last executing test programs: 15m13.972810429s ago: executing program 1 (id=9): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x10860, &(0x7f0000000200)=ANY=[]) 15m13.940184511s ago: executing program 1 (id=10): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000040)='system_u:object_r:power_device_t:s0\x00', 0x24) write$selinux_context(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:cron_spool_t:s0\x00', 0x22) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000100)={0x190002, 0x0, {[0x5, 0x101, 0x401, 0x0, 0xc0000000000, 0xfffffffffffffff8, 0x31, 0x94d3]}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'net'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x21) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdf9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x66}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfaf5}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000680)) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) write$selinux_context(r1, &(0x7f0000002700)='system_u:object_r:getty_var_run_t:s0\x00', 0x25) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002780)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000027c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002880)={'syztnl2\x00', &(0x7f0000002800)={'ip6_vti0\x00', 0x0, 0x2d, 0x5, 0xd, 0x3, 0x0, @loopback, @private2, 0x10, 0x7800, 0x470, 0x700000}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000002a40)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a00)={&(0x7f00000028c0)={0x114, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) accept4$inet6(r1, &(0x7f0000002a80), &(0x7f0000002ac0)=0x1c, 0x800) fchdir(r0) recvmsg$unix(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b00)=""/176, 0xb0}, {&(0x7f0000002bc0)=""/72, 0x48}], 0x2, &(0x7f0000002c80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x90}, 0x20) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), r12) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x24, r14, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c845}, 0x4000) write$tun(r8, &(0x7f0000002f00)={@val={0x0, 0x88f5}, @void, @llc={@llc={0x1, 0xd4, '.', "8d5a2028633c0293b923b7d40b58ea444c964b7b6c00d87601e7d4923351b780cbf2dd395020654c6024c5581f14f0a86c5d3a2e6d24f4cbb8de6e"}}}, 0x42) mkdir(&(0x7f0000002f80)='./file0\x00', 0x110) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000002fc0)='FREEZING\x00', 0x9) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000003180)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003140)={&(0x7f0000003040)={0xec, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x44000) sendmsg$SMC_PNETID_DEL(r11, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0xb20018}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) 15m13.04640394s ago: executing program 1 (id=21): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000340)={'system_u:object_r:cgroup_t:s0', 0x20, 'unconfined_u\x00'}, 0x2b) (async) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2002010, &(0x7f0000000240)={[{@readahead={'readahead', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x8}}], [{@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r1}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_user={'obj_user', 0x3d, '*#@/&'}}, {@audit}]}) 15m13.04566646s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) read$FUSE(r1, &(0x7f0000000b40)={0x2020}, 0x2020) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x10, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x19, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/237, 0xed, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 15m13.029711001s ago: executing program 1 (id=23): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x426900, 0x180) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x18, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x1900, &(0x7f0000000080)={0x9c, 0x72, 0x20000}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) r2 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x2000, 0x31, 0x10}, 0x18) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 15m12.916869942s ago: executing program 1 (id=25): mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x5) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 15m12.916433522s ago: executing program 32 (id=25): mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x5) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 15m7.578246727s ago: executing program 2 (id=98): prctl$PR_SET_DUMPABLE(0x4, 0x2) r0 = syz_clone3(&(0x7f0000000200)={0x4c001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x26a41, 0x114) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x8, 0x80000000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008804"]) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x10000000000f5a, 0x2000) fcntl$notify(r3, 0x402, 0x1) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000480)={0x7d76be16897135f, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r7, @ANYRES32=r0, @ANYBLOB="b10a0fcd259f3a0d062a573a5ef5699b9b7fc599fffb393d3f0a6b5c4c6d8935b179a8e26e53892a0f9e36d688796bd58fa70d24c7f4c4aaf27d37c78042cf08a4ef803cba30d1af90a55679c4efb4acd157b440dc15274e2f9f232c2d438b616ac5ddcd9b2503c3aec8e6e6a1aa9bc4aaeb9a908e4dbf0a08fc95a080b236733841daf4bddec0cea6419721efb4d25f641d47ca38ca8d172e74dfabffa2c001d99cce38434db851f4e6e5bc11cc81df34f29912886fc2c355ffa2e4bc"]) 15m6.748660568s ago: executing program 2 (id=102): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=[@wrmsr={0x1e, 0x20, {0x271, 0x7}}, @rdmsr={0x32, 0x18, {0x38a}}, @in_dx={0x82, 0x20, {0xdc4d, 0x6}}, @uexit={0x0, 0x18, 0xa}, @wrmsr={0x1e, 0x20, {0x233, 0x2}}, @code={0xa, 0x61, {"c48139eea8624bbfd6c4e13dd9464166b831010f00d865410f07420f783e360f782d991b000066ba610066b8f57a66eff448b808000000000000000f23d80f21f835000000600f23f8c4432d0d4e000d"}}, @wr_drn={0x6e, 0x20, {0x4, 0x1}}, @uexit={0x0, 0x18}, @set_irq_handler={0xbe, 0x20, {0xec, 0x2}}, @out_dx={0xaa, 0x28, {0xcf9a, 0x1}}, @rdmsr={0x32, 0x18, {0x335}}, @in_dx={0x82, 0x20, {0x54f4}}, @rdmsr={0x32, 0x18, {0x260}}, @set_irq_handler={0xbe, 0x20, {0x1e, 0x1}}], 0x1e1}) r5 = openat2(r1, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)={0x582, 0x80, 0x1}, 0x18) setsockopt$inet6_int(r5, 0x29, 0xc9, &(0x7f0000000540)=0x4, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r6) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r3, 0x0, 0x25a5, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) 15m6.717784992s ago: executing program 2 (id=103): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) statx(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x100, 0x200, 0x0) r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r2 = open(&(0x7f0000000240)='./file0\x00', 0x404080, 0x52) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x11d2, 0x21}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4010) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000200)={0x0, 'syz_tun\x00', {0x4}, 0x5}) r4 = getpid() (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x7, 0x0, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x23, 0x65, [@local, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x41}]}, @lsrr={0x83, 0xf, 0x48, [@loopback, @local, @multicast2]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x54, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x204804c}, 0xc0c0) r8 = getpid() (async) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="747bdb006f816335f431b245dc81dc2b"]}]}, 0x38}], 0x1}, 0xcc000) kcmp(r4, r8, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) (async) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r11, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 15m6.62612606s ago: executing program 2 (id=104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x181400, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x7, 0x0, 0x5, 0xc, 0x1c, "fee8a2ab78fc979fd1e0fb950720b7fb810000000000b26b000000000000000000000000002300000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac12b8753d7bdb22d0000b520a1a93c060000000000027a8f3d45cdd499a861ac000000000318e341e15ec20e000000000400", "f422741b13103e52f40000ed06000000000200989d8d4200", [0x0, 0x1fffffffbfffd]}}) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) userfaultfd(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x200, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x4007}}) close_range(r3, 0xffffffffffffffff, 0x0) 15m6.614710491s ago: executing program 2 (id=106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002280), &(0x7f0000002300)=0x60, 0x1800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002800)={0x14c, 0x0, &(0x7f0000002600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x2, 0x17}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/4096, 0x1000, 0x1, 0x24}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x2, 0x25}, @fda={0x66646185, 0x5, 0x2, 0x29}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}, @dead_binder_done, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002380)={@ptr={0x70742a85, 0x1, &(0x7f0000001280)=""/4096, 0x1000, 0x2, 0xd}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000002340)=""/23, 0x17, 0x0, 0x1d}}, &(0x7f0000002400)={0x0, 0x28, 0x40}}, 0x1000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002540)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x2, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/233, 0xe9, 0x1, 0x40}}, &(0x7f00000025c0)={0x0, 0x18, 0x38}}, 0x40}], 0x62, 0x0, &(0x7f0000002780)="dab702422a37c78284416a1169d9b2fa31534d54030be15a5e76a2b8965558b0c36439300483a65fb1b1e7a83ab01d91bc78b6898a4bebc631760f538c850cece1424b88dd85af4eaada1b7627b16b72ea9323e997bfb1df854fd21b7c2407c37861"}) close_range(r0, 0xffffffffffffffff, 0x0) 15m6.512869432s ago: executing program 2 (id=107): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 15m6.455915698s ago: executing program 33 (id=107): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 5m19.505352446s ago: executing program 5 (id=9022): r0 = getpgid(0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x2, 0x84, &(0x7f0000000140)="ad3776ec949129d64ecdae900a3415e993b6d142562eb51e351c206327398e1d5b3d17052bd655bf9d1825341e451b64ae43ae97f630164e28c576a1dfc86903b519de0c75f65390f565bee12a1eac4b3c4468d9cc244b0d08eedb5b0bc34adddb559ffddc27516525d3f7d577aab7148abf108ae8d3617438bf1cc5d6ff9eb28f4f2c41") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x14, 0x0) r7 = syz_pidfd_open(r0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000200)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="400fb6000000b623bbf6edca93679db7da3c09debe1b79b25aa47df486f72b39f4edc85bbdf1ebe802a4f310feb79dbc0dfe0b5c6bde8b2f75c51ea49fbb3d74ca170920b6bc081d5f8181bd7fe9e783794636b8bf2ba1b29a25a37fae642cebddb98fae1111c238dcf24777e5e4e07f862f066c278923eb7ddee94c07894621dd25a74199204d6dddc718add2beb871be30336f2578677bd7adf2a013ddb1668b8f7ba11d191eaabbbeda981b51db63cb24dd5e256e000000000000"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x46e40c18e8e0d02, 0x13, 0xfc, "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"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000540)=ANY=[@ANYBLOB="228101000000e7"], &(0x7f0000000580)={0x20, 0x82, 0x3, "5e954f"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "4b6d82"}, &(0x7f0000000600)={0x20, 0x84, 0x4, "2e6ede3c"}, &(0x7f0000000640)={0x20, 0x85, 0x3, '=46'}}) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r8], 0x30}, 0x1, 0x0, 0x0, 0xfff5158b76d046ae}, 0x4010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) shutdown(r10, 0x1) pidfd_send_signal(r7, 0x0, 0x0, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=0x0]) 5m18.968171719s ago: executing program 5 (id=9026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 5m18.945575591s ago: executing program 5 (id=9027): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x3, 0x4) sendto$inet(r1, 0x0, 0x0, 0x40010, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x56, 0x0, 0x0, 0x20400}, 0x0) accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x80000) shutdown(r2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000100)=0x2c) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r4, &(0x7f0000000480)=[{{&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x24000040) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pipefs\x00', 0x200000, 0x0) 5m18.84628163s ago: executing program 5 (id=9028): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r1, r0, r0, r0, r0, r1, r0]}}], 0x30}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m18.84509188s ago: executing program 5 (id=9029): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="22f6d91d415301e9f89080e8eedb3a", 0xf}], 0x1, 0x0, 0x3d0}, 0x4000c010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg2\x00', 0x0}) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 5m18.842606381s ago: executing program 5 (id=9030): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="100006000000000020"], 0x54, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x2000, &(0x7f00000002c0)={[{@xattr}, {@favordynmods}, {@xattr}, {}, {@favordynmods}, {@name={'name', 0x3d, './binderfs/binder1\x00'}}, {@subsystem='perf_event'}], [{@fsname={'fsname', 0x3d, 'system.posix_acl_access\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_lt={'fowner<', r2}}]}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x548a, 0xff, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \"m'], 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r4, 0x0, 0xee01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 5m18.788855896s ago: executing program 34 (id=9030): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="100006000000000020"], 0x54, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x2000, &(0x7f00000002c0)={[{@xattr}, {@favordynmods}, {@xattr}, {}, {@favordynmods}, {@name={'name', 0x3d, './binderfs/binder1\x00'}}, {@subsystem='perf_event'}], [{@fsname={'fsname', 0x3d, 'system.posix_acl_access\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_lt={'fowner<', r2}}]}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x548a, 0xff, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \"m'], 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r4, 0x0, 0xee01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 4m29.379228332s ago: executing program 3 (id=9625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000001800)=""/221, 0xdd}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000600)=""/265, 0x109}], 0x9}, 0xe}], 0x1, 0x40000100, 0x0) recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0xf4a}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x7, 0x40000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x7b8278d11ab1b4e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x7b8278d11ab1b4e) mkdir(0x0, 0x40) (async) mkdir(0x0, 0x40) socket$key(0xf, 0x3, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="001488000000c06314477dd77282887b2d91f1d729718498f2c4ca241c48961b8f7147e6e9e59cb0acec86128a1fadcd9f655a26ef19f1fc14a407b466d88d48ab962d9d16a55bb3e4311f7f8f4da7650e0f9ff264f033ee9b22a4e2370e9c175f305cc6ae0ddf69afb3a265e0b957d7f124796c1dc03fe4424129"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x26}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x9, 0x5, 0x7ff, 0x7, 0x2, 0x6, 0x5, 0x5, 0xff, 0x4}}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x87, 0x2, 0xff}, 0x0}) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x11, 0x12, {0x12, 0x24, "fda0228bdf9f69025444c3c617a75c86"}}, &(0x7f0000000880)={0x0, 0x3, 0xe8, @string={0xe8, 0x3, "0b42d4e785cfa9e9573f4b890eabb705cdbad744ab525a4b03f94e2a888cec5dca613a483df540d608a062f3dbc5f0523693470faf361a047839eddcc3e33521d5762d87ca3217a6f458049a547750a6b494c2678cebaf6803d7dcde5422279660f65d641642af9b24f3b18b7b4c0063f70c467d0df194c6840d55ace211dde9a92ff272699d220f08c72be942be0ff2d04d6f12565f09b7a0d187b019cfa8caa80dadeaed9aa922bf6b73f856aa9aea5b01c6e5ba2e1375050b2d1a6f83df774bbe486ef7b8aa624198e2a886fbcc128baf33c63d934d56537e40c479e0f7e9c3a9bef866cf"}}, &(0x7f00000001c0)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x4, [@generic={0xb, 0x10, 0x2, "cd92e99badfcd1c6"}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x10001, 0xf00, 0x55fa, [0xc030, 0xc000, 0xff3f3f, 0xcf, 0xcf, 0x30]}, @generic={0x7, 0x10, 0xa, '@5gJ'}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x40, 0x8, 0x88}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x2, 0x9, 0x7, "b672424c", "af9b111e"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x1, 0x4, 0xa9, 0x5, 0x6}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x40, 0xe, 0xe8, "b24c08dfa7d3178befacb175c23340719b758c93e6943ea1a0810ee74a06232b153f6cf6ea01f0c647d89cd72f06be7babce0fb30588565050ee5721af3c873ad2a1a27a628df56e978db55e92946f2fdb910613690d02fe325c517936d2c10c64382357e4788e6d5db8f802f7c3dd66425650d1651a59fc3b0f4490f58a388e2c05234c4e2379e35608f9a924916b2ec7cc9f5ebdf165997301fc63b347eb9dffc9843e2d00fbf58a6c917afa64eca6c774d83feb3bc34f4828c653f2ced5a55bf94e81e9f077a493338da7639d8308fa595f52c256c7cf2d8e4f20a046ae0e0f916f83efaf1ffb"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6a}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x2, 0x40, [0x0]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x47e}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0xd5}, &(0x7f0000000b80)={0x40, 0xb, 0x2, '\"v'}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "52b0"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x6}}) umount2(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 4m28.861033404s ago: executing program 3 (id=9634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0}) 4m28.806337729s ago: executing program 3 (id=9635): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000001400)=0xe) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {&(0x7f00000007c0)="f8079ee78c9711b36402abae104bad8870fe4f0df779", 0x16}], 0x3) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000280)={0x1, 0x1, 0x1a, 0x7, 0x69, &(0x7f0000000440)}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x20000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012cbd7000ffdbdf253000000006000000060036003e00000000000000"], 0x24}}, 0x4000014) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x2) 4m27.954164723s ago: executing program 3 (id=9650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000480}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008110) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4881) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x8) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r6 = syz_open_procfs(r5, &(0x7f0000000480)='net/if_inet6\x00') sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0xb, 0x6, 0x4d626bf2ff48ab65, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2b}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8001}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r8, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6ca6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x8110) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r6) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000980)={@local, 0x0}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x8, {{0x1d, 0x4, 0x2, 0x3, 0x74, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @rr={0x7, 0x17, 0xfd, [@dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}, @loopback, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xaa, 0x0, 0x5, [0x8]}, @ssrr={0x89, 0x7, 0xe2, [@remote]}, @end, @generic={0x7, 0xd, "a84cbcbf8fe2e1779ca8d4"}, @timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0x6, [{@private=0xa010101, 0x3}, {@empty, 0x6}, {@empty, 0x7}, {@broadcast, 0xb3c4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'netpci0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000b80)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(r7, 0x29, 0x7, &(0x7f0000000bc0)={@private0, 0x0}, &(0x7f0000000c00)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'erspan0\x00', 0x0, 0x1, 0x20, 0x6, 0x6, {{0xb, 0x4, 0x2, 0x38, 0x2c, 0x67, 0x0, 0x3, 0x29, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x13, 0x73, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000d00)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000d40)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xd, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x7, 0x80, 0x2000000, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e40)={'erspan0\x00', 0x0, 0x40, 0x8, 0x4, 0x3ff, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x68, 0x0, 0xb, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001280)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000000f80)={0x298, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 4m27.908884267s ago: executing program 3 (id=9651): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r0, 0x4c0c0000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) 4m27.907978587s ago: executing program 3 (id=9652): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x5) unshare(0x400) (async, rerun: 64) write$nbd(r2, 0x0, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) socket(0x28, 0x5, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYRES32], 0x18}, 0x44000) (async, rerun: 64) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async, rerun: 64) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async, rerun: 64) write(r5, &(0x7f0000000400)="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", 0xfffffcf1) (rerun: 64) 4m4.576667651s ago: executing program 35 (id=9652): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x5) unshare(0x400) (async, rerun: 64) write$nbd(r2, 0x0, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) socket(0x28, 0x5, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYRES32], 0x18}, 0x44000) (async, rerun: 64) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async, rerun: 64) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async, rerun: 64) write(r5, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffcf1) (rerun: 64) 3m32.388055874s ago: executing program 0 (id=10121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000500)=""/72) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m32.387650324s ago: executing program 0 (id=10122): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$pptp(0x18, 0x1, 0x2) poll(&(0x7f0000000240)=[{r1, 0x502}], 0x1, 0x7) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) 3m32.383820435s ago: executing program 0 (id=10123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x29f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf8, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0xa, "ad65"}, @main=@item_012={0x2, 0x0, 0x2, "160d"}]}}, 0x0}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) r5 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x40084504, 0x0) 3m31.751120737s ago: executing program 0 (id=10130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESHEX=0x0], 0x40}, 0x6048090) r2 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000300)) r3 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r3, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x4e24, 0x9daa, @empty, 0x3}, 0x1c, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x154f6b50}}, @rthdr={{0x48, 0x29, 0x39, {0x5c, 0x6, 0x0, 0xfb, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts={{0x98, 0x29, 0x37, {0x5e, 0xf, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x7ff}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0xcaf}, @calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x3]}}, @ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7f, 0x7, [0x3, 0x0, 0x2, 0x1ff, 0x6]}}]}}}, @hopopts_2292={{0xe8, 0x29, 0x36, {0x2b, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xe, 0xa4, "0dce8cd4f92d5721017af2e0fc0dd1d469033fdc6e7752d93a8375e1cc3bd76ef8fca18a8a72591c81d0bf8dc66aea4f016224cf420b6bcac33aed8467a53741763f5fa3643e80b4de93325232379801b770ee4f8758b961d2412be8ccdfdb1c6a0c670e1588487950fa0f18909888bf9be9bef669ad6d893f533bd8212c2e80ee2895ad350fdd9d79525e9286ff5931bfda8769bd56f5f88ca2fe1b676869b0ecd81ccd"}, @jumbo={0xc2, 0x4, 0xe}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3ff}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0xc, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}]}}}], 0x200}, 0x48000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000002a00)=0x3, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) setreuid(0xee00, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"}) 3m30.873562303s ago: executing program 0 (id=10141): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x0, 0x81, 0x1}) r1 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x24) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x10081, 0x3) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000500)) (async) write$tcp_congestion(r2, &(0x7f0000000540)='lp\x00', 0x3) (async) r4 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000580)={0x0, 0x1, [{r2, 0x0, 0xfffff000}]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x88080, 0x20) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000600)={0x1, 0x3, 0x1, 0x8, 0x7, 0x0, [{0x1, 0x200, 0x7, '\x00', 0x2400}, {0x6, 0x9, 0x6, '\x00', 0x801}, {0x7fffffffffffffff, 0x7, 0x4, '\x00', 0x6}, {0x80000001, 0x2, 0xd7da, '\x00', 0x800}, {0x9, 0x1ff, 0x700000000000000, '\x00', 0x200}, {0x9, 0x6, 0x1, '\x00', 0x1188}, {0x0, 0xa2, 0x0, '\x00', 0x1800}]}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000a00)={"384d17424567078b51bb6288f1871e3f", 0x0, 0x0, {0x7, 0x1ff}, {0x7e, 0x2}, 0x8, [0x7ff, 0x6, 0x0, 0x6, 0x4, 0xffff, 0xac, 0x0, 0x4, 0xa8, 0x2, 0x3, 0x8, 0x4, 0xfffffffffffffffc, 0x10000]}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000b00)=r6) (async, rerun: 32) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_STATUS(r7, 0x8001af71, &(0x7f0000000b80)) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000bc0)={0x0, r0, 0xdf9, 0x6, 0x3, 0x100}) (rerun: 64) r8 = getuid() lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x200802, &(0x7f0000000d40)={[{@noswap}, {@huge_advise}, {@huge_never}, {@inode64}, {@inode32}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '}:]+[!-&%'}}, {@uid_gt={'uid>', r8}}, {@subj_user={'subj_user', 0x3d, '{$'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x66, 0x30, 0x66, 0x36, 0x63, 0x30], 0x2d, [0x38, 0x38, 0x2c, 0x36], 0x2d, [0x0, 0x30, 0x30, 0x39], 0x2d, [0x64, 0x32, 0x38, 0x39], 0x2d, [0x66, 0x34, 0x63, 0x39, 0x63, 0x63, 0x37, 0x30]}}}, {@fowner_gt={'fowner>', r9}}]}) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7f, 0x3ff, 0x8, 0x8000000000000001, 0x401, 0x10000}, {0x7, 0xb017, 0x1a, 0x81, 0x81, 0x100}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) mknodat(r1, &(0x7f0000001080)='./file0\x00', 0xc000, 0x2) r10 = openat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x200000, 0x188) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r7, 0x8004af79, &(0x7f0000001100)) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000001140)={0x591121aa, 0xa388, 0x0, 0x4, 0x4, 0x0, [{0x2, 0x8001, 0xd7e3, '\x00', 0x2}, {0xda, 0x8, 0x10, '\x00', 0x2d01}, {0x1, 0x9, 0x6, '\x00', 0x202}, {0x2, 0xa, 0x6, '\x00', 0x800}]}) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000001240), 0x3, 0x408200) (async, rerun: 32) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000001280)=0x3) (async, rerun: 32) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000012c0)={0x3c, 0x39, 0x9, 0x18, 0x7, 0x598, 0x1, 0xed}) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x12) (async) r11 = fspick(r10, &(0x7f0000001300)='./file0/file0\x00', 0x1) fcntl$setlease(r11, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000001380)='net/ip6_tables_names\x00') 3m30.81037737s ago: executing program 0 (id=10144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x48, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/4, 0x4, 0x1, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/99, 0x63, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @register_looper], 0x0, 0x0, 0x0}) 3m30.741910486s ago: executing program 36 (id=10144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x48, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/4, 0x4, 0x1, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/99, 0x63, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @register_looper], 0x0, 0x0, 0x0}) 2m22.774332847s ago: executing program 8 (id=10838): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(0xffffffffffffffff, r3, 0x0) timerfd_create(0x0, 0x80800) r4 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x80, 0xed2, 0xffff, 0xb, 0x3f0c, 0x3009, 0xfffffffd, 0x200, 0x2, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_write(r4, 0xea, 0x0, 0x0) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='2']) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xde) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m20.670789153s ago: executing program 8 (id=10864): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x5a, 0x0, 0x9, 0x2, 0x0, "3072c067b19a90a7f4f2ca8334ddf982cc6615"}) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) flock(r0, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x21, 0x14, 0xf, 0x1e, 0x6, 0x8, 0x3, 0x1f}) read$eventfd(r1, &(0x7f0000000080), 0x8) 2m20.659459364s ago: executing program 8 (id=10865): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000006c0)={0xfffffff3, 0x8000, 0x16b03850, 0x7fff, 0x6, "96ec62643c4e81ecb474a28ee051d969a0bfa6", 0x4, 0x5}) prlimit64(0x0, 0x0, &(0x7f0000000540)={0x6, 0x74}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8a05f664f2838e8, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x80) 2m20.60216353s ago: executing program 8 (id=10866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000303010100000000000000000000000091236fc05cf44398a48572a144afb8b661033f91f9bc546d23aa9a4b142f263499bd2ad4d8d3666a0c4faa10dad4616a0a539d742c58f7df99dafe581222b29262cc0aa2a30e85d0011b5e78f0e386ed856c8aa614905756cd0a059c85451c94b0165cb71911ce7ba9ee1da2b05cdd8eb2199ef408f473069273265ce203ea3d130134000084de89ed4c92b5b04e63d720503fb3db6be0ed0f1432944c7ff03d889aefe70c31317fbf4f5a7b9f6e04160db0f9eb34082c331d6c3608ed7150763ea2b06c0b3d"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000000900000000000002000004"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/net\x00') 2m20.60156221s ago: executing program 8 (id=10867): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee7001, 0x8, 0x8, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x2}, {0x4000, 0xdddd1000, 0x0, 0x0, 0x40, 0x4, 0x7d, 0x7f, 0x5, 0x3, 0x3}, {0xeeee0000, 0xdddd0000, 0xa, 0x5, 0x3, 0x7, 0x4, 0x9, 0x1, 0xa7, 0x6, 0x7}, {0x6000, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0xaf, 0xe, 0x1}, {0xeeee0000, 0xd000, 0x4, 0x3, 0x15, 0x7, 0xab, 0x82, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x2000, 0x8, 0x0, 0x3, 0x9, 0x1, 0xa2, 0x80, 0xf, 0x1}, {0x3000, 0x80a0000, 0x0, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x8080000, 0x1000, 0xc, 0xd, 0xf, 0x7, 0x1, 0x34, 0xa6, 0xc, 0x7, 0x9}, {0xeeef0000, 0x2d}, {0x1, 0x7}, 0x80000031, 0x0, 0x1, 0x2024, 0xe, 0x1003, 0x3000, [0x6800000000000200, 0x4, 0x3]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000a40)={0xeeee0000, 0xeeee8000, 0x2, 0x6, 0x8}) getpeername(r1, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000005a001f211007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) 2m20.473554813s ago: executing program 8 (id=10874): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xfffffffffffffff4}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000180)) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x454}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4000890) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) ptrace(0x8, r2) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = syz_pidfd_open(r2, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000440), 0x2, &(0x7f00000004c0)) (async) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000580), &(0x7f00000005c0)=0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) fcntl$getflags(r4, 0x40a) (async) sendmsg$sock(r0, &(0x7f00000009c0)={&(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c95d8cad79e177c5c67ce5f73362bbead187ab2d04a0302c5099e963a6e96d2195ecf24ca1509fea3d54e815c5403dbc814f7a96b325e6671d23f1f23359789cf07c631e84cac11a99d241d9008064ae118f58a4230d7d4bbfa30fed023900424a3544b06e7ae7e832c90052ffd914957e6065dfdf4e5be14a73356d5d52de03b44b7f702a17ec5f5e1efda046769531cd0ff275249719d1", 0x98}, {&(0x7f0000000880)="4d9c0b62ac9ff8aa271c7955ee809cf9d3819ee1d08ad16c506aca1670ef28993099ce768c47b818a3", 0x29}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x24}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}], 0x90}, 0x4000800) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000a00)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000a40)) (async) r6 = dup2(r3, r5) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000a80)=0x2) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000ac0)) (async) fsetxattr$security_capability(r0, &(0x7f0000000b00), &(0x7f0000000b40)=@v2={0x2000000, [{0xfffffff0, 0xfffffff9}, {0x8, 0x81}]}, 0x14, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x56, 0x0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x80, 0x40, 0x668e}}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x210, 0x13, 0x400, 0x70bd25, 0x25dfdbfb, {0xf, 0x9, 0x4d, 0x7f, {0x4e23, 0x4e20, [0x7, 0x9, 0x4073, 0x3b6], [0x1, 0x800, 0x2, 0x9], r7, [0x200, 0x8000]}, 0xfe38, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x51, 0x1, "fbd3ba187cf6d173f73345a820d9578dd82837b6fda083df586c8a58d7b12be263dd3d8a07952b4b541df5e641b72d1bab409ccdf39ee8d21eb0a57aab0e867ec38577f5e7783f28698e1ea7cd"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "e33a449b592f6d70e93022830b5e2c0f25e7695c77920d7969c316169d1ca3a0e51ee0f89d24da1d0d3ead66c0cd1a4c7b4294e4425f804087f4616a8dd5"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "a298e1056e"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "1633193b80139d62dea7c82333ae64d0b1c13fbb515a54ad352eb42a34f84c03351c"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "533a87b84a41f794e5ee4c0ffbdcbfec05224db92b19425cafa86b583bcadeaf0c121864e852b3a41db87c9ab8ea54130a59d9cb66b244d9f3df8532f6276073b93bc666e848e6d468b075b706bed714be5a41ef6267da57f034c37490cdf5b6b718aabb8b1a54c7d1b60df1389325eb98e9898785f0d492b09481a399d95472187a23964e706853553fc2ba3f461e78c5955971972cb1f55792c5c9fd1da7325c0c4fd247a5c799ba0e9e0ed71250565d3e648649ba496d341f49263e8ea8cc4451933c0c3d2634a820965d8027a2633d7faacb8b7481830ed88ed3aa8ae0b811d5f2e18ec5c516a5a0b04272ac4293f187"}]}, 0x210}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000f40)=0x2) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x4c840) (async) syz_clone(0x2000000, &(0x7f0000001080)="a718a28ba91908934fc84c56d6ad3aaf350c8f9d43654800e44a", 0x1a, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="932e377a6320e66fb1ff7055e8ab553249a8558a328b33be7ab5ab830524c1a4ca5a2b2f453c9ff592a2f5fbe53b28bd32f85c3f4d") (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) 2m20.430425667s ago: executing program 37 (id=10874): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xfffffffffffffff4}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000180)) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x454}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4000890) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) ptrace(0x8, r2) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = syz_pidfd_open(r2, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000440), 0x2, &(0x7f00000004c0)) (async) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000580), &(0x7f00000005c0)=0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) fcntl$getflags(r4, 0x40a) (async) sendmsg$sock(r0, &(0x7f00000009c0)={&(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c95d8cad79e177c5c67ce5f73362bbead187ab2d04a0302c5099e963a6e96d2195ecf24ca1509fea3d54e815c5403dbc814f7a96b325e6671d23f1f23359789cf07c631e84cac11a99d241d9008064ae118f58a4230d7d4bbfa30fed023900424a3544b06e7ae7e832c90052ffd914957e6065dfdf4e5be14a73356d5d52de03b44b7f702a17ec5f5e1efda046769531cd0ff275249719d1", 0x98}, {&(0x7f0000000880)="4d9c0b62ac9ff8aa271c7955ee809cf9d3819ee1d08ad16c506aca1670ef28993099ce768c47b818a3", 0x29}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x24}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}], 0x90}, 0x4000800) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000a00)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000a40)) (async) r6 = dup2(r3, r5) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000a80)=0x2) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000ac0)) (async) fsetxattr$security_capability(r0, &(0x7f0000000b00), &(0x7f0000000b40)=@v2={0x2000000, [{0xfffffff0, 0xfffffff9}, {0x8, 0x81}]}, 0x14, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x56, 0x0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x80, 0x40, 0x668e}}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x210, 0x13, 0x400, 0x70bd25, 0x25dfdbfb, {0xf, 0x9, 0x4d, 0x7f, {0x4e23, 0x4e20, [0x7, 0x9, 0x4073, 0x3b6], [0x1, 0x800, 0x2, 0x9], r7, [0x200, 0x8000]}, 0xfe38, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x51, 0x1, "fbd3ba187cf6d173f73345a820d9578dd82837b6fda083df586c8a58d7b12be263dd3d8a07952b4b541df5e641b72d1bab409ccdf39ee8d21eb0a57aab0e867ec38577f5e7783f28698e1ea7cd"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "e33a449b592f6d70e93022830b5e2c0f25e7695c77920d7969c316169d1ca3a0e51ee0f89d24da1d0d3ead66c0cd1a4c7b4294e4425f804087f4616a8dd5"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "a298e1056e"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "1633193b80139d62dea7c82333ae64d0b1c13fbb515a54ad352eb42a34f84c03351c"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "533a87b84a41f794e5ee4c0ffbdcbfec05224db92b19425cafa86b583bcadeaf0c121864e852b3a41db87c9ab8ea54130a59d9cb66b244d9f3df8532f6276073b93bc666e848e6d468b075b706bed714be5a41ef6267da57f034c37490cdf5b6b718aabb8b1a54c7d1b60df1389325eb98e9898785f0d492b09481a399d95472187a23964e706853553fc2ba3f461e78c5955971972cb1f55792c5c9fd1da7325c0c4fd247a5c799ba0e9e0ed71250565d3e648649ba496d341f49263e8ea8cc4451933c0c3d2634a820965d8027a2633d7faacb8b7481830ed88ed3aa8ae0b811d5f2e18ec5c516a5a0b04272ac4293f187"}]}, 0x210}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000f40)=0x2) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x4c840) (async) syz_clone(0x2000000, &(0x7f0000001080)="a718a28ba91908934fc84c56d6ad3aaf350c8f9d43654800e44a", 0x1a, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="932e377a6320e66fb1ff7055e8ab553249a8558a328b33be7ab5ab830524c1a4ca5a2b2f453c9ff592a2f5fbe53b28bd32f85c3f4d") (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) 50.948247272s ago: executing program 7 (id=11797): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) fcntl$getown(r2, 0x9) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x4000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002d00010000000000fbdbdf251d010900e39ee20b08c0e66bb2b04f154eeecf42e378411030387b13354d20ffc4165efbe15d0c9ec7139e7f74280abf80ad606bac54f58ce650f49d4726e59471d4bcb06d19bf6405d1eec8b921f8ae5169ecc53c880a8f74900489d19f2f7a5c783eb2a55be0e0a18216897a41067bae3fd77605204fce39de5208036e3cb99d4eb8d870544b46ec3d34ae55774428c736af000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) unshare(0x2a020480) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r8 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x3, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 50.368901149s ago: executing program 6 (id=11814): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r1 = userfaultfd(0x80001) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x1000000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x10}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) futex(0x0, 0x109, 0x1, 0x0, 0x0, 0x49) linkat(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080)=0x20, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mremap(&(0x7f0000060000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) dup2(r2, r5) 50.325836134s ago: executing program 7 (id=11815): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="150000091180dc2bc5cd6560c00065ffff00100000"], 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r2, &(0x7f0000004280)={0x2020}, 0x2020) (async) socket$unix(0x1, 0x5, 0x0) (async) unshare(0x26020400) (async) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) (async) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) (async) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) (async) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 50.298615966s ago: executing program 7 (id=11816): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1000007fd) 50.170053429s ago: executing program 6 (id=11817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x0, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 50.143846532s ago: executing program 6 (id=11818): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0xa42}}], 0x18}}], 0x1, 0x20000844) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x508, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r1, 0x0, 0x0, 0x2101, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) write(r2, &(0x7f0000000400)="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", 0xc01) 50.029196183s ago: executing program 6 (id=11819): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0}) fchdir(r3) 49.342208371s ago: executing program 7 (id=11828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x14) syz_usb_connect(0x2, 0x41, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0xd8, 0xfd, 0x97, 0x20, 0x17cc, 0x1000, 0x6174, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x4, 0xff, 0x88, 0x3, [{{0x9, 0x4, 0x38, 0x5, 0x0, 0xc9, 0x69, 0x8, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x23, 0xfffa, 0x7ff, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x2f}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x6, 0xb, 0x4, 0xff, 0x9}, 0x59, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x98, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xfffffffffffffffa) 49.090870865s ago: executing program 6 (id=11834): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 48.727584321s ago: executing program 7 (id=11835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000006a0015012000"], 0x1c}], 0x1}, 0x4000080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "fc674d000000f8f7", "c5689d28d97200", "2c71e7c6", "db6b5f46c1dd986a"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x22, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffff9, 0x7, 0x7f}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/239, 0xef, 0x1, 0x22}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r6 = timerfd_create(0x8, 0x80c00) timerfd_settime(r6, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) setresuid(r5, r5, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3f}, 0x48, 0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d00)=ANY=[], 0x28}}, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x358, 0xffff8881f6e0f000) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000001c0)={0xb, {0xfffffffc, 0x3, 0x5, 0x401, 0xc, 0xd9}}) 48.351180748s ago: executing program 4 (id=11853): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f0000000340)) write$P9_RVERSION(r3, 0x0, 0x0) r7 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000020c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="86d8d62953aeb596181c57b8641a9899807701ff1d1d4f6407a0a88a8b20b0372b47e6bed7eccb06d0ca189580804b3f3602b16fb9a9708167e625ca8e0719f44266bc515341cff31015b73def941aca80734469b1a3a65625ef58d4a0ffc97f144a3867ab55a5ccf52d6ba8a43c7721226c5fc1dca6d7fc2f8c82070582777e", @ANYRESHEX=r7, @ANYBLOB=',afid=0x0000000000000008,k']) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r9 = open(&(0x7f0000000200)='./bus\x00', 0x151a43, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) 48.3256392s ago: executing program 9 (id=11854): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x3, 0x80, 0x2, 0x20008, 0x7f, 0x2000000a, 0x20000000, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0x40, 0x7, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x5, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x940, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x1, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xffc, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x804, 0xa, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0xffffffff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x800002, 0xfffffffb, 0x3, 0x3, 0x101, 0x10000, 0x9, 0x7ffd, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x9, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x100, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r3, 0xf0106b2f9946af23, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) ppoll(&(0x7f00000000c0)=[{r1, 0x20}, {r1, 0x9d00}], 0x2, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x0, 0x9, 0x0, '\x00', [{0xfffffffa, 0x7, 0x80000000, 0x5, 0x8, 0x3}, {0x0, 0x40, 0x6, 0x7f, 0x8, 0xfffffffffffffffe}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 48.242491909s ago: executing program 9 (id=11855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9da36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d1bf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f00", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x1e, 0xfffffffffffffff5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r3, r6, 0x6700000000000000) ioctl$FS_IOC_GETFLAGS(r1, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 48.170289216s ago: executing program 4 (id=11856): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x2800) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="40050206000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 47.92143484s ago: executing program 9 (id=11857): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fstat(r0, &(0x7f0000000200)) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000000)={0x37, "2d243ffb1557ce78fda7e89d8ab68c3584e1207b8a8284de161492dd7fc74a92317077405fb7f31932f4628036a7f4a6cce006b27bbbe2"}) 47.855079107s ago: executing program 9 (id=11858): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x53a, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$inet6(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) recvmmsg(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0x7706, 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) fcntl$getownex(r5, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) r9 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r9}, &(0x7f00000000c0)) r10 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000000540)={0x30000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x7}, &(0x7f00000003c0)=""/211, 0xd3, &(0x7f0000000100)=""/135, &(0x7f0000000500)=[r6, r7, 0x0, r8, r9, r10], 0x6, {r0}}, 0x58) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 47.589436493s ago: executing program 4 (id=11859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 47.556815466s ago: executing program 9 (id=11860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_usb_connect$uac1(0x6, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x5, 0x40, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x6}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0x3, 0x3, "b0d4a5c5"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x5, 0x80, 0xfffa, 0x92, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x4, 0x3, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb0, 0xd3}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0xe, 0xa1, "e253", "9493b0"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x46ac, 0x5, "d3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb1, 0x4, 0x3, 0x8d, "", '\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xa9, 0xad, 0x7f, {0x7, 0x25, 0x1, 0x80, 0x7, 0x981e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7f, 0x9, "bce2fe4268f27ffb"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0x8, "f58b", 'x'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x3, 0xf, 0x2}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x5, 0x2, 0x10, 0x3}, 0x80, &(0x7f0000000140)={0x5, 0xf, 0x80, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x4, 0x9, 0x6, 0x9}, @ptm_cap={0x3}, @generic={0x66, 0x10, 0x2, "1e68d2507a706982160f1e95805ac06f99c5e657067a375648f1dbbe777f4c0af8c0f727e756cff0ea43968378d70fcbe3dc95d0b1ddbda15a4495a04ef941113f608f325c8e06c7ab20311219181d828c2f2e03ff92a71e1df63f093b03a63d5c5985"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "8ca785c47a6896c893de4b4360a258a042bf1b3ed0a8f3e992337cebc177870ecb4f514c91fc874aaf7b346baec28048c582abff53cabd86a697dac745494f96875d433703599e56fe10c7faaf16e26e5a336c79f9cbd6ff325163c7b8db75fb8d1d5c71662a4fd96bd4f22943492010569bf5f515a57745902f72"}}]}) 47.519516379s ago: executing program 4 (id=11861): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x8, 0x0, [{0x8d9, 0x0, 0x4}, {0xbd4, 0x0, 0x3}, {0x37f, 0x0, 0xe}, {0xb8b, 0x0, 0x100400000}, {0x337, 0x0, 0xc4}, {0x7c6, 0x0, 0xff}, {0x587, 0x0, 0x2}, {0x3fa, 0x0, 0xf3}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0xf5262000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.444393597s ago: executing program 4 (id=11862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) eventfd(0x308) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) accept(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf25030000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x800) (async) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000080)="0086", 0x2}], 0x2}}], 0x1, 0x4400c800) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f00000003c0)={0x40, 0xd, 0x5, {0x5, 0x11, "42a009"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0x16, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1281, 0x2}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000180)=[@release, @increfs={0x40046304, 0x1}, @release], 0x0, 0x0, 0x0}) 45.472599411s ago: executing program 4 (id=11863): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) (async, rerun: 64) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) 45.304549187s ago: executing program 9 (id=11864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8a90c0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) close(0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x02\x00\x00'}]}, 0x1c}], 0x1}, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) poll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8a90c0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) (async) close(0x3) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x02\x00\x00'}]}, 0x1c}], 0x1}, 0x0) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) (async) poll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, 0x9) (async) 44.431350133s ago: executing program 6 (id=11865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1a, &(0x7f0000000440)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) r1 = signalfd(r0, &(0x7f0000000380)={[0x6]}, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) r3 = socket$inet6(0xa, 0x800000000000002, 0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000500)={r5}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) splice(r0, &(0x7f00000003c0)=0x8, 0xffffffffffffffff, &(0x7f0000000400)=0x8, 0x3, 0xe) setsockopt$sock_linger(r3, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, {0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1, {[0x5, 0x2, 0x6, 0x7, 0x4, 0x4, 0x1, 0x2]}}, 0x5c) 44.228420573s ago: executing program 7 (id=11866): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) (async) sendfile(r1, r0, 0x0, 0xffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) 28.671312232s ago: executing program 38 (id=11864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8a90c0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) close(0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x02\x00\x00'}]}, 0x1c}], 0x1}, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) poll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8a90c0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) (async) close(0x3) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x02\x00\x00'}]}, 0x1c}], 0x1}, 0x0) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) (async) poll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, 0x9) (async) 8.950691431s ago: executing program 39 (id=11863): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) (async, rerun: 64) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) 3.092041717s ago: executing program 40 (id=11865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1a, &(0x7f0000000440)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) r1 = signalfd(r0, &(0x7f0000000380)={[0x6]}, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) r3 = socket$inet6(0xa, 0x800000000000002, 0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000500)={r5}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) splice(r0, &(0x7f00000003c0)=0x8, 0xffffffffffffffff, &(0x7f0000000400)=0x8, 0x3, 0xe) setsockopt$sock_linger(r3, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, {0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1, {[0x5, 0x2, 0x6, 0x7, 0x4, 0x4, 0x1, 0x2]}}, 0x5c) 0s ago: executing program 41 (id=11866): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) (async) sendfile(r1, r0, 0x0, 0xffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) kernel console output (not intermixed with test programs): has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.470239][ T398] usb 9-1: string descriptor 0 read error: -22 [ 788.476460][ T398] usb 9-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 788.485546][ T398] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.495258][T32194] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 788.725875][T32194] rust_binder: Error while translating object. [ 788.726012][T32194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 788.732325][T32194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 788.745358][ T398] usbhid 9-1:1.0: can't add hid device: -71 [ 788.760454][ T398] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 788.769281][ T398] usb 9-1: USB disconnect, device number 22 [ 789.158876][ T45] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=e9.cf [ 789.171220][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.186295][ T45] usb 5-1: can't set config #6, error -71 [ 789.194986][ T45] usb 5-1: USB disconnect, device number 97 [ 789.212273][T32215] exfat: Unknown parameter ''[(&)}' [ 789.218102][T32217] overlayfs: failed to clone lowerpath [ 789.233982][T32216] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 789.242099][T32216] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 789.242508][T32221] overlayfs: failed to clone lowerpath [ 789.265100][T32226] veth1: entered allmulticast mode [ 789.270766][T32225] veth1: left allmulticast mode [ 789.310832][T32230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 789.439600][T32245] rust_binder: 344: no such ref 0 [ 789.453831][T32245] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 789.460913][T32245] rust_binder: 344: no such ref 2 [ 789.465966][T32245] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 789.501728][T32243] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 789.528110][T32250] random: crng reseeded on system resumption [ 789.546115][T32250] Restarting kernel threads ... done. [ 790.242873][T32267] overlayfs: failed to clone lowerpath [ 790.270270][T32271] fuse: Unknown parameter '0x0000000000000005' [ 790.277092][ T36] audit: type=1400 audit(1532.958:36265): avc: denied { setattr } for pid=32270 comm="syz.6.10731" path="/407/file0" dev="tmpfs" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 790.319760][T32259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.329568][T32259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.374096][ T398] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 790.400087][T32294] fuse: Unknown parameter 'bd' [ 790.405131][T32294] fuse: Unknown parameter 'bd' [ 790.409899][T32299] /dev/rnullb0: Can't open blockdev [ 790.428047][T32305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32305 comm=syz.6.10742 [ 790.456060][T32305] netlink: 'syz.6.10742': attribute type 29 has an invalid length. [ 790.464502][ T36] audit: type=1326 audit(1533.137:36266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32304 comm="syz.6.10742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x0 [ 790.842877][ T65] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 790.918070][T32318] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10746'. [ 791.003815][ T65] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 791.017547][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.026635][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 791.034723][ T65] usb 5-1: SerialNumber: syz [ 791.282971][T32316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10745'. [ 791.343533][ T398] usb 9-1: device descriptor read/64, error -71 [ 791.357820][ T65] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 791.367736][ T65] usb 5-1: USB disconnect, device number 98 [ 791.388911][T32338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=32338 comm=syz.6.10752 [ 791.403850][T32338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=32338 comm=syz.6.10752 [ 791.446278][T32350] 9pnet: Could not find request transport: ffHrfdno=—dÍ»SF1Ó‡‡h– ~ÑääDQì¿5Šš|˜F0xffffffffffffffff [ 791.495384][ T36] audit: type=1326 audit(1534.113:36267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32362 comm="syz.6.10761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88d558efc9 code=0x0 [ 791.559836][T32374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32374 comm=syz.6.10764 [ 791.612225][T32378] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10765'. [ 791.620509][ T398] usb 9-1: Using ep0 maxpacket: 32 [ 791.627886][ T398] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 791.636114][ T398] usb 9-1: config 0 has no interface number 0 [ 791.644596][ T398] usb 9-1: config 0 interface 184 has no altsetting 0 [ 791.652869][ T398] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 791.661981][ T398] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.671788][ T398] usb 9-1: Product: syz [ 791.676128][ T398] usb 9-1: Manufacturer: syz [ 791.680831][ T398] usb 9-1: SerialNumber: syz [ 791.686719][ T398] usb 9-1: config 0 descriptor?? [ 791.692663][ T398] smsc75xx v1.0.0 [ 791.693210][T32388] overlayfs: failed to clone upperpath [ 791.735984][T32398] rust_binder: Write failure EFAULT in pid:584 [ 791.810305][T32400] rust_binder: Error in use_page_slow: ESRCH [ 791.810322][T32400] rust_binder: use_range failure ESRCH [ 791.816374][T32400] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 791.821901][T32400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 791.830255][T32400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:586 [ 791.902786][T32404] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 791.950925][T32406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10774'. [ 792.069574][T32411] /dev/rnullb0: Can't open blockdev [ 792.296485][T32420] cgroup: subsys name conflicts with all [ 792.389233][ T398] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 792.400776][ T398] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 792.410517][ T398] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 792.420955][ T398] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 792.431991][ T398] usb 9-1: USB disconnect, device number 23 [ 792.446455][T32428] tmpfs: Unknown parameter 'no' [ 792.527667][T32454] rust_binder: Error while translating object. [ 792.527709][T32454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 792.534113][T32454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 792.590539][T32465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 792.610637][T32465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398 [ 792.674862][T32480] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 792.730593][ T36] audit: type=1400 audit(1535.267:36268): avc: denied { sys_nice } for pid=32483 comm="syz.4.10802" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 792.876677][T32494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 792.876830][T32494] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 792.936364][T32499] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 792.951654][T32499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 793.074662][T32506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10810'. [ 793.107318][T32511] rust_binder: inc_ref_done called when no active inc_refs [ 793.484843][ T398] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 793.656452][ T398] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 793.667417][ T398] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 793.676642][ T398] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.685162][ T398] usb 9-1: config 0 descriptor?? [ 793.690401][T32517] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 793.810149][ T36] audit: type=1400 audit(1536.281:36269): avc: denied { setattr } for pid=32528 comm="syz.6.10819" name="XDP" dev="sockfs" ino=125978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 794.125459][ T398] hid-generic 0003:04F3:0755.0027: unknown main item tag 0x0 [ 794.132907][ T398] hid-generic 0003:04F3:0755.0027: unknown main item tag 0x0 [ 794.140373][ T398] hid-generic 0003:04F3:0755.0027: unknown main item tag 0x0 [ 794.147798][ T398] hid-generic 0003:04F3:0755.0027: unknown main item tag 0x0 [ 794.155167][ T398] hid-generic 0003:04F3:0755.0027: unknown main item tag 0x0 [ 794.163346][ T398] hid-generic 0003:04F3:0755.0027: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 794.323600][T32532] rust_binder: Write failure EFAULT in pid:421 [ 794.334464][ T36] audit: type=1400 audit(1536.769:36270): avc: denied { mounton } for pid=32533 comm="syz.4.10821" path="/141/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 794.339903][T32517] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 794.348989][T32534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10821'. [ 794.363742][T18048] usb 9-1: USB disconnect, device number 24 [ 794.422782][T32545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 794.422810][T32545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 794.440227][T32548] tmpfs: Unknown parameter '/dev/uinput' [ 794.999317][T32560] /dev/rnullb0: Can't open blockdev [ 795.038205][T32566] __vm_enough_memory: pid: 32566, comm: syz.8.10834, bytes: 18014402804453376 not enough memory for the allocation [ 795.084245][ T36] audit: type=1400 audit(1537.483:36271): avc: denied { setattr } for pid=32567 comm="syz.4.10835" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 795.125455][ T9001] Trying to write to read-only block-device rnullb0 [ 795.138665][T32571] tipc: Enabling of bearer rejected, failed to enable media [ 795.380599][T32577] random: crng reseeded on system resumption [ 795.871133][T18048] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 795.900618][T32593] rust_binder: Write failure EFAULT in pid:594 [ 796.042761][T18048] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.060007][T18048] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 796.071864][T18048] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 796.081182][T18048] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.089603][T18048] usb 9-1: Product: syz [ 796.093813][T18048] usb 9-1: Manufacturer: syz [ 796.098636][T18048] usb 9-1: SerialNumber: syz [ 796.105780][T18048] cdc_mbim 9-1:1.0: skipping garbage [ 796.219529][T32598] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10846'. [ 796.318399][T32579] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 796.446218][T32608] tmpfs: Unknown parameter 'noap' [ 796.489183][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 796.648816][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 796.655605][ T9] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 796.666835][ T9] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.679727][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 796.687840][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 796.696923][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.704943][ T9] usb 5-1: Product: Ðœ [ 796.709016][ T9] usb 5-1: Manufacturer: 뾌굌쀵î¤ê’‹ì•›ä—¹â‘¸æˆŒçˆ¬î½¶à£‰èˆ¾à¤µí™¹ã¯™ê†›ä¤ºë³«á³‡ì–辩⠼笺ꮃïŠà«§á›¥î±†ïƒŠÕ…ᱴ駮ሱ콿è¼ë­Šî„€êŽ¦â¯©â†˜ê¨ë¡»äƒˆì’â„’í€è¸ê±½á“씯ĉ䰤톎ℸי嶇é³à£¨ä²µè¨„쌲暵é•ã…·ä®… [ 796.730856][ T9] usb 5-1: SerialNumber: 헾嚊㢣┾௉ꎨ있뾹舄竧뽇ꦂ쫌á‡îŒ­â†°à®¨í‘†î¢ê¬¾å¼ªî‹„㗶᳓㻱≤æƒâ§Šá«­î„½åœì©»î¸£îˆšî¦³á“›é‰á¿®ç‡›ê ±è´¼ç˜±è¦¬îŒ˜ï‹¼ïª™áž¬ìŠ­ì†£æ­žë»ì¿¿á㈻å‘ᄂ酣嵆볜â©á¡¤æ™¬ã›ƒãŽ¥ï”抶ꇌì¾ãŸŸï®ºçª°ã“¢ä‚‚벥◹鈞ï¹ç¹ï«ºê™Žè—Œî®©ï—¦ë®²ã²£â—¼ïƒ­Ã¬è•ç‘«ê…“趣ꛫ崹ࣔ∕楳㩊á‰ê™ªâª”ے轆넘㆙è´è‚›ã¤¡î®Šè˜µé ¬æ€™ï¤£î¹“á¾²âƒîŠ¥ë¼°æ£ î‘¶á€£íŸ” [ 796.966338][T32579] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 796.973798][T18048] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 796.980255][T18048] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 796.987562][T18048] wwan wwan0: port wwan0mbim0 attached [ 796.994921][T18048] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 7a:64:b6:37:83:98 [ 797.072176][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 797.085224][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 797.095966][T32627] __vm_enough_memory: pid: 32627, comm: syz.4.10853, bytes: 18014402804453376 not enough memory for the allocation [ 797.103063][ T9] usb 5-1: USB disconnect, device number 99 [ 797.159693][ T150] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 797.212786][T32653] netlink: 'syz.6.10860': attribute type 58 has an invalid length. [ 797.400689][ T332] usb 9-1: USB disconnect, device number 25 [ 797.407077][ T332] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 797.470696][ T9] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 797.476208][ T332] wwan wwan0: port wwan0mbim0 disconnected [ 797.640231][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 797.648715][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 797.658856][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 797.669103][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 797.678196][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.686850][ T9] usb 5-1: Product: syz [ 797.691121][ T9] usb 5-1: Manufacturer: syz [ 797.696126][ T9] usb 5-1: SerialNumber: syz [ 797.918384][T32632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10854'. [ 797.938340][T32632] rust_binder: 457: no such ref 3 [ 797.943436][T32632] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 797.959171][T32632] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 797.966249][T32632] rust_binder: Write failure EFAULT in pid:457 [ 797.975251][T32632] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 797.991122][T32632] rust_binder: Read failure Err(EFAULT) in pid:457 [ 798.014433][ T9] usb 5-1: cannot find UAC_HEADER [ 798.029004][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 798.052156][ T9] usb 5-1: USB disconnect, device number 100 [ 798.057311][T32071] udevd[32071]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 798.144361][T32717] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.151565][T32717] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.158691][T32717] bridge_slave_0: entered allmulticast mode [ 798.165196][T32717] bridge_slave_0: entered promiscuous mode [ 798.171730][T32717] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.178981][T32717] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.186113][T32717] bridge_slave_1: entered allmulticast mode [ 798.192517][T32717] bridge_slave_1: entered promiscuous mode [ 798.262482][T32717] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.269587][T32717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.276865][T32717] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.283930][T32717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.302771][ T9001] bridge_slave_1: left allmulticast mode [ 798.308434][ T9001] bridge_slave_1: left promiscuous mode [ 798.315159][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.323753][ T9001] bridge_slave_0: left allmulticast mode [ 798.329403][ T9001] bridge_slave_0: left promiscuous mode [ 798.335199][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.412686][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.420014][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.429708][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.436758][ T8967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.445700][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.452766][ T8996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.474779][T32717] veth0_vlan: entered promiscuous mode [ 798.485046][T32717] veth1_macvtap: entered promiscuous mode [ 798.495441][ T9001] tipc: Disabling bearer [ 798.500764][ T9001] tipc: Left network mode [ 798.507064][ T9001] veth1_macvtap: left promiscuous mode [ 798.512563][ T9001] veth0_vlan: left promiscuous mode [ 798.566495][T32733] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10877'. [ 798.587664][T32738] __vm_enough_memory: pid: 32738, comm: syz.9.10878, bytes: 18014402804453376 not enough memory for the allocation [ 798.634383][T32744] x_tables: duplicate underflow at hook 1 [ 798.649606][T32749] overlayfs: failed to clone upperpath [ 798.885992][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 799.057674][ T9] usb 10-1: config 127 has an invalid interface number: 238 but max is 0 [ 799.066239][ T9] usb 10-1: config 127 has no interface number 0 [ 799.072899][ T9] usb 10-1: config 127 interface 238 has no altsetting 0 [ 799.081713][ T9] usb 10-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=7a.5a [ 799.091147][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.104767][ T9] usb 10-1: Product: syz [ 799.109046][ T9] usb 10-1: Manufacturer: syz [ 799.114502][ T9] usb 10-1: SerialNumber: syz [ 799.339775][ T9] cdc_subset 10-1:127.238: probe with driver cdc_subset failed with error -22 [ 799.349479][ T9] usb 10-1: USB disconnect, device number 2 [ 799.429291][ T45] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 799.590083][ T45] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 799.602622][ T36] audit: type=1326 audit(1541.707:36272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.625382][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.635782][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 799.648757][ T36] audit: type=1326 audit(1541.707:36273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.671791][ T36] audit: type=1326 audit(1541.707:36274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.694966][ T36] audit: type=1326 audit(1541.707:36275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.718650][ T36] audit: type=1326 audit(1541.707:36276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.743464][ T45] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 799.754922][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.764124][ T45] usb 5-1: Product: syz [ 799.768329][ T45] usb 5-1: Manufacturer: syz [ 799.773204][ T45] usb 5-1: SerialNumber: syz [ 799.778931][ T45] usb 5-1: config 0 descriptor?? [ 799.784365][ T36] audit: type=1326 audit(1541.707:36277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.797717][ T330] rust_binder: Write failure EINVAL in pid:602 [ 799.812056][ T36] audit: type=1326 audit(1541.707:36278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.842272][ T45] usb-storage 5-1:0.0: USB Mass Storage device detected [ 799.849992][ T36] audit: type=1326 audit(1541.707:36279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.873358][ T45] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 799.901023][ T36] audit: type=1326 audit(1541.707:36280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.925854][ T341] rust_binder: 16: no such ref 1 [ 799.928675][ T36] audit: type=1326 audit(1541.707:36281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=308 comm="syz.6.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d558efc9 code=0x50000 [ 799.931136][ T341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 799.967416][ T345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 800.023956][ T357] netlink: 'syz.6.10908': attribute type 1 has an invalid length. [ 800.158858][ T373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=373 comm=syz.6.10914 [ 800.301383][ T401] fuse: Bad value for 'fd' [ 800.342656][ T411] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 800.355320][ T416] 9pnet_fd: Insufficient options for proto=fd [ 800.369786][ T416] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 800.412319][ T423] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 800.570746][ T438] overlayfs: lower data-only dirs require metacopy support. [ 800.603598][ T443] overlayfs: failed to resolve './file0': -2 [ 800.675738][T18048] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 800.846245][T18048] usb 10-1: Using ep0 maxpacket: 32 [ 800.852901][T18048] usb 10-1: unable to get BOS descriptor or descriptor too short [ 800.861460][T18048] usb 10-1: config 14 has an invalid interface number: 120 but max is 0 [ 800.869844][T18048] usb 10-1: config 14 has no interface number 0 [ 800.876109][T18048] usb 10-1: config 14 interface 120 has no altsetting 0 [ 800.885106][T18048] usb 10-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 800.894338][T18048] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.894616][ T461] overlayfs: failed to clone lowerpath [ 800.902466][T18048] usb 10-1: Product: syz [ 800.902484][T18048] usb 10-1: Manufacturer: syz [ 800.917140][T18048] usb 10-1: SerialNumber: syz [ 801.147711][T18048] ftdi_sio 10-1:14.120: FTDI USB Serial Device converter detected [ 801.156504][T18048] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 801.166075][T18048] usb 10-1: USB disconnect, device number 3 [ 801.179879][T18048] ftdi_sio 10-1:14.120: device disconnected [ 801.753001][ T495] 9pnet_fd: p9_fd_create_unix (495): problem connecting socket: ./file0: -30 [ 801.796261][ T497] rust_binder: Write failure EFAULT in pid:39 [ 801.806853][ T499] rust_binder: inc_ref_done called when no active inc_refs [ 802.071276][ T65] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 802.220463][ T65] usb 10-1: device descriptor read/64, error -71 [ 802.372335][ T9] usb 5-1: USB disconnect, device number 101 [ 802.393544][ T517] binder: Unknown parameter 'fscontext?}' [ 802.476120][ T65] usb 10-1: device descriptor read/64, error -71 [ 802.731783][ T65] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 802.774388][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 802.870292][ T65] usb 10-1: device descriptor read/64, error -71 [ 802.935282][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 802.946351][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 84 [ 802.956208][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 802.965258][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.974429][ T521] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 803.065507][ T530] fuse: Bad value for 'user_id' [ 803.070403][ T530] fuse: Bad value for 'user_id' [ 803.125979][ T65] usb 10-1: device descriptor read/64, error -71 [ 803.196967][T18048] usb 5-1: USB disconnect, device number 102 [ 803.243229][ T65] usb usb10-port1: attempt power cycle [ 803.605357][ T65] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 803.627684][ T65] usb 10-1: device descriptor read/8, error -71 [ 803.679653][ T555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10974'. [ 803.688380][ T556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10974'. [ 803.768008][ T65] usb 10-1: device descriptor read/8, error -71 [ 804.031475][ T9] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 804.040649][ T65] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 804.064488][ T65] usb 10-1: device descriptor read/8, error -71 [ 804.180648][ T9] usb 5-1: device descriptor read/64, error -71 [ 804.203014][ T65] usb 10-1: device descriptor read/8, error -71 [ 804.319205][ T65] usb usb10-port1: unable to enumerate USB device [ 804.436317][ T9] usb 5-1: device descriptor read/64, error -71 [ 804.692032][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 804.830455][ T9] usb 5-1: device descriptor read/64, error -71 [ 804.978784][ T587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=587 comm=syz.6.10985 [ 805.034473][ T589] fuse: Bad value for 'group_id' [ 805.039421][ T589] fuse: Bad value for 'group_id' [ 805.087642][ T606] x_tables: duplicate underflow at hook 1 [ 805.093841][ T607] x_tables: duplicate underflow at hook 1 [ 805.107461][ T9] usb 5-1: device descriptor read/64, error -71 [ 805.224701][ T9] usb usb5-port1: attempt power cycle [ 805.239047][ T613] netlink: 680 bytes leftover after parsing attributes in process `syz.7.10995'. [ 805.251760][ T613] netlink: 'syz.7.10995': attribute type 46 has an invalid length. [ 805.532797][ T618] overlayfs: failed to clone upperpath [ 805.538760][ T618] overlayfs: failed to clone upperpath [ 805.544612][ T618] overlayfs: failed to clone upperpath [ 805.550426][ T618] overlayfs: failed to clone upperpath [ 805.556480][ T618] overlayfs: failed to clone upperpath [ 805.562451][ T618] overlayfs: failed to clone upperpath [ 805.569309][ T618] overlayfs: failed to clone upperpath [ 805.575399][ T618] overlayfs: failed to clone upperpath [ 805.581855][ T618] overlayfs: failed to clone upperpath [ 805.586929][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 805.595213][ T618] overlayfs: failed to resolve './bus': -2 [ 805.609251][ T9] usb 5-1: device descriptor read/8, error -71 [ 805.707155][ T682] overlayfs: failed to clone lowerpath [ 805.713069][ T682] overlayfs: failed to clone lowerpath [ 805.726953][ T684] __vm_enough_memory: pid: 684, comm: syz.6.11006, bytes: 21200461938688 not enough memory for the allocation [ 805.739438][ T684] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11006'. [ 805.749595][ T9] usb 5-1: device descriptor read/8, error -71 [ 805.870810][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 805.870826][ T36] audit: type=1326 audit(1547.602:36305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.7.11012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x0 [ 806.002294][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 806.024740][ T9] usb 5-1: device descriptor read/8, error -71 [ 806.134225][ T709] fuse: Unknown parameter '' [ 806.146564][ T714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11017'. [ 806.173866][ T9] usb 5-1: device descriptor read/8, error -71 [ 806.179410][ T720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11019'. [ 806.189105][ T720] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11019'. [ 806.300703][ T9] usb usb5-port1: unable to enumerate USB device [ 806.721329][ T36] audit: type=1326 audit(1548.400:36306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.7.11023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f1cf358efc9 code=0x0 [ 807.084194][ T36] audit: type=1400 audit(1548.738:36307): avc: denied { relabelfrom } for pid=778 comm="syz.4.11037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 807.104954][ T36] audit: type=1400 audit(1548.738:36308): avc: denied { relabelto } for pid=778 comm="syz.4.11037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 807.180112][ T792] binder: Bad value for 'max' [ 807.265651][ T806] binder: Binderfs stats mode cannot be changed during a remount [ 807.317207][ T813] fuse: Invalid gid '00000000000037777777777' [ 807.323683][ T813] rust_binder: inc_ref_done called when no active inc_refs [ 807.323705][ T813] rust_binder: Write failure EINVAL in pid:525 [ 807.335720][ T813] rust_binder: Write failure EINVAL in pid:525 [ 807.356682][ T815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11050'. [ 807.382789][ T815] /dev/rnullb0: Can't open blockdev [ 807.392085][ T818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11051'. [ 807.414929][ T822] overlayfs: failed to resolve './file1': -2 [ 808.360686][ T852] can: request_module (can-proto-0) failed. [ 808.487383][ T650] Bluetooth: hci0: Frame reassembly failed (-84) [ 808.654775][ T868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11070'. [ 809.385504][ T883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11076'. [ 809.408403][ T883] tmpfs: Unknown parameter '' [ 809.494074][ T889] overlayfs: failed to clone lowerpath [ 809.955810][ T902] netlink: 'syz.6.11083': attribute type 4 has an invalid length. [ 810.272704][ T930] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11092'. [ 810.295538][ T927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=927 comm=syz.6.11091 [ 810.636428][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 810.636828][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 811.309445][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11101'. [ 811.401011][ T975] fuse: Bad value for 'fd' [ 811.583449][ T988] futex_wake_op: syz.6.11110 tries to shift op by 144; fix this program [ 811.600207][ T988] netlink: 89 bytes leftover after parsing attributes in process `syz.6.11110'. [ 811.645823][ T994] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 811.653711][ T994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=994 comm=syz.6.11112 [ 811.724655][ T998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11114'. [ 811.733946][ T998] rust_binder: 545: no such ref 1 [ 811.738995][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:545 [ 811.741001][ T998] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2147483648 [ 811.923800][ T1008] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11117'. [ 812.063944][ T45] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 812.223743][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 812.230097][ T45] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 812.238463][ T45] usb 5-1: config 0 has no interface number 0 [ 812.244568][ T45] usb 5-1: config 0 interface 230 has no altsetting 0 [ 812.252797][ T45] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 812.262050][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.270117][ T45] usb 5-1: Product: syz [ 812.274275][ T45] usb 5-1: Manufacturer: syz [ 812.278881][ T45] usb 5-1: SerialNumber: syz [ 812.283959][ T45] usb 5-1: config 0 descriptor?? [ 812.289728][ T45] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 812.297374][ T45] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 813.132233][ T36] audit: type=1400 audit(1554.417:36309): avc: denied { shutdown } for pid=1050 comm="syz.7.11133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 813.265757][ T36] audit: type=1326 audit(1554.539:36310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.279598][ T1062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11138'. [ 813.313943][ T36] audit: type=1326 audit(1554.558:36311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.335682][ T1070] overlayfs: failed to resolve './file2': -2 [ 813.360345][ T36] audit: type=1326 audit(1554.558:36312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.391603][ T36] audit: type=1326 audit(1554.558:36313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.420002][ T36] audit: type=1326 audit(1554.558:36314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.444287][ T36] audit: type=1326 audit(1554.558:36315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.467627][ T36] audit: type=1326 audit(1554.558:36316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.490938][ T36] audit: type=1326 audit(1554.558:36317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 813.514199][ T36] audit: type=1326 audit(1554.558:36318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.9.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 814.082520][ T1098] tc_dump_action: action bad kind [ 814.693659][ T45] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 814.703235][ T45] usb 5-1: USB disconnect, device number 107 [ 815.014868][ T45] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 815.164011][ T45] usb 5-1: device descriptor read/64, error -71 [ 815.238294][ T1216] overlayfs: failed to clone lowerpath [ 815.419694][ T45] usb 5-1: device descriptor read/64, error -71 [ 815.599373][ T1228] overlayfs: failed to clone lowerpath [ 815.605324][ T1228] overlay: Unknown parameter '/' [ 815.675387][ T45] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 815.784507][ T1251] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11181'. [ 815.813875][ T45] usb 5-1: device descriptor read/64, error -71 [ 816.069553][ T45] usb 5-1: device descriptor read/64, error -71 [ 816.169697][ T1257] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1257 comm=syz.9.11184 [ 816.186788][ T45] usb usb5-port1: attempt power cycle [ 816.220051][ T1259] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11185'. [ 816.404603][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.411718][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.418818][ T1269] bridge_slave_0: entered allmulticast mode [ 816.425312][ T1269] bridge_slave_0: entered promiscuous mode [ 816.437446][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.444532][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.451816][ T1269] bridge_slave_1: entered allmulticast mode [ 816.458427][ T1269] bridge_slave_1: entered promiscuous mode [ 816.533449][ T1284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 816.533483][ T1284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:554 [ 816.533992][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.548921][ T45] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 816.552030][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.573975][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.581035][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.603983][ T650] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.611288][ T650] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.620812][ T643] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.627893][ T643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.644006][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.651076][ T650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.674345][ T1269] veth0_vlan: entered promiscuous mode [ 816.684434][ T1269] veth1_macvtap: entered promiscuous mode [ 816.842715][ T1311] netlink: 'syz.7.11200': attribute type 1 has an invalid length. [ 816.858080][ T1313] rust_binder: 11: no such ref 3 [ 816.863333][ T1313] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 816.871034][ T1313] rust_binder: 11: no such ref 2 [ 816.876171][ T1313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 816.876716][ T1314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 816.941355][ T1319] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 816.956817][ T1320] 9pnet_fd: Insufficient options for proto=fd [ 817.007135][ T45] usb 5-1: device not accepting address 110, error -71 [ 817.020600][ T1326] overlayfs: workdir and upperdir must reside under the same mount [ 817.032187][ T1326] rust_binder: Error while translating object. [ 817.032226][ T1326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 817.038417][ T1326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:21 [ 817.120657][ T1329] netlink: 4108 bytes leftover after parsing attributes in process `syz.6.11205'. [ 817.139891][ T1329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 817.152040][ T1332] rust_binder: Write failure EINVAL in pid:26 [ 817.879016][ T1346] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11212'. [ 817.891226][ T45] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 817.924667][ T45] usb 5-1: device descriptor read/8, error -71 [ 818.062704][ T45] usb 5-1: device descriptor read/8, error -71 [ 818.178975][ T45] usb usb5-port1: unable to enumerate USB device [ 818.504650][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 818.504666][ T36] audit: type=1326 audit(1559.457:36388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1379 comm="syz.7.11224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x0 [ 819.883121][ T1405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1405 comm=syz.9.11236 [ 819.895694][ T1405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=1405 comm=syz.9.11236 [ 820.374537][ T1416] rust_binder: Write failure EFAULT in pid:30 [ 820.722635][ T1430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.744323][ T1430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.111956][ T1463] overlayfs: failed to clone lowerpath [ 821.129792][ T45] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 821.301344][ T45] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 821.309378][ T45] usb 5-1: config 0 has no interface number 0 [ 821.315508][ T45] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 821.326481][ T45] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 821.335521][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.343952][ T45] usb 5-1: config 0 descriptor?? [ 821.990148][ T45] usbhid 5-1:0.1: can't add hid device: -71 [ 821.996836][ T45] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 822.009604][ T45] usb 5-1: USB disconnect, device number 112 [ 822.643750][ T1504] fuse: Unknown parameter 'rootmod›!ÿWµÌÀ80000000000040000' [ 822.793805][ T398] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 822.977530][ T1502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.986121][ T1502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.998477][ T398] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 823.006135][ T398] usb 5-1: can't read configurations, error -71 [ 823.015651][ T1546] netlink: 300 bytes leftover after parsing attributes in process `syz.4.11282'. [ 823.153163][ T1555] rust_binder: Error while translating object. [ 823.153186][ T1555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 823.159485][ T1555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:583 [ 823.276597][ T1561] fuse: Unknown parameter 'gro' [ 823.303821][ T1563] SELinux: unknown common r [ 823.308593][ T1563] SELinux: failed to load policy [ 823.321793][ T1565] rust_binder: Write failure EFAULT in pid:593 [ 823.321985][ T1566] rust_binder: Write failure EFAULT in pid:593 [ 823.410727][ T1574] binder: Binderfs stats mode cannot be changed during a remount [ 823.425122][ T1574] rust_binder: 602: no such ref 1 [ 823.432875][ T1574] binder: Binderfs stats mode cannot be changed during a remount [ 823.433201][ T1577] rust_binder: 602: no such ref 1 [ 823.906362][ T398] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 824.066806][ T398] usb 5-1: Using ep0 maxpacket: 16 [ 824.074513][ T398] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 824.083612][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.091625][ T398] usb 5-1: Product: syz [ 824.095783][ T398] usb 5-1: Manufacturer: syz [ 824.100415][ T398] usb 5-1: SerialNumber: syz [ 824.105816][ T398] usb 5-1: config 0 descriptor?? [ 824.113860][ T398] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 824.122045][ T398] usb 5-1: Detected FT-X [ 824.328875][ T398] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 824.425050][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.433341][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.433394][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.447685][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.447727][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.461968][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.462005][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.476314][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.476361][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.490671][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.490713][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.504968][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.505012][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.519275][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.519310][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.533545][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.533584][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.547841][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.547875][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.562158][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.562219][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.562334][ T1589] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 824.568415][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.578812][ T398] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 824.586064][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.594344][ T398] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 824.598700][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.607644][ T398] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 824.613445][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.624108][ T398] usb 5-1: USB disconnect, device number 114 [ 824.627483][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.641621][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.650243][ T398] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 824.656030][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.665257][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.667295][ T398] ftdi_sio 5-1:0.0: device disconnected [ 824.671513][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.685169][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.705221][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.705267][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.720091][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.720145][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.734700][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.734820][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.746842][ T1616] 9pnet_fd: Insufficient options for proto=fd [ 824.749088][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.755178][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.755605][ T1616] 9pnet_fd: Insufficient options for proto=fd [ 824.761295][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.775673][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.790045][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.790088][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.804567][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.804607][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.818858][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.818898][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.833101][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.833142][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.847355][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.847389][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.861638][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.861683][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.875894][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.875936][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.890514][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.890559][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.904872][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.904917][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.919260][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.919310][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.933623][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.933673][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.947911][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.947956][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.962599][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.962644][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.978528][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.978572][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 824.993115][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 824.993165][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.007712][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.007758][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.022806][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.022852][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.037268][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.037320][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.051800][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.051845][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.066089][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.066131][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.080382][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.080427][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.094762][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.094837][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.109094][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.109134][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.123412][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.123458][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.137731][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.137776][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.152242][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.152285][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.168211][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.168255][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.182682][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.182722][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.197048][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.197090][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.211392][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.211757][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.226183][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.226234][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.240735][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.240787][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.255090][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.255142][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.269649][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.269694][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.283938][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.283971][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.298240][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.298294][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.312548][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.312588][ T1609] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 825.326938][ T1609] rust_binder: Write failure EINVAL in pid:53 [ 825.542829][ T1657] rust_binder: Error while translating object. [ 825.549032][ T1657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 825.555243][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 826.017736][ T36] audit: type=1400 audit(1566.502:36389): avc: denied { rename } for pid=1668 comm="syz.4.11325" name="#61" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 826.055788][ T1672] rust_binder: Write failure EFAULT in pid:633 [ 826.097982][ T1675] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 826.104316][ T1675] rust_binder: Error while translating object. [ 826.114918][ T1675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 826.121186][ T1675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:636 [ 826.148278][ T1679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:638 [ 826.298212][ T1693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 826.379460][ T1695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 826.388652][ T1695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:643 [ 826.593552][ T1718] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 826.613737][ T1718] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 826.706344][ T1722] netlink: 'syz.4.11345': attribute type 4 has an invalid length. [ 826.714240][ T1722] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11345'. [ 826.816106][ T643] Bluetooth: hci0: Frame reassembly failed (-84) [ 827.027135][ T1737] overlayfs: missing 'workdir' [ 827.040306][ T1739] 9pnet_fd: Insufficient options for proto=fd [ 827.040599][ T1740] 9pnet_fd: Insufficient options for proto=fd [ 827.651978][ T1785] overlayfs: failed to clone lowerpath [ 827.657925][ T1785] overlayfs: failed to clone lowerpath [ 827.682410][ T36] audit: type=1326 audit(1568.054:36390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.706316][ T36] audit: type=1326 audit(1568.054:36391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.729433][ T36] audit: type=1326 audit(1568.073:36392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.752469][ T36] audit: type=1326 audit(1568.073:36393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.775535][ T36] audit: type=1326 audit(1568.073:36394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.798634][ T36] audit: type=1326 audit(1568.073:36395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.821694][ T36] audit: type=1326 audit(1568.073:36396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.844760][ T36] audit: type=1326 audit(1568.073:36397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 827.863604][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11375'. [ 827.867763][ T36] audit: type=1326 audit(1568.073:36398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.7.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 828.530791][ T1819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1819 comm=syz.7.11379 [ 828.787995][ T1835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11384'. [ 828.981604][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 828.981603][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 829.134469][ T1848] Invalid ELF header magic: != ELF [ 829.536965][ T1866] rust_binder: Error while translating object. [ 829.536992][ T1866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 829.543248][ T1866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:673 [ 829.823146][T18048] usb 5-1: new low-speed USB device number 115 using dummy_hcd [ 830.028787][ T1889] overlayfs: failed to clone lowerpath [ 830.035181][ T1889] overlayfs: failed to clone lowerpath [ 830.186700][ T1912] overlayfs: failed to clone lowerpath [ 832.476838][ T2008] netlink: 116 bytes leftover after parsing attributes in process `syz.6.11441'. [ 832.518028][ T2012] rust_binder: 100: no such ref 6 [ 832.523189][ T2012] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 832.799564][ T2018] rust_binder: Write failure EINVAL in pid:683 [ 832.819371][ T2023] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 832.908813][ T643] Bluetooth: hci0: Frame reassembly failed (-84) [ 833.026415][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 833.026432][ T36] audit: type=1326 audit(1573.067:36420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.7.11455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 833.055846][ T36] audit: type=1326 audit(1573.067:36421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.7.11455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 833.079213][ T36] audit: type=1326 audit(1573.077:36422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.7.11455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 833.102465][ T36] audit: type=1326 audit(1573.077:36423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.7.11455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 833.125787][ T36] audit: type=1326 audit(1573.077:36424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.7.11455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 833.148810][ T36] audit: type=1326 audit(1573.086:36425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.7.11455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 833.172325][ T36] audit: type=1326 audit(1573.086:36426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.7.11455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf358efc9 code=0x7ffc0000 [ 833.231635][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11464'. [ 835.117047][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 835.117538][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 835.673040][ T2127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:699 [ 835.673168][ T2127] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 835.682327][ T2127] rust_binder: Read failure Err(EFAULT) in pid:699 [ 835.698747][ T2130] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.712343][ T2130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.785591][ T2133] /dev/rnullb0: Can't open blockdev [ 836.031844][ T2135] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 836.040212][ T2138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 836.048819][ T2138] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 836.097522][ T2140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 836.106171][ T2140] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 836.128917][ T2151] 9pnet_fd: Insufficient options for proto=fd [ 836.167325][ T2163] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11496'. [ 836.238705][ T2169] tmpfs: Unknown parameter 'hqge' [ 836.249434][ T36] audit: type=1326 audit(1576.100:36427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.9.11499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x80000000 [ 836.695192][ T2193] tipc: Started in network mode [ 836.700130][ T2193] tipc: Node identity 4, cluster identity 4711 [ 836.706336][ T2193] tipc: Node number set to 4 [ 836.711306][ T643] tipc: Subscription rejected, illegal request [ 836.719092][ T643] Bluetooth: hci0: Frame reassembly failed (-84) [ 837.180500][ T36] audit: type=1326 audit(1576.973:36428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.9.11508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x0 [ 837.233782][ T2197] veth1: entered allmulticast mode [ 837.239504][ T2198] veth1: left allmulticast mode [ 838.096894][ T2206] netlink: 'syz.9.11511': attribute type 1 has an invalid length. [ 838.427185][ T2217] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11515'. [ 838.866491][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 838.872687][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 839.363652][ T2287] /dev/rnullb0: Can't open blockdev [ 839.420655][ T654] Bluetooth: hci0: Frame reassembly failed (-84) [ 839.437990][ T2295] rust_binder: 715: no such ref 0 [ 839.443153][ T2295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715 [ 839.488533][ T2307] rust_binder: Write failure EINVAL in pid:727 [ 839.532377][ T2309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=2309 comm=syz.4.11552 [ 839.551823][ T2309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 839.551854][ T2309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:729 [ 839.706276][ T2313] overlayfs: failed to clone lowerpath [ 839.723637][ T2313] overlayfs: failed to clone lowerpath [ 839.920987][ T398] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 840.081704][ T398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.091897][ T398] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.102250][ T398] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.111308][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.119350][ T398] usb 5-1: Product: syz [ 840.123532][ T398] usb 5-1: Manufacturer: syz [ 840.128110][ T398] usb 5-1: SerialNumber: syz [ 840.352218][ T2356] netlink: 'syz.7.11572': attribute type 27 has an invalid length. [ 840.361973][ T2356] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44702 sclass=netlink_xfrm_socket pid=2356 comm=syz.7.11572 [ 840.560670][ T398] usb 5-1: 0:2 : does not exist [ 840.605228][ T36] audit: type=1326 audit(1580.193:36429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.628338][ T36] audit: type=1326 audit(1580.193:36430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.651618][ T36] audit: type=1326 audit(1580.193:36431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.674722][ T36] audit: type=1326 audit(1580.193:36432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.697842][ T36] audit: type=1326 audit(1580.193:36433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.721093][ T36] audit: type=1326 audit(1580.193:36434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.744144][ T36] audit: type=1326 audit(1580.193:36435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.767136][ T36] audit: type=1326 audit(1580.193:36436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.790231][ T36] audit: type=1326 audit(1580.193:36437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.813273][ T36] audit: type=1326 audit(1580.193:36438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.11574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97018efc9 code=0x7ffc0000 [ 840.927415][ T2367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2367 comm=syz.7.11577 [ 841.006678][ T45] hid (null): bogus close delimiter [ 841.011965][ T45] hid (null): unknown global tag 0xd [ 841.017334][ T45] hid (null): unknown global tag 0xe [ 841.022632][ T45] hid (null): unknown global tag 0xd [ 841.028612][ T45] hid-generic 0007:0005:0009.0028: bogus close delimiter [ 841.035671][ T45] hid-generic 0007:0005:0009.0028: item 0 0 2 10 parsing failed [ 841.043458][ T45] hid-generic 0007:0005:0009.0028: probe with driver hid-generic failed with error -22 [ 841.054217][ T65] usb 5-1: USB disconnect, device number 116 [ 841.343311][ T634] 0ªî{X¹¦: left promiscuous mode [ 841.348547][ T634] bridge0: port 2(30ªî{X¹¦) entered disabled state [ 841.356095][ T634] bridge_slave_0: left allmulticast mode [ 841.362398][ T634] bridge_slave_0: left promiscuous mode [ 841.368141][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.470720][ T634] veth1_macvtap: left promiscuous mode [ 841.476386][ T634] veth0_vlan: left promiscuous mode [ 841.604010][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 841.627647][ T2404] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11589'. [ 841.644006][ T2408] input: syz1 as /devices/virtual/input/input72 [ 841.718754][ T2425] >: renamed from veth0_vlan (while UP) [ 841.725289][ T2425] /dev/rnullb0: Can't open blockdev [ 841.892692][ T2447] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11605'. [ 841.904049][ T2447] overlayfs: failed to clone upperpath [ 841.995205][ T2456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 841.995372][ T2457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 842.199045][ T2482] netlink: 'syz.9.11617': attribute type 4 has an invalid length. [ 842.213350][ T2482] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11617'. [ 842.222579][ T2483] netlink: 'syz.9.11617': attribute type 4 has an invalid length. [ 842.230485][ T2483] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11617'. [ 842.239723][ T2482] netlink: 'syz.9.11617': attribute type 1 has an invalid length. [ 842.247563][ T2482] netlink: 'syz.9.11617': attribute type 2 has an invalid length. [ 842.568129][ T2411] incfs: Can't find or create .index dir in ./file0 [ 842.574916][ T2411] incfs: mount failed -103 [ 846.794982][ T643] bridge_slave_0: left allmulticast mode [ 846.800626][ T643] bridge_slave_0: left promiscuous mode [ 846.806267][ T643] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.943121][ T643] veth1_macvtap: left promiscuous mode [ 846.948623][ T643] veth0_vlan: left promiscuous mode [ 846.972634][ T643] veth0_to_batadv (unregistering): left allmulticast mode [ 861.656200][ T2532] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 861.656246][ T2532] rust_binder: Error while translating object. [ 861.670026][ T2532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 861.676430][ T2532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:744 [ 861.770770][ T2563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 861.780255][ T2563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:747 [ 861.798862][ T2570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:752 [ 861.886859][ T2578] netlink: 'syz.6.11650': attribute type 27 has an invalid length. [ 861.953093][ T2590] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11655'. [ 862.896765][ T2614] bridge0: port 3(veth0_to_bridge) entered blocking state [ 862.904710][ T2614] bridge0: port 3(veth0_to_bridge) entered disabled state [ 862.911959][ T2614] veth0_to_bridge: entered allmulticast mode [ 862.918515][ T2614] veth0_to_bridge: entered promiscuous mode [ 862.924547][ T2614] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 862.936888][ T2614] bridge0: port 3(veth0_to_bridge) entered blocking state [ 862.944027][ T2614] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 862.953142][ T2614] rust_binder: Error while translating object. [ 862.953182][ T2614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 862.959359][ T2614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:763 [ 863.248398][ T45] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 863.418801][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 863.424930][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.435038][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.445298][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.454379][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.462381][ T45] usb 5-1: Product: syz [ 863.466522][ T45] usb 5-1: Manufacturer: syz [ 863.471091][ T45] usb 5-1: SerialNumber: syz [ 863.690143][ T2621] rust_binder: Error while translating object. [ 863.690171][ T2621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 863.696426][ T2621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:770 [ 863.706621][ T2635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 863.721479][ T45] usb 5-1: 0:2 : does not exist [ 863.727185][ T2640] rust_binder: Fixups oob 178 180 369 186 [ 863.732019][ T45] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 863.732816][ T2640] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 863.743372][ T45] usb 5-1: USB disconnect, device number 117 [ 863.751089][ T2640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 863.761320][ T2640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:775 [ 863.764507][ T2553] udevd[2553]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 863.772683][ T2641] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 863.812020][ T2643] rust_binder: Error while translating object. [ 863.812068][ T2643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 863.818468][ T2643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:779 [ 864.185766][ T45] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 864.356170][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 864.362311][ T45] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 864.370600][ T45] usb 5-1: config 179 has no interface number 0 [ 864.376889][ T45] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 864.387983][ T45] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 864.399246][ T45] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 864.410379][ T45] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 864.421804][ T45] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 864.435028][ T45] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 864.444083][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.453111][ T2645] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 864.679665][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input73 [ 864.890843][ T2680] overlayfs: failed to clone lowerpath [ 864.897283][ T2680] overlay: Bad value for 'metacopy' [ 864.902104][ T2645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.911403][ T2645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.921571][ T45] usb 5-1: USB disconnect, device number 118 [ 864.927593][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 864.927627][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 864.948993][ T45] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 865.532469][ T2715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 865.532807][ T2714] rust_binder: Error while translating object. [ 865.536055][ T2715] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 865.539339][ T2714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 865.545681][ T2715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 865.553466][ T2714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783 [ 865.563381][ T2715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:783 [ 865.900677][ T45] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 866.071169][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 866.077505][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.088551][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.098354][ T45] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 866.107413][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.116193][ T45] usb 5-1: config 0 descriptor?? [ 866.196144][ T2728] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 67 [ 866.203628][ T2728] rust_binder: Write failure EINVAL in pid:184 [ 866.242474][ T2731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 866.249411][ T2731] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 866.510314][ T2787] tipc: Trying to set illegal importance in message [ 866.547744][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 866.547760][ T36] audit: type=1400 audit(1604.536:36462): avc: denied { lock } for pid=2792 comm="syz.7.11730" path="socket:[134981]" dev="sockfs" ino=134981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 866.580473][ T45] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x0 [ 866.597151][ T45] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x0 [ 866.614416][ T45] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x7 [ 866.625000][ T45] koneplus 0003:1E7D:2D51.0029: item fetching failed at offset 4/5 [ 866.633154][ T45] koneplus 0003:1E7D:2D51.0029: parse failed [ 866.643753][ T45] koneplus 0003:1E7D:2D51.0029: probe with driver koneplus failed with error -22 [ 866.792756][ T2718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:786 [ 866.800589][ T45] usb 5-1: USB disconnect, device number 119 [ 866.834947][ T36] audit: type=1400 audit(2117.804:36463): avc: denied { map } for pid=2810 comm="syz.4.11736" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 866.890060][ T36] audit: type=1400 audit(2117.804:36464): avc: denied { execute } for pid=2810 comm="syz.4.11736" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 867.122475][ T2827] rust_binder: Error while translating object. [ 867.122504][ T2827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 867.128907][ T2827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 867.663293][ T2866] fuse: Bad value for 'fd' [ 867.734180][ T2868] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11759'. [ 867.744316][ T2868] 9pnet_fd: Insufficient options for proto=fd [ 867.759684][ T2870] 9pnet_fd: Insufficient options for proto=fd [ 867.784454][ T36] audit: type=1400 audit(2118.696:36465): avc: denied { ioctl } for pid=2876 comm="syz.7.11762" path="socket:[135074]" dev="sockfs" ino=135074 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 867.983030][ T2891] netlink: 'syz.9.11769': attribute type 32 has an invalid length. [ 867.991072][ T2891] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11769'. [ 868.258571][ T2901] fuse: Bad value for 'user_id' [ 868.263441][ T2901] fuse: Bad value for 'user_id' [ 868.282137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.294216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.306339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.318395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.326225][ T2913] netlink: 'syz.4.11776': attribute type 16 has an invalid length. [ 868.330486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.338423][ T2913] netlink: 'syz.4.11776': attribute type 3 has an invalid length. [ 868.350293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.358522][ T2913] netlink: 64054 bytes leftover after parsing attributes in process `syz.4.11776'. [ 868.370158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.391498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.403605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.415648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.522599][ T2924] netlink: 'syz.4.11781': attribute type 1 has an invalid length. [ 868.530573][ T2924] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11781'. [ 868.564621][ T2931] /dev/rnullb0: Can't open blockdev [ 868.682786][ T2948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11789'. [ 868.692541][ T2947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11789'. [ 868.766860][ T2953] netlink: 'syz.4.11791': attribute type 12 has an invalid length. [ 873.613445][ C1] net_ratelimit: 144200 callbacks suppressed [ 873.613465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.631484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.643473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.655563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.667614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.679608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.691682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.703695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.715681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.727756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.950702][ C1] net_ratelimit: 151260 callbacks suppressed [ 878.950724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.968732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.980805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.992785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.004807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.016861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.028905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.040914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.052961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.064947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.287938][ C1] net_ratelimit: 150093 callbacks suppressed [ 884.287960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.306015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.318019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.330042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.342144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.354181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.366200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.378253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.390226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.402259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.489534][ T2972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11797'. [ 887.797311][ T2999] rust_binder: 241: no such ref 2 [ 887.802468][ T2999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 888.017717][ T3020] rust_binder: Error while translating object. [ 888.028832][ T3022] overlayfs: failed to clone lowerpath [ 888.046847][ T3020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 888.046881][ T3020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 888.524867][ T3037] rust_binder: 253: no such ref 3 [ 888.551309][ T3037] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 888.558404][ T3037] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 888.568323][ T3037] rust_binder: Write failure EFAULT in pid:253 [ 888.577593][ T3040] can: request_module (can-proto-0) failed. [ 889.625189][ C1] net_ratelimit: 125456 callbacks suppressed [ 889.625209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.643323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.643807][ T3083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11835'. [ 889.655373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.677075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.689225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.701337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.713381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.725557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.737579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.749622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.836593][ T3116] netlink: 'syz.4.11844': attribute type 27 has an invalid length. [ 890.112616][ T3147] 9pnet_fd: Insufficient options for proto=fd [ 890.562819][ T3159] netlink: 'syz.9.11858': attribute type 27 has an invalid length. [ 890.641764][ T3159] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.649040][ T3159] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.544983][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 891.551031][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 894.962393][ C1] net_ratelimit: 125329 callbacks suppressed [ 894.962415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.962437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.968491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.980456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.992301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.004177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.016101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.028134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.039925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.051917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.473738][ C0] sched: DL replenish lagged too much [ 900.299614][ C0] net_ratelimit: 144926 callbacks suppressed [ 900.299634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.299652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.305732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.317714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.329640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.341430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.353398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.365339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.377386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.389197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.636921][ C1] net_ratelimit: 143771 callbacks suppressed [ 905.636942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.636983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.643003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.655102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.666894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.678796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.690796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.702751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.714562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.726555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.974102][ C0] net_ratelimit: 141795 callbacks suppressed [ 910.974123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.974158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.980287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.992098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.004104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.016056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.028026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.039845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.051734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.063669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.311365][ C1] net_ratelimit: 142393 callbacks suppressed [ 916.311387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.311409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.317445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.329513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.341335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.353290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.365331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.377335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.389148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.401138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.648561][ C1] net_ratelimit: 139720 callbacks suppressed [ 921.648584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.648671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.654672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.666661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.678653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.690615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.702384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.714455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.726379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.738434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.985849][ C1] net_ratelimit: 140475 callbacks suppressed [ 926.985871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.985896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.991997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.003933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.015736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.027704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.039629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.051694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.063534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.075412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.323065][ C1] net_ratelimit: 142533 callbacks suppressed [ 932.323087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.323123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.329200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.341304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.353065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.364937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.376895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.388822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.400617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.412593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.660267][ C0] net_ratelimit: 138338 callbacks suppressed [ 937.660289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.660306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.666497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.678308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.690349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.702309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.714255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.726056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.737974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.749909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.997504][ C0] net_ratelimit: 135768 callbacks suppressed [ 942.997527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.997548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.003665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.015545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.027468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.039417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.051354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.063138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.075091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.087034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.334732][ C1] net_ratelimit: 145247 callbacks suppressed [ 948.334753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.334798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.340860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.352746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.364690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.376823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.388617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.400515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.412469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.424403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.671976][ C1] net_ratelimit: 145092 callbacks suppressed [ 953.671996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.672027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.678116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.690151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.702087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.714161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.725968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.737835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.749751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.761842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.009215][ C1] net_ratelimit: 145311 callbacks suppressed [ 959.009236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.009282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.015321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.027404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.039233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.051204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.063191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.075180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.086996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.099003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.346448][ C1] net_ratelimit: 146997 callbacks suppressed [ 964.346470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.346493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.352565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.364642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.376613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.388538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.400328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.412304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.424256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.436204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.683702][ C0] net_ratelimit: 146119 callbacks suppressed [ 969.683724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.683727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.683848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.689844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.701799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.713767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.725794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.737785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.749760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.761952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.020940][ C1] net_ratelimit: 147474 callbacks suppressed [ 975.020962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.020998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.027018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.039051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.051020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.062969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.074736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.086723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.098712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 975.110635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.358182][ C1] net_ratelimit: 154110 callbacks suppressed [ 980.358203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.358212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.358284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.364279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.376393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.388236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.400147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.412137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 980.424224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.435987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.695392][ C1] net_ratelimit: 146246 callbacks suppressed [ 985.695413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.695445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.701602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.713625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.725475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.737438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.749368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.761443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.773229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 985.785090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.032643][ C0] net_ratelimit: 152146 callbacks suppressed [ 991.032666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.032678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.032759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 991.038803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.050629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.062543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.074509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.086561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.098569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.110416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.369846][ C1] net_ratelimit: 144613 callbacks suppressed [ 996.369867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.370045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.375929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.387982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.399984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 996.411985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.423658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.435761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.447666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.459729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.707090][ C1] net_ratelimit: 130348 callbacks suppressed [ 1001.707110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 1001.707169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.713170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.725205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.737188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.749240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.760941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.772987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.784983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.797156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.044329][ C1] net_ratelimit: 111323 callbacks suppressed [ 1007.044351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.044433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.050439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.062467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.074424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.086498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.098164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.110047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.122026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.134071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.381577][ C1] net_ratelimit: 120412 callbacks suppressed [ 1012.381599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.381737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.387701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.399593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.411562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.423754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.435364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.447375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.459335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 1012.471377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.718780][ C1] net_ratelimit: 124457 callbacks suppressed [ 1017.718800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.718834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.724889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.736920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.748827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.761059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.772731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 1017.784652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.796753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.808922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.056035][ C1] net_ratelimit: 126135 callbacks suppressed [ 1023.056055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 1023.056209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.062210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.074214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.086193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.098395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.110158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.122075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.134049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.146363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.393314][ C1] net_ratelimit: 129984 callbacks suppressed [ 1028.393336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a4:b9:1e:db:f1, vlan:0) [ 1028.393425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.399385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.411402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.423371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.435457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.452534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.459126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.471050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.483220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.832571][ T37] INFO: task kworker/0:3:398 blocked for more than 122 seconds. [ 1029.071999][ T37] Not tainted syzkaller #0 [ 1029.076990][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1029.085667][ T37] task:kworker/0:3 state:D stack:0 pid:398 tgid:398 ppid:2 flags:0x00004000 [ 1029.095892][ T37] Workqueue: events fqdir_free_fn [ 1029.100998][ T37] Call Trace: [ 1029.104275][ T37] [ 1029.107226][ T37] __schedule+0x1322/0x1df0 [ 1029.111744][ T37] ? __sched_text_start+0x10/0x10 [ 1029.116782][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1029.121915][ T37] ? wake_up_process+0x14/0x20 [ 1029.126691][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 1029.131916][ T37] schedule+0xc6/0x240 [ 1029.135996][ T37] schedule_timeout+0xb2/0x3a0 [ 1029.140779][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 1029.146159][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1029.151725][ T37] ? generic_exec_single+0x201/0x500 [ 1029.157020][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 1029.162674][ T37] wait_for_common+0x359/0x630 [ 1029.167453][ T37] ? wait_for_completion+0x40/0x40 [ 1029.172583][ T37] ? _raw_spin_unlock+0x45/0x60 [ 1029.177438][ T37] ? __switch_to_asm+0x3d/0x70 [ 1029.182224][ T37] wait_for_completion+0x1c/0x40 [ 1029.187173][ T37] rcu_barrier+0x415/0x530 [ 1029.191591][ T37] fqdir_free_fn+0x36/0x150 [ 1029.196137][ T37] process_scheduled_works+0x7d2/0x1020 [ 1029.201698][ T37] worker_thread+0xc58/0x1250 [ 1029.206396][ T37] kthread+0x2ca/0x370 [ 1029.210470][ T37] ? __cfi_worker_thread+0x10/0x10 [ 1029.215600][ T37] ? __cfi_kthread+0x10/0x10 [ 1029.220193][ T37] ret_from_fork+0x67/0xa0 [ 1029.224630][ T37] ? __cfi_kthread+0x10/0x10 [ 1029.229320][ T37] ret_from_fork_asm+0x1a/0x30 [ 1029.234097][ T37] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1029.513488][ T36] audit: type=1400 audit(2269.965:36466): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2305]" dev="pipefs" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1029.578094][ T37] NMI backtrace for cpu 1 [ 1029.578113][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1029.578140][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1029.578151][ T37] Call Trace: [ 1029.578158][ T37] [ 1029.578167][ T37] __dump_stack+0x21/0x30 [ 1029.578196][ T37] dump_stack_lvl+0x10c/0x190 [ 1029.578219][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1029.578251][ T37] dump_stack+0x19/0x20 [ 1029.578272][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 1029.578294][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 1029.578316][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 1029.578338][ T37] ? sched_show_task+0x379/0x560 [ 1029.578360][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 1029.578380][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1029.578403][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1029.578426][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 1029.578450][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1029.578472][ T37] watchdog+0xd8f/0xed0 [ 1029.578497][ T37] ? __cfi_watchdog+0x10/0x10 [ 1029.578521][ T37] ? __kasan_check_read+0x15/0x20 [ 1029.578547][ T37] ? __kthread_parkme+0x138/0x180 [ 1029.578564][ T37] ? schedule+0xc6/0x240 [ 1029.578589][ T37] kthread+0x2ca/0x370 [ 1029.578607][ T37] ? __cfi_watchdog+0x10/0x10 [ 1029.578630][ T37] ? __cfi_kthread+0x10/0x10 [ 1029.578649][ T37] ret_from_fork+0x67/0xa0 [ 1029.578672][ T37] ? __cfi_kthread+0x10/0x10 [ 1029.578691][ T37] ret_from_fork_asm+0x1a/0x30 [ 1029.578718][ T37] [ 1029.578726][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1029.771959][ C0] NMI backtrace for cpu 0 [ 1029.771973][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1029.771993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1029.772004][ C0] Workqueue: mld mld_query_work [ 1029.772028][ C0] RIP: 0010:unwind_get_return_address+0x5a/0x90 [ 1029.772049][ C0] Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 e7 3f 98 00 48 8b 3b e8 ff 14 13 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 cc 3f 98 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f [ 1029.772062][ C0] RSP: 0018:ffffc90000006be0 EFLAGS: 00000246 [ 1029.772075][ C0] RAX: 0000000000000001 RBX: ffffc90000006c50 RCX: 1ffff92000000d00 [ 1029.772087][ C0] RDX: ffffc90000006c01 RSI: 1ffff92000000d82 RDI: ffffffff8174577d [ 1029.772098][ C0] RBP: ffffc90000006bf8 R08: ffffc90000006c00 R09: 0000000000000000 [ 1029.772109][ C0] R10: ffffc90000006c08 R11: fffff52000000d8d R12: ffff888102651300 [ 1029.772121][ C0] R13: 1ffff92000000dac R14: dffffc0000000000 R15: 1ffff92000000d8a [ 1029.772133][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1029.772145][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1029.772156][ C0] CR2: 00007f7c0602ed40 CR3: 000000010bb6c000 CR4: 00000000003526b0 [ 1029.772171][ C0] Call Trace: [ 1029.772176][ C0] [ 1029.772182][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1029.772203][ C0] arch_stack_walk+0x10b/0x170 [ 1029.772217][ C0] ? stack_trace_save+0x9d/0xe0 [ 1029.772236][ C0] stack_trace_save+0x9d/0xe0 [ 1029.772254][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 1029.772274][ C0] ? __asan_memset+0x39/0x50 [ 1029.772287][ C0] save_stack+0xf8/0x1f0 [ 1029.772303][ C0] ? free_contig_range+0x270/0x270 [ 1029.772317][ C0] ? __reset_page_owner+0x450/0x450 [ 1029.772332][ C0] ? __kfree_skb+0x62/0x210 [ 1029.772351][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 1029.772366][ C0] ? sched_clock_noinstr+0xd/0x30 [ 1029.772379][ C0] __set_page_owner+0x8e/0x5d0 [ 1029.772395][ C0] ? net_rx_action+0x584/0xce0 [ 1029.772413][ C0] ? __do_softirq+0xf/0x16 [ 1029.772431][ C0] ? process_scheduled_works+0x7d2/0x1020 [ 1029.772453][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 1029.772469][ C0] ? kasan_unpoison+0x4a/0x70 [ 1029.772482][ C0] post_alloc_hook+0x3b9/0x3f0 [ 1029.772499][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 1029.772521][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 1029.772535][ C0] ? _raw_spin_trylock+0xaf/0x130 [ 1029.772552][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 1029.772569][ C0] prep_new_page+0x1c/0x120 [ 1029.772586][ C0] get_page_from_freelist+0x48ce/0x4960 [ 1029.772604][ C0] ? __cfi_ipv6_mc_check_mld+0x10/0x10 [ 1029.772627][ C0] ? igmp6_event_query+0x243/0x2e0 [ 1029.772646][ C0] ? ip6_protocol_deliver_rcu+0x1190/0x12d0 [ 1029.772663][ C0] ? __alloc_pages_noprof+0x7b0/0x7b0 [ 1029.772681][ C0] ? static_key_count+0x45/0x70 [ 1029.772699][ C0] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 1029.772713][ C0] ? lruvec_init+0x201/0x280 [ 1029.772729][ C0] __alloc_pages_noprof+0x31f/0x7b0 [ 1029.772747][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1029.772764][ C0] ? __cfi_ip6_input_finish+0x10/0x10 [ 1029.772780][ C0] ? ip6_mc_input+0x35a/0x670 [ 1029.772796][ C0] ? jhash2+0x211/0x350 [ 1029.772811][ C0] alloc_slab_page+0x6b/0x1f0 [ 1029.772828][ C0] ? rhashtable_jhash2+0x27/0x50 [ 1029.772843][ C0] allocate_slab+0x69/0x440 [ 1029.772859][ C0] ___slab_alloc+0x5a6/0x8e0 [ 1029.772874][ C0] ? skb_clone+0x229/0x460 [ 1029.772891][ C0] ? br_mdb_ip_get+0x80/0x80 [ 1029.772909][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1029.772927][ C0] kmem_cache_alloc_noprof+0x2a0/0x430 [ 1029.772940][ C0] ? skb_clone+0x229/0x460 [ 1029.772958][ C0] ? __cfi_br_multicast_count+0x10/0x10 [ 1029.772974][ C0] skb_clone+0x229/0x460 [ 1029.772992][ C0] br_flood+0x4ed/0x730 [ 1029.773011][ C0] br_handle_frame_finish+0x12bb/0x1720 [ 1029.773031][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 1029.773051][ C0] br_handle_frame+0x5a6/0xba0 [ 1029.773070][ C0] ? __cfi_ip6_input+0x10/0x10 [ 1029.773084][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 1029.773103][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 1029.773120][ C0] ? ipv6_chk_mcast_addr+0x3be/0x3e0 [ 1029.773138][ C0] ? ip6_mc_input+0x35a/0x670 [ 1029.773154][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 1029.773169][ C0] ? qdisc_run_end+0x120/0x120 [ 1029.773185][ C0] ? ip6_rcv_finish+0x360/0x3e0 [ 1029.773200][ C0] ? ipv6_rcv+0xed/0x220 [ 1029.773214][ C0] ? __kasan_check_write+0x18/0x20 [ 1029.773234][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 1029.773250][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1029.773269][ C0] process_backlog+0x3e5/0xae0 [ 1029.773288][ C0] __napi_poll+0xd3/0x610 [ 1029.773304][ C0] net_rx_action+0x584/0xce0 [ 1029.773322][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 1029.773339][ C0] ? sched_clock+0x44/0x60 [ 1029.773357][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1029.773374][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 1029.773390][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 1029.773408][ C0] handle_softirqs+0x1ab/0x630 [ 1029.773422][ C0] __do_softirq+0xf/0x16 [ 1029.773439][ C0] do_softirq+0xa6/0x100 [ 1029.773457][ C0] [ 1029.773462][ C0] [ 1029.773467][ C0] ? __cfi_do_softirq+0x10/0x10 [ 1029.773485][ C0] ? _raw_spin_lock_bh+0x90/0x120 [ 1029.773508][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 1029.773524][ C0] ? __kfree_skb+0x18f/0x210 [ 1029.773541][ C0] __local_bh_enable_ip+0x74/0x80 [ 1029.773560][ C0] _raw_spin_unlock_bh+0x54/0x60 [ 1029.773577][ C0] mld_query_work+0x951/0x2c10 [ 1029.773595][ C0] ? device_suspend+0xc50/0x12a0 [ 1029.773612][ C0] ? __kasan_check_write+0x18/0x20 [ 1029.773631][ C0] ? __pwq_activate_work+0x308/0x410 [ 1029.773651][ C0] ? __cfi_mld_query_work+0x10/0x10 [ 1029.773669][ C0] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 1029.773688][ C0] ? kick_pool+0xb9/0x550 [ 1029.773703][ C0] process_scheduled_works+0x7d2/0x1020 [ 1029.773725][ C0] worker_thread+0xc58/0x1250 [ 1029.773741][ C0] kthread+0x2ca/0x370 [ 1029.773755][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1029.773768][ C0] ? __cfi_kthread+0x10/0x10 [ 1029.773782][ C0] ret_from_fork+0x67/0xa0 [ 1029.773799][ C0] ? __cfi_kthread+0x10/0x10 [ 1029.773813][ C0] ret_from_fork_asm+0x1a/0x30 [ 1029.773834][ C0] [ 1033.730542][ C1] net_ratelimit: 115887 callbacks suppressed [ 1033.730564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.730666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.736670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.748673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.760627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.772803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.784484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1033.796359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.808332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.820406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)