad583718"]}, 0x20}], 0x1}, 0x800) r2 = socket$packet(0x11, 0x2, 0x300) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r2], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x2012, r0, 0x4d757000) 25.956132148s ago: executing program 0 (id=2142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000004}) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) fcntl$lock(r1, 0x24, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000004}) (async) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 25.889920599s ago: executing program 0 (id=2144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$unix(r0, 0x0, &(0x7f0000000040), 0x800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) close_range(r1, r1, 0x2) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x9, 0x3, 0x6, 0x5, 0x7]}, &(0x7f0000000140)=0x54) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fallocate(r2, 0x42, 0x9, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0xc02, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r4 = accept4$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0xdd8184575a116c6e) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x2000}, 0x4) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r6, 0xa, 0x810, r2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) r7 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000440)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x5}, @cpuid={0x14, 0x18, {0x0, 0xfffffffa}}, @wrmsr={0x1e, 0x20, {0x2d4, 0x80000000}}, @cpuid={0x14, 0x18, {0x7, 0xfffffffd}}, @rdmsr={0x32, 0x18, {0x396}}, @rdmsr={0x32, 0x18, {0xa12}}, @wrmsr={0x1e, 0x20, {0x329, 0x8000000000000001}}, @rdmsr={0x32, 0x18, {0xb90}}, @rdmsr={0x32, 0x18, {0x4c1}}, @rdmsr={0x32, 0x18, {0x8d6}}], 0x100}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) userfaultfd(0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000d14000/0x6000)=nil, &(0x7f0000c4e000/0x4000)=nil, 0x6000, 0x2}) accept4$tipc(r2, &(0x7f0000000500)=@name, &(0x7f0000000540)=0x10, 0x100000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000580)) openat$cgroup_int(r2, &(0x7f00000005c0)='io.weight\x00', 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000c3c000/0x3000)=nil, r6, 0x5, 0x40010, r2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000600)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, r5}) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000640)={0x1, 0x0, @pic={0x80, 0xe, 0x8, 0x7f, 0xd4, 0x5, 0x8, 0x5, 0x5, 0x4, 0x9, 0x5, 0x28, 0xc3, 0x8}}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe8, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20}, 0x1) write$cgroup_subtree(r2, &(0x7f0000000a40)={[{0x0, 'io'}]}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x8004) 25.791622701s ago: executing program 0 (id=2146): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x701480, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002240)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000a50a4049db4cbebc551e657eaa40914af83005747dabf207581877aeb98e4e7f5b9218b6cd3f79d799d643e453a21637f7f44a"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x8000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030305000000000000000000000000000c000200fffffffe000000010800034000000001b8c97348c03a8345a6b3080dc4b08c2dea5dc938f950169e1ef159dedc55d33ee4a070a4f4aafa9b8361fbd0869f33b21371ce75e7d93679ef492b02f9308c0c8ccec3dfa6a774da3c8d14558ce0d051e934a6bd32ebe9044bb1a8e574ad195e176eb7ed7f830dae33becc1ef330aaee167ab68eb5b283"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c900, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r5, r6) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2000005, 0x12, r0, 0xfffff000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0100001900010d"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x84) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 25.663882233s ago: executing program 0 (id=2148): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) write$selinux_access(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a696e697463746c5f743a733020756e636f6e66696e060000003a73797374656d5f723a696e736d6f645f743a73302d73303a63302e633130323320303030303030303030303030303030313633383800"], 0x62) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async, rerun: 32) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async, rerun: 32) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async, rerun: 64) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async, rerun: 64) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x6, 0x8, 0x9b}]}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x406, r4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x1}) (async, rerun: 32) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="a99c383d33b6c627b1b9d49686a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) mprotect(&(0x7f0000898000/0x2000)=nil, 0x2000, 0x3000008) (async) chdir(&(0x7f0000000440)='./bus\x00') (async, rerun: 32) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) (rerun: 32) 25.503933646s ago: executing program 2 (id=2150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1}) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000000000001) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 25.468920417s ago: executing program 0 (id=2151): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000300), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x54, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0xa1, 0x0, 0x14}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/186, 0xba, 0x1, 0x11}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 25.398327538s ago: executing program 2 (id=2152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f4fe519091393cf04e9bbdf6ada5fa80438a380204b3b7f6affe7a51507049a0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000b00)={0x1, [{0x0, 0x678, 0x2, &(0x7f00000001c0)="c0dd0e57b80f8abceed986ef8c03d4c462741f1e1f49f06d13ac6dd7560c1940cfcd6b11cac25e6cc362b28dad298df5f5b8d0f7ba96a4a719079adb10809e2320ee522b3d17e70092787392ef824fc72bcdbb4893da6157345f815ffdc567997141d18026b653e6a8053e81e2f53c94b1e899d5cca4298bb5faac7b205c4e09e65e7fc45329ce9f385175810e07336da6be7bdc94de1605048a375a4a093b4fc5087c852636a2a56ac56299bfbe65d0fe30339319e4c6935a7f05990d4beb43a46a9bb376e68f4a575d7e3ee739f9"}, {0x3, 0x750, 0x58, &(0x7f00000002c0)="e39d5cb3b482bd0b3b2e1d21a0baddc8a4a4695f34eb3331705270be2e934f863f1e0d60b09f184a50e508a361a7b2a7f28b3aa2c6dcde076f1ebb1908018997aa690bf2fec17c53af3a931056a2a399adaf1ea8cee1aef2646fd41ea250e1120a7923c18270ae78a4b8612291ddba65cfce5b016ed3f0348e44c1c428ce3d94aa8e20f2a435ba94344c9a37b721fbb1a65ad407ddb0bef23977a3023eeaea9b9f6ebd5df15f5a134d0ca54be982e0cc85c3075f3ffff66176ca8c2c85f745041b751c8c7498b2ce3530099dbf64b235e5d1f1f74222b79c6bbd43dcf17353da8e9ce7efb87ad88895a2"}, {0x0, 0x1c0, 0x6, &(0x7f00000003c0)="76616a9006375cdc25c1075781d06fd63b436c80258955a723b130dfa65d39d5606f7a431dbc42761d5fcec69cd85a2338fab86dc4411e6c"}, {0x2, 0x138, 0x5, &(0x7f0000000400)="0fa60d4c8e8c2e0751ed6df330d4806b3a4eb38ad7c0c4c1884d8e07e6b5404fa11fb5e0f5bf71"}, {0x2, 0x760, 0x6, &(0x7f0000000440)="31035cafd38fea2ca9580d40ada0cdc2af8aec1d91f24dc5a2cbadf4af175d4fe21227c9ce3f56d1ea2d17e1504c74af213f1bc8eedec3e43800e545665c046790d3b79b0c533b4b2cac20b39e6e69d446801dcadf6a648e3debe07e6c189f71c182ca3c08301b42f213df1168fdc0ae452e531d66c58a2a83a5ebc792c16aa6e0cc40d8614bf8aafcec95d270fa02d25124b9883b3d95f77301dc3f6e6ebb6686c226de2a94465e11f436d9621f34b25258c52486a85b8cd2297599d008e0b0e65f9f2d1da062f56b83b5a1c4647c097f9b1ed491a3ec561dec103d8c4282ccc47bac28866f1e1846c41f3f"}, {0x1, 0xd8, 0x0, &(0x7f0000000540)="bc0e44b0b266d19558e3bb3926f482bfb3b31d020e35825c50bf75"}, {0x0, 0x378, 0x2, &(0x7f0000000580)="1d2072ea1dfd733396e77351e955c391c64fb451e6466c1f2169dc6351d964c0fbec53daa03e59cb9828b3065ce6b33a4d38f5d4957cc3db90d0f6bbcd1357d329fd09931a55810065153497bfe75b1dd691aa3926cc7bf31ab6e160d03c02c858d3fb51d49f07e8a656b047ac4b07"}, {0x2, 0x568, 0x6, &(0x7f0000000600)="d107822d5748a0efcbdc44f2d382912657d1430602cf9ee721ecaddb2592dcf8bc47f4e1f5d09a26fbee6161ecfa3b99e7e8423cc5ef25f7e4c6db59f1e531e5a292d5434285c28392b356c170ac06859f8907f2c9875536baf1a0e8573ae2186a85f43dcefe6039193b06d97dcc28b73c9c71b7cc1061369b8f0c413f4c0a6023f04f8194f6240f663561ea23c400f86aaf79d0d23dc3d4b59d5347a8c7d5f84502f6ce121d1efac06ac06364"}, {0x0, 0x170, 0xb951, &(0x7f00000006c0)="428e3e2e267f3c5183680bae083a2903fb7bb32596d988f5b0ab48cfc607e0e18c6fffb86db9a3d203f40cd1c405"}, {0x5, 0x328, 0x5, &(0x7f0000000700)="c099a4bea9e625a690b0ddf451254c0dc1ac2e2cb6bcc25fec2102e7da9c800f33eae0da34ccbf4423528a3dea9b1248ba5ac4a9a0da29f3ad65e179b3281b9d11e8cff4d05badcaece70337c64c5e7f7f1bbaf69390952fde686d0c62afe51c5eceb347af"}, {0x3, 0x430, 0x4a85, &(0x7f0000000780)="add89e9c3b9fd56d7257a11f45ae06a4c913dfbe0e241238e27a2d53459e766546ccbce65ba256425bdb1b7abc9271536d19cf1626f779d14456167c790414168ebb9bc6aa27eb4675b75873554c459d73b083d0fcc73c3d232fdf4c8c023aead04508c3a6f323dedeb73959ca374f01c608210a891970142e3aa06936d2a7e18463ca54b355"}, {0x3, 0x4d8, 0x5, &(0x7f0000000840)="7976f97c79baaee6876b7ace0d27c263c476a41e7cc2b2ad210068fb024da1c13b0409c20c7b26868ebf3a1a3060b175f04d2530866431fd230c9479f7a2e59466d87df3d299b80ab9f4a3a61f6fe7963a866418c005bf3f4f68b2b5bb45efa0f48a4d0c266f2bdb5fa440ea5e9c55da6da49d9ae51f94c0e1d8008efa65561d7c793793378a6ca6b50151aad5bb752d8414b64b7debe656c3d925"}, {0x0, 0x2a0, 0x6, &(0x7f0000000900)="6bd79fc454f4f5d90b5e921c56f7d03cceca580d7e77374d7c104765b594994ffd96a0d25190be604c8a654137b0c73ae33bf482937830e7b394548ca072ff25f90b0b17d89b368e0eeea561cd9af991e7f22a36"}, {0x0, 0x370, 0x7f, &(0x7f0000000980)="74758141a09d5bb7498a939e75f1ada10f9336dc3716c29dd32ea24551e6a4d6e97c557f25f575cdc65286ba7d25923884f5399da882b9e5fd3f080b7d60ce3d7facd2d1697255139c608e7a8b7f0ea3b08d0a2f060165534e9c9e53fde55039c3ed99dbd077e6a09b1f236db3cf"}, {0x2, 0x4b8, 0xf5, &(0x7f0000000a00)="984affc69948e9fc761176c95a27792943247b3bc133f21380d0c68fb208be1a4395b4eaf74806a9f583f860c0c5f436ac8b3ce8d69aeadd186b4fc617a143bc017e7e146c6693ac53e4aaa41e308d13bc396263dd55aff764c8a1db7addaae0ad160d07a0215024eabb8cc2ce0e101f12c66d3fc821310e526d7be5246b1f65e1b1874d83b9d45df2194b5f7f4beafa6de02e1ff7457e"}, {0x789b82dc7f5173fd, 0x0, 0xffffff52, &(0x7f0000000ac0)}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000cc0)={0x2, 0x0, [{0xbd2}, {0x998, 0x0, 0xf8ee}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(r3, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/7, 0x7}, {&(0x7f0000000d40)=""/179, 0xb3}], 0x2, 0x3, 0x8) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r3) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r6, 0x10c, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4040804) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f0000001180)={'#! ', './file0', [{0x20, 'nl802154\x00'}, {0x20, '-/'}, {0x20, '!-\v*-\\\'}]/@),%.&\\'}, {0x20, '!'}, {0x20, '\x00'}, {0x20, 'nl802154\x00'}, {}], 0xa, "f947f7f46983c11db0294f09dfc96a8e9154f2907cbafec395b432edb8393d8b313fe3b48c33f8bdb9f621bb1a6fc2fbd76818a2e8f74bbce775f25fdb2cc0d6108d057843b9b93ba6e906aa971b30b1e74b093cfecd2d69090e0472c29be342d81522b7f35926bade704c1a7f82b84581fc1225083176ffd4a09021b46443a8820ec7f043247353e306d155151e89c9985ea1a84285a4fd55204bb02caac800673a4a98bfbb2b71536c880c240cb79a7a780841eff04d5278ce135e61b42056388822a13c607206d585563896a749e3a2d242a84433e5defc9f27bce452ec344881043185e02fe5fcda8871f4b03cc121"}, 0x12a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001ac0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001340)={0x710, r9, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x224, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x19}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffff8001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x4}, {0x2, 0x5}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x4, 0x3}, {0x4, 0x2}, {0x5}, {0x7}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x5, 0x4}, {0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x7}, {0x3, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x7}, {0x7}, {0x3, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0x8000, 0x3, 0x3, 0x3, 0x5, 0x76c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f, 0x7ff, 0x81, 0x3, 0x6, 0x9, 0xaefa, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x7fff, 0x800, 0x800, 0x6, 0x6, 0x638]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x0, 0x7, 0x6, 0x6d6, 0x3, 0x6c51]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xff, 0x400, 0x3, 0x9, 0x6, 0x3, 0x8001]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xdf2e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4a0, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf5}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x26c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7b7, 0x9, 0x7, 0x5, 0x7, 0xf2, 0x8, 0xfff4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3}, {0x5, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x1}, {}, {0x0, 0x9}, {0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x8}, {0x4}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x10}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x9}, {0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x5}, {0x6, 0x2}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x8e4, 0x8, 0xff73, 0x3, 0x3, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x4, 0x8b, 0xc4, 0x4, 0x7a, 0x7fff, 0xf001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x0, 0x5, 0xfc0, 0x6, 0x1ff, 0x2e, 0x1828]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x6, 0x7, 0x8, 0x0, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x4}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x9}, {0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x16, 0x24, 0x0, 0x4, 0x2, 0x12, 0x24, 0x6c, 0x36, 0x9, 0x1, 0x6, 0x24, 0x9, 0x5, 0x3, 0x983511263e835ddb, 0x48, 0x0, 0x2, 0x6c, 0x18, 0xc, 0x18, 0x24, 0x6, 0x2, 0x5, 0x4, 0x5, 0xc]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {}, {0x0, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0xa}, {0x6, 0x6}, {0x2, 0x7}, {0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x1}, {0x0, 0xa}, {0x2, 0x3}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x4}, {0x0, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x7}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0x8}, {0x7, 0x8}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x2}, {0x2, 0x6}, {0x5, 0x3}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x1}, {0x7}, {0x4, 0x6}, {0x1, 0x4}, {0x7}, {0x3}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0x2}, {0x2, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x2, 0x6, 0x6c, 0x18, 0x2, 0x60, 0x18, 0x12, 0x16, 0x36, 0x24, 0x18, 0x60, 0x16, 0x3, 0x16, 0x30, 0x16, 0x1, 0x18, 0xb, 0x48, 0x1, 0x2, 0x9, 0x6c, 0x1, 0x12, 0x5, 0x6, 0x60]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x2, 0xa}, {0x7, 0xa}, {0x6}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x2, 0x9, 0x401, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0xc, 0x30, 0x1b, 0x18, 0x2, 0x9, 0x9, 0x36, 0xc3, 0xa26e13a448102f63, 0x18, 0x55, 0x5, 0x48, 0xbae98bf2c2d71252, 0x6, 0x3, 0x43, 0x2, 0x18, 0x2, 0x5, 0x12, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x0, 0x200, 0xb, 0x4, 0x0, 0x0, 0xfffc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0xa62, 0x4, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8d5b, 0x401, 0x9, 0xa, 0x9, 0x85]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x2, 0x6, 0x6, 0x0, 0xf20, 0x8]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x48, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xac}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x6, 0xc, 0x6, 0x48, 0x6, 0x24, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x8, 0x32, 0xf, 0x8001, 0x8001, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x48, 0xb, 0x1, 0xb, 0x3c, 0x6, 0x6, 0x36, 0x3, 0x9, 0x4, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbd5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x60, 0x1, 0x5, 0xc, 0x9, 0x9, 0x1, 0xc, 0xb, 0x4, 0x6, 0x24, 0x9, 0x1b, 0x60, 0xb, 0xc, 0x1, 0x6, 0x30, 0x1, 0x2, 0x4, 0x16, 0x2, 0x12, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x100, 0xff, 0x8, 0x750, 0x0, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x1, 0x5, 0xffff, 0x5, 0x7690, 0x6]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x4, 0xa, 0x12, 0x0, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x100, 0xe, 0x2, 0x6, 0x7, 0x8]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x4}, {0x1, 0x4}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x8}, {0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x2}, {0x6}, {0x3, 0xa}, {0x6}, {0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x3, 0x3}, {0x7}, {0x5, 0x9}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0x9, 0x61, 0x14, 0xfff, 0x9, 0x5]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x710}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004080) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x38, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x84047}, 0x20000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001d80)=0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000032c0)=0x0) getresgid(&(0x7f0000003300), &(0x7f0000003340), &(0x7f0000003380)=0x0) r14 = gettid() read$FUSE(r3, &(0x7f00000033c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r4, &(0x7f00000058c0)={&(0x7f0000001c40)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc, &(0x7f0000003280)=[{&(0x7f0000001c80)={0xec, 0x13, 0x300, 0x70bd25, 0x25dfdbff, "", [@typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @nested={0xc6, 0xa4, 0x0, 0x1, [@generic="682dccafdff3d949c7be45239332eb6237536cd7d89f677ecf3a97672f5da539e7655aa60b71de4e8c36e9eeb0e90efe748e8bb4c3", @generic="f525fb71f655e1b931dcb3ac0bd047b8bc65b679f867a499b401aa361c8de364ef1b2e52122738110ef780f09b621243daaca5dbd2d53c101847c11c0c907704a334c45f923bdde9db051e79513e443bbd008c3dfdaa73c85fd376c92d3f1329abfe0568eb68aaeff17a9a504920dde83b07d48f0a9426977d33113fc2276a04123ec758d8cb052878dc9be60c"]}]}, 0xec}, {&(0x7f0000001dc0)={0x149c, 0x24, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x24, 0x9c, 0x0, 0x1, [@typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @nested={0x4, 0x3b}, @typed={0x5, 0xdd, 0x0, 0x0, @str='\x00'}]}, @nested={0xb3, 0x51, 0x0, 0x1, [@generic="11929d9462eed8e056f0dda9f5c633877b498c85f000e6e536ae09e5e5fc17958756d4c93446e4", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @nested={0x4, 0x9a}, @generic="5e35641b360ecf767fc74e201245667a60fe0770440d867ee2423f41a0fd9918ee4eefd8bff924f94a71792d80174d2943717df6e24e13bdf0805e47823467e9260dfe5aa695616abf528b00595799a323772d92be5ad97f3948207a29d771aba7174e15ea8a3213fdcea8dc3d96896f"]}, @generic="4fc89f5458cabe3f5e48896bc43d9b1bfe9035274aa9", @nested={0xe5, 0xf8, 0x0, 0x1, [@generic="e13f98e84a1dc59fada0999666129f2794ff78b4a6cba275aad3fc33d1ee5851de96174524e804f7e0", @typed={0xa8, 0xc0, 0x0, 0x0, @binary="8b12e1d094b25a43c38ffb13f81d9f92cf59543c3b999cd55d7396f529bb4750554fda9d546cdcb0b2c3cde8ef2dc0703b957a16b3f44680d61e68923c76013d4f8dc7f8326558c3900a27a8ed1d02b6b13dd1fc5364eeef89bb33cb2e1473073db037f5de5249ca019ce39041ddb5b028f326e7bce7de441cb412703177ac0cafb15aa96d78f71e8deff609a7a4456cf866d32e94a9bc6a384a9f4ed1dd236d0c7f0d64"}, @typed={0x6, 0xef, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x8}]}, @generic="68ec6f5d26545f8992dc2df37e604123e9cbc7257d347c723ca11e62c4983de710918894cb515cf7a4efca9a3cd8a4ce7fd7679d4c0917db0182c530aed80113209c5b8d541956a28cac6983d0fdf4b5d3cedbaa661ffb36c51552bd393904aa0f5f9755b4170663b9647aee761be6a9d75f0c227707aa788fa4ce13969f3d66a84e234301b9563dae2337a987a7b124b732026ed3d486d2c85385e83d3c84946e6861395db9f7b2c788f3d327970cbbb9f6e951", @generic="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", @nested={0x1ff, 0x11d, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @fd=r3}, @generic="d53ab9916c3163ef888ffbe5e5350f3d708fa7606d950a6b53d8386dcbce481671dc003e7af1e2b06131b0782fe47b38d5f6caa85a9440221cd76bb87913f1bf355a1973adb1bfd4f74b400202e0e18a532280d7725a913f4110ac6f4ab530577fbfe5c7ae8d8d5a855b80e7b3f27e94eb69385f1289027816fc7470c6022cdd57e182b778efafbd4a0a469baf0fba2e814e5082b150a5fcdeade41743d9fa5d080c1128c1fe554664b2298dc723811e4703045c0824d38c8aab41f7f12cdf90bcf4facdcfa30d101f4b4a50cfb90e7cf96e62b230c8de6ec017af0c7808bcf4b7f6597e9ecccaa1755f8f3d92fd8609", @generic="a82206bb5d05a3fb71641c85993b572927ad517f2cf7f1c2f71a", @typed={0x8, 0x122, 0x0, 0x0, @pid=r11}, @generic="f313b41e40ce90857e9e4ef0f9e99f2b371f9c3301da6db17c5922edf12ba26a67714409d7eddbdd860e8f57847358da8727171f091cff20de21e20f9e687b3090cd6e6641c7d36fb0d4a2c706a3dfdae90aa4eebbbf89847e6e8a7e4a030ff7575aff81789ff4abcb39b4695f5a12df8b2bc846636f4a4f8928240aefd5da7b37349cd63f86b2bf417a", @generic="9f18f6686546e8520b4ce2eda9045d624a6cf442fe382200848584e9abd9556bc66a9bf80eef7cdc9b9c04d1ee09d8677a7467048b0139919f25de5937a12c93cb7a619970abbefaddb2a51bb8fa6a1f6107be9ad564dd"]}]}, 0x149c}], 0x2, &(0x7f00000057c0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r4, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xe8, 0x885}, 0x4000800) 25.390627048s ago: executing program 2 (id=2153): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1ff) lseek(r0, 0x4, 0x2) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) pread64(r1, &(0x7f0000000080)=""/233, 0xe9, 0x9) 25.333849799s ago: executing program 2 (id=2154): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x5, 0x978d}, 0x0) pipe2$9p(0x0, 0x4000) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000100)={0xfffffffe, 0x8000, 0x1004006, 0x7ffd, 0xb, "ea7174ddb80fc7000002f3ffffffff4ed0d975", 0x4, 0x4}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x2) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\x83\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd\x1eH\xe4V[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x99\xc3\xa0;rr\xfcbo\xb1LZ\b!\xec\x11\xfd\xa28\xd6>\xad.\xbd\x84Z\xd7/+\'\xf1\xe7-\xfd~\xc6\xea\xc4z>\x84\xb7\xb0\xe8-\n5\xa2\xea\x93\x17\xaa@\xb0\xd5\x87\xa4D\xd0\x00\xee\x13\x8f\x98\x17e\x12\x88\xc0\xda\xf1x\xe2\x84\x1e\xc8N\xd6\x8d`\xb0\xaa\"\xc0\xe1\xcc\xaf7\xb3\x7f\x9f\x8d\x98\x9a\vE\xc4\xee\xc0%~\xb6Z\xff\xb7\a\x17\x80\xeec\xae,\xc8\x04:\xa5\xa0J|') 24.997050684s ago: executing program 4 (id=2156): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x701480, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002240)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000a50a4049db4cbebc551e657eaa40914af83005747dabf207581877aeb98e4e7f5b9218b6cd3f79d799d643e453a21637f7f44a"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x8000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030305000000000000000000000000000c000200fffffffe000000010800034000000001b8c97348c03a8345a6b3080dc4b08c2dea5dc938f950169e1ef159dedc55d33ee4a070a4f4aafa9b8361fbd0869f33b21371ce75e7d93679ef492b02f9308c0c8ccec3dfa6a774da3c8d14558ce0d051e934a6bd32ebe9044bb1a8e574ad195e176eb7ed7f830dae33becc1ef330aaee167ab68eb5b283"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c900, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r5, r6) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2000005, 0x12, r0, 0xfffff000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0100001900010d"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 24.890452616s ago: executing program 3 (id=2157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r3) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x48, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, './binderfs\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x10010800) dup3(r1, r0, 0x0) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 24.848978176s ago: executing program 4 (id=2158): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async, rerun: 32) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 32) socket$packet(0x11, 0x2, 0x300) (async) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) (async) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 24.554075471s ago: executing program 3 (id=2159): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000010c0)=@urb_type_control={0x2, {0xd, 0x1}, 0xfffffff1, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2b, 0x0, 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4) 24.552886091s ago: executing program 4 (id=2160): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="6d6f64653d30303030303084973030303033373737373737373737372c00"]) close(0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = dup(r1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc8341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 24.531398382s ago: executing program 3 (id=2161): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r3, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0xc}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 24.479312803s ago: executing program 4 (id=2162): r0 = eventfd2(0x2, 0x80000) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x0, 0x6011, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x92, 0x1, {0x0, 0xea60}, {0x77359400}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1}, 0x5, 0x2, 0x0, 0x0, "90c0b869400c740e"}}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000240)={0x8000000000000001, 0x101, 0x5, 0x401, 0xb, 0x7, 0x8, 0x0, 0x8}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080007000d000000", 0x24) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0x40047705, 0x2) 24.420601833s ago: executing program 0 (id=2163): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x304, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40) (async) socketpair(0x25, 0x3, 0x3, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x4040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000340)={0xbf0, r5, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0xbdc, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x1dc, 0x80, [@chsw_timing={0x68, 0x4, {0x1ff, 0x3}}, @random={0x3, 0x8b, "7569ca1f40b33a5cc51e523a9ac00af5dce346f522749963414e539e4115c79e472da4d06f648e94da10ca04fa18fecc7e7943ab342720aa8c55ecc66598200aa0c5c22a42dd316479772c8178ca3263bac56054aba324c0e5e482d470ddb17f068f13666ace039f99bcac5ad73708067451ffc9a19ef6484f2ba18f7f69274fe9d68e6d886e1d3ba8ce70"}, @mic={0x8c, 0x10, {0xfe4, "bbdf3886a262", @short="32d6b06cc79c87aa"}}, @cf={0x4, 0x6, {0x0, 0xb1, 0x400, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x64, 0x28}}, @perr={0x84, 0x120, {0x8, 0x10, [{{0x0, 0x1}, @device_a, 0xffff6165, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x26}, {{0x0, 0x1}, @device_a, 0x34e2, @value=@broadcast, 0x24}, {{0x0, 0x1}, @device_b, 0x800, @value=@broadcast, 0x3d}, {{}, @broadcast, 0xa, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x34}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x1a}, {{}, @device_a, 0x97, @void, 0x1f}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x7}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x23}, {{0x0, 0x1}, @device_a, 0x3ff, @value, 0x27}, {{0x0, 0x1}, @broadcast, 0x82bc, @value=@device_b, 0x6}, {{0x0, 0x1}, @device_b, 0xfff, @value, 0x42}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x1f}, {{}, @device_b, 0xfffffffc, @void, 0x41}]}}, @challenge={0x10, 0x1, 0xd3}]}, @NL80211_ATTR_BEACON_TAIL={0x117, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x8c, 0x9}}, @mic={0x8c, 0x18, {0x718, "d1374370f9d5", @long="df7d3a2325096739cacefe769c80867b"}}, @random={0x9, 0xf1, "ae84e5f0b1f624ca8a0f6a5113066f9937de1b238f20777ab6eac0f7e6d3effb9722adea262da31eb5247193c7661d2f5e61059fbd7c86d89385fe14f4571efd5483f7f7db818b194770368e87a488652af912fe3addd9c64e668a3577bcea3a1c0c89886dd16531f9456d8cbc30f0f344ee34c38c8f040ade2944162034c09df9e38f97e2a80d09674d2b99e65664d37198e5c8990fd9d6a6cd19429b9416bccbbda9d8efdbcc29a22b7d3e5b42626ca0d8bb185131564c3ad61f2aaba082ac146ce0eb81cbfe64e00a56604fd012dd0c39eb82d591db9bd320b63b4fa7d97921ecc5e54c7a0a7b20e08a837ce3ed5f13"}]}, @NL80211_ATTR_BEACON_TAIL={0x1a3, 0xf, [@supported_rates={0x1, 0x2, [{0x12}, {0xc, 0x1}]}, @fast_bss_trans={0x37, 0xa0, {0x6, 0x2, "c924a5d24d3640ef28f2f9b8f3aaab99", "4334fd52f277e38b91aadef4e5de5820a9172acd6d1d7c855ca8c6962b24de20", "dc4b446eb46767e5c48d1aa6ecc077d59b36f505a92b341be24e838109b93309", [{0x4, 0x25, "c7fc91f2686245ad7228925c7c6a1687c680f1ebe91077e6e33239b7b2491765e471b9810f"}, {0x4, 0x25, "dd695e71a197bba26992f5a98c4731b91f0442a4b0b34ca279f33fdfbe1980fcdbbe873ea1"}]}}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x3, 0x7, 0x0, 0x318, 0x0, 0x1}, 0x8, 0x4, 0x2}}, @prep={0x83, 0x1f, {{}, 0x7f, 0x3, @device_a, 0x7, @void, 0x0, 0x7, @device_b, 0x1ff}}, @tim={0x5, 0xae, {0x9, 0x43, 0xfe, "ac7b153855d82e940f0e4eadeb579fab66100060f92355bd2265bf5f8449ac241f0f757312ff979eb69ca026466057bd32a3b51a2d9ea599d9ab8414872792a7dc28a8859775e6b71f0b80fbd2e3bc59c39a9a74e9cc1fae6770e90b6ce1462e0ed0466be8dc6995029ab0cc1f72e6c2b8fe57d41ff068984e7a5d0909f3c76c6576814dc6a98caf7616e446e7e77ffb0faf0cc4eb108113cea61337edf53090e54978f432bd115b8098cd"}}, @dsss={0x3, 0x1, 0x5}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x8, 0x40}}]}, @NL80211_ATTR_PROBE_RESP={0x3a7, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1d, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0xab, 0x9}}, @link_id={0x65, 0x12, {@random="c1d86a2dfa42", @broadcast, @broadcast}}]}, @NL80211_ATTR_BEACON_HEAD={0x13e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x382f}, @device_a, @broadcast, @initial, {0x1, 0x2}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x7, @default, 0xa015, @void, @val={0x1, 0x8, [{0xb, 0x1}, {0x1b}, {0x4, 0x1}, {0x48, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x9}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0xe, 0x1}}, @void, @void, @val={0x2d, 0x1a, {0xadc26753cc69dd0c, 0x1, 0x5, 0x0, {0x3, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x6, 0xffff, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x6, 0x7189f61481e214e}}, @val={0x76, 0x6, {0x5, 0x25, 0x33, 0xfb}}, [{0xdd, 0xa0, "ba3532822b630a0bd36652c6aad0f4fa2ce58fe4c7dea5a61aaf5ba058f9126dfa66dc7f1e308ea19bb981ed6528c36c82ba071e8cb40a8402f4808f680c4f4af56160e76564f893c008f852793fe19c05e151ff5d2540899cea9d8c8b2a4f5caa37746a726462e85c8de5f41608bc6fd5b67fd665c6dbad45219ce8802b9e47d99e0ebb836aefef4c1ec12fbfc769bebb0c607e0c78117ef10ecea3a8a217c5"}, {0xdd, 0x2b, "3b059527582d56296128ad5ae572a7fcac06926074893f3b04ff1c9523b7f44921df54889376b8da618496"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x28, 0x80, [@ssid={0x0, 0x8, @random="300539e9f398e818"}, @peer_mgmt={0x75, 0x8, {0x1, 0x6, @val=0x8, @val=0xe, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1dc, 0x7f, [@challenge={0x10, 0x1, 0x6}, @mic={0x8c, 0x18, {0x348, "e478457bb880", @long="a604ec973db76ebb7399a95f9c2e0ecb"}}, @tim={0x5, 0xb3, {0x72, 0xa1, 0xeb, "6baf24c9a7a137bf92eaefde7c7e8f398c9739412eff7516c45ef1dbe7d9b0ce1652bb82bc6a2ffadfbd00b9e18d3c14b4c78a14b6ed3bbaae79405cd7c3d3b3cf008c324831f92ee5ac243c5a728bcf4afff4fd4520cd01dc95e1f576ad5532d7a550f7dd04f2295012b64307bee2fe84cd99b51f57252f9e30f3957c6aa3797e2e8d4ded839e44bfbce7879d048b1611f30b5b63ebdd3494bd397a1a1fb0f2d300425a8721180ac46f5884478ded42"}}, @mesh_chsw={0x76, 0x6, {0x7, 0x81, 0x3}}, @preq={0x82, 0x8e, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x3, 0x9, 0x401, @device_a, 0x80, @value, 0x60ef, 0x3, 0xa, [{{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1}, @device_b, 0x200}, {{}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x8001}, {}, {{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0xf6b}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}}]}}, @prep={0x83, 0x1f, {{}, 0x7, 0x6, @device_b, 0x6, @void, 0x5, 0x1, @device_a, 0x1}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x30, {{0x1, 0x0, 0x1}, 0x4, 0x80, 0x9, @device_a, 0x1, @void, 0x1, 0x0, 0x2, [{{0x1}, @broadcast, 0x9136}, {{0x1, 0x0, 0x1}, @device_b, 0x80}]}}, @random_vendor={0xdd, 0x11, "194cd69e34f24d22ab8d09ba34e07fd6cf"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xf4ae, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xc51d, 0x8, 0x10, 0x5, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2, 0x40, 0x114, 0xfff, 0x8, 0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8, 0xf000]}]}]}, 0xbf0}, 0x1, 0x0, 0x0, 0x4040840}, 0x4004000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000001040)={0x3}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r7) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x280080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, r5, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3ff, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x48, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2000c140) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000001400)={0x3, 0x0, [{0x40000000, 0x8, 0x6, 0x93, 0xb2, 0x7, 0x10}, {0x80000001, 0x4, 0xe4a98845514e5718, 0x1, 0x8001, 0x8, 0x1}, {0x80000001, 0x798, 0x0, 0x0, 0x1, 0xe3d3}]}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r4) (rerun: 32) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x4b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) (async, rerun: 32) r12 = fsmount(r7, 0x1, 0xf1) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x300c400, &(0x7f0000001640)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@cache_none}, {@privport}, {@ignoreqv}, {@version_L}, {@noextend}, {@cache_fscache}], [{@appraise}, {@obj_user={'obj_user', 0x3d, '$$.[@-'}}]}}) (async) ioctl$BINDER_CTL_ADD(r12, 0xc1086201, &(0x7f0000001700)={'custom1\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r13, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xe0, r14, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x51) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000001a80)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000001ac0)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r15, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004080) 24.420151784s ago: executing program 3 (id=2164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x120, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0xe}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd26, 0x70bd28, 0x70bd26, 0x2}}]}, 0x120}}, 0x4000040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0xe, 0x0, 0x2, 0x18, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@local, 0xf, 0x10, 0x4}, @sadb_lifetime={0x4, 0x0, 0xb856, 0x3, 0xfffffffffffffff8, 0xa}, @sadb_x_filter={0x5, 0x1a, @in=@private=0xa010101, @in=@local, 0x1d, 0x4, 0x14}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x11, 0x14}, @sadb_sa={0x2, 0x1, 0x4d4, 0x5, 0x1, 0xdd, 0x2, 0x2}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}]}, 0xc0}}, 0x880) close_range(r1, 0xffffffffffffffff, 0x0) 24.393201234s ago: executing program 4 (id=2165): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x12) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) (async) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmmsg$inet(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f80)="8c4bec0ebfefb01a3b26c938cdec576d920905939dffc66214c441907b87325dd5a689656934ea4c26056f13940f0145eb78a695047812f64b8bac9ecc855238aefafb83e615afb811f357866d44f612d4dab58853cd88c8f98c11be81f3fef61c88824093632dd29267e70d0dda6fe4912795c8409c25dbf0ba49c4cbc86105256695daa4b6571543e637fa4d4fe93cb3d68c5a2bfe914f363242bbec131bf606349aed09ff7c09a9473835810957803d89df82b44f20557235d21b163a09e5fedf0c49ca38d4a2514a64ff0827379ee153b2140c7e776719265c0a3e6810a102157fe82bd6178edf8d1aecb6429985371087", 0xf3}, {&(0x7f0000001080)="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", 0x415}], 0x2}}], 0x1, 0x4000004) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x7ff7ffffffffffff) (async) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x7ff7ffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x4) (async) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x74, 0x401, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x8, 0x1, 0x1}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) (async) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0xe0}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000014c0)={'ip6gre0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xd, 0x80000001, 0x32, @remote, @mcast2, 0x1, 0x700, 0xbb7, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000014c0)={'ip6gre0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xd, 0x80000001, 0x32, @remote, @mcast2, 0x1, 0x700, 0xbb7, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000018c0)={'ip6_vti0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xc4, 0xf7, 0x2f, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7800, 0x3, 0x64}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000018c0)={'ip6_vti0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0xc4, 0xf7, 0x2f, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7800, 0x3, 0x64}}) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="4c139fbe67377f3dbb728bb9d2adba24ddeb76a6e0bc6486e5cf1b8266a531de8589086b1f5842b06bf1a3b5f06ed671a3a8a559069c5d1dc5e62780b0e62f7bb3e58d6f38abc90e4c585022084b1d0f771820b4c6445b6b2de45edd1b416db61ebf084ed313b40d14e92865052472babf", 0x71}, {&(0x7f0000000700)="0302460429c5e1e1f75590deb91e30cba4a8bdd794cbff0fed2f38e63e661c5e9eff5177e8e5e3450296f9918e06bbcb3367728de407b2f723b519d1d63f17008a2626921298aa6663b989fed5e545fe24ef4aa05cf3e9525d7070f4c56634363e3a7dc5cf00e8abd8d0b390e24734f0ceb2f2f4ea6876a41ea30ce39cd82456616d3f8426ae501572cf7f1baf64419f2b714274ffaa12a909c1c1d454048ad61c5cdfb50fbb3bf3a3e30658d881c404e16382f1c07d1a3773ba9fca0c8b24ef662a9db6cd157856099bef63a5aca98f11e05a44608b5453b4935e87bc20fcb438f4df96408102619bd811d2cb", 0xed}], 0x2, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@rr={0x7, 0x23, 0x5f, [@dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102, @multicast2, @multicast1, @broadcast, @broadcast, @remote, @local]}, @timestamp={0x44, 0x18, 0x87, 0x0, 0x2, [0xec85, 0x3, 0x8, 0xffffffff, 0x3]}, @end, @noop, @rr={0x7, 0x1f, 0xb9, [@loopback, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100]}, @lsrr={0x83, 0x7, 0x5d, [@multicast1]}, @timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x9, [{@rand_addr=0x64010100, 0x3ff}, {@remote, 0x99d6}]}, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x8}, {@local, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf2}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0xffffffffffffffc3, 0x0, 0x1, 0xf5}}], 0x108}}, {{&(0x7f0000000380)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000400)="aa9b5cdf", 0x4}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000000440)="220e39d10946bc8407ef72b33fee0312734f2fef7c7e1ac0fc7bb913eb1018fb0ae0ed2f627b5eff47acaaae5fe0aba075", 0x31}, {&(0x7f0000000940)="3d6b3c8327fe25745e0c6ad7c725b1a8c7e95851ca7be36de9ddb48bd2b73e4b2ef861c137fe65c2e05115023b0e3e284da8bd84c6c9adabede2ac75d5df1e0b28ec1d2ef62243acecdbf8e6d79e8a5d1217ed6f2c483cf8c2238768", 0x5c}, {&(0x7f0000001d00)="af13f58a1925ae3c6a4e6236e09de9b7cb25750b7804456bd9f30f1d5776ec760c089d46c31c086ff0725d417f808211ff20146f41ff311287dbb51f7106421e9ab3d80950ceefac83d898fc1045b50ac5931690", 0x50}], 0x5, &(0x7f0000000b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x97}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000640)="790d720341bde5f28cdb4facf59e8b1c0bca26119d09979f5fd0111cb4f07a7ef415518fce664ed363", 0x29}, {&(0x7f0000000bc0)="98310c6525bef1376d4427b77bb8a04b2fd5399614089a34df0e9d8a4564e23d7d4cb42da7e95b2fd677f1a53d02165f4b8c7c335c0cf9b76c3a031d0b04e376663eb6c9c4f73c6743e52c919f1f0c77ac68b9b2672d06e16482e1dbf4b8a8307055dde3f33b0dddd856797fc7f69557199db98bf9b1bb2cb5f14bfac82d4f2d41a4295a7e04788d224c4ee12ae7029a8af8bc88ecd81ae86ea55bfc6f1b595894ef5d401c31b8c7cdcd5ddedde2a5a7fa68b8c52811b16d48490043b3fce1970462e6a62edf2a708d77f6a8743b19a1", 0xd0}, {&(0x7f0000000cc0)="0999bc636605864890270e884e79cf0227f4bf97bce6abfdb38092c0b7c444252514a841ff2c99e7a83545c94ae592ad1b49c01be4d1db34b1af7e27cfda1face8174d1ca265ea53cfa2018175693a57ab985683c6c10c0a45ba56738858d87efb3fb13f5ea24bceb93f5614b53485a456a993620784ee6dcc7a3ea59551e5f0eb1b288fcd06cb0f0efaaed1c7831a357a20ce9d41cc55cfaf9b0b7121634c44a8193b978778f99ef04de8f993479dcd5b6efbab18dd3233fb6b7d47d2da", 0xbe}, {&(0x7f0000000e80)="b0788ec4bfa24f203c4be5bb6d81dcafec2c6d61ed5b0bd7eeb3dfcd0bd55348e5a2b1be1fd8b91238b2d7aaa46c198665a4c711a3253666bc2dd760d28bba39cf7fedde3c9f7bbf9b4813a73c7135c8b7936e42a47b7ef4282b60b9896de6a316822353f412497d530e456349b7238f12c5a4df93dc5ec0b41b4852fe272fc3dc7eb575813670880290a6cb34a62f0b1c6fa92f59884cee59806692752b64d0b80b5ac584a6ff972009026826e3f489c566c3dc6739eb2d8a5073c9a6af03986bfa23306ed3c2d0cd580f3ec65d4b15a90c5ffd112d828ac79bfa", 0xdb}], 0x4, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x72fdf2b6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff4c}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x6a, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6f, 0x2, [{0x0, 0x4, "ed28"}, {0x7, 0xd, "5ea306ef43ed77dfe4c41b"}, {0x6, 0x12, "80d6aeb6a21874fce2cedf6178525890"}, {0x2, 0x7, "c7ac4c0909"}, {0x5, 0xe, "2072549b585b54ca4d5887de"}, {0x0, 0xe, "28ea5e72456263c6c7c4e765"}, {0x0, 0xd, "f46849a00681c489580699"}, {0x1, 0x6, "b99dd1d3"}, {0x2, 0x10, "197ccac51a7abeca703806c0adca"}]}, @end, @timestamp_addr={0x44, 0x1c, 0x44, 0x1, 0x5, [{@empty, 0x1}, {@rand_addr=0x64010102, 0x8165}, {@rand_addr=0x64010100, 0x32}]}, @cipso={0x86, 0x29, 0x1, [{0x1, 0xe, "670fe33aafb036ea8b7cdbde"}, {0x1, 0x2}, {0x0, 0xe, "8c5950207ca8e64e0e346939"}, {0x6, 0x2}, {0x1, 0x3, 'i'}]}, @end, @cipso={0x86, 0x3a, 0x3, [{0x2, 0x11, "d5d6125efbdc3f94f584d76e1f9cdd"}, {0x5, 0xa, "2dd8c36ebb75bb68"}, {0x0, 0xe, "419f5d9b584d471c69dbb3a2"}, {0x5, 0xb, "440a7ed0db1bced7e6"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000016c0)="fd5f2b7d2b8702f5bf5d908d7e62", 0xe}, {&(0x7f0000001700)="084c345357a5f1da868f9fc52055facb066a88f2d0a36df02c85bb76d91f60ae3b47a5faaf2ea6d0c02bcd5d8674e1fbde0bc8917a238de2aba2de1726d35c5fcb142043c2ca9612ad035da2240f15f6854507c7924f54ee265f16522246ee897a63218e7c0ab0478215603f22cfc2fb8d900075e9da7089eec7a6eaa982919fb6b7e668ea07b31e7d7754c085d95ce0173970f366fc843f71778342b387250fa202215b6df7e228ebb9a4f8c004c2e7d9c5325c8fe89aadfb80bda75de4e9a210b6640fde180f776367b4975c3bd914aa7ba322a6c22252443ffb4af03825a4c20d43e05fa745af100cfb1c7ddf01c40e8cece7cd2a", 0xf6}, {&(0x7f0000003140)="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", 0x1000}], 0x3, &(0x7f0000001900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101}}}], 0x20}}, {{&(0x7f0000001940)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001980)="94db22e97edfb8b11a75c5b4cfeb7fab21e6e836bad44c273c0084413060b5706d74b2e1e08da2ebcc3f09d85dc495d1f6002ee2701c971983bb498b14c163c76931389ed2bd09252c544b75abb27d6bb4787666390a0e469ba573437fcabd36b167da94b864efb0bc2ce91fe60db6757796d0220acfa58456c10f2ee31309d3b744c5fe6302cbc55c7119352b124414a43c9ff9d4d1f6bc3a8bb489cbbda4201af7dce39330eabdd1", 0xa9}, {&(0x7f0000001a40)="8a573da2d49853fc7f97f4d6784fd959df7fae73aa6fa4dd2c5818f90d2a95c7948224b47378ed2dc5f4ea67e06f2c061b70bb3e785b16022d096f06c2acd3e4824c55f307158326711e5576492200b267472f6bd67422411c0c12a28f7c0edbbb4b1686c62ec116caf55b06213c50c29c5b78d3a165296cba63b2cebb7a0a2a51a6733bb7229b8a2075dc4263d9f7b2be752301d59837606e01f51d7a3f5ed7d826e47f565002fd983a71e2534d4da2e3acb176fa9d4b2696c5ad254557e4974ff78a970fc73faffc9c66ba19def663e4", 0xd1}], 0x2, &(0x7f0000001b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x30}}], 0x5, 0x20000005) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x38, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @clear_death={0x400c630f, 0x2}, @acquire, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x1}], 0xf0, 0x0, &(0x7f0000000540)="2a769318e3b777375df4a835d2ffc868ea10589eb3a3d88d3b83c68c39984b1cf054fa992e069ae7fa0b45731da986b354aa808c340901eab8d9bde743c56e2c33e27758416c1727c8bc34cd3235a91178d0c6b4bb352d77450284afa9a11a965a55d900a8462b9fc66889e0b7bec44087962e646302296d6bc0a5e9e8b1456dd929abde7ea8855d9a1be520c62ebecc8842e89365de355190888994feab92aa66322849a4c99a184304933009e29a5accc39bc7db3fe0df2ea7cccfcc44c1615e7c40f94071dccb0525c91d617055ee8291bf508fe5067ac62a82febf68b66e26d43cc380b30818439a582c3829dc9c"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0xa5, 0x1, 0x1e}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 21.202556396s ago: executing program 4 (id=2166): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x701480, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002240)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000a50a4049db4cbebc551e657eaa40914af83005747dabf207581877aeb98e4e7f5b9218b6cd3f79d799d643e453a21637f7f44a"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x8000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030305000000000000000000000000000c000200fffffffe000000010800034000000001b8c97348c03a8345a6b3080dc4b08c2dea5dc938f950169e1ef159dedc55d33ee4a070a4f4aafa9b8361fbd0869f33b21371ce75e7d93679ef492b02f9308c0c8ccec3dfa6a774da3c8d14558ce0d051e934a6bd32ebe9044bb1a8e574ad195e176eb7ed7f830dae33becc1ef330aaee167ab68eb5b283"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c900, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r5, r6) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2000005, 0x12, r0, 0xfffff000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0100001900010d"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 18.997536832s ago: executing program 2 (id=2167): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) lstat(0x0, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000000426bd7000ffdbdf2504004900651fa1adbd3950814d0fd6a74db467b87e616685404de543ee5a195ba98b14045552c3e53610cd0a0d15ea88237d7ad49eb670395778fe66fef09a79aab64b238e8c8cbb03839804007ea07cb3aa953364b05b89a6e38e1f41ccea82c428ac19c95a7647bf0f3251b85de6620e4cc29517729f70be6af7acb90ab7e9b7e87f77766172a541e18a64663135fac06e7b054fbc"], 0x14}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x2000c004}, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2, 0x0) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000af4000/0x1000)=nil, &(0x7f0000221000/0x2000)=nil, &(0x7f0000296000/0x3000)=nil, &(0x7f00009fd000/0x4000)=nil, &(0x7f000082d000/0x4000)=nil, &(0x7f0000023000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000acd000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000a2d000/0x3000)=nil, &(0x7f000082e000/0x4000)=nil, &(0x7f0000000000)="98eb2fc3f9312ce8eb6d24c758b35bd03c35527278d87d595f3b219ea1d9b8401a2b456e0036ad17a4ed0f9cf3fec2dee45313f8d914d569541622b1bda154952e701f800226dd827d0727094e0c4a9ac138c5f812faeedf25e52709ac58ba4455150538dad64e8071b2f2a59bd56cdc238824a5ba327eb0f87438fd534030e6d12e90c075aa213ffd1b02695e4fda7f680a410b26e7873fa48bfa027c27f434a6b82395496f0cfe425ab202acff3c3d699dfeda5e808dafd78f34165ad29a4ff3e2961d800479336d38e13427593b853f38c7d41cbf7350fa67adf1be5140c4e296", 0xe2}, 0x68) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x24, 0x3, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x5, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000001"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x6, 0x102, 0x9, {0x0, 0xea60}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "bde7fe0817db59f5"}}, 0x48}, 0x1, 0x0, 0x0, 0x20044840}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.04254984s ago: executing program 33 (id=2163): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x304, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40) (async) socketpair(0x25, 0x3, 0x3, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x4040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000340)={0xbf0, r5, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0xbdc, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x1dc, 0x80, [@chsw_timing={0x68, 0x4, {0x1ff, 0x3}}, @random={0x3, 0x8b, "7569ca1f40b33a5cc51e523a9ac00af5dce346f522749963414e539e4115c79e472da4d06f648e94da10ca04fa18fecc7e7943ab342720aa8c55ecc66598200aa0c5c22a42dd316479772c8178ca3263bac56054aba324c0e5e482d470ddb17f068f13666ace039f99bcac5ad73708067451ffc9a19ef6484f2ba18f7f69274fe9d68e6d886e1d3ba8ce70"}, @mic={0x8c, 0x10, {0xfe4, "bbdf3886a262", @short="32d6b06cc79c87aa"}}, @cf={0x4, 0x6, {0x0, 0xb1, 0x400, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x64, 0x28}}, @perr={0x84, 0x120, {0x8, 0x10, [{{0x0, 0x1}, @device_a, 0xffff6165, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x26}, {{0x0, 0x1}, @device_a, 0x34e2, @value=@broadcast, 0x24}, {{0x0, 0x1}, @device_b, 0x800, @value=@broadcast, 0x3d}, {{}, @broadcast, 0xa, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x34}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x1a}, {{}, @device_a, 0x97, @void, 0x1f}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x7}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x23}, {{0x0, 0x1}, @device_a, 0x3ff, @value, 0x27}, {{0x0, 0x1}, @broadcast, 0x82bc, @value=@device_b, 0x6}, {{0x0, 0x1}, @device_b, 0xfff, @value, 0x42}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x1f}, {{}, @device_b, 0xfffffffc, @void, 0x41}]}}, @challenge={0x10, 0x1, 0xd3}]}, @NL80211_ATTR_BEACON_TAIL={0x117, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x8c, 0x9}}, @mic={0x8c, 0x18, {0x718, "d1374370f9d5", @long="df7d3a2325096739cacefe769c80867b"}}, @random={0x9, 0xf1, "ae84e5f0b1f624ca8a0f6a5113066f9937de1b238f20777ab6eac0f7e6d3effb9722adea262da31eb5247193c7661d2f5e61059fbd7c86d89385fe14f4571efd5483f7f7db818b194770368e87a488652af912fe3addd9c64e668a3577bcea3a1c0c89886dd16531f9456d8cbc30f0f344ee34c38c8f040ade2944162034c09df9e38f97e2a80d09674d2b99e65664d37198e5c8990fd9d6a6cd19429b9416bccbbda9d8efdbcc29a22b7d3e5b42626ca0d8bb185131564c3ad61f2aaba082ac146ce0eb81cbfe64e00a56604fd012dd0c39eb82d591db9bd320b63b4fa7d97921ecc5e54c7a0a7b20e08a837ce3ed5f13"}]}, @NL80211_ATTR_BEACON_TAIL={0x1a3, 0xf, [@supported_rates={0x1, 0x2, [{0x12}, {0xc, 0x1}]}, @fast_bss_trans={0x37, 0xa0, {0x6, 0x2, "c924a5d24d3640ef28f2f9b8f3aaab99", "4334fd52f277e38b91aadef4e5de5820a9172acd6d1d7c855ca8c6962b24de20", "dc4b446eb46767e5c48d1aa6ecc077d59b36f505a92b341be24e838109b93309", [{0x4, 0x25, "c7fc91f2686245ad7228925c7c6a1687c680f1ebe91077e6e33239b7b2491765e471b9810f"}, {0x4, 0x25, "dd695e71a197bba26992f5a98c4731b91f0442a4b0b34ca279f33fdfbe1980fcdbbe873ea1"}]}}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x3, 0x7, 0x0, 0x318, 0x0, 0x1}, 0x8, 0x4, 0x2}}, @prep={0x83, 0x1f, {{}, 0x7f, 0x3, @device_a, 0x7, @void, 0x0, 0x7, @device_b, 0x1ff}}, @tim={0x5, 0xae, {0x9, 0x43, 0xfe, "ac7b153855d82e940f0e4eadeb579fab66100060f92355bd2265bf5f8449ac241f0f757312ff979eb69ca026466057bd32a3b51a2d9ea599d9ab8414872792a7dc28a8859775e6b71f0b80fbd2e3bc59c39a9a74e9cc1fae6770e90b6ce1462e0ed0466be8dc6995029ab0cc1f72e6c2b8fe57d41ff068984e7a5d0909f3c76c6576814dc6a98caf7616e446e7e77ffb0faf0cc4eb108113cea61337edf53090e54978f432bd115b8098cd"}}, @dsss={0x3, 0x1, 0x5}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x8, 0x40}}]}, @NL80211_ATTR_PROBE_RESP={0x3a7, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1d, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0xab, 0x9}}, @link_id={0x65, 0x12, {@random="c1d86a2dfa42", @broadcast, @broadcast}}]}, @NL80211_ATTR_BEACON_HEAD={0x13e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x382f}, @device_a, @broadcast, @initial, {0x1, 0x2}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x7, @default, 0xa015, @void, @val={0x1, 0x8, [{0xb, 0x1}, {0x1b}, {0x4, 0x1}, {0x48, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x9}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0xe, 0x1}}, @void, @void, @val={0x2d, 0x1a, {0xadc26753cc69dd0c, 0x1, 0x5, 0x0, {0x3, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x6, 0xffff, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x6, 0x7189f61481e214e}}, @val={0x76, 0x6, {0x5, 0x25, 0x33, 0xfb}}, [{0xdd, 0xa0, "ba3532822b630a0bd36652c6aad0f4fa2ce58fe4c7dea5a61aaf5ba058f9126dfa66dc7f1e308ea19bb981ed6528c36c82ba071e8cb40a8402f4808f680c4f4af56160e76564f893c008f852793fe19c05e151ff5d2540899cea9d8c8b2a4f5caa37746a726462e85c8de5f41608bc6fd5b67fd665c6dbad45219ce8802b9e47d99e0ebb836aefef4c1ec12fbfc769bebb0c607e0c78117ef10ecea3a8a217c5"}, {0xdd, 0x2b, "3b059527582d56296128ad5ae572a7fcac06926074893f3b04ff1c9523b7f44921df54889376b8da618496"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x28, 0x80, [@ssid={0x0, 0x8, @random="300539e9f398e818"}, @peer_mgmt={0x75, 0x8, {0x1, 0x6, @val=0x8, @val=0xe, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1dc, 0x7f, [@challenge={0x10, 0x1, 0x6}, @mic={0x8c, 0x18, {0x348, "e478457bb880", @long="a604ec973db76ebb7399a95f9c2e0ecb"}}, @tim={0x5, 0xb3, {0x72, 0xa1, 0xeb, "6baf24c9a7a137bf92eaefde7c7e8f398c9739412eff7516c45ef1dbe7d9b0ce1652bb82bc6a2ffadfbd00b9e18d3c14b4c78a14b6ed3bbaae79405cd7c3d3b3cf008c324831f92ee5ac243c5a728bcf4afff4fd4520cd01dc95e1f576ad5532d7a550f7dd04f2295012b64307bee2fe84cd99b51f57252f9e30f3957c6aa3797e2e8d4ded839e44bfbce7879d048b1611f30b5b63ebdd3494bd397a1a1fb0f2d300425a8721180ac46f5884478ded42"}}, @mesh_chsw={0x76, 0x6, {0x7, 0x81, 0x3}}, @preq={0x82, 0x8e, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x3, 0x9, 0x401, @device_a, 0x80, @value, 0x60ef, 0x3, 0xa, [{{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1}, @device_b, 0x200}, {{}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x8001}, {}, {{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0xf6b}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}}]}}, @prep={0x83, 0x1f, {{}, 0x7, 0x6, @device_b, 0x6, @void, 0x5, 0x1, @device_a, 0x1}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x30, {{0x1, 0x0, 0x1}, 0x4, 0x80, 0x9, @device_a, 0x1, @void, 0x1, 0x0, 0x2, [{{0x1}, @broadcast, 0x9136}, {{0x1, 0x0, 0x1}, @device_b, 0x80}]}}, @random_vendor={0xdd, 0x11, "194cd69e34f24d22ab8d09ba34e07fd6cf"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xf4ae, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xc51d, 0x8, 0x10, 0x5, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2, 0x40, 0x114, 0xfff, 0x8, 0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8, 0xf000]}]}]}, 0xbf0}, 0x1, 0x0, 0x0, 0x4040840}, 0x4004000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000001040)={0x3}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r7) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x280080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, r5, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3ff, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x48, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2000c140) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000001400)={0x3, 0x0, [{0x40000000, 0x8, 0x6, 0x93, 0xb2, 0x7, 0x10}, {0x80000001, 0x4, 0xe4a98845514e5718, 0x1, 0x8001, 0x8, 0x1}, {0x80000001, 0x798, 0x0, 0x0, 0x1, 0xe3d3}]}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r4) (rerun: 32) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x4b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) (async, rerun: 32) r12 = fsmount(r7, 0x1, 0xf1) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x300c400, &(0x7f0000001640)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@cache_none}, {@privport}, {@ignoreqv}, {@version_L}, {@noextend}, {@cache_fscache}], [{@appraise}, {@obj_user={'obj_user', 0x3d, '$$.[@-'}}]}}) (async) ioctl$BINDER_CTL_ADD(r12, 0xc1086201, &(0x7f0000001700)={'custom1\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r13, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xe0, r14, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x51) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000001a80)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000001ac0)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r15, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004080) 6.642829012s ago: executing program 34 (id=2164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x120, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0xe}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd26, 0x70bd28, 0x70bd26, 0x2}}]}, 0x120}}, 0x4000040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0xe, 0x0, 0x2, 0x18, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@local, 0xf, 0x10, 0x4}, @sadb_lifetime={0x4, 0x0, 0xb856, 0x3, 0xfffffffffffffff8, 0xa}, @sadb_x_filter={0x5, 0x1a, @in=@private=0xa010101, @in=@local, 0x1d, 0x4, 0x14}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x11, 0x14}, @sadb_sa={0x2, 0x1, 0x4d4, 0x5, 0x1, 0xdd, 0x2, 0x2}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}]}, 0xc0}}, 0x880) close_range(r1, 0xffffffffffffffff, 0x0) 1.400563338s ago: executing program 35 (id=2166): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x701480, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002240)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000a50a4049db4cbebc551e657eaa40914af83005747dabf207581877aeb98e4e7f5b9218b6cd3f79d799d643e453a21637f7f44a"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x8000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030305000000000000000000000000000c000200fffffffe000000010800034000000001b8c97348c03a8345a6b3080dc4b08c2dea5dc938f950169e1ef159dedc55d33ee4a070a4f4aafa9b8361fbd0869f33b21371ce75e7d93679ef492b02f9308c0c8ccec3dfa6a774da3c8d14558ce0d051e934a6bd32ebe9044bb1a8e574ad195e176eb7ed7f830dae33becc1ef330aaee167ab68eb5b283"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c900, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r5, r6) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2000005, 0x12, r0, 0xfffff000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0100001900010d"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 0s ago: executing program 36 (id=2167): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) lstat(0x0, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000000426bd7000ffdbdf2504004900651fa1adbd3950814d0fd6a74db467b87e616685404de543ee5a195ba98b14045552c3e53610cd0a0d15ea88237d7ad49eb670395778fe66fef09a79aab64b238e8c8cbb03839804007ea07cb3aa953364b05b89a6e38e1f41ccea82c428ac19c95a7647bf0f3251b85de6620e4cc29517729f70be6af7acb90ab7e9b7e87f77766172a541e18a64663135fac06e7b054fbc"], 0x14}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x2000c004}, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2, 0x0) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000af4000/0x1000)=nil, &(0x7f0000221000/0x2000)=nil, &(0x7f0000296000/0x3000)=nil, &(0x7f00009fd000/0x4000)=nil, &(0x7f000082d000/0x4000)=nil, &(0x7f0000023000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000acd000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000a2d000/0x3000)=nil, &(0x7f000082e000/0x4000)=nil, &(0x7f0000000000)="98eb2fc3f9312ce8eb6d24c758b35bd03c35527278d87d595f3b219ea1d9b8401a2b456e0036ad17a4ed0f9cf3fec2dee45313f8d914d569541622b1bda154952e701f800226dd827d0727094e0c4a9ac138c5f812faeedf25e52709ac58ba4455150538dad64e8071b2f2a59bd56cdc238824a5ba327eb0f87438fd534030e6d12e90c075aa213ffd1b02695e4fda7f680a410b26e7873fa48bfa027c27f434a6b82395496f0cfe425ab202acff3c3d699dfeda5e808dafd78f34165ad29a4ff3e2961d800479336d38e13427593b853f38c7d41cbf7350fa67adf1be5140c4e296", 0xe2}, 0x68) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x24, 0x3, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x5, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000001"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x6, 0x102, 0x9, {0x0, 0xea60}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "bde7fe0817db59f5"}}, 0x48}, 0x1, 0x0, 0x0, 0x20044840}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): sysadm_t tclass=rawip_socket permissive=1 [ 94.010727][ T36] audit: type=1400 audit(1753675513.173:2545): avc: denied { name_bind } for pid=2933 comm="syz.0.811" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.031871][ T36] audit: type=1400 audit(1753675513.173:2546): avc: denied { node_bind } for pid=2933 comm="syz.0.811" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.033260][ T2936] netlink: 68 bytes leftover after parsing attributes in process `syz.0.812'. [ 94.053129][ T334] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 94.072953][ T2936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 94.196014][ T334] usb 3-1: device descriptor read/64, error -71 [ 94.436014][ T334] usb 3-1: device descriptor read/64, error -71 [ 94.546081][ T334] usb usb3-port1: attempt power cycle [ 94.823500][ T2849] batadv_slave_1: left promiscuous mode [ 94.886024][ T334] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 94.907091][ T334] usb 3-1: device descriptor read/8, error -71 [ 95.037031][ T334] usb 3-1: device descriptor read/8, error -71 [ 95.276030][ T334] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 95.297092][ T334] usb 3-1: device descriptor read/8, error -71 [ 95.400611][ T2969] overlayfs: failed to clone upperpath [ 95.427133][ T334] usb 3-1: device descriptor read/8, error -71 [ 95.536097][ T334] usb usb3-port1: unable to enumerate USB device [ 106.907301][ T2974] fuse: Unknown parameter 'fk0x0000000000000008' [ 106.978615][ T36] audit: type=1400 audit(1753675526.163:2547): avc: denied { mounton } for pid=2985 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 107.053840][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.061036][ T2985] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.068246][ T2985] bridge_slave_0: entered allmulticast mode [ 107.074697][ T2993] SELinux: Context system_u:object_r:scsi_generic_device_t:s0 is not valid (left unmapped). [ 107.074715][ T2985] bridge_slave_0: entered promiscuous mode [ 107.086447][ T2993] rust_binder: 2987 RLIMIT_NICE not set [ 107.090763][ T36] audit: type=1400 audit(1753675526.273:2548): avc: denied { relabelto } for pid=2980 comm="syz.2.827" name="file0" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 107.092482][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.096814][ T36] audit: type=1400 audit(1753675526.273:2549): avc: denied { associate } for pid=2980 comm="syz.2.827" name="file0" dev="tmpfs" ino=701 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scsi_generic_device_t:s0" [ 107.123616][ T2985] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.165618][ T2985] bridge_slave_1: entered allmulticast mode [ 107.171949][ T2985] bridge_slave_1: entered promiscuous mode [ 107.223751][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.230836][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.238154][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.245196][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.267279][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.274590][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.283982][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.291067][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.300259][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.307362][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.334697][ T2985] veth0_vlan: entered promiscuous mode [ 107.346411][ T2985] veth1_macvtap: entered promiscuous mode [ 107.366491][ T36] audit: type=1400 audit(1753675526.553:2550): avc: denied { mounton } for pid=2985 comm="syz-executor" path="/root/syzkaller.CsjFwJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 107.407686][ T3001] rust_binder: Error while translating object. [ 107.407712][ T3001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 107.413996][ T3001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2 [ 107.445732][ T36] audit: type=1400 audit(1753675526.623:2551): avc: denied { map } for pid=3006 comm="syz.4.830" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.496099][ T3011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3011 comm=syz.3.832 [ 107.776045][ T732] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.822408][ T36] audit: type=1400 audit(1753675527.003:2552): avc: denied { rmdir } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 107.936324][ T732] usb 5-1: Using ep0 maxpacket: 32 [ 107.948512][ T732] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.957009][ T732] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015 [ 107.967228][ T732] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.980178][ T732] usb 5-1: config 1 interface 0 has no altsetting 0 [ 107.988182][ T732] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.997328][ T732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.005340][ T732] usb 5-1: Product: syz [ 108.009534][ T732] usb 5-1: Manufacturer: syz [ 108.014141][ T732] usb 5-1: SerialNumber: syz [ 108.019871][ T3013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.186033][ T410] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 108.232764][ T732] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 108.244752][ T732] usb 5-1: USB disconnect, device number 2 [ 108.253365][ T732] usblp0: removed [ 108.337150][ T410] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 108.347009][ T410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31552, setting to 1024 [ 108.358631][ T410] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 108.370032][ T410] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 108.379454][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.388014][ T410] usb 3-1: Product: syz [ 108.392464][ T410] usb 3-1: Manufacturer: syz [ 108.397526][ T410] usb 3-1: SerialNumber: syz [ 108.403013][ T410] usb 3-1: config 0 descriptor?? [ 108.408931][ T3038] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.416372][ T3038] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.624293][ T3038] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.631717][ T3038] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.787453][ T36] audit: type=1400 audit(1753675527.973:2553): avc: denied { name_bind } for pid=3064 comm="syz.3.849" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 108.814403][ T36] audit: type=1400 audit(1753675527.993:2554): avc: denied { create } for pid=3064 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.040392][ T410] Error reading MAC address [ 109.269093][ T3095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.858'. [ 109.296471][ T36] audit: type=1400 audit(1753675528.483:2555): avc: denied { setattr } for pid=3099 comm="syz.3.861" name="RAW" dev="sockfs" ino=13563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.416053][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.462019][ T36] audit: type=1400 audit(1753675529.645:2556): avc: denied { read } for pid=3126 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.565987][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 109.572358][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.582608][ T31] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.593737][ T31] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.603806][ T31] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 109.616723][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.623347][ T31] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 109.632411][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.641205][ T31] usb 5-1: config 0 descriptor?? [ 110.048526][ T31] hid-thrustmaster 0003:044F:B65D.0003: item fetching failed at offset 0/5 [ 110.064195][ T31] hid-thrustmaster 0003:044F:B65D.0003: parse failed with error -22 [ 110.072389][ T31] hid-thrustmaster 0003:044F:B65D.0003: probe with driver hid-thrustmaster failed with error -22 [ 110.280051][ T31] usb 5-1: USB disconnect, device number 3 [ 110.688555][ T3165] overlayfs: missing 'lowerdir' [ 110.960582][ T410] usb 3-1: USB disconnect, device number 29 [ 111.413822][ T3202] veth0_vlan: entered allmulticast mode [ 111.420267][ T3202] veth0_vlan: left promiscuous mode [ 111.425793][ T3202] veth0_vlan: entered promiscuous mode [ 111.665915][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.903296][ T3241] binder: Unknown parameter '' [ 111.973518][ T3244] overlayfs: failed to clone upperpath [ 112.003374][ T3249] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.912'. [ 112.014056][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 112.014075][ T36] audit: type=1400 audit(1753675532.205:2559): avc: denied { mount } for pid=3248 comm="syz.3.912" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.290454][ T3268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3268 comm=syz.0.919 [ 112.323905][ T36] audit: type=1400 audit(1753675532.505:2560): avc: denied { create } for pid=3271 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 112.422530][ T36] audit: type=1400 audit(1753675532.605:2561): avc: denied { bind } for pid=3288 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.443398][ T36] audit: type=1400 audit(1753675532.625:2562): avc: denied { setopt } for pid=3288 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.035129][ T3305] SELinux: Context system_u:object_r:dhcpd_var_run_t:s0 is not valid (left unmapped). [ 113.045098][ T36] audit: type=1400 audit(1753675533.225:2563): avc: denied { relabelto } for pid=3304 comm="syz.0.933" name="file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 113.072511][ T36] audit: type=1400 audit(1753675533.225:2564): avc: denied { associate } for pid=3304 comm="syz.0.933" name="file0" dev="tmpfs" ino=1532 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 113.100427][ T36] audit: type=1400 audit(1753675533.265:2565): avc: denied { mounton } for pid=3304 comm="syz.0.933" path="/276/file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 113.127477][ T36] audit: type=1400 audit(1753675533.265:2566): avc: denied { write } for pid=3304 comm="syz.0.933" name="file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 113.154314][ T36] audit: type=1400 audit(1753675533.265:2567): avc: denied { open } for pid=3304 comm="syz.0.933" path="/276/file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 113.211657][ T36] audit: type=1400 audit(1753675533.395:2568): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 113.254306][ T3311] 9pnet_fd: Insufficient options for proto=fd [ 113.736028][ T3221] Bluetooth: hci0: command 0x1003 tx timeout [ 113.736028][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.862471][ T3342] binder: Unknown parameter 'contextÀ' [ 114.657792][ T3392] netlink: 596 bytes leftover after parsing attributes in process `syz.4.963'. [ 114.949970][ T3403] 9pnet_fd: Insufficient options for proto=fd [ 114.967884][ T3405] 9pnet_fd: Insufficient options for proto=fd [ 115.006755][ T334] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.072687][ T3415] random: crng reseeded on system resumption [ 115.146251][ T3422] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.155983][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 115.162375][ T334] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 115.172581][ T334] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 115.186453][ T334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.195545][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.204009][ T334] usb 5-1: SerialNumber: syz [ 115.211008][ T3395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.220856][ T334] cdc_ether 5-1:1.0: skipping garbage [ 115.226370][ T334] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.339708][ T3424] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 115.346855][ T3424] rust_binder: Write failure EINVAL in pid:441 [ 115.352695][ T410] rust_binder: 3423: removing orphan mapping 0:1048 [ 115.430885][ T410] rust_binder: 3426: removing orphan mapping 0:4200 [ 115.676201][ T3434] binder: Binderfs stats mode cannot be changed during a remount [ 115.841013][ T3439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.977'. [ 115.853046][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.866129][ T3439] bridge_slave_1 (unregistering): left allmulticast mode [ 115.873768][ T3439] bridge_slave_1 (unregistering): left promiscuous mode [ 115.881673][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.301000][ T3469] fuse: Bad value for 'user_id' [ 116.306074][ T3469] fuse: Bad value for 'user_id' [ 116.388986][ T3472] binder: Unknown parameter '' [ 116.748813][ T3484] bpf: Bad value for 'mode' [ 117.062846][ T3491] netlink: 76 bytes leftover after parsing attributes in process `syz.3.995'. [ 117.091872][ T3499] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 117.255887][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 117.255903][ T36] audit: type=1400 audit(1753675537.442:2574): avc: denied { write } for pid=334 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14990 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.362641][ T36] audit: type=1400 audit(1753675537.552:2575): avc: denied { write } for pid=3509 comm="syz.2.1002" name="pfkey" dev="proc" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.462579][ T3523] binder: Binderfs stats mode cannot be changed during a remount [ 117.494420][ T3525] netlink: 'syz.2.1006': attribute type 4 has an invalid length. [ 117.507085][ T3525] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1006'. [ 117.521357][ T3525] binder: Unknown parameter 'ma' [ 117.554447][ T3529] input: syz1 as /devices/virtual/input/input11 [ 117.577608][ T334] usb 5-1: USB disconnect, device number 4 [ 117.598970][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'. [ 117.709504][ T36] audit: type=1400 audit(1753675537.902:2576): avc: denied { lock } for pid=3565 comm="syz.2.1019" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.810835][ T3581] syz.2.1023(3581): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 118.391197][ T3615] TCP: TCP_TX_DELAY enabled [ 118.835991][ T410] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 118.985982][ T410] usb 3-1: Using ep0 maxpacket: 8 [ 118.992730][ T410] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 119.003992][ T410] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 119.013776][ T410] usb 3-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.026678][ T410] usb 3-1: config 1 interface 0 has no altsetting 0 [ 119.034609][ T410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.043728][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.051772][ T410] usb 3-1: Product: syz [ 119.055968][ T410] usb 3-1: Manufacturer: 纴婊ë¾å»å³…ヒ㒡雌켓놨֮᠛荒á„㽈엙ë‚䲓⩃â¬í‹µåºŠî©µåŽ„èŸï­«ç¢¬à¸‚á­‡î†ï…œç¯²ï°›ã®Žï‰šî£é·¥çº·èªã»’⣇ì¯è‰†ë³Ÿì‹…å³€ê¿áº¹ë±¡î°‰ç£°á¦ªæ£¿ê·¶ë¹˜ê´œí‡é‚馺ʅ≎䵇嬰꼦헛秥πྌ鹒èºíŒ‚씦ꡋ밖㤆鸾㞔点亮⽭ᦸ휀휱指ë»áš¾ì¦¥ä©´ì¿ã¦¡à©…á¯ê¥¥ [ 119.085670][ T410] usb 3-1: SerialNumber: syz [ 119.091763][ T3625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.099310][ T3625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.181850][ T3642] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1041'. [ 119.346561][ T3659] binder: Unknown parameter 'fsuuid' [ 119.367111][ T36] audit: type=1400 audit(1753675539.562:2577): avc: denied { map } for pid=3661 comm="syz.4.1048" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.515140][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.529097][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.538284][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.547905][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.559722][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.571635][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.581485][ T36] audit: type=1400 audit(1753675539.782:2578): avc: denied { write } for pid=3624 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.603394][ T410] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 119.616637][ T410] usb 3-1: USB disconnect, device number 30 [ 119.712495][ T3697] tmpfs: Unknown parameter 'ÿÿ' [ 119.769544][ T3706] 9pnet_fd: Insufficient options for proto=fd [ 119.785775][ T36] audit: type=1400 audit(1753675539.972:2579): avc: denied { create } for pid=3707 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 119.876010][ T334] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.025972][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 120.032182][ T334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.043081][ T334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.052169][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.060233][ T334] usb 5-1: SerialNumber: syz [ 120.067499][ T334] hub 5-1:1.0: bad descriptor, ignoring hub [ 120.073428][ T334] hub 5-1:1.0: probe with driver hub failed with error -5 [ 120.180034][ T3720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.180068][ T3720] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 120.189642][ T3720] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:489 [ 120.273783][ T410] rust_binder: 3719: removing orphan mapping 0:1048 [ 120.434669][ T36] audit: type=1400 audit(1753675540.622:2580): avc: denied { ioctl } for pid=3739 comm="syz.2.1076" path="socket:[16546]" dev="sockfs" ino=16546 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.477822][ T3745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.486778][ T3745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.505217][ T3745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.515430][ T3745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.525982][ T334] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 120.534600][ T334] usb 5-1: device reset changed ep0 maxpacket size! [ 120.549082][ T334] usb 5-1: USB disconnect, device number 5 [ 120.686031][ T334] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.835989][ T334] usb 5-1: Using ep0 maxpacket: 32 [ 120.842602][ T334] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.851023][ T334] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015 [ 120.861006][ T334] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.873821][ T334] usb 5-1: config 1 interface 0 has no altsetting 0 [ 120.882008][ T334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.891129][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.899196][ T334] usb 5-1: Product: syz [ 120.903391][ T334] usb 5-1: Manufacturer: syz [ 120.908027][ T334] usb 5-1: SerialNumber: syz [ 120.914820][ T3694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 121.130495][ T334] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 121.156011][ T334] usb 5-1: USB disconnect, device number 6 [ 121.179017][ T334] usblp0: removed [ 121.253369][ T3790] rust_binder: Failed copying remainder into alloc: EFAULT [ 121.253411][ T3790] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 121.260885][ T3790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 121.269222][ T3790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:509 [ 121.637032][ T732] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 121.640675][ T3802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.654785][ T36] audit: type=1400 audit(1753675541.842:2581): avc: granted { setsecparam } for pid=3801 comm="syz.4.1098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 121.654931][ T3802] rust_binder: Error in use_page_slow: ESRCH [ 121.680596][ T3802] rust_binder: use_range failure ESRCH [ 121.686867][ T3802] rust_binder: Failed to allocate buffer. len:192, is_oneway:true [ 121.692368][ T3802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 121.700220][ T3802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:84 [ 121.797041][ T732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.816630][ T732] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 121.825699][ T732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.834481][ T732] usb 3-1: config 0 descriptor?? [ 121.955990][ T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.044251][ T732] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 122.105984][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 122.112387][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.123375][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 122.134207][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 122.147191][ T65] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 122.156347][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.165174][ T65] usb 5-1: config 0 descriptor?? [ 122.303191][ T36] audit: type=1400 audit(1753675542.492:2582): avc: denied { create } for pid=3795 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 122.324319][ T36] audit: type=1400 audit(1753675542.492:2583): avc: denied { create } for pid=3795 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 122.345391][ T36] audit: type=1400 audit(1753675542.492:2584): avc: denied { lock } for pid=3795 comm="syz.2.1095" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.575088][ T65] nintendo 0003:057E:2019.0005: hidraw1: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 122.783290][ T3842] 9pnet_fd: Insufficient options for proto=fd [ 122.976339][ T3806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.986174][ T3806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.003224][ T65] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 123.017218][ T65] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 123.026242][ T65] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 123.040913][ T65] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 123.052777][ T3857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.052825][ T3857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.055441][ T65] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 123.062141][ T3855] 9pnet_fd: Insufficient options for proto=fd [ 123.068247][ T65] usb 5-1: USB disconnect, device number 7 [ 123.107274][ T36] audit: type=1400 audit(1753675543.292:2585): avc: denied { append } for pid=3861 comm="syz.2.1117" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 123.144364][ T3866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.146346][ T36] audit: type=1400 audit(1753675543.322:2586): avc: denied { associate } for pid=3863 comm="syz.0.1116" name="rnullb0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 123.155520][ T3866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.184107][ T3868] 9pnet_fd: p9_fd_create_tcp (3868): problem connecting socket to 127.0.0.1 [ 123.537126][ T36] audit: type=1400 audit(1753675543.732:2587): avc: denied { watch } for pid=3890 comm="syz.0.1126" path="/343/file0" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.539084][ T3891] netlink: 'syz.0.1126': attribute type 4 has an invalid length. [ 123.715038][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.724593][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.732854][ T3909] random: crng reseeded on system resumption [ 123.766004][ T36] audit: type=1400 audit(1753675543.952:2588): avc: denied { ioctl } for pid=3906 comm="syz.2.1132" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.806028][ T65] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.965989][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 123.972289][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.982565][ T65] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 123.997122][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.006287][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.014297][ T65] usb 5-1: SerialNumber: syz [ 124.021895][ T65] usb 5-1: bad CDC descriptors [ 124.222731][ T31] usb 5-1: USB disconnect, device number 8 [ 124.343037][ T36] audit: type=1400 audit(1753675544.532:2589): avc: denied { name_bind } for pid=3934 comm="syz.0.1142" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 124.829656][ T3949] 9pnet_fd: Insufficient options for proto=fd [ 124.851814][ T3952] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 124.862242][ T3954] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 124.992753][ T3963] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 125.003294][ T36] audit: type=1400 audit(1753675545.192:2590): avc: denied { relabelto } for pid=3962 comm="syz.0.1150" name="cgroup" dev="tmpfs" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 125.031596][ T36] audit: type=1400 audit(1753675545.192:2591): avc: denied { associate } for pid=3962 comm="syz.0.1150" name="cgroup" dev="tmpfs" ino=1952 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 125.735999][ T3981] 9pnet_virtio: no channels available for device syz [ 127.096945][ T732] lenovo 0003:17EF:6047.0004: Failed to switch F7/9/11 mode: -110 [ 127.105006][ T732] lenovo 0003:17EF:6047.0004: Failed to switch middle button: -32 [ 127.113074][ T732] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -32 [ 127.120566][ T732] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -32 [ 127.150862][ T4002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.160168][ T4002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.176048][ T4002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.195067][ T4002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.593768][ T4031] random: crng reseeded on system resumption [ 127.755656][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 127.755706][ T36] audit: type=1400 audit(1753675547.942:2593): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.480810][ T36] audit: type=1326 audit(1753675548.672:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409778e9a9 code=0x7fc00000 [ 128.709892][ T4098] bpf: Bad value for 'uid' [ 128.725273][ T4100] rust_binder: Error in use_page_slow: ESRCH [ 128.725299][ T4100] rust_binder: use_range failure ESRCH [ 128.745676][ T4100] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 128.765988][ T4100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 128.773880][ T4100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:550 [ 128.875254][ T4108] rust_binder: 552: no such ref 0 [ 128.997621][ T4116] binder: Bad value for 'max' [ 129.006553][ T4120] binder: Bad value for 'max' [ 129.013156][ T4119] input: syz1 as /devices/virtual/input/input12 [ 129.024402][ T4124] SELinux: Context system_u:object_r:locale_t:s0 is not valid (left unmapped). [ 129.034055][ T36] audit: type=1400 audit(1753675549.222:2595): avc: denied { relabelfrom } for pid=4123 comm="syz.0.1199" name="UDPv6" dev="sockfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 129.059401][ T36] audit: type=1400 audit(1753675549.232:2596): avc: denied { relabelto } for pid=4123 comm="syz.0.1199" name="UDPv6" dev="sockfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:locale_t:s0" [ 129.096238][ T36] audit: type=1400 audit(1753675549.292:2597): avc: denied { execmod } for pid=4135 comm="syz.3.1211" path="/dev/rnullb0" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.132732][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 129.146815][ T36] audit: type=1400 audit(1753675549.342:2598): avc: denied { create } for pid=4127 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.172763][ T4142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.181323][ T4142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.193092][ T36] audit: type=1400 audit(1753675549.392:2599): avc: denied { read } for pid=4141 comm="syz.2.1213" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 129.216537][ T36] audit: type=1400 audit(1753675549.392:2600): avc: denied { open } for pid=4141 comm="syz.2.1213" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 129.242367][ T4150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 129.752996][ T4163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.770822][ T4163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.146946][ T4182] rust_binder: Error while translating object. [ 130.147007][ T4182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.153413][ T4182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 130.241927][ T4194] 9pnet_fd: Insufficient options for proto=fd [ 130.273454][ T4196] Invalid ELF header len 16 [ 130.278239][ T4196] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 130.296372][ T36] audit: type=1400 audit(1753675550.482:2601): avc: denied { relabelfrom } for pid=4197 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 130.324366][ T36] audit: type=1400 audit(1753675550.482:2602): avc: denied { relabelto } for pid=4197 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 130.328371][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.353326][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.364889][ T4200] binder: Bad value for 'stats' [ 130.384889][ T4203] input: syz1 as /devices/virtual/input/input13 [ 130.395903][ T4203] rust_binder: 163: no such ref 0 [ 130.395969][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.405304][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.411921][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.418443][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.424919][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.431429][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.437923][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.444371][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.450861][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.457331][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.463749][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.470285][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.476745][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.483163][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.489607][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.496057][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.502599][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.509050][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.515571][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.522016][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.528475][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.534897][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.541358][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.547807][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.554228][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.560690][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.567160][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.573598][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.580089][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.586581][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.593007][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.599469][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.624291][ T4208] overlayfs: conflicting options: userxattr,redirect_dir=on [ 130.693959][ T4217] netlink: 'syz.3.1238': attribute type 16 has an invalid length. [ 130.706680][ T4217] netlink: 'syz.3.1238': attribute type 3 has an invalid length. [ 130.714649][ T4217] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.1238'. [ 130.900708][ T4238] binder: Unknown parameter 'fscontext?}' [ 130.930812][ T4243] binder: Unknown parameter './file0' [ 130.936891][ T4243] binder: Unknown parameter './file0' [ 130.943336][ T4243] binder: Unknown parameter './file0' [ 130.948988][ T4242] fuse: Bad value for 'fd' [ 130.949431][ T4243] fuse: Unknown parameter './file0' [ 130.959005][ T4243] fuse: Unknown parameter './file0' [ 130.965004][ T4243] fuse: Unknown parameter './file0' [ 130.970643][ T4243] fuse: Unknown parameter './file0' [ 130.982992][ T4243] fuse: Unknown parameter './file0' [ 130.988554][ T4243] fuse: Unknown parameter './file0' [ 130.994000][ T4243] fuse: Unknown parameter './file0' [ 130.999625][ T4243] fuse: Unknown parameter './file0' [ 131.005069][ T4243] fuse: Unknown parameter './file0' [ 131.010673][ T4243] fuse: Unknown parameter './file0' [ 131.016261][ T4243] fuse: Unknown parameter './file0' [ 131.021658][ T4243] fuse: Unknown parameter './file0' [ 131.027309][ T4243] fuse: Unknown parameter './file0' [ 131.032782][ T4243] fuse: Unknown parameter './file0' [ 131.038450][ T4243] fuse: Unknown parameter './file0' [ 131.043881][ T4243] fuse: Unknown parameter './file0' [ 131.049555][ T4243] fuse: Unknown parameter './file0' [ 131.056167][ T4243] fuse: Unknown parameter './file0' [ 131.061595][ T4243] fuse: Unknown parameter './file0' [ 131.067141][ T4243] fuse: Unknown parameter './file0' [ 131.072555][ T4243] fuse: Unknown parameter './file0' [ 131.078338][ T4243] fuse: Unknown parameter './file0' [ 131.083804][ T4243] fuse: Unknown parameter './file0' [ 131.089461][ T4243] fuse: Unknown parameter './file0' [ 131.094793][ T4247] netlink: 'syz.0.1248': attribute type 30 has an invalid length. [ 131.094872][ T4243] fuse: Unknown parameter './file0' [ 131.108435][ T4243] fuse: Unknown parameter './file0' [ 131.113830][ T4243] fuse: Unknown parameter './file0' [ 131.119264][ T4243] fuse: Unknown parameter './file0' [ 131.124647][ T4243] fuse: Unknown parameter './file0' [ 131.130315][ T4243] fuse: Unknown parameter './file0' [ 131.292650][ T4265] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1254'. [ 131.663474][ T4278] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 165) [ 131.663506][ T4278] rust_binder: Error while translating object. [ 131.674143][ T4278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.680404][ T4278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:575 [ 132.081460][ T4294] rust_binder: Error while translating object. [ 132.090708][ T4294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.097017][ T4294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581 [ 132.188834][ T4305] netlink: 'syz.0.1267': attribute type 3 has an invalid length. [ 132.681970][ T4324] incfs: Error accessing: ./file0. [ 132.687728][ T4324] incfs: mount failed -2 [ 133.025251][ T4343] overlayfs: missing 'lowerdir' [ 133.179709][ T4351] rust_binder: Error while translating object. [ 133.179744][ T4351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.186046][ T4351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 133.618845][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 133.618900][ T36] audit: type=1326 audit(1753675553.812:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.658047][ T36] audit: type=1326 audit(1753675553.812:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.682014][ T36] audit: type=1326 audit(1753675553.852:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.705990][ T36] audit: type=1326 audit(1753675553.852:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.729756][ T36] audit: type=1326 audit(1753675553.852:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.730707][ T4377] overlayfs: failed to resolve './file0': -2 [ 133.753425][ T36] audit: type=1326 audit(1753675553.852:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.796709][ T36] audit: type=1326 audit(1753675553.852:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.820263][ T36] audit: type=1326 audit(1753675553.852:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.843743][ T36] audit: type=1326 audit(1753675553.852:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.867702][ T36] audit: type=1326 audit(1753675553.852:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8298e9a9 code=0x7ffc0000 [ 133.894626][ T4397] 9pnet_fd: Insufficient options for proto=fd [ 133.973854][ T4411] netlink: 'syz.4.1300': attribute type 4 has an invalid length. [ 133.983412][ T4411] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1300'. [ 133.984605][ T4413] fuse: Unknown parameter 'subj_role' [ 134.299880][ T4454] overlayfs: failed to resolve './file1': -2 [ 134.421738][ T4481] fuse: Bad value for 'fd' [ 134.478407][ T4501] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 134.530207][ T4510] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1332'. [ 134.610308][ T4525] 9pnet_fd: Insufficient options for proto=fd [ 134.647990][ T4541] binder: Unknown parameter 'contextÀ' [ 134.712906][ T4558] 9pnet_fd: Insufficient options for proto=fd [ 134.844943][ T4566] syzkaller0: entered promiscuous mode [ 134.855945][ T4566] syzkaller0: entered allmulticast mode [ 134.984760][ T4572] fuse: Bad value for 'fd' [ 134.989378][ T4571] fuse: Bad value for 'fd' [ 135.138498][ T4596] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 135.232315][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.240866][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.249963][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.258789][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.281198][ T4606] binder: Unknown parameter '­2?õ5÷‘01777777777777777777777†' [ 135.399183][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.408392][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.120290][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.129795][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.138265][ T4636] netlink: 'syz.0.1373': attribute type 4 has an invalid length. [ 136.140164][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.155240][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.155370][ T4636] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1373'. [ 136.243994][ T4651] netlink: 'syz.0.1378': attribute type 16 has an invalid length. [ 136.252139][ T4651] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1378'. [ 136.519827][ T4681] bpf: Bad value for 'mode' [ 136.525278][ T4682] bpf: Bad value for 'mode' [ 136.717618][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.724343][ T4697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4697 comm=syz.3.1394 [ 136.728698][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.741587][ T4697] fuse: Bad value for 'user_id' [ 136.754235][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.762683][ T4697] fuse: Bad value for 'user_id' [ 136.768483][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.789965][ T4708] 9pnet_fd: Insufficient options for proto=fd [ 136.806048][ T4711] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=84 sclass=netlink_xfrm_socket pid=4711 comm=syz.0.1398 [ 136.823519][ T4711] netlink: 'syz.0.1398': attribute type 4 has an invalid length. [ 136.834843][ T4711] netlink: 'syz.0.1398': attribute type 4 has an invalid length. [ 136.867586][ T4722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'. [ 136.956063][ T4733] 9pnet_fd: Insufficient options for proto=fd [ 137.178417][ T4766] fuse: Bad value for 'fd' [ 137.639804][ T4799] 9pnet_fd: Insufficient options for proto=fd [ 138.169607][ T4824] netlink: 'syz.0.1434': attribute type 30 has an invalid length. [ 138.483335][ T4852] 9pnet_fd: Insufficient options for proto=fd [ 138.657297][ T4863] fuse: Bad value for 'fd' [ 138.663259][ T4863] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 138.678435][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 138.678454][ T36] audit: type=1400 audit(1753675558.872:2704): avc: denied { relabelto } for pid=4862 comm="syz.4.1447" name="file0" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usr_t:s0" [ 138.711160][ T36] audit: type=1400 audit(1753675558.872:2705): avc: denied { read } for pid=4864 comm="syz.2.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.732607][ T36] audit: type=1400 audit(1753675558.872:2706): avc: denied { associate } for pid=4862 comm="syz.4.1447" name="file0" dev="tmpfs" ino=528 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usr_t:s0" [ 138.871008][ T4871] 9pnet_fd: Insufficient options for proto=fd [ 138.878335][ T4871] 9pnet_fd: Insufficient options for proto=fd [ 139.003854][ T36] audit: type=1400 audit(1753675559.192:2707): avc: denied { map } for pid=4893 comm="syz.3.1458" path="socket:[19887]" dev="sockfs" ino=19887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.031908][ T4892] binder: Unknown parameter '' [ 139.088270][ T4900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4900 comm=syz.2.1460 [ 139.104805][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4903 comm=syz.2.1460 [ 139.144061][ T4908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.152749][ T4908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.162878][ T4908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.177267][ T4908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.187339][ T4908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.209197][ T4908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.239542][ T4930] overlayfs: failed to clone upperpath [ 139.295147][ T4950] netlink: 12984 bytes leftover after parsing attributes in process `syz.4.1474'. [ 139.422191][ T4975] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1480'. [ 139.497668][ T4988] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 139.508450][ T4988] 9pnet_fd: Insufficient options for proto=fd [ 139.559393][ T36] audit: type=1400 audit(1753675559.752:2708): avc: denied { bind } for pid=4994 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.686107][ T5028] overlayfs: failed to clone upperpath [ 139.720500][ T5041] netlink: 'syz.4.1503': attribute type 16 has an invalid length. [ 139.760099][ T5046] fuse: Unknown parameter 'rootmodå' [ 139.767454][ T5048] 9pnet_fd: Insufficient options for proto=fd [ 139.775037][ T36] audit: type=1400 audit(1753675559.962:2709): avc: denied { connect } for pid=5045 comm="syz.2.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.800454][ T5051] 9pnet_fd: Insufficient options for proto=fd [ 139.866575][ T5062] netlink: 'syz.0.1511': attribute type 16 has an invalid length. [ 139.874560][ T5062] netlink: 'syz.0.1511': attribute type 3 has an invalid length. [ 139.883977][ T5062] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 139.886608][ T5065] overlayfs: failed to clone upperpath [ 139.892316][ T5062] netlink: 64030 bytes leftover after parsing attributes in process `syz.0.1511'. [ 139.899708][ T5066] overlayfs: failed to clone upperpath [ 139.956851][ T5073] FAT-fs (rnullb0): bogus number of reserved sectors [ 139.964045][ T5073] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 139.979138][ T36] audit: type=1400 audit(1753675560.172:2710): avc: denied { bind } for pid=5072 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.137458][ T36] audit: type=1400 audit(1753675560.332:2711): avc: denied { getopt } for pid=5093 comm="syz.3.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.548895][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 140.588573][ T5117] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 140.612396][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.629685][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.163954][ T5147] fuse: Bad value for 'user_id' [ 141.168991][ T5147] fuse: Bad value for 'user_id' [ 141.308942][ T36] audit: type=1400 audit(1753675561.502:2712): avc: denied { map } for pid=5175 comm="syz.2.1553" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.346271][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.355474][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.863894][ T36] audit: type=1326 audit(1753675562.052:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5243 comm="syz.0.1574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e8298e9a9 code=0x0 [ 142.157574][ T5253] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1576'. [ 142.337527][ T5269] overlayfs: failed to clone upperpath [ 142.935500][ T5297] macsec0: entered promiscuous mode [ 142.942196][ T5307] rust_binder: 5305 RLIMIT_NICE not set [ 142.946266][ T5297] macsec0: entered allmulticast mode [ 142.977118][ T410] rust_binder: 5303: removing orphan mapping 0:40 [ 143.292793][ T5324] netlink: 'syz.2.1596': attribute type 11 has an invalid length. [ 143.302038][ T5342] fuse: Bad value for 'user_id' [ 143.307189][ T5342] fuse: Bad value for 'user_id' [ 143.450227][ T5353] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.1606'. [ 143.459945][ T5353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=5353 comm=syz.3.1606 [ 143.473818][ T5353] overlayfs: failed to clone upperpath [ 143.664359][ T5373] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1613'. [ 143.690641][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 143.690660][ T36] audit: type=1400 audit(1753675563.882:2717): avc: denied { accept } for pid=5389 comm="syz.2.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.776291][ T36] audit: type=1400 audit(1753675563.972:2718): avc: denied { getopt } for pid=5381 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.927668][ T5403] binder: Unknown parameter 'conl&ê.ôatext' [ 144.052226][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 144.137134][ T5427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.147487][ T5427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.155689][ T5427] tap0: tun_chr_ioctl cmd 1074025677 [ 144.161244][ T5427] tap0: linktype set to 802 [ 144.166462][ T5427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:800 [ 144.181441][ T5432] 9pnet_fd: Insufficient options for proto=fd [ 144.217826][ T5440] rust_binder: Error while translating object. [ 144.217881][ T5440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 144.224718][ T5440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:800 [ 144.248865][ T36] audit: type=1326 audit(1753675564.442:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.4.1636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a75b8e9a9 code=0x0 [ 145.119035][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 145.327129][ T5497] overlay: ./file0 is not a directory [ 145.485609][ T5497] overlay: ./file0 is not a directory [ 146.172481][ T5506] sock: sock_set_timeout: `syz.3.1654' (pid 5506) tries to set negative timeout [ 146.181731][ T5505] sock: sock_set_timeout: `syz.3.1654' (pid 5505) tries to set negative timeout [ 146.337555][ T36] audit: type=1400 audit(1753675566.532:2720): avc: denied { lock } for pid=5549 comm="syz.4.1671" path="socket:[21948]" dev="sockfs" ino=21948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 146.801974][ T36] audit: type=1400 audit(1753675566.992:2721): avc: denied { map } for pid=5578 comm="syz.0.1680" path="pipe:[1793]" dev="pipefs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 147.201147][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 147.211287][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1688'. [ 147.225767][ T5611] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 147.257007][ T5617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.269430][ T5617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.626627][ T5646] 9pnet_fd: Insufficient options for proto=fd [ 147.813619][ T5671] rust_binder: Error while translating object. [ 147.813646][ T5671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 147.820003][ T5671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:809 [ 147.841886][ T5673] fuse: Unknown parameter 'ÙÌ ‡£@Òƒ¦ÜAÛzT3ÊzO­ä¶)] ‘ ºvÎ/k²^+‡nþO¾{‰”¦àƒ‰mÓs+yËyfgYg…ŠdÛ@µîÁWФ}þv¨Œöõ—²R¥ù’]Å&̦”¡×' [ 147.966535][ T5695] rust_binder: Read failure Err(EAGAIN) in pid:823 [ 147.966647][ T5695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:823 [ 147.976814][ T36] audit: type=1400 audit(1753675568.172:2722): avc: denied { append } for pid=5694 comm="syz.2.1720" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.978244][ T5695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:823 [ 148.065886][ T5703] overlayfs: failed to clone upperpath [ 148.093192][ T5706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1725'. [ 148.717446][ T5744] netlink: 'syz.3.1740': attribute type 19 has an invalid length. [ 148.726636][ T5744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5744 comm=syz.3.1740 [ 148.797776][ T5746] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1741'. [ 149.204567][ T5783] overlayfs: failed to clone upperpath [ 149.255789][ T5794] netlink: 'syz.3.1759': attribute type 3 has an invalid length. [ 149.427502][ T5812] rust_binder: Write failure EINVAL in pid:831 [ 149.486649][ T5819] rust_binder: Error while translating object. [ 149.492906][ T5819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 149.499226][ T5819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:831 [ 150.330528][ T5878] cgroup: Invalid name [ 150.330540][ T5879] cgroup: Invalid name [ 150.609404][ T5906] netlink: 'syz.3.1797': attribute type 6 has an invalid length. [ 151.133970][ T5915] overlayfs: failed to clone upperpath [ 151.248048][ T5930] cgroup: Name too long [ 152.258470][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.267077][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.737506][ T36] audit: type=1400 audit(1753675572.932:2723): avc: denied { execute } for pid=5977 comm="syz.3.1822" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=23486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.818678][ T5992] futex_wake_op: syz.3.1827 tries to shift op by -1; fix this program [ 152.847694][ T36] audit: type=1400 audit(1753675573.042:2724): avc: denied { execute } for pid=5995 comm="syz.3.1829" name="file0" dev="ramfs" ino=23918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 152.938110][ T6010] netlink: 'syz.2.1833': attribute type 11 has an invalid length. [ 152.944976][ T36] audit: type=1326 audit(1753675573.132:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.4.1834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a75b8e9a9 code=0x0 [ 152.984721][ T6016] overlay: Unknown parameter 'appraise' [ 153.040879][ T6020] kvm: kvm [6019]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 153.402548][ T36] audit: type=1400 audit(1753675573.592:2726): avc: denied { name_bind } for pid=6071 comm="syz.3.1853" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 153.638761][ T6089] netlink: 'syz.2.1857': attribute type 29 has an invalid length. [ 153.646698][ T6089] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1857'. [ 153.657593][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.666288][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.815959][ T6097] sit0: entered promiscuous mode [ 153.822046][ T6097] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1860'. [ 154.126162][ T36] audit: type=1326 audit(1753675575.324:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.3.1878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f409778e9a9 code=0x0 [ 154.218564][ T6155] binder: Binderfs stats mode cannot be changed during a remount [ 154.234735][ T6155] binder: Binderfs stats mode cannot be changed during a remount [ 154.257814][ T6155] binder: Binderfs stats mode cannot be changed during a remount [ 154.266156][ T6155] binder: Binderfs stats mode cannot be changed during a remount [ 154.275024][ T6155] binder: Binderfs stats mode cannot be changed during a remount [ 154.283072][ T6155] binder: Binderfs stats mode cannot be changed during a remount [ 154.370558][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.386858][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.386977][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.397795][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.923403][ T6189] tipc: Enabling of bearer rejected, failed to enable media [ 154.944112][ T36] audit: type=1400 audit(1753675576.134:2728): avc: denied { mounton } for pid=6190 comm="syz.3.1890" path="/543/bus" dev="tmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 154.944175][ T6191] /dev/nbd3: Can't lookup blockdev [ 154.984423][ T36] audit: type=1400 audit(1753675576.174:2729): avc: denied { getopt } for pid=6192 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.006287][ T6193] veth1_to_bond: mtu less than device minimum [ 155.103510][ T6200] input: syz1 as /devices/virtual/input/input14 [ 155.809697][ T6285] 9pnet_fd: Insufficient options for proto=fd [ 155.841520][ T6291] 9pnet_fd: Insufficient options for proto=fd [ 155.861004][ T36] audit: type=1400 audit(1753675577.054:2730): avc: denied { map } for pid=6292 comm="syz.3.1914" path="socket:[25003]" dev="sockfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 156.144608][ T36] audit: type=1400 audit(1753675577.334:2731): avc: denied { map } for pid=6314 comm="syz.2.1921" path="socket:[25015]" dev="sockfs" ino=25015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 156.168288][ T36] audit: type=1400 audit(1753675577.334:2732): avc: denied { create } for pid=6314 comm="syz.2.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.290996][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1922'. [ 156.489741][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.499715][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.744804][ T6356] tmpfs: Unknown parameter '0xffffffffffffffff' [ 157.454172][ T6393] overlayfs: failed to clone upperpath [ 157.501932][ T6397] 9pnet_fd: Insufficient options for proto=fd [ 157.522668][ T6401] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1952'. [ 157.543579][ T6403] 9pnet_fd: Insufficient options for proto=fd [ 157.561035][ T6408] overlay: ./file1 is not a directory [ 157.752955][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.760143][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.767310][ T6414] bridge_slave_0: entered allmulticast mode [ 157.774458][ T6414] bridge_slave_0: entered promiscuous mode [ 157.780963][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.788130][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.795208][ T6414] bridge_slave_1: entered allmulticast mode [ 157.801560][ T6414] bridge_slave_1: entered promiscuous mode [ 157.855120][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.862223][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.869543][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.876611][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.898642][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.906167][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.916449][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.923528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.932601][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.939695][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.968313][ T6414] veth0_vlan: entered promiscuous mode [ 157.980261][ T6414] veth1_macvtap: entered promiscuous mode [ 158.110648][ T6443] rust_binder: 6432 RLIMIT_NICE not set [ 158.111114][ T6432] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 158.140066][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 158.140085][ T36] audit: type=1400 audit(1753675579.334:2734): avc: denied { connect } for pid=6444 comm="syz.0.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.141905][ T6445] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 158.297838][ T6460] netlink: 'syz.3.1969': attribute type 6 has an invalid length. [ 158.326297][ T6462] overlayfs: failed to resolve './file0': -2 [ 158.500683][ T6477] macsec0: left promiscuous mode [ 158.505764][ T6477] macsec0: left allmulticast mode [ 158.967999][ T6540] bpf: Bad value for 'mode' [ 159.391287][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.399839][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.766887][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.785993][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.805999][ T6576] bridge_slave_0: entered allmulticast mode [ 159.812478][ T6576] bridge_slave_0: entered promiscuous mode [ 159.826792][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.843957][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.851302][ T6576] bridge_slave_1: entered allmulticast mode [ 159.866429][ T6576] bridge_slave_1: entered promiscuous mode [ 159.920162][ T6586] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2012'. [ 159.964620][ T6560] SELinux: security_context_str_to_sid (sytem_uÝGйq) failed with errno=-22 [ 160.053824][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.061007][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.082141][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.089285][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.107378][ T329] bridge_slave_1: left allmulticast mode [ 160.113070][ T329] bridge_slave_1: left promiscuous mode [ 160.129345][ T329] ªªªªªª: port 2(bridge_slave_1) entered disabled state [ 160.142758][ T329] bridge_slave_0: left allmulticast mode [ 160.148621][ T329] bridge_slave_0: left promiscuous mode [ 160.154265][ T329] ªªªªªª: port 1(bridge_slave_0) entered disabled state [ 160.242442][ T6576] veth0_vlan: entered promiscuous mode [ 160.265005][ T6576] veth1_macvtap: entered promiscuous mode [ 160.282393][ T329] tipc: Left network mode [ 160.294831][ T329] veth0_vlan: left promiscuous mode [ 160.417375][ T36] audit: type=1400 audit(1753675581.614:2735): avc: denied { module_load } for pid=6618 comm="syz.4.2021" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=25985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 160.417635][ T6619] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2021'. [ 160.484018][ T6624] fuse: Bad value for 'fd' [ 160.490066][ T6624] netlink: 'syz.2.2023': attribute type 2 has an invalid length. [ 160.564020][ T6630] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2025'. [ 161.176714][ T6634] overlay: ./file0 is not a directory [ 161.227374][ T6637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 161.243965][ T6641] input: syz1 as /devices/virtual/input/input15 [ 161.325793][ T6648] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 161.325831][ T6648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 161.333946][ T6648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:15 [ 161.358744][ T6649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.361889][ T6649] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 161.376027][ T36] audit: type=1400 audit(1753675582.564:2736): avc: denied { getopt } for pid=6652 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.400090][ T6649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 161.429132][ T6649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:15 [ 161.434573][ T6664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=288 sclass=netlink_route_socket pid=6664 comm=syz.2.2036 [ 161.439753][ T36] audit: type=1400 audit(1753675582.604:2737): avc: denied { create } for pid=6651 comm="syz.4.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.464847][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.490452][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.504714][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.518217][ T36] audit: type=1400 audit(1753675582.604:2738): avc: denied { write } for pid=6651 comm="syz.4.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.523498][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.565953][ T36] audit: type=1400 audit(1753675582.604:2739): avc: denied { nlmsg_write } for pid=6651 comm="syz.4.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.598600][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 161.632768][ T6687] bridge0: port 3(veth0_to_bridge) entered blocking state [ 161.640882][ T6687] bridge0: port 3(veth0_to_bridge) entered disabled state [ 161.651158][ T36] audit: type=1400 audit(1753675582.844:2740): avc: denied { execute_no_trans } for pid=6691 comm="syz.3.2044" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.688654][ T6687] veth0_to_bridge: entered allmulticast mode [ 161.689313][ T6687] veth0_to_bridge: entered promiscuous mode [ 161.695854][ T6693] rust_binder: Error while translating object. [ 161.700669][ T6693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 161.702089][ T6687] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.706883][ T6693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 161.718219][ T6687] bridge0: port 3(veth0_to_bridge) entered blocking state [ 161.744632][ T6687] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 161.776845][ T6698] 9pnet_fd: Insufficient options for proto=fd [ 161.813983][ T36] audit: type=1400 audit(1753675583.004:2741): avc: denied { execmem } for pid=6695 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 162.007897][ T6715] rust_binder: 31: no such ref 3 [ 162.012961][ T6715] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 162.080704][ T36] audit: type=1400 audit(1753675583.274:2742): avc: denied { create } for pid=6720 comm="syz.2.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.130150][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 162.140029][ T36] audit: type=1400 audit(1753675583.344:2743): avc: denied { connect } for pid=6720 comm="syz.2.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.211719][ T6727] 9pnet_fd: Insufficient options for proto=fd [ 162.321811][ T6735] tc_dump_action: action bad kind [ 162.363422][ T6740] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2062'. [ 162.386515][ T6742] 9pnet_fd: Insufficient options for proto=fd [ 162.616096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.628230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.640367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.652428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.664539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.676613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.688760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.700833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.712957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.725053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.618317][ T6791] rust_binder: Error while translating object. [ 163.618355][ T6791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.624684][ T6791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 163.925968][ T334] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.045572][ T36] kauditd_printk_skb: 131 callbacks suppressed [ 164.045590][ T36] audit: type=1326 audit(1753675585.234:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.4.2082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a75b8e9a9 code=0x7ffe0000 [ 164.105982][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 164.117629][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.140100][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.160176][ T334] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.175948][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.196338][ T334] usb 4-1: config 0 descriptor?? [ 164.202467][ T334] hub 4-1:0.0: USB hub found [ 164.343855][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.376425][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.399349][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.410386][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.426271][ T6796] overlayfs: missing 'lowerdir' [ 164.495982][ T36] audit: type=1400 audit(1753675585.684:2876): avc: denied { mounton } for pid=6801 comm="syz.0.2084" path="/6/file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.131876][ T36] audit: type=1400 audit(1753675586.324:2877): avc: denied { write } for pid=6811 comm="syz.2.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.388008][ T6814] 9pnet_fd: Insufficient options for proto=fd [ 166.104542][ T6831] fuse: Unknown parameter '' [ 166.378089][ T334] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 166.400208][ T334] usbhid 4-1:0.0: can't add hid device: -71 [ 166.416053][ T334] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.447164][ T334] usb 4-1: USB disconnect, device number 8 [ 166.743492][ T6838] overlayfs: failed to clone upperpath [ 166.762427][ T36] audit: type=1326 audit(1753675587.954:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.4.2096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a75b8e9a9 code=0x0 [ 167.026723][ T36] audit: type=1326 audit(1753675588.224:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 167.122468][ T36] audit: type=1326 audit(1753675588.244:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 167.146754][ T36] audit: type=1326 audit(1753675588.244:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 167.170576][ T36] audit: type=1326 audit(1753675588.244:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 167.200410][ T36] audit: type=1326 audit(1753675588.244:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 167.248651][ T36] audit: type=1326 audit(1753675588.244:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 167.300163][ T6860] fuse: Unknown parameter 'uid>00000000000000000000' [ 167.587465][ T6864] binder: Unknown parameter 'defcontext01777777777777777777777' [ 167.625953][ C0] net_ratelimit: 69183 callbacks suppressed [ 167.625985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.644049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.656181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.668288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.680384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.692468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.704620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.716712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.728848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.740938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.868613][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.916954][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.933318][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.127852][ T6891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6891 comm=syz.3.2114 [ 169.437840][ T6899] incfs: Can't find or create .index dir in ./cgroup [ 169.468982][ T6899] incfs: mount failed -22 [ 169.503000][ T6899] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 169.895984][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.902198][ T3221] Bluetooth: hci0: command 0x1003 tx timeout [ 170.084384][ T6912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.084416][ T6912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.095075][ T6912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.233064][ T6924] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 170.322945][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 170.322963][ T36] audit: type=1326 audit(1753675591.514:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.436794][ T36] audit: type=1326 audit(1753675591.554:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.496144][ T36] audit: type=1326 audit(1753675591.554:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.520119][ T36] audit: type=1326 audit(1753675591.554:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.544704][ T6937] rust_binder: Error while translating object. [ 170.544740][ T6937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 170.552524][ T6937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:94 [ 170.581653][ T6937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.591043][ T36] audit: type=1326 audit(1753675591.554:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.654684][ T36] audit: type=1326 audit(1753675591.554:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.686678][ T36] audit: type=1326 audit(1753675591.554:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.749105][ T36] audit: type=1326 audit(1753675591.554:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.779224][ T36] audit: type=1326 audit(1753675591.554:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.803552][ T36] audit: type=1326 audit(1753675591.554:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcb8718e9a9 code=0x7ffc0000 [ 170.926313][ T6952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.928514][ T6954] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 170.935340][ T6954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 170.947254][ T6954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:101 [ 171.201910][ T6969] 9pnet_fd: Insufficient options for proto=fd [ 171.405972][ T334] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.563657][ T6992] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2145'. [ 171.583818][ T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.595438][ T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.616837][ T334] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.646002][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.680927][ T334] usb 4-1: SerialNumber: syz [ 171.737222][ T6997] overlayfs: failed to resolve './file0': -2 [ 171.769449][ T6997] overlayfs: failed to resolve './file0': -2 [ 171.786253][ T6995] mmap: syz.0.2148 (6995): VmData 27308032 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 171.922088][ T334] usb 4-1: 0:2 : does not exist [ 171.950470][ T334] usb 4-1: USB disconnect, device number 9 [ 172.477182][ T7021] netlink: 'syz.3.2157': attribute type 1 has an invalid length. [ 172.517951][ T7014] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 172.522118][ T7024] incfs: Options parsing error. -22 [ 172.583104][ T7024] incfs: mount failed -22 [ 172.635945][ C0] net_ratelimit: 67951 callbacks suppressed [ 172.635970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.654017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.666162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.678271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.684943][ T7030] bpf: Bad value for 'mode' [ 172.690398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.706976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.719123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.731241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.743404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.755507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.645967][ C0] net_ratelimit: 123025 callbacks suppressed [ 177.645991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.646016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.652161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.664097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.675974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.688189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.700255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.712120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.723984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.736051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.863178][ T294] sched: DL replenish lagged too much [ 182.655975][ C0] net_ratelimit: 133416 callbacks suppressed [ 182.655999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.656068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.662155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.674140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.686064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.698059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.710112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.722025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.733853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.745855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.665975][ C1] net_ratelimit: 132855 callbacks suppressed [ 187.665999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.666021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.672102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.684184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.696048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.707925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.719973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.732024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.743912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.755870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.675936][ C0] net_ratelimit: 130147 callbacks suppressed [ 192.675961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.676000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.682117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.694171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.706150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.718040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.729903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.741913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.753917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.765770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.685968][ C1] net_ratelimit: 123848 callbacks suppressed [ 197.685991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.686042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.692111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.704218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.716068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.727934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.740001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.752124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.763930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.775832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.695941][ C0] net_ratelimit: 130726 callbacks suppressed [ 202.695964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.696032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.702093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.714120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.726187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.738101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.750093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.762131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.774035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.785906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.705920][ C0] net_ratelimit: 128528 callbacks suppressed [ 207.705943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.705959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.712056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.724065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.736141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.747970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.759856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.771887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.783788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.795676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.179087][ T31] usb 3-1: USB disconnect, device number 31 [ 212.715912][ C0] net_ratelimit: 131181 callbacks suppressed [ 212.715936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.715951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.716034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.722099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.734026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.745918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.757837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.769833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.781777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.793658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.725924][ C1] net_ratelimit: 134730 callbacks suppressed [ 217.725948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.725953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.726081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.732031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.744058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.756028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.767997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.779849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.791732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.803757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.735905][ C1] net_ratelimit: 134271 callbacks suppressed [ 222.735929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.735989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.742159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.754127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.766121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.778194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.790074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.801922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.813965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.826096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.745938][ C1] net_ratelimit: 134907 callbacks suppressed [ 227.745962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.746034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.752063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.764142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.776179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.788156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.800009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.812049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.824042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.836139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.755926][ C0] net_ratelimit: 134537 callbacks suppressed [ 232.755954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.755956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.756057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.762058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.774124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.786130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.798074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.809960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.822042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.834019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.765919][ C0] net_ratelimit: 134025 callbacks suppressed [ 237.765943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.765958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.766036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.772047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.784135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.796021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.807892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.819793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.831749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.843792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.775973][ C0] net_ratelimit: 135215 callbacks suppressed [ 242.776024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.776028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.776093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.782136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.794179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.806230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.818088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.829939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.841874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.853897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.785912][ C1] net_ratelimit: 130803 callbacks suppressed [ 247.785937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.785961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.792124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.803986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.815960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.828005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.839869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.851739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.863777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.875688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.795896][ C0] net_ratelimit: 131619 callbacks suppressed [ 252.795919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.795984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.802014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.814110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.826143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.837948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.849937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.861976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.873884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.885727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.805904][ C1] net_ratelimit: 129789 callbacks suppressed [ 257.805928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.805954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.812064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.823994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.836015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.847930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.859783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.871737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.883750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.895922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.815885][ C0] net_ratelimit: 132029 callbacks suppressed [ 262.815909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.815932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.815998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.822126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.834029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.845981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.857871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.870014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.881934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.893802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.825901][ C1] net_ratelimit: 125290 callbacks suppressed [ 267.825927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.826027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.832064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.843972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.856063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.867990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.879807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.891785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.903772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.915923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.835911][ C1] net_ratelimit: 129224 callbacks suppressed [ 272.835935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.835982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.842202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.854141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.866005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.878004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.890004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.902079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.913919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.925781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.845903][ C1] net_ratelimit: 128680 callbacks suppressed [ 277.845927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.845962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.852060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.863953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.875994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.887909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.899793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.911697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.923673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.935744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.855913][ C0] net_ratelimit: 127005 callbacks suppressed [ 282.855938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.856007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.862039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.874221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.886130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.897983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.909952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.921968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.934042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.945978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.865924][ C1] net_ratelimit: 131296 callbacks suppressed [ 287.865946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.865970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.872112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.883983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.895992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.908023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.919847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.931841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.943906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.955786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.875871][ C1] net_ratelimit: 133069 callbacks suppressed [ 292.875895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.875914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.882042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.893974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.905842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.917815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.929793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.941816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.953726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.965546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.885874][ C1] net_ratelimit: 129014 callbacks suppressed [ 297.885898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.885967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.892031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.904042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.916088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.927979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.939932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.951895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.963911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.975873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.895874][ C1] net_ratelimit: 125416 callbacks suppressed [ 302.895898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.895923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.902103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.914007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.925868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.937849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.949967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.961886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.973805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.985646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.905925][ C1] net_ratelimit: 133456 callbacks suppressed [ 307.905948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.905976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.912049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.924105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.936008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.947880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.959914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.971884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.983693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.995755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.717300][ T37] INFO: task syz.3.2164:7040 blocked for more than 122 seconds. [ 310.725011][ T37] Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 [ 311.268264][ T36] kauditd_printk_skb: 145 callbacks suppressed [ 311.268286][ T36] audit: type=1400 audit(1753675732.004:3083): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2670]" dev="pipefs" ino=2670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 311.768545][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.915869][ C1] net_ratelimit: 132463 callbacks suppressed [ 312.915892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.915894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.915956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.922004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.934051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.946062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.957878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.969769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.981850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.993759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.800005][ T37] task:syz.3.2164 state:D stack:0 pid:7040 tgid:7036 ppid:6576 flags:0x00004004 [ 315.338345][ T37] Call Trace: [ 315.341699][ T37] [ 315.344660][ T37] __schedule+0x1322/0x1df0 [ 315.767117][ T37] ? __sched_text_start+0x10/0x10 [ 315.772231][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 315.777696][ T37] ? rcu_barrier_entrain+0x350/0x4d0 [ 315.783028][ T37] schedule+0xc6/0x240 [ 315.787144][ T37] schedule_timeout+0xb2/0x3a0 [ 315.791935][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 315.797351][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 315.802920][ T37] ? generic_exec_single+0x20a/0x500 [ 315.808263][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 315.813935][ T37] wait_for_common+0x359/0x630 [ 315.818749][ T37] ? wait_for_completion+0x40/0x40 [ 315.823893][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 315.830437][ T37] ? xa_find+0x145/0x170 [ 315.834713][ T37] wait_for_completion+0x1c/0x40 [ 315.839734][ T37] rcu_barrier+0x415/0x530 [ 315.844206][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 315.849652][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 315.854459][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 315.859642][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 315.865317][ T37] ? __kasan_check_write+0x18/0x20 [ 315.870514][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 315.876199][ T37] kvm_put_kvm+0xb04/0x12b0 [ 315.880738][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 315.885901][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 315.891581][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 315.896855][ T37] kvm_vm_release+0x47/0x70 [ 315.901399][ T37] __fput+0x1fe/0xa00 [ 315.905419][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 315.911032][ T37] ____fput+0x20/0x30 [ 315.915041][ T37] task_work_run+0x1e0/0x250 [ 315.919687][ T37] ? __cfi_task_work_run+0x10/0x10 [ 315.924826][ T37] ? __kasan_check_write+0x18/0x20 [ 315.930023][ T37] resume_user_mode_work+0x36/0x50 [ 315.935182][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 315.940703][ T37] do_syscall_64+0x64/0xf0 [ 315.945166][ T37] ? clear_bhb_loop+0x50/0xa0 [ 315.949914][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 315.955865][ T37] RIP: 0033:0x7fcb8718e9a9 [ 315.960323][ T37] RSP: 002b:00007fcb87f76038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 315.968789][ T37] RAX: 0000000000000000 RBX: 00007fcb873b5fa0 RCX: 00007fcb8718e9a9 [ 315.976805][ T37] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 315.984798][ T37] RBP: 00007fcb87210d69 R08: 0000000000000000 R09: 0000000000000000 [ 315.992833][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.000857][ T37] R13: 0000000000000000 R14: 00007fcb873b5fa0 R15: 00007ffd644feef8 [ 316.008878][ T37] [ 316.049497][ T37] NMI backtrace for cpu 0 [ 316.049519][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 316.049550][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.049564][ T37] Call Trace: [ 316.049572][ T37] [ 316.049581][ T37] __dump_stack+0x21/0x30 [ 316.049613][ T37] dump_stack_lvl+0x10c/0x190 [ 316.049640][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 316.049669][ T37] dump_stack+0x19/0x20 [ 316.049695][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 316.049720][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 316.049765][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 316.049790][ T37] ? sched_show_task+0x379/0x560 [ 316.049815][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 316.049838][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 316.049863][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 316.049888][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 316.049915][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 316.049941][ T37] watchdog+0xd8f/0xed0 [ 316.049970][ T37] ? __cfi_watchdog+0x10/0x10 [ 316.049995][ T37] ? __kasan_check_read+0x15/0x20 [ 316.050023][ T37] ? __kthread_parkme+0x138/0x180 [ 316.050055][ T37] ? schedule+0xc6/0x240 [ 316.050082][ T37] kthread+0x2ca/0x370 [ 316.050101][ T37] ? __cfi_watchdog+0x10/0x10 [ 316.050127][ T37] ? __cfi_kthread+0x10/0x10 [ 316.050146][ T37] ret_from_fork+0x67/0xa0 [ 316.050173][ T37] ? __cfi_kthread+0x10/0x10 [ 316.050194][ T37] ret_from_fork_asm+0x1a/0x30 [ 316.050225][ T37] [ 316.050233][ T37] Sending NMI from CPU 0 to CPUs 1: [ 316.268833][ C1] NMI backtrace for cpu 1 [ 316.268848][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 316.268888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.268898][ C1] RIP: 0010:stack_trace_consume_entry+0x13f/0x2a0 [ 316.268927][ C1] Code: 4c 89 f2 48 8b 75 c0 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 42 01 00 00 41 3b 19 0f 92 c0 48 83 c4 20 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc 44 89 c1 80 e1 07 80 c1 03 38 c1 [ 316.268941][ C1] RSP: 0018:ffffc900001f6c68 EFLAGS: 00000286 [ 316.268957][ C1] RAX: 0000000000000001 RBX: ffffc900001f6d40 RCX: 00000000001f6c00 [ 316.268969][ C1] RDX: dffffc0000000000 RSI: ffffffff84bb7b17 RDI: ffffc900001f6d40 [ 316.268981][ C1] RBP: ffffc900001f6c78 R08: ffffc900001f6d50 R09: ffffc900001f6d48 [ 316.268994][ C1] R10: 000000000000000a R11: ffffffff817429f0 R12: ffff88810367b900 [ 316.269005][ C1] R13: 1ffff1103cc47747 R14: ffffc900001f6dd0 R15: ffffc900001f6e20 [ 316.269018][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 316.269031][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.269042][ C1] CR2: 00007f6d37ee5000 CR3: 0000000109f94000 CR4: 00000000003526b0 [ 316.269057][ C1] Call Trace: [ 316.269062][ C1] [ 316.269068][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 316.269092][ C1] arch_stack_walk+0x12d/0x170 [ 316.269115][ C1] ? NF_HOOK+0x157/0x1b0 [ 316.269130][ C1] stack_trace_save+0x9d/0xe0 [ 316.269150][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 316.269170][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 316.269190][ C1] ? ref_tracker_alloc+0x29e/0x540 [ 316.269213][ C1] kasan_save_stack+0x3e/0x60 [ 316.269235][ C1] ? kasan_save_stack+0x3e/0x60 [ 316.269257][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 316.269275][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 316.269293][ C1] ? __call_rcu_common+0xd5/0x700 [ 316.269315][ C1] ? call_rcu_hurry+0xf/0x30 [ 316.269335][ C1] ? dst_release+0x1a3/0x240 [ 316.269357][ C1] ? skb_release_head_state+0x74/0x260 [ 316.269376][ C1] ? __kfree_skb+0x29/0x210 [ 316.269394][ C1] ? consume_skb+0x65/0x1a0 [ 316.269410][ C1] ? arp_process+0xd79/0x1740 [ 316.269426][ C1] ? NF_HOOK+0x157/0x1b0 [ 316.269446][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 316.269471][ C1] __kasan_record_aux_stack+0xb2/0xd0 [ 316.269490][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 316.269512][ C1] kasan_record_aux_stack_noalloc+0xf/0x20 [ 316.269530][ C1] __call_rcu_common+0xd5/0x700 [ 316.269552][ C1] ? call_rcu_hurry+0x30/0x30 [ 316.269573][ C1] ? rcuref_put_slowpath+0xd1/0x200 [ 316.269589][ C1] ? __cfi_rcuref_put_slowpath+0x10/0x10 [ 316.269603][ C1] ? percpu_counter_add_batch+0xfc/0x1b0 [ 316.269623][ C1] call_rcu_hurry+0xf/0x30 [ 316.269644][ C1] dst_release+0x1a3/0x240 [ 316.269673][ C1] skb_release_head_state+0x74/0x260 [ 316.269692][ C1] ? arp_process+0xd79/0x1740 [ 316.269706][ C1] __kfree_skb+0x29/0x210 [ 316.269723][ C1] ? arp_process+0xd79/0x1740 [ 316.269738][ C1] consume_skb+0x65/0x1a0 [ 316.269755][ C1] arp_process+0xd79/0x1740 [ 316.269771][ C1] ? __cfi_arp_process+0x10/0x10 [ 316.269786][ C1] ? __cfi_arp_process+0x10/0x10 [ 316.269800][ C1] NF_HOOK+0x157/0x1b0 [ 316.269813][ C1] ? __cfi_arp_process+0x10/0x10 [ 316.269828][ C1] ? arp_xmit+0x1f0/0x1f0 [ 316.269841][ C1] ? __cfi_arp_process+0x10/0x10 [ 316.269856][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 316.269877][ C1] arp_rcv+0x2f8/0x490 [ 316.269891][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 316.269906][ C1] netif_receive_skb+0x22d/0x7b0 [ 316.269925][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 316.269944][ C1] ? br_flood+0x67e/0x730 [ 316.269962][ C1] br_pass_frame_up+0x126/0x1c0 [ 316.269983][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 316.270006][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 316.270029][ C1] br_handle_frame+0x5a6/0xba0 [ 316.270050][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 316.270071][ C1] __netif_receive_skb_core+0xf48/0x3940 [ 316.270089][ C1] ? dst_release+0xe3/0x240 [ 316.270111][ C1] ? arp_process+0xd81/0x1740 [ 316.270128][ C1] ? qdisc_run_end+0x120/0x120 [ 316.270144][ C1] ? __cfi_arp_process+0x10/0x10 [ 316.270158][ C1] ? NF_HOOK+0x157/0x1b0 [ 316.270171][ C1] ? __cfi_arp_process+0x10/0x10 [ 316.270186][ C1] ? arp_xmit+0x1f0/0x1f0 [ 316.270199][ C1] ? __cfi_arp_process+0x10/0x10 [ 316.270216][ C1] process_backlog+0x3e5/0xae0 [ 316.270235][ C1] ? __cfi___switch_to+0x10/0x10 [ 316.270254][ C1] ? dequeue_pushable_task+0x1b9/0x2e0 [ 316.270274][ C1] __napi_poll+0xd0/0x610 [ 316.270291][ C1] net_rx_action+0x584/0xce0 [ 316.270311][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 316.270330][ C1] ? sched_clock_cpu+0x75/0x400 [ 316.270349][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 316.270365][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 316.270384][ C1] handle_softirqs+0x1ab/0x630 [ 316.270407][ C1] run_ksoftirqd+0x20/0x30 [ 316.270431][ C1] smpboot_thread_fn+0x493/0x8c0 [ 316.270454][ C1] kthread+0x2ca/0x370 [ 316.270467][ C1] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 316.270487][ C1] ? __cfi_kthread+0x10/0x10 [ 316.270501][ C1] ret_from_fork+0x67/0xa0 [ 316.270520][ C1] ? __cfi_kthread+0x10/0x10 [ 316.270533][ C1] ret_from_fork_asm+0x1a/0x30 [ 316.270556][ C1] [ 317.925914][ C1] net_ratelimit: 114389 callbacks suppressed [ 317.925938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.925977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.932058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.944097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.955935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.967924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.979946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.991870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.003867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.015877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)