last executing test programs: 2m6.773576161s ago: executing program 3 (id=1101): inotify_init1(0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4000000000001) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="070000000000000081000040"]) mkdirat(r4, &(0x7f0000000040)='./bus\x00', 0xa0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@userxattr}, {@verity_require}], [{@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0xa9}}, {@pcr={'pcr', 0x3d, 0x28}}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x40, 0x0, @tid=r0}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) timer_settime(r5, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f0000001100)=""/4096, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r9 = dup(r8) read$FUSE(r9, &(0x7f00000075c0)={0x2020}, 0x2020) 2m3.3249968s ago: executing program 3 (id=1108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nilfs2\x00', 0x40, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x80000000, 0x3, 0x4, 0x2d, 0xffffffffffffffff}) r3 = syz_open_procfs(r2, &(0x7f0000000180)='fdinfo/3\x00') ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) recvfrom(r3, &(0x7f00000001c0)=""/7, 0x7, 0x100, &(0x7f0000000200)=@ax25={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x80) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'dvmrp0\x00', &(0x7f0000000280)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) fcntl$setstatus(r0, 0x4, 0x4000) fcntl$setsig(r3, 0xa, 0x3d) ioctl$KVM_RUN(r3, 0xae80, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') socket$can_raw(0x1d, 0x3, 0x1) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v2={0x2000000, [{0x5, 0x9}, {0xbbf8, 0xfffffff6}]}, 0x14, 0x14c432858988ab5d) r4 = openat2(r3, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xc0000, 0x50, 0x3}, 0x18) r5 = syz_open_procfs(r2, &(0x7f0000000480)='net/fib_trie\x00') syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f00000004c0)="673666f20f08260f01c40f20e06635020000000f22e00fc735baf80c66b8fe9b888e66efbafc0ced67dfee0f72e1ed0faeb6e5ff67670f01d6670f01cb", 0x3d}], 0x1, 0x1, &(0x7f0000000540), 0x0) epoll_wait(r3, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) lgetxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@known='trusted.overlay.redirect\x00', &(0x7f0000000680)=""/94, 0x5e) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000780)={'veth0_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0xb64cb000) getpid() ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f00000007c0)) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000900)={'wg1\x00', {0x2, 0x0, @empty}}) close_range(r6, r1, 0x0) read$FUSE(r3, &(0x7f0000000940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002980)={0x10, 0x0, r7}, 0x10) 2m3.198102062s ago: executing program 3 (id=1110): pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r0, &(0x7f0000000080)={r0, r0, 0xc}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m3.123386634s ago: executing program 3 (id=1112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3cde, &(0x7f00000003c0)={0x0, 0x48a1, 0x40, 0x2, 0x3a6}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x110, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x2, 0x25}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x101}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x1, 0x2e}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x3040}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x3, 0x0, 0x1b}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x0, 0x1a}}, &(0x7f0000000500)={0x0, 0x20, 0x38}}, 0x1000}], 0xf8, 0x0, &(0x7f0000000680)="1ec0687613f64f1dfca6868428561fdc873c6725aa8b69578427d7a667b41107f6b09e16bdb7859b4483b50112c3f6694f0970edbe2010470ed0f3f968f85a2e1fe5b8cf6b5b937b9632eb320fa36796e9ed4e391625230f0eacf3d29f9df63705c27bc2eda29a4bee4fa9f80a119ba7c328a12e8699bd2603b38dc79330c64a0504aa73ee537ecaec586bd07f95e3d492638458bd3c66923c148663bde21d5c65fe334c538ed98f1e1d84bfb7e1e7f2823d538a442e581f85c3677393b66318e30bbc45262fcc7e022fe07acd4996e44b9042c4f7818c9c2b50bdc7a09e4df6a549d0ff7666020a529cee652e8c4886b3727c6f12f32df2"}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0xf580) statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 2m2.927946258s ago: executing program 3 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x62, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x43, 'none\x00', 0xa, 0x1, 0x3c}, {@remote, 0x4, 0x0, 0x8, 0x40b9e, 0x9ffffffe}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x85b83000) 2m1.677904093s ago: executing program 3 (id=1117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=[@enter_looper, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 2m1.648268854s ago: executing program 32 (id=1117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=[@enter_looper, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 26.567003306s ago: executing program 1 (id=2555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x5, 0x0, &(0x7f0000000180)) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) fstat(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) sendmsg$netlink(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)={0x10, 0x1b, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000000180)=[@rights={{0x28, 0x1, 0x1, [r2, r9, r5, r3, r4, r1]}}], 0x28, 0x40045}, 0xc0) r10 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000440)=0x1) signalfd4(r0, &(0x7f0000000080)={[0x3ccf6312]}, 0x8, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 26.566749746s ago: executing program 1 (id=2556): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r0, &(0x7f0000000180), 0x12) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) setsockopt(0xffffffffffffffff, 0x2, 0x42, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 26.492925718s ago: executing program 1 (id=2558): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001b00)={0x68380000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000002a40)=ANY=[@ANYBLOB="120101022c90e840030472da010000000301090a120001100480030904a80400f529f10e"], &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0xa, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0xe}, {0x1, 0x7f, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2, '\x00', 0x6}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x4, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x4, 0x7, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0xff}, {0x7, 0x1, 0x35, '\x00', 0x1}, {0x3, 0xe, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0xf1, 0x6, 0x93, 0x6, 0x27, 0x4, 0xba, 0x3, 0xc0, 0x0, 0x43, 0x50, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000340)={0xa0003, 0x0, [0xa, 0x2, 0x3, 0x80000000, 0x5, 0x7f, 0xd04, 0x4]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00\'\x00'], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000084) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r10 = fcntl$dupfd(r9, 0x0, r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4021) setsockopt$inet6_tcp_int(r10, 0x6, 0xc, &(0x7f0000000100)=0x9, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) 24.656037774s ago: executing program 0 (id=2593): rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x4, 0x94}) r0 = socket(0x0, 0x180005, 0xffffff4c) bind$unix(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$cgroup_pressure(r1, &(0x7f0000000200)={'full', 0x20, 0x57, 0x20, 0x1000000e}, 0x2f) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) mprotect(&(0x7f00000ef000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) r5 = syz_open_dev$loop(&(0x7f0000000340), 0x4, 0x278001) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) fcntl$getown(r1, 0x9) getpgid(r2) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) shutdown(r7, 0x0) connect$unix(r7, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = accept(r8, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x4895, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0xd0, r6, 0x100, 0x4070bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008814}, 0x20044045) signalfd4(r4, &(0x7f0000000080)={[0x4]}, 0x8, 0x0) 24.569398836s ago: executing program 4 (id=2596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080), 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, r8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x0, 0x14, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x9}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xe28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, 0xa0}}, 0x0) write$eventfd(r11, &(0x7f00000001c0)=0x9, 0x1d) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x5e, 0xa}) ioctl$EVIOCGABS0(r4, 0x80184520, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.548133746s ago: executing program 4 (id=2597): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 24.514192967s ago: executing program 4 (id=2598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000004c0)=[@request_death, @release], 0x0, 0x0, 0x0}) 24.434995469s ago: executing program 4 (id=2599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/59, 0x3b, 0x0, 0x10}, @flat=@binder={0x73622a85, 0x1015, 0x1}, @ptr={0x70742a85, 0x1001, 0x0, 0x0, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendto(r2, &(0x7f0000000580)="8ae6a87fb1a945c68f54ebd69586fb601d6437b53141672d61adbfe7f79666256fa49e254afda2c92123b99bb6efa86b12623071470145bed14740d41213e7990986a6088722a1d714fbb018079e91b110633722a6a4c00d872829bcf87b8e051f7e9c1b1ba69ac63ba0944f21795d8be14084da15df42befa1261c0be40b0064dbce2e709d5a52577f156684582f8d34ae51dfadf3f5b540a23a074f9dcd025f270c1f6af7c37d5387ef0d283", 0xad, 0x800, &(0x7f0000000640)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0xfffffffffffff000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_GET_STATUS(r8, 0x4c03, &(0x7f0000000080)) bind$bt_hci(r7, &(0x7f0000000200)={0x1f, 0xffffffffffffffff}, 0x6) setreuid(0x0, r4) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) dup(r0) sendto$inet6(r11, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events.local\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r12, 0x40489426, &(0x7f00000002c0)={{r3}, 0x2, &(0x7f0000000280)=[0x5, 0x2], 0x9, 0x2, 0x1}) process_madvise(r10, 0x0, 0x0, 0x14, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) 24.37353571s ago: executing program 4 (id=2600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000001000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xfc, 0xfffff030}, {0x6, 0x0, 0x0, 0x3}]}) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000440)={0x30, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x52}, @void, @val={0xc, 0x99, {0x2, 0x73}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000000380)={0x68, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3c}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fstat(r5, &(0x7f00000000c0)) (async) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) (async) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000080000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/176], 0xf8}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x48048) write(r7, &(0x7f0000000400)="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", 0x1f000) 24.332265701s ago: executing program 4 (id=2601): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000012) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 24.305752131s ago: executing program 33 (id=2601): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000012) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 23.673019414s ago: executing program 0 (id=2609): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x8, 0x0, 0x6ff5, 0x5c0, 0x7, 0x3d, 0x8}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x183180, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x39) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x8008af26, &(0x7f0000000000)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xa0002, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x874) 23.575107136s ago: executing program 0 (id=2610): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x3, 0x9, 0x6d3, 0xc9, 0x7, 0x2, &(0x7f00000001c0)="9af071c1642b64"}) (async) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2b, 'rdma'}]}, 0x1b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 23.534166757s ago: executing program 5 (id=2602): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x8000000, 0x9, 0x9, 0x6, 0x2, 0xd, 0xffff}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x8000000, 0x9, 0x9, 0x6, 0x2, 0xd, 0xffff}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) eventfd(0x3) (async) r8 = eventfd(0x3) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000140)={r8, 0x9}) dup3(r5, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0x2, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0x6, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x2, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x42, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xac, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1e, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1001]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002500)={0x4c, 0x0, &(0x7f0000002440)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000024c0)="fed9fcf3"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002500)={0x4c, 0x0, &(0x7f0000002440)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000024c0)="fed9fcf3"}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r9) (async) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 23.436523129s ago: executing program 1 (id=2611): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x40, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x28b) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) close(0x3) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) 23.38309423s ago: executing program 0 (id=2612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x400, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) 23.38282253s ago: executing program 2 (id=2613): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x40, 0x21, 0x4, {0x4, 0x23, "b9e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r5 = syz_usb_connect$lan78xx(0xd20afcd3656bf0fc, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000300)={0x14, &(0x7f0000000180)={0x0, 0x9, 0x14, {0x14, 0x10, "593ce49e58348993088094c7f84a9b3fafe4"}}, &(0x7f0000000200)={0x0, 0x3, 0xca, @string={0xca, 0x3, "59843166d6c1e236c9c9e52a9f95e51b8bb3650ccae20366d62d311a938096441fd426593c79b3f3c6183ac3900f3504231d716a15e219869aedbc3df0bbdf957011feef20386ed766bd193e4b22bb4c751dd336cb1a204fa0871ccec341861b5137fcb491e9ef74a2ded868bf68bf7c363b72b95e69a45484c79dcffa70661248112cab37847e829d42097c9369f57230a73fabbc41d04247af258bcba2fd9b433183b074c54e9f447416466dbc7d11cbe4c47c8a8e0153a01842d3d46cad47034591ee6016d621"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000540)={0x40, 0xf, 0x100, "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"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x7b23}, &(0x7f0000000400)={0x40, 0xa0, 0x4}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "1f2f88679b4984f3f64d54f55c6ef4053b3fe0ed0ae92a95511cf34b744cc8f86031a15bf8eeb8f1f8c86f41a824dd"}}) (async) syz_usb_control_io$lan78xx(r5, &(0x7f0000000300)={0x14, &(0x7f0000000180)={0x0, 0x9, 0x14, {0x14, 0x10, "593ce49e58348993088094c7f84a9b3fafe4"}}, &(0x7f0000000200)={0x0, 0x3, 0xca, @string={0xca, 0x3, "59843166d6c1e236c9c9e52a9f95e51b8bb3650ccae20366d62d311a938096441fd426593c79b3f3c6183ac3900f3504231d716a15e219869aedbc3df0bbdf957011feef20386ed766bd193e4b22bb4c751dd336cb1a204fa0871ccec341861b5137fcb491e9ef74a2ded868bf68bf7c363b72b95e69a45484c79dcffa70661248112cab37847e829d42097c9369f57230a73fabbc41d04247af258bcba2fd9b433183b074c54e9f447416466dbc7d11cbe4c47c8a8e0153a01842d3d46cad47034591ee6016d621"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000540)={0x40, 0xf, 0x100, "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"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x7b23}, &(0x7f0000000400)={0x40, 0xa0, 0x4}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "1f2f88679b4984f3f64d54f55c6ef4053b3fe0ed0ae92a95511cf34b744cc8f86031a15bf8eeb8f1f8c86f41a824dd"}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a787ffffffff0000000007000000180001801400020069703667726574617030"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 23.325053801s ago: executing program 0 (id=2614): socketpair$unix(0x1, 0x1, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='^-{\x00', 0x0, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000001c0)="1e0e", 0x2) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r4, &(0x7f0000003100)=ANY=[], 0x10448) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) chdir(0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x840, &(0x7f0000002240)) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={[{@subsystem='net'}, {@cpuset_v2_mode}, {@subsystem='cpuacct'}], [{@obj_type={'obj_type', 0x3d, 'cgroup.procs\x00'}}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) pipe2$9p(0x0, 0x0) write(r6, &(0x7f0000000240)="10e5e3d717d029fb5a7526a0660322a8d02d9a32b38948bdc6669f214badbf1844406516c51ce0f1661d84839f9084760c5e652e6a2530756a73146542e49232771cf69c58ce8692424bf7019785bfa39de66ad7b0544d0212428bb701a185b0d59e577a155d6fb1e929b0a397e00981a3cabd27173193a764888ffa6999986b2c649c3216b2b37e7485e2b61c428472084288aeb0782485d3ae43261ab0aeb964710781d6fe3a87b17502052a99", 0xae) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) 23.295586282s ago: executing program 1 (id=2615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) socket$packet(0x11, 0x2, 0x300) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000740)="660f280f650f01ca0f0133f20f009f77009af2cf52000f20c06635200000000f22c0baf80c66b880bc428866efbafc0cedbaf80c66b858e94e8d66efbafc0cb80070ef0040020fc75c84", 0x4a}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000000c0)={0xc, 0x8, 0x40, 0x7, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xfe) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x1000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa8, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0xa, 0x0, 0xd}, @flat=@binder={0x73622a85, 0x2000, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @free_buffer={0x40086303, r8}, @exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/162, 0xa2, 0x2, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/214, 0xd6, 0x1, 0x10}, @fda={0x66646185, 0x2, 0x0, 0x3b}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) 23.158480085s ago: executing program 5 (id=2616): keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x3}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30080068}, 0x4000810) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x44, 0x0, &(0x7f0000000180)="c6547e22bade76f1a0e4ca000000b14a2558a9b6f20d222f9220c8d9b1b0d1961372525800b17c48080000000000002e7000"/68}) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x7c, 0x0, &(0x7f0000001c40)=[@increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}, @decrefs, @free_buffer={0x40086303, r5}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 23.143656515s ago: executing program 0 (id=2617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @private0}}, {{0xa, 0x0, 0x4, @local, 0xffffffff}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102c41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$cgroup_subtree(r2, 0x0, 0x88000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0xfffffc00, {{0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}}, {{0xa, 0x4e24, 0xe0000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x108) 23.096044596s ago: executing program 5 (id=2618): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r0 = eventfd2(0x7f, 0x801) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, r0, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x200000c, 0x11, r3, 0x60bd8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x41, 0x0, @multicast2}, 0x20020003, 0x0, 0x1}}, 0x2e) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'veth0_to_team\x00'}) 22.731017963s ago: executing program 2 (id=2619): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x119242, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x5}) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x40500, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x40500, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x2000, 0x3, @mcast2, 0x3}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x12d02, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r8, @ANYBLOB="00000000100000", @ANYRESHEX=r7, @ANYBLOB=',\x00', @ANYRES64=r7]) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r9, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000d80)) (async) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000d80)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chmod(&(0x7f00000021c0)='./file0/file0\x00', 0x40) (async) chmod(&(0x7f00000021c0)='./file0/file0\x00', 0x40) read$FUSE(r10, &(0x7f0000006e80)={0x2020}, 0x2082) (async) read$FUSE(r10, &(0x7f0000006e80)={0x2020}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 22.668672064s ago: executing program 2 (id=2620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000040)=""/174, 0xae, 0x2, 0x0, 0x0) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22.615565565s ago: executing program 1 (id=2621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @empty, 0x1}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x125201, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)) 21.625794695s ago: executing program 2 (id=2622): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x110882) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x2, 0x31, 0x7, 0x701, 0xb1, 0x401, &(0x7f0000000080)="ebaa3f74db62f21fc5dececa5f09ba4c166344cca41c8dd5d19b374edb7a2d59baebe2780a45d683d3e3ea33947cffafbcc3886796adb778b08baa5adfbc9b2aaa0abd1b7fc5efb038f57a4821a0f6ed65fc159c1cc6ba89481e3c853bfe200f67dcd278b10a441d58f57ab6990def79481ea63d8ce7be45d5c0ea335914269c1e84bd62da310c962c68fab14b7414ffa9d40d8d1b5834c46c40df573ca3f4c437a64085a14ab8cc752bd10d24e82e9cd6"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000300)=[@wrmsr={0x1e, 0x20, {0x352, 0x1}}, @code={0xa, 0x77, {"0f2064660f23eec74424000c010000c7442402f28f0000ff1c24b9130300000f32c7442400ec000000c744240200a00000ff1c2466baf80cb8a00f248bef66bafc0cedb98b0b0000b80e000000ba000000000f30c4e12b10eb0f20e035080000000f22e00f08"}}, @code={0xa, 0x74, {"660f38398a00000000660f382082850000002e400f014909c4e1d658860000000048b896730000000000000f23c00f21f835000006000f23f866460f38f54800430f090f3548b874000000000000000f23c00f21f83503000f000f23f8c462c0f25304"}}, @cpuid={0x14, 0x18, {0x400, 0xad28}}, @code={0xa, 0x78, {"48b807000000000000000f23c80f21f835040060000f23f866ba400066edb9800000c00f3235004000000f30663ef2b9f8310f01c20f20e035000040000f22e0b9800000c00f3235008000000f3066b894000f00d8c46281906453190f20c035040000000f22c0"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0xb3e, 0x20}}, @cpuid={0x14, 0x18, {0xed, 0x7}}, @wrmsr={0x1e, 0x20, {0x581, 0x9}}, @uexit={0x0, 0x18, 0x74}, @cpuid={0x14, 0x18, {0x4, 0x8}}, @wr_crn={0x46, 0x20, {0x3, 0xdd}}, @rdmsr={0x32, 0x18, {0x8fd}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x32, 0x18, {0xc0010140}}, @uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0x982}}, @wr_crn={0x46, 0x20, {0x3}}, @uexit={0x0, 0x18, 0x3}], 0x323}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000980)="3312c2733caa9231150cb0bf4881a5c57ce78d9c76b3f5b65a33d75bbeb2b5ded8c28d818e85e82313cccf7637b387e3cad80724146d3efb71072e53c1acb7006ea3545f0e1e4a3a1fdfb0cac727857be7ec9249118121c69faffd0ff6f021e4189e5089129de25155f226545d1c15345d2a0c37cb079c3cf4ffc5a8b66e09b5fb107c0da0c4f0903ab4a0f25c9c9b42257f73b329948c0ff74d916e6bf7704823fac53044", 0xa5) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80448010}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a80)={0x3a8, r5, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x7}, {0x2, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x12}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x5, 0xa}, {0x3, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x6, 0x2e6, 0x3, 0x8, 0x2, 0x100]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0xa}, {0x4, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0xa}, {0x4}, {0x2, 0x2}, {0x3, 0x5}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x7, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0x3}, {}, {0x2, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x1}, {}, {0x6, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0xa}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x7, 0x6}, {0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd05, 0xc875, 0x8001, 0x6615, 0x705, 0x0, 0x6, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x0, 0x1, 0x40, 0x1, 0x3ff, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x1, 0xfde, 0xfffc, 0x7, 0xfff, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c2, 0x0, 0x9, 0x6, 0xff80, 0x414, 0xfff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x6c, 0x12, 0x36, 0x1b, 0x7e3f8d8e1201f724, 0x1b, 0x5, 0x18, 0x0, 0x3, 0xc, 0x18, 0x16, 0x71, 0x9, 0x1b, 0x1b, 0x6c, 0x14, 0xb, 0x60, 0x24, 0xb, 0xc, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x4, 0x80, 0x7c, 0xfffc, 0x174d, 0x37b0, 0x4]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x5, 0x60, 0x60, 0x12, 0x30, 0xc, 0x24, 0x30, 0x9, 0x1b, 0x1b, 0x12, 0x15, 0x48, 0x36, 0x18, 0xc, 0x36, 0x6, 0xb, 0x30, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x291966ece0308c30, 0xb, 0x30, 0x36, 0x30, 0x1, 0x6, 0x48, 0xb, 0xc, 0x1, 0x30, 0x2, 0x6, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x6, 0x9, 0x36, 0x6, 0x18, 0x5, 0x30, 0x48, 0x1b, 0x12, 0x1b, 0x30, 0x6c, 0x36, 0x1b, 0x60]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x1a50, 0x4, 0x5, 0x401, 0x7d69, 0x2]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x12, 0x5, 0x19]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x7c39, 0xb, 0xfffa, 0x3, 0x4, 0x2, 0x80c]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x7}, {0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {}, {0x2, 0x5}, {0x5, 0x2}, {0x2, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x4}, {0x2}, {0x1, 0x8}, {0x3, 0x4}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x52, 0x3, 0x6c, 0x36, 0x12, 0x6, 0x5, 0x16, 0x9, 0x30, 0x36, 0x65, 0x6c, 0x16, 0x3, 0x5, 0x5, 0x30, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4e, 0x10, 0x3, 0x5, 0x7, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x4, 0xa, 0xbc12, 0xc, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0xa}, {0x3, 0x2}, {0x2}, {0x5, 0x3}, {0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x5, 0x1}, {0x6, 0x5}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x6}, {0x4}, {0x5, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0xc, 0x18, 0x1, 0x4, 0x4, 0xb, 0x30, 0x1b, 0x2, 0x4, 0x16, 0x5, 0x1, 0xb, 0xb, 0x60, 0xc, 0x1b, 0x2, 0x24, 0x24, 0x48, 0x4, 0x1, 0x9, 0x12, 0x5e0b38d6ee04f556, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xffff, 0x6859, 0x3, 0x5, 0x7, 0x0, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5c, 0x22, 0x6, 0x257781ddf5d23b23, 0x5, 0xb, 0x16, 0xc, 0x12, 0xb, 0xc, 0x6, 0x6c, 0x4, 0x18, 0x4, 0xc, 0x24, 0x9, 0x2, 0x24, 0xb, 0xb, 0x6c, 0x5, 0x6, 0xb, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3bf, 0xf, 0x100, 0x9, 0x0, 0xff3d, 0xfffe, 0xd92d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x5, 0x9, 0xee7, 0x7, 0x7fff, 0xe74, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x6, 0x0, 0x32, 0x2b, 0x3, 0x4]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3b1e, 0x9, 0xf2, 0x3, 0x3, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8569, 0x0, 0xa3, 0xb, 0x8, 0xa, 0x3ff, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x2000c004}, 0x44000) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000f40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001140)={{r4}, r8, 0x12, @unused=[0x6, 0x1], @name="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"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002140)=0x0) ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000003180)={&(0x7f0000002180)=""/4096, 0x1000}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000003300)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x60, r10, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x819}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x989}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003380), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = syz_genetlink_get_family_id$smc(&(0x7f00000034c0), r2) sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x28, r12, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) r13 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r14 = syz_genetlink_get_family_id$team(&(0x7f0000003600), r7) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f0000003cc0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003a00)={0x248, r14, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x6, 0x8f, 0xb0, 0xfffffffc}, {0x4, 0x7f, 0x0, 0x3}, {0x6, 0x9, 0x3, 0xf}, {0x5, 0x81, 0x5, 0x6}, {0x400, 0x4, 0x4, 0xe1}, {0x97, 0x4, 0x1, 0xc}, {0x7, 0x2}, {0x4, 0xa, 0x6e, 0xd47}, {0x1, 0xc0, 0x1, 0xffffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x44}, 0x4004000) 20.842433591s ago: executing program 2 (id=2623): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0xd1c4000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) pread64(r2, &(0x7f00000000c0)=""/47, 0x2f, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, r3, 0xcf1f8000) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r4, 0xffffffffffffffff, 0x1) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x6558}, @void, @x25={0x0, 0x0, 0xf3, "d8aba4c585b43f0d6d372bd1545c80c040238ce24ead64f08a71a8212740de64676fe9ba0ff39c0eee5e51743cb90fff041f89b2045dc8c7e053a7f01d74b1f688c2599f3e88c30e297b6d8a1f70264f470538840b1a6f56"}}, 0x5f) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 19.544174207s ago: executing program 2 (id=2624): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@ignoreqv}, {@uname={'uname', 0x3d, '#-\xb1@\'['}}, {@ignoreqv}, {@cache_mmap}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x3ff, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8, 0x6, 0x7, 0xfffffffffffffffc, 0x1ff, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000600)=[@wr_crn={0x46, 0x20, {0x0, 0x21000000000}}, @uexit={0x0, 0x18, 0x10000}, @code={0xa, 0x6f, {"0f01cbf20f08b990030000b80c000000ba000000000f30c7442400b1000000c744240289240000ff1c24b805000000b9d868ae6b0f01d9460f01c266ba430066b8c80066efb9ac0a00000f32c461f82b39b805000000b9002000000f01d9"}}, @rdmsr={0x32, 0x18, {0x3b5}}, @wrmsr={0x1e, 0x20, {0x3c4, 0x5}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @uexit={0x0, 0x18, 0xfffffffffffffc01}, @uexit={0x0, 0x18}, @wrmsr={0x1e, 0x20, {0xabb, 0x7}}, @uexit={0x0, 0x18, 0xf5000000}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0xa, 0x7}}, @cpuid={0x14, 0x18, {0xfffffffc, 0x400}}, @cpuid={0x14, 0x18, {0x7fff, 0x7aff}}, @code={0xa, 0x56, {"c441f950ff6626660f217d66ba4300ec66baf80cb8a052be87ef66bafc0cb80001c0feef450f00d4eb00c1f70ec4e2e14582925b0000f20f5ae7c4e18dc624ed0000008002"}}, @cpuid={0x14, 0x18, {0x43924914, 0x6}}], 0x285}) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000002c0)={0x1, 0x0, [{}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 8.063032318s ago: executing program 34 (id=2617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @private0}}, {{0xa, 0x0, 0x4, @local, 0xffffffff}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102c41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$cgroup_subtree(r2, 0x0, 0x88000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0xfffffc00, {{0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}}, {{0xa, 0x4e24, 0xe0000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x108) 1.792701724s ago: executing program 35 (id=2621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @empty, 0x1}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x125201, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)) 1.352434793s ago: executing program 36 (id=2624): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'cache=mmap'}}, {@ignoreqv}, {@uname={'uname', 0x3d, '#-\xb1@\'['}}, {@ignoreqv}, {@cache_mmap}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x3ff, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8, 0x6, 0x7, 0xfffffffffffffffc, 0x1ff, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000600)=[@wr_crn={0x46, 0x20, {0x0, 0x21000000000}}, @uexit={0x0, 0x18, 0x10000}, @code={0xa, 0x6f, {"0f01cbf20f08b990030000b80c000000ba000000000f30c7442400b1000000c744240289240000ff1c24b805000000b9d868ae6b0f01d9460f01c266ba430066b8c80066efb9ac0a00000f32c461f82b39b805000000b9002000000f01d9"}}, @rdmsr={0x32, 0x18, {0x3b5}}, @wrmsr={0x1e, 0x20, {0x3c4, 0x5}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @uexit={0x0, 0x18, 0xfffffffffffffc01}, @uexit={0x0, 0x18}, @wrmsr={0x1e, 0x20, {0xabb, 0x7}}, @uexit={0x0, 0x18, 0xf5000000}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0xa, 0x7}}, @cpuid={0x14, 0x18, {0xfffffffc, 0x400}}, @cpuid={0x14, 0x18, {0x7fff, 0x7aff}}, @code={0xa, 0x56, {"c441f950ff6626660f217d66ba4300ec66baf80cb8a052be87ef66bafc0cb80001c0feef450f00d4eb00c1f70ec4e2e14582925b0000f20f5ae7c4e18dc624ed0000008002"}}, @cpuid={0x14, 0x18, {0x43924914, 0x6}}], 0x285}) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000002c0)={0x1, 0x0, [{}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 0s ago: executing program 37 (id=2618): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r0 = eventfd2(0x7f, 0x801) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, r0, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x200000c, 0x11, r3, 0x60bd8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x41, 0x0, @multicast2}, 0x20020003, 0x0, 0x1}}, 0x2e) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'veth0_to_team\x00'}) kernel console output (not intermixed with test programs): . [ 170.104646][ T6749] 9pnet_fd: Insufficient options for proto=fd [ 170.129486][ T6751] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2062'. [ 170.138504][ T6751] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2062'. [ 170.147457][ T6751] netlink: 'syz.4.2062': attribute type 6 has an invalid length. [ 170.155239][ T6751] netlink: 'syz.4.2062': attribute type 5 has an invalid length. [ 170.163050][ T6751] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2062'. [ 170.272957][ T389] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 170.423062][ T389] usb 3-1: Using ep0 maxpacket: 32 [ 170.430171][ T389] usb 3-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 170.443264][ T389] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 170.452336][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.460347][ T389] usb 3-1: Product: syz [ 170.464563][ T389] usb 3-1: Manufacturer: syz [ 170.469168][ T389] usb 3-1: SerialNumber: syz [ 171.438372][ T6789] netlink: 'syz.1.2074': attribute type 11 has an invalid length. [ 171.467402][ T6789] rust_binder: 112: no such ref 0 [ 171.477143][ T6789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:112 [ 171.775430][ T6797] overlayfs: failed to clone upperpath [ 172.156670][ T36] kauditd_printk_skb: 1124 callbacks suppressed [ 172.156687][ T36] audit: type=1400 audit(432.140:39325): avc: denied { read write } for pid=6202 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.229062][ T6799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.229277][ T6799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.232575][ T36] audit: type=1400 audit(432.170:39326): avc: denied { read write open } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.278243][ T36] audit: type=1400 audit(432.170:39327): avc: denied { ioctl } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.308024][ T36] audit: type=1400 audit(432.210:39328): avc: denied { read write } for pid=6798 comm="syz.1.2078" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.332884][ T36] audit: type=1400 audit(432.210:39329): avc: denied { read write open } for pid=6798 comm="syz.1.2078" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.356432][ T36] audit: type=1400 audit(432.210:39330): avc: denied { ioctl } for pid=6798 comm="syz.1.2078" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.380487][ T36] audit: type=1400 audit(432.210:39331): avc: denied { read } for pid=6798 comm="syz.1.2078" name="binder0" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.415486][ T36] audit: type=1400 audit(432.210:39332): avc: denied { read open } for pid=6798 comm="syz.1.2078" path="/dev/binderfs/binder0" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.440098][ T36] audit: type=1400 audit(432.210:39333): avc: denied { ioctl } for pid=6798 comm="syz.1.2078" path="/dev/binderfs/binder0" dev="binder" ino=32 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.466661][ T36] audit: type=1400 audit(432.210:39334): avc: denied { set_context_mgr } for pid=6798 comm="syz.1.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 172.757360][ T6825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6825 comm=syz.0.2085 [ 172.798451][ T6825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=6825 comm=syz.0.2085 [ 173.045683][ T6837] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 173.055630][ T6838] Invalid ELF header type: 2 != 1 [ 173.062667][ T384] usb 3-1: USB disconnect, device number 36 [ 173.243740][ T6851] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 173.336467][ T6854] rust_binder: Error while translating object. [ 173.336499][ T6854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 173.355848][ T6859] loop0: detected capacity change from 0 to 7 [ 173.373542][ T6854] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 173.373579][ T6854] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:149 [ 173.391989][ T389] rust_binder: 6853: removing orphan mapping 0:24 [ 173.572532][ T384] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 173.591689][ T6870] 9pnet_fd: Insufficient options for proto=fd [ 173.652979][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.660963][ T6868] rust_binder: 152: no such ref 3 [ 173.672704][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.700723][ T6872] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2100'. [ 173.892710][ T389] rust_binder: 6883: removing orphan mapping 0:4120 [ 174.328357][ T6912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 174.328387][ T6912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1195 [ 174.393149][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 174.601772][ T6920] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2115'. [ 174.901510][ T6930] rust_binder: Write failure EFAULT in pid:165 [ 175.261092][ T6333] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.266076][ T6961] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 175.947046][ T6978] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2134'. [ 176.217109][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 176.494193][ T6994] binder: Bad value for 'defcontext' [ 176.507288][ T6994] rust_binder: Error while translating object. [ 176.507324][ T6994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.513524][ T6994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 177.199218][ T36] kauditd_printk_skb: 1781 callbacks suppressed [ 177.199239][ T36] audit: type=1400 audit(437.171:41116): avc: denied { create } for pid=7009 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.233889][ T36] audit: type=1400 audit(437.171:41117): avc: denied { setopt } for pid=7009 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.253109][ T36] audit: type=1400 audit(437.171:41118): avc: denied { setopt } for pid=7009 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.273448][ T36] audit: type=1400 audit(437.181:41119): avc: denied { create } for pid=7009 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.282744][ T349] Bluetooth: hci0: command 0x1003 tx timeout [ 177.298313][ T383] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.350074][ T36] audit: type=1400 audit(437.271:41120): avc: denied { read write } for pid=6202 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.406608][ T36] audit: type=1400 audit(437.271:41121): avc: denied { read write open } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.432618][ T36] audit: type=1400 audit(437.271:41122): avc: denied { ioctl } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.459223][ T36] audit: type=1400 audit(437.301:41123): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.475576][ T7012] rust_binder: Failed to allocate buffer. len:4296, is_oneway:true [ 177.490443][ T36] audit: type=1400 audit(437.301:41124): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.502041][ T7012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 177.537864][ T36] audit: type=1400 audit(437.301:41125): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.593330][ T7012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:185 [ 177.724733][ T31] rust_binder: 7011: removing orphan mapping 0:24 [ 178.226065][ T7044] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 178.226088][ T7044] rust_binder: Read failure Err(EFAULT) in pid:1233 [ 178.331940][ T465] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.525073][ T465] usb 2-1: Using ep0 maxpacket: 32 [ 178.538316][ T465] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 178.554621][ T465] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 178.591512][ T465] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 178.634857][ T465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.656070][ T465] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.665833][ T465] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.679087][ T465] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 178.688276][ T465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.699814][ T465] usb 2-1: config 0 descriptor?? [ 178.740033][ T7075] binder: Unknown parameter 'contextÀ' [ 178.781911][ T384] usb 3-1: device descriptor read/64, error -110 [ 178.920750][ T465] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 178.955948][ T465] usb 2-1: USB disconnect, device number 14 [ 178.973279][ T465] usblp0: removed [ 179.021869][ T384] usb 3-1: device descriptor read/64, error -32 [ 179.149719][ T7101] 9pnet_fd: Insufficient options for proto=fd [ 179.195028][ T7109] overlayfs: failed to clone upperpath [ 179.261903][ T384] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 179.412614][ T384] usb 3-1: device descriptor read/64, error -32 [ 179.428510][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.435631][ T465] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.436223][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.450442][ T7118] bridge_slave_0: entered allmulticast mode [ 179.456752][ T7118] bridge_slave_0: entered promiscuous mode [ 179.464037][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.471204][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.478440][ T7118] bridge_slave_1: entered allmulticast mode [ 179.484759][ T7118] bridge_slave_1: entered promiscuous mode [ 179.578522][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.585610][ T7118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.592912][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.599919][ T7118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.608215][ T465] usb 2-1: Using ep0 maxpacket: 32 [ 179.615697][ T465] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 179.630747][ T465] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 179.640961][ T465] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 179.652586][ T465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.662403][ T384] usb 3-1: device descriptor read/64, error -32 [ 179.670458][ T465] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.680840][ T465] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 179.695402][ T465] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 179.705371][ T465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.714395][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.725956][ T465] usb 2-1: config 0 descriptor?? [ 179.732723][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.770914][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.778017][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.785495][ T384] usb usb3-port1: attempt power cycle [ 179.791215][ T384] raw-gadget.0 gadget.2: failed to queue reset event [ 179.796280][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.804932][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.872016][ T384] raw-gadget.0 gadget.2: failed to queue resume event [ 179.889108][ T384] raw-gadget.0 gadget.2: failed to queue reset event [ 179.922072][ T7118] veth0_vlan: entered promiscuous mode [ 179.946149][ T465] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 179.997268][ T7118] veth1_macvtap: entered promiscuous mode [ 180.111752][ T384] raw-gadget.0 gadget.2: failed to queue resume event [ 180.163526][ T7091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 180.202359][ T384] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 180.231962][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.239241][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.247771][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.255580][ T384] usb 3-1: device descriptor read/8, error -32 [ 180.392140][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.399460][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.409190][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.418433][ T384] usb 3-1: device descriptor read/8, error -32 [ 180.468249][ T7175] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2200'. [ 180.487210][ T7175] tipc: Enabling of bearer rejected, already enabled [ 180.532537][ T384] raw-gadget.0 gadget.2: failed to queue suspend event [ 180.564327][ T7186] devpts: called with bogus options [ 180.578907][ T384] raw-gadget.0 gadget.2: failed to queue reset event [ 180.652574][ T384] raw-gadget.0 gadget.2: failed to queue resume event [ 180.731673][ T384] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 180.771800][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.779168][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.781300][ T7190] rust_binder: Error in use_page_slow: ESRCH [ 180.786259][ T7190] rust_binder: use_range failure ESRCH [ 180.795451][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.801652][ T7190] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 180.817551][ T384] usb 3-1: device descriptor read/8, error -32 [ 180.818125][ T7190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 180.832651][ T7190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:13 [ 180.951821][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.968045][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.975349][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.982457][ T384] usb 3-1: device descriptor read/8, error -32 [ 181.091630][ T384] raw-gadget.0 gadget.2: failed to queue suspend event [ 181.098633][ T384] usb usb3-port1: unable to enumerate USB device [ 181.178501][ T31] usb 2-1: USB disconnect, device number 15 [ 181.203054][ T31] usblp0: removed [ 181.266527][ T7220] netlink: 'syz.1.2215': attribute type 4 has an invalid length. [ 181.318721][ T7232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=7232 comm=syz.2.2219 [ 181.475613][ T7244] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2223'. [ 181.647097][ T7248] netlink: 'syz.2.2225': attribute type 4 has an invalid length. [ 181.805162][ T7265] 9pnet_fd: Insufficient options for proto=fd [ 181.962246][ T7274] support for cryptoloop has been removed. Use dm-crypt instead. [ 181.982593][ T7274] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 181.995943][ T7274] pim6reg1: entered promiscuous mode [ 182.001291][ T7274] pim6reg1: entered allmulticast mode [ 182.208233][ T36] kauditd_printk_skb: 678 callbacks suppressed [ 182.208249][ T36] audit: type=1400 audit(442.181:41804): avc: denied { read write } for pid=7283 comm="syz.0.2236" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.295812][ T36] audit: type=1400 audit(442.181:41805): avc: denied { read write } for pid=7282 comm="syz.1.2237" name="binder0" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.359524][ T36] audit: type=1400 audit(442.181:41806): avc: denied { read write open } for pid=7282 comm="syz.1.2237" path="/dev/binderfs/binder0" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.400157][ T36] audit: type=1400 audit(442.211:41807): avc: denied { read write open } for pid=7283 comm="syz.0.2236" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.451499][ T36] audit: type=1400 audit(442.211:41808): avc: denied { ioctl } for pid=7282 comm="syz.1.2237" path="/dev/binderfs/binder0" dev="binder" ino=32 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.490571][ T36] audit: type=1400 audit(442.211:41809): avc: denied { create } for pid=7282 comm="syz.1.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.556644][ T36] audit: type=1400 audit(442.221:41810): avc: denied { read append } for pid=7283 comm="syz.0.2236" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.663134][ T36] audit: type=1400 audit(442.221:41811): avc: denied { read open } for pid=7283 comm="syz.0.2236" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.682426][ T7304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.706303][ T7307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.724098][ T7307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.731323][ T7307] IPv6: NLM_F_CREATE should be set when creating new route [ 182.738562][ T7307] IPv6: NLM_F_CREATE should be set when creating new route [ 182.790601][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.813644][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.832084][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.838807][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.846198][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.853423][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.860403][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.867760][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.874816][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.884451][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.891861][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.898574][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.905850][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.913442][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.920361][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.927819][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.935065][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.942848][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.950221][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.957881][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.972048][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.981254][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 182.993331][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.018333][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.043447][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.069493][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.092298][ T7335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=7335 comm=syz.4.2250 [ 183.113025][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.131121][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.141187][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.147975][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.161656][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.162658][ T7335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=7335 comm=syz.4.2250 [ 183.173455][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.212949][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.238602][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.264307][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.290898][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.299840][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2253'. [ 183.308513][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.340783][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.341386][ T7346] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2253'. [ 183.362214][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.375912][ T7346] netlink: 'syz.0.2253': attribute type 6 has an invalid length. [ 183.384969][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.405861][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.415955][ T7349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 183.415985][ T7349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:48 [ 183.424168][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.436403][ T7346] netlink: 'syz.0.2253': attribute type 5 has an invalid length. [ 183.453310][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.455464][ T7346] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2253'. [ 183.467044][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.491619][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.498283][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.535496][ T7362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.535527][ T7362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 183.552124][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 183.576770][ T7362] rust_binder: 230: no such ref 2 [ 183.588090][ T7362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230 [ 183.768609][ T7384] overlayfs: failed to clone upperpath [ 183.946575][ T7404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=7404 comm=syz.1.2269 [ 184.507042][ T7443] overlay: Unknown parameter '/' [ 184.821991][ T7458] rust_binder: Error while translating object. [ 184.822025][ T7458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 184.822654][ T7457] rust_binder: Error while translating object. [ 184.841179][ T7458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 184.861265][ T7457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 184.877441][ T7457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 185.076142][ T7468] syzkaller0: entered promiscuous mode [ 185.097068][ T7468] syzkaller0: entered allmulticast mode [ 185.311418][ T7485] overlayfs: missing 'lowerdir' [ 186.196236][ T7530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7530 comm=syz.1.2311 [ 186.247649][ T7535] rust_binder: Failed copying remainder into alloc: EFAULT [ 186.247672][ T7535] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 186.261020][ T465] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.267899][ T7535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 186.296656][ T7535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:275 [ 186.420962][ T465] usb 1-1: Using ep0 maxpacket: 32 [ 186.465099][ T7543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.475604][ T7543] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 186.484185][ T465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.520816][ T465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.533146][ T465] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 186.543781][ T465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.554115][ T465] usb 1-1: config 0 descriptor?? [ 186.561824][ T465] hub 1-1:0.0: USB hub found [ 186.769847][ T465] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 186.779858][ T465] usbhid 1-1:0.0: can't add hid device: -71 [ 186.792237][ T465] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 186.821418][ T465] usb 1-1: USB disconnect, device number 9 [ 187.221258][ T36] kauditd_printk_skb: 731 callbacks suppressed [ 187.221277][ T36] audit: type=1400 audit(447.202:42539): avc: denied { ioctl } for pid=7574 comm="syz.0.2325" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.257802][ T36] audit: type=1400 audit(447.212:42540): avc: denied { read write } for pid=6202 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.283374][ T465] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.291140][ T36] audit: type=1400 audit(447.212:42541): avc: denied { read write open } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.318545][ T36] audit: type=1400 audit(447.212:42542): avc: denied { ioctl } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.344411][ T36] audit: type=1400 audit(447.272:42543): avc: denied { read write } for pid=6202 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.368072][ T36] audit: type=1400 audit(447.272:42544): avc: denied { read write open } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.392683][ T36] audit: type=1400 audit(447.272:42545): avc: denied { ioctl } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.418985][ T36] audit: type=1400 audit(447.302:42546): avc: denied { ioctl } for pid=7574 comm="syz.0.2325" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.443999][ T6341] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.454803][ T36] audit: type=1400 audit(447.302:42547): avc: denied { ioctl } for pid=7574 comm="syz.0.2325" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.480069][ T36] audit: type=1400 audit(447.332:42548): avc: denied { ioctl } for pid=7574 comm="syz.0.2325" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.513983][ T465] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 187.524142][ T465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.535454][ T465] usb 1-1: config 0 descriptor?? [ 187.670848][ T389] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 187.820818][ T389] usb 2-1: Using ep0 maxpacket: 32 [ 187.828030][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.838948][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.848731][ T389] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.861540][ T389] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 187.870565][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.880242][ T389] usb 2-1: config 0 descriptor?? [ 187.887474][ T389] usbhid 2-1:0.0: can't add hid device: -22 [ 187.894131][ T389] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 188.108117][ T7596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2333'. [ 188.349268][ T7575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 188.349808][ T465] usb 1-1: Cannot set autoneg [ 188.364240][ T465] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 188.377101][ T465] usb 1-1: USB disconnect, device number 10 [ 189.112560][ T7639] overlayfs: failed to clone upperpath [ 189.350825][ T7654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7654 comm=syz.4.2351 [ 189.440606][ T349] Bluetooth: hci0: command 0x1003 tx timeout [ 189.440613][ T383] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.462671][ T389] usb 2-1: USB disconnect, device number 17 [ 189.491739][ T7659] overlayfs: failed to clone upperpath [ 190.022905][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'. [ 190.076182][ T7677] /dev/rnullb0: Can't open blockdev [ 190.278331][ T7689] netlink: 'syz.4.2362': attribute type 4 has an invalid length. [ 190.580486][ T465] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 190.735379][ T465] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 190.750501][ T465] usb 1-1: can't read configurations, error -61 [ 190.890458][ T465] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 190.954070][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2370'. [ 190.966345][ T7713] rust_binder: Write failure EFAULT in pid:309 [ 191.077598][ T465] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 191.078908][ T7722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.091378][ T465] usb 1-1: can't read configurations, error -61 [ 191.124760][ T465] usb usb1-port1: attempt power cycle [ 191.410372][ T64] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 191.480401][ T465] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 191.505097][ T465] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 191.512805][ T465] usb 1-1: can't read configurations, error -61 [ 191.571004][ T64] usb 2-1: too many configurations: 247, using maximum allowed: 8 [ 191.581085][ T64] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 191.588660][ T64] usb 2-1: can't read configurations, error -61 [ 191.640351][ T465] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 191.664449][ T465] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 191.672311][ T465] usb 1-1: can't read configurations, error -61 [ 191.679343][ T465] usb usb1-port1: unable to enumerate USB device [ 191.720357][ T64] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 191.870980][ T64] usb 2-1: too many configurations: 247, using maximum allowed: 8 [ 191.880861][ T64] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 191.888452][ T64] usb 2-1: can't read configurations, error -61 [ 191.894880][ T64] usb usb2-port1: attempt power cycle [ 192.240301][ T64] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 192.260876][ T36] kauditd_printk_skb: 445 callbacks suppressed [ 192.260893][ T36] audit: type=1400 audit(452.243:42994): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.261738][ T64] usb 2-1: too many configurations: 247, using maximum allowed: 8 [ 192.267092][ T36] audit: type=1400 audit(452.243:42995): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.295458][ T64] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 192.299264][ T36] audit: type=1400 audit(452.243:42996): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.324034][ T64] usb 2-1: can't read configurations, error -61 [ 192.332063][ T36] audit: type=1400 audit(452.273:42997): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.386275][ T36] audit: type=1400 audit(452.273:42998): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.412204][ T36] audit: type=1400 audit(452.273:42999): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.437200][ T36] audit: type=1400 audit(452.273:43000): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.462064][ T36] audit: type=1400 audit(452.273:43001): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.487091][ T36] audit: type=1400 audit(452.273:43002): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.512245][ T36] audit: type=1400 audit(452.313:43003): avc: denied { ioctl } for pid=7721 comm="syz.1.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.520245][ T64] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 192.570839][ T64] usb 2-1: too many configurations: 247, using maximum allowed: 8 [ 192.579368][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 192.580982][ T64] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 192.610219][ T64] usb 2-1: can't read configurations, error -61 [ 192.618053][ T64] usb usb2-port1: unable to enumerate USB device [ 192.833060][ T7786] 9pnet_fd: Insufficient options for proto=fd [ 193.407688][ T7789] netlink: 'syz.0.2394': attribute type 63 has an invalid length. [ 193.415614][ T7789] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2394'. [ 193.425438][ T7789] gretap0: entered allmulticast mode [ 193.431645][ T7789] net_ratelimit: 22 callbacks suppressed [ 193.431661][ T7789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.655406][ T7806] cgroup: No subsys list or none specified [ 193.856916][ T7819] 9pnet_fd: Insufficient options for proto=fd [ 194.116925][ T7825] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 194.262372][ T7840] mmap: syz.4.2411 (7840): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 194.446052][ T7853] binder: Unknown parameter '' [ 194.563522][ T7858] rust_binder: Error in use_page_slow: ESRCH [ 194.563545][ T7858] rust_binder: use_range failure ESRCH [ 194.571124][ T7858] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 194.576875][ T7858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 194.585164][ T7858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:336 [ 194.694291][ T7863] netlink: 'syz.1.2420': attribute type 5 has an invalid length. [ 194.738449][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2419'. [ 194.754907][ T7863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=7863 comm=syz.1.2420 [ 195.115651][ T7869] rust_binder: 115: no such ref 3 [ 195.128006][ T7869] rust_binder: 115: no such ref 3 [ 195.134348][ T7869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 195.156744][ T7870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.829859][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 195.929477][ T7898] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60 sclass=netlink_xfrm_socket pid=7898 comm=syz.4.2429 [ 195.942314][ T7898] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=7898 comm=syz.4.2429 [ 195.954795][ T7898] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=7898 comm=syz.4.2429 [ 195.991939][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.003321][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.013984][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.029940][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.039065][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.050784][ T31] usb 1-1: config 0 descriptor?? [ 196.062401][ T31] hub 1-1:0.0: USB hub found [ 196.267571][ T31] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 196.300461][ T7916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.300491][ T7916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 196.321387][ T31] usb 1-1: USB disconnect, device number 15 [ 196.583161][ T7931] /dev/rnullb0: Can't open blockdev [ 196.647174][ T7937] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 197.029701][ T389] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 197.199691][ T389] usb 1-1: Using ep0 maxpacket: 16 [ 197.211920][ T389] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 197.223977][ T389] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.237057][ T389] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.246911][ T389] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 197.259793][ T389] usb 1-1: config 7 interface 0 has no altsetting 0 [ 197.266426][ T389] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 197.275539][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.285959][ T36] kauditd_printk_skb: 527 callbacks suppressed [ 197.285974][ T36] audit: type=1400 audit(457.273:43531): avc: denied { ioctl } for pid=7942 comm="syz.0.2440" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.320439][ T36] audit: type=1400 audit(457.273:43532): avc: denied { ioctl } for pid=7942 comm="syz.0.2440" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.344933][ T36] audit: type=1400 audit(457.273:43533): avc: denied { ioctl } for pid=7942 comm="syz.0.2440" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.370287][ T36] audit: type=1400 audit(457.273:43534): avc: denied { ioctl } for pid=7942 comm="syz.0.2440" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.395120][ T36] audit: type=1400 audit(457.333:43535): avc: denied { read write } for pid=6202 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.420349][ T36] audit: type=1400 audit(457.333:43536): avc: denied { read write open } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.445510][ T36] audit: type=1400 audit(457.333:43537): avc: denied { ioctl } for pid=6202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.471201][ T36] audit: type=1400 audit(457.403:43538): avc: denied { read } for pid=7960 comm="syz.1.2449" name="binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.494087][ T36] audit: type=1400 audit(457.403:43539): avc: denied { read open } for pid=7960 comm="syz.1.2449" path="/dev/binderfs/binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.525656][ T36] audit: type=1400 audit(457.423:43540): avc: denied { ioctl } for pid=7960 comm="syz.1.2449" path="/dev/binderfs/binder1" dev="binder" ino=33 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.600076][ T7961] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2449'. [ 197.612491][ T7961] fuse: Bad value for 'user_id' [ 197.617352][ T7961] fuse: Bad value for 'user_id' [ 197.627926][ T7961] rust_binder: Error in use_page_slow: ESRCH [ 197.627947][ T7961] rust_binder: use_range failure ESRCH [ 197.634040][ T7961] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 197.639695][ T7961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 197.647757][ T7961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:366 [ 197.700949][ T7943] rust_binder: 133: no such ref 0 [ 197.725021][ T389] usbhid 1-1:7.0: can't add hid device: -71 [ 197.740751][ T389] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 197.781186][ T389] usb 1-1: USB disconnect, device number 16 [ 197.828561][ T7972] rust_binder: got new transaction with bad transaction stack [ 197.828583][ T7972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 197.846081][ T64] rust_binder: 7968: removing orphan mapping 0:24 [ 198.449588][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.599519][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 198.606543][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.615221][ T31] usb 1-1: config 0 has no interface number 0 [ 198.621326][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.632218][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.641974][ T31] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 198.651027][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.660504][ T31] usb 1-1: config 0 descriptor?? [ 198.796994][ T8011] 9pnet_fd: Insufficient options for proto=fd [ 198.969471][ T64] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 199.121396][ T64] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.132576][ T64] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.142553][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.149222][ T64] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.158298][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.167783][ T64] usb 2-1: config 0 descriptor?? [ 199.322596][ T31] uclogic 0003:28BD:0094.0012: pen parameters not found [ 199.329720][ T31] uclogic 0003:28BD:0094.0012: interface is invalid, ignoring [ 199.338331][ T31] usb 1-1: USB disconnect, device number 17 [ 199.349752][ T8031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 199.356786][ T8031] rust_binder: 149: no such ref 1 [ 199.372016][ T8031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 199.750711][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 199.816534][ T64] usb 2-1: string descriptor 0 read error: -22 [ 199.947600][ T8080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=8080 comm=syz.4.2488 [ 200.202219][ T8087] __vm_enough_memory: pid: 8087, comm: syz.0.2490, bytes: 35188667056128 not enough memory for the allocation [ 200.219359][ T64] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0013/input/input38 [ 200.251995][ T64] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 200.453694][ T10] usb 2-1: USB disconnect, device number 23 [ 201.042409][ T8101] netlink: 'syz.4.2496': attribute type 21 has an invalid length. [ 201.050383][ T8101] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2496'. [ 201.121034][ T8108] netlink: 'syz.1.2494': attribute type 10 has an invalid length. [ 201.169929][ T8109] rust_binder: Write failure EFAULT in pid:161 [ 201.698577][ T10] rust_binder: 8146: removing orphan mapping 0:24 [ 201.738472][ T8170] overlayfs: failed to resolve './file1': -2 [ 201.758646][ T8172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.997241][ T8179] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2517'. [ 202.001482][ T8181] tipc: Can't bind to reserved service type 2 [ 202.542763][ T36] kauditd_printk_skb: 645 callbacks suppressed [ 202.542781][ T36] audit: type=1400 audit(462.524:44186): avc: denied { create } for pid=8203 comm="syz.2.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.603856][ T36] audit: type=1400 audit(462.554:44187): avc: denied { create } for pid=8203 comm="syz.2.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.648297][ T36] audit: type=1400 audit(462.554:44188): avc: denied { setopt } for pid=8203 comm="syz.2.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.694732][ T36] audit: type=1400 audit(462.624:44189): avc: denied { create } for pid=8210 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.738996][ T36] audit: type=1400 audit(462.624:44190): avc: denied { create } for pid=8210 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.751286][ T8216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8216 comm=syz.2.2529 [ 202.774673][ T8216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2529'. [ 202.778061][ T36] audit: type=1400 audit(462.624:44191): avc: denied { setopt } for pid=8210 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.806906][ T36] audit: type=1400 audit(462.624:44192): avc: denied { setopt } for pid=8210 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.826720][ T36] audit: type=1400 audit(462.624:44193): avc: denied { create } for pid=8210 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.845851][ T36] audit: type=1400 audit(462.624:44194): avc: denied { ioctl } for pid=8210 comm="syz.2.2527" path="socket:[37881]" dev="sockfs" ino=37881 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.870188][ T36] audit: type=1400 audit(462.624:44195): avc: denied { create } for pid=8210 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.936020][ T8186] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.2520'. [ 204.273914][ T8253] kvm: pic: single mode not supported [ 204.273962][ T8253] kvm: pic: non byte read [ 204.283935][ T8253] kvm: pic: non byte read [ 204.288405][ T8253] kvm: pic: non byte read [ 204.292909][ T8253] kvm: pic: single mode not supported [ 204.292921][ T8253] kvm: pic: level sensitive irq not supported [ 204.298382][ T8253] kvm: pic: non byte read [ 204.309047][ T8253] kvm: pic: non byte read [ 204.313575][ T8253] kvm: pic: non byte read [ 204.318075][ T8253] kvm: pic: non byte read [ 204.323421][ T8253] kvm: pic: single mode not supported [ 204.323516][ T8253] kvm: pic: non byte read [ 204.327305][ T8255] tipc: Started in network mode [ 204.329192][ T8253] kvm: pic: non byte read [ 204.334351][ T8255] tipc: Node identity f6a3f549f6c5, cluster identity 4711 [ 204.338489][ T8253] kvm: pic: non byte read [ 204.343112][ T8255] tipc: Enabled bearer , priority 0 [ 204.350219][ T8253] kvm: pic: single mode not supported [ 204.360722][ T8253] kvm: pic: level sensitive irq not supported [ 204.361101][ T8255] tipc: Disabling bearer [ 204.366738][ T8253] kvm: pic: level sensitive irq not supported [ 204.583280][ T8264] rust_binder: Error while translating object. [ 204.589470][ T8264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.595711][ T8264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402 [ 204.652634][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2548'. [ 204.675488][ T8277] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2547'. [ 204.686102][ T8277] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2547'. [ 204.736944][ T8281] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›Xò۵רѳlú¶uË9 [ 204.762897][ T8281] bridge0: port 3(veth0_to_bridge) entered blocking state [ 204.770104][ T8281] bridge0: port 3(veth0_to_bridge) entered disabled state [ 204.777320][ T8281] veth0_to_bridge: entered allmulticast mode [ 204.783650][ T8281] veth0_to_bridge: entered promiscuous mode [ 204.789690][ T8281] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.802001][ T8281] bridge0: port 3(veth0_to_bridge) entered blocking state [ 204.809127][ T8281] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 205.325595][ T8306] netlink: 'syz.1.2556': attribute type 16 has an invalid length. [ 205.333558][ T8306] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2556'. [ 205.387210][ T8308] veth1: entered allmulticast mode [ 205.658687][ T389] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.811546][ T389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.822029][ T389] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 205.830682][ T389] usb 2-1: can't read configurations, error -61 [ 205.900127][ T8308] veth1: left allmulticast mode [ 205.960849][ T389] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 206.067465][ T8334] fuse: Bad value for 'fd' [ 206.095137][ T8338] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2569'. [ 206.121401][ T389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.132144][ T389] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 206.140153][ T389] usb 2-1: can't read configurations, error -61 [ 206.146830][ T389] usb usb2-port1: attempt power cycle [ 206.451061][ T8366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.488557][ T389] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 206.533064][ T389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.547468][ T389] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 206.566113][ T389] usb 2-1: can't read configurations, error -61 [ 206.610108][ T8387] rust_binder: Error in use_page_slow: ESRCH [ 206.610130][ T8387] rust_binder: use_range failure ESRCH [ 206.617323][ T8387] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 206.623512][ T8387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 206.632131][ T8387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193 [ 206.643841][ T8387] fuse: Bad value for 'fd' [ 206.708577][ T389] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 206.742854][ T389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.753289][ T389] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 206.761042][ T389] usb 2-1: can't read configurations, error -61 [ 206.767500][ T389] usb usb2-port1: unable to enumerate USB device [ 207.414415][ T8423] netlink: 'syz.4.2599': attribute type 27 has an invalid length. [ 207.433883][ T8423] veth0_vlan: left promiscuous mode [ 207.439655][ T8423] veth0_vlan: entered promiscuous mode [ 207.446772][ T8423] veth1_macvtap: left promiscuous mode [ 207.452860][ T8423] veth1_macvtap: entered promiscuous mode [ 207.470509][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.477600][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.486314][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.493394][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.575871][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 207.575887][ T36] audit: type=1400 audit(467.555:44770): avc: denied { execmem } for pid=8427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 207.656119][ T36] audit: type=1400 audit(467.635:44771): avc: denied { read } for pid=8433 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.687289][ T36] audit: type=1400 audit(467.635:44772): avc: denied { read open } for pid=8433 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.712070][ T36] audit: type=1400 audit(467.635:44773): avc: denied { mounton } for pid=8433 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 207.733219][ T36] audit: type=1400 audit(467.635:44774): avc: denied { sys_module } for pid=8433 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.754696][ T36] audit: type=1400 audit(467.635:44775): avc: denied { sys_module } for pid=8433 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.775416][ T36] audit: type=1400 audit(467.635:44776): avc: denied { sys_module } for pid=8433 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.797974][ T36] audit: type=1400 audit(467.635:44777): avc: denied { sys_module } for pid=8433 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.818748][ T36] audit: type=1400 audit(467.785:44778): avc: denied { create } for pid=8442 comm="syz.2.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.837670][ T36] audit: type=1400 audit(467.785:44779): avc: denied { setopt } for pid=8442 comm="syz.2.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.844020][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.864786][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.872062][ T8433] bridge_slave_0: entered allmulticast mode [ 207.878856][ T8433] bridge_slave_0: entered promiscuous mode [ 207.888212][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.895286][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.902710][ T8433] bridge_slave_1: entered allmulticast mode [ 207.910164][ T8433] bridge_slave_1: entered promiscuous mode [ 207.956902][ T8449] netlink: 'syz.2.2608': attribute type 1 has an invalid length. [ 208.000874][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.007939][ T8433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.015232][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.022275][ T8433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.030463][ T6328] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.038095][ T6328] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.068416][ T64] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.085830][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.093134][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.106311][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.113404][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.123571][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.130657][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.189952][ T8433] veth0_vlan: entered promiscuous mode [ 208.245225][ T8433] veth1_macvtap: entered promiscuous mode [ 208.404594][ T8465] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 208.404616][ T8465] rust_binder: Read failure Err(EFAULT) in pid:207 [ 208.443600][ T8462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.463614][ T8467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 208.498234][ T8470] netlink: 'syz.1.2611': attribute type 4 has an invalid length. [ 208.515376][ T8462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 208.533938][ T8470] netlink: 'syz.1.2611': attribute type 4 has an invalid length. [ 208.568363][ T64] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.710431][ T8479] cgroup: Unknown subsys name 'net' [ 208.754448][ T8484] rust_binder: 6: no such ref 3 [ 208.759839][ T8484] rust_binder: 6: no such ref 0 [ 208.764700][ T8484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 208.798796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.819725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.831863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.843841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.855881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.867872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.879919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.891933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.903986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.915955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.372954][ T8500] rust_binder: Error while translating object. [ 209.372999][ T8500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 209.422037][ T8500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 212.078746][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 212.765359][ T36] kauditd_printk_skb: 314 callbacks suppressed [ 212.765375][ T36] audit: type=1400 audit(472.745:45094): avc: denied { mounton } for pid=8506 comm="syz.2.2624" path="/523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.900330][ T8508] incfs_lookup_dentry err:-13 [ 212.905043][ T8508] incfs: Can't find or create .index dir in ./file0 [ 212.933468][ T8508] incfs: mount failed -13 [ 212.970340][ T36] audit: type=1400 audit(472.845:45095): avc: denied { mount } for pid=8506 comm="syz.2.2624" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.020993][ T36] audit: type=1400 audit(472.885:45096): avc: denied { mounton } for pid=8506 comm="syz.2.2624" path="/523/file0" dev="tmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.807669][ C1] net_ratelimit: 197708 callbacks suppressed [ 213.807690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.807700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.807769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.813768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.825630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.837524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.849474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.861327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.873179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.885054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.817093][ C1] net_ratelimit: 157876 callbacks suppressed [ 218.817114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.817160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 218.823182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.835067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.847117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.859029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.877111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.883013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 218.894715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.906578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.677858][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 223.826465][ C1] net_ratelimit: 165385 callbacks suppressed [ 223.826487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.826577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 223.832564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.844434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.856459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.868282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.880273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.892261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 223.904005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.915924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.042028][ T98] sched: DL replenish lagged too much [ 228.835906][ C1] net_ratelimit: 164963 callbacks suppressed [ 228.835928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.835977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 228.841979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.853869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.865816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.877676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.889633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.901643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 228.913369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.925232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.347300][ T36] audit: type=1400 audit(490.327:45097): avc: denied { execmem } for pid=8510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 231.487137][ T6861] raw-gadget.0 gadget.2: failed to queue disconnect event [ 231.707675][ T36] audit: type=1400 audit(491.697:45098): avc: denied { execmem } for pid=8511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 231.876230][ T36] audit: type=1400 audit(491.787:45099): avc: denied { execmem } for pid=8512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 232.031447][ T36] audit: type=1400 audit(491.967:45100): avc: denied { execmem } for pid=8513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 232.297060][ T36] audit: type=1400 audit(492.277:45101): avc: denied { read } for pid=8514 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 232.437108][ T36] audit: type=1400 audit(492.277:45102): avc: denied { read open } for pid=8514 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 232.576361][ T36] audit: type=1400 audit(492.277:45103): avc: denied { mounton } for pid=8514 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 232.626703][ T36] audit: type=1400 audit(492.307:45104): avc: denied { read } for pid=8515 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 232.675771][ T36] audit: type=1400 audit(492.307:45105): avc: denied { read open } for pid=8515 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 232.732250][ T36] audit: type=1400 audit(492.307:45106): avc: denied { mounton } for pid=8515 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 233.845280][ C1] net_ratelimit: 136679 callbacks suppressed [ 233.845302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.845400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 233.851374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.863259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.875210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.887059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.899104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.911070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 233.922830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.934703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.676452][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 238.854674][ C1] net_ratelimit: 159375 callbacks suppressed [ 238.854695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.854715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.860777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.872636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.884615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.896614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 238.908355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.920213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.932170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.944022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.465209][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 243.864116][ C1] net_ratelimit: 159975 callbacks suppressed [ 243.864156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.864180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.864358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 243.870228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.882186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.894057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.906030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.917919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.930081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 243.941808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.873485][ C1] net_ratelimit: 163861 callbacks suppressed [ 248.873506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.873609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 248.879571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.891484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.903440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.915294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.927255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.939449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 248.951119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.963009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.882911][ C1] net_ratelimit: 162718 callbacks suppressed [ 253.882931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.882944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.883119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 253.889016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.900901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.912781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.924823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.936718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.948884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 253.960537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.892284][ C1] net_ratelimit: 163698 callbacks suppressed [ 258.892306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.892332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 258.898363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.910241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.922197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.934054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.946005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.946075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.958075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 258.969807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.532511][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 259.532529][ T36] audit: type=1400 audit(519.451:45117): avc: denied { sys_module } for pid=8514 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 262.983649][ T36] audit: type=1400 audit(519.491:45118): avc: denied { sys_module } for pid=8516 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 263.901692][ C0] net_ratelimit: 162515 callbacks suppressed [ 263.901713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.901747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.907973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 263.919709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.931559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.943507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.955365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.967342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.979361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 263.991075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.793811][ T36] audit: type=1400 audit(519.501:45119): avc: denied { sys_module } for pid=8515 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 266.392970][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 266.958711][ T36] audit: type=1400 audit(519.581:45120): avc: denied { sys_module } for pid=8517 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 268.911124][ C0] net_ratelimit: 170899 callbacks suppressed [ 268.911145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.911176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.917191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.929193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.941214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 268.952929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.964785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.976772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.988639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.000488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.920525][ C1] net_ratelimit: 177934 callbacks suppressed [ 273.920549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.920611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 273.926613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.938510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.950537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.962399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.974253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.986124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.998071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.009929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.929955][ C1] net_ratelimit: 164202 callbacks suppressed [ 278.929977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.929979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.930274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 278.936043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.947995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.959873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.971821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.983676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.995536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.007408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.311533][ T6328] bridge_slave_1: left allmulticast mode [ 281.451564][ T6328] bridge_slave_1: left promiscuous mode [ 281.901051][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.939369][ C1] net_ratelimit: 160207 callbacks suppressed [ 283.939390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.939545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 283.945466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.957347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.969333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.981206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.993050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.004919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.016926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.028762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.150192][ T6328] bridge_slave_0: left allmulticast mode [ 284.180168][ T6328] bridge_slave_0: left promiscuous mode [ 284.720425][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.948825][ C0] net_ratelimit: 159230 callbacks suppressed [ 288.948844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 288.949306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.954986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.966981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.978876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 288.990781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.002667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.014596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.026638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.038585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.958164][ C0] net_ratelimit: 165169 callbacks suppressed [ 293.958191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.958230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.964292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 293.976228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.988097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.000047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.011928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.023900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.035738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.047778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.967595][ C1] net_ratelimit: 164304 callbacks suppressed [ 298.967615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.967634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.973672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.985587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 298.997456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.009349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.021277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.033161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.045224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.057020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.795681][ T36] audit: type=1400 audit(560.786:45121): avc: denied { execmem } for pid=8520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 303.976977][ C0] net_ratelimit: 164991 callbacks suppressed [ 303.977000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 303.977006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.977056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.983074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.995080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.006973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 304.018804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.030735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.042632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.054557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.986412][ C1] net_ratelimit: 162616 callbacks suppressed [ 308.986434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.986686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 308.992496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.004376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.016374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.028318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 309.040143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.052017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.063964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.075833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.995806][ C1] net_ratelimit: 166305 callbacks suppressed [ 313.995826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.995921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 314.001883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.013822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.025798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.037647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 314.049504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.061370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.073319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.085189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.571638][ T36] audit: type=1400 audit(574.567:45122): avc: denied { execmem } for pid=8521 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 319.005232][ C1] net_ratelimit: 159015 callbacks suppressed [ 319.005253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.005470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 319.011332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.023203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.035287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.047140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 319.058976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.070838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.082786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.094663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.196290][ T36] audit: type=1400 audit(580.168:45123): avc: denied { execmem } for pid=8523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 320.552608][ T36] audit: type=1400 audit(580.548:45124): avc: denied { execmem } for pid=8524 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 323.686775][ T36] audit: type=1400 audit(583.678:45125): avc: denied { read } for pid=8525 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 324.014650][ C1] net_ratelimit: 153151 callbacks suppressed [ 324.014672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.014876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 324.020731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.032626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.044600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.056476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 324.068328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.080211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.092159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.104077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.196514][ T36] audit: type=1400 audit(583.678:45126): avc: denied { read open } for pid=8525 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.500198][ T36] audit: type=1400 audit(586.499:45127): avc: denied { mounton } for pid=8525 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 327.046204][ T36] audit: type=1400 audit(586.819:45128): avc: denied { sys_module } for pid=8525 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 327.546294][ T36] audit: type=1400 audit(587.039:45129): avc: denied { read } for pid=8526 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 329.024083][ C1] net_ratelimit: 161627 callbacks suppressed [ 329.024105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.024108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 329.024152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.030161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.042092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 329.054014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.065884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.077741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.089701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.101581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.273879][ T36] audit: type=1400 audit(587.039:45130): avc: denied { read open } for pid=8526 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 334.033467][ C1] net_ratelimit: 165059 callbacks suppressed [ 334.033488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.033534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 334.039548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.051490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.063476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.075335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 334.087165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.099038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.111038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.122921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.744552][ T36] audit: type=1400 audit(587.039:45131): avc: denied { mounton } for pid=8526 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 335.844795][ T36] audit: type=1400 audit(587.409:45132): avc: denied { sys_module } for pid=8526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 338.654864][ T36] audit: type=1400 audit(587.989:45133): avc: denied { read } for pid=8527 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 339.042906][ C0] net_ratelimit: 163236 callbacks suppressed [ 339.042927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.042957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.049236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 339.060869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.072711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.084677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.096555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 339.108407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.120275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.132223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.943341][ T36] audit: type=1400 audit(587.989:45134): avc: denied { read open } for pid=8527 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 343.113782][ T36] audit: type=1400 audit(587.989:45135): avc: denied { mounton } for pid=8527 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 344.052319][ C0] net_ratelimit: 163879 callbacks suppressed [ 344.052341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 344.052379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.058399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.070370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.082580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.094549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.106378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.118361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.130484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 344.142101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.762514][ T36] audit: type=1400 audit(595.029:45136): avc: denied { sys_module } for pid=8527 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 349.061760][ C1] net_ratelimit: 165569 callbacks suppressed [ 349.061781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.061796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.061841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.067857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.079969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 349.091706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.103547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.115423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.127397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 349.139242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.071151][ C0] net_ratelimit: 166216 callbacks suppressed [ 354.071172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 354.071196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.077229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.089195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.101055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.113020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.124869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.136842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.148956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 354.160567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.392787][ T36] audit: type=1400 audit(618.382:45137): avc: denied { read } for pid=8528 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 359.080585][ C1] net_ratelimit: 165623 callbacks suppressed [ 359.080607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.080634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.086660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.098874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 359.110417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.122306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.134294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.146183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 359.158027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.169903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.591743][ T36] audit: type=1400 audit(618.382:45138): avc: denied { read open } for pid=8528 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 364.090019][ C1] net_ratelimit: 166908 callbacks suppressed [ 364.090041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.090087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 364.096127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.107971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.119941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.131864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 364.143676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.155571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.167501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.179365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.099446][ C1] net_ratelimit: 160043 callbacks suppressed [ 369.099467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.099553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 369.105529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.117425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.129412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.141295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 369.153155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.165022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.176981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.188847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.455680][ T36] audit: type=1400 audit(633.454:45139): avc: denied { mounton } for pid=8528 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 374.108830][ C0] net_ratelimit: 165896 callbacks suppressed [ 374.108852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.108854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.108907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.114943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 374.126806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.138690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.150561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.162525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.174396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.186347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.981130][ T36] audit: type=1400 audit(635.204:45140): avc: denied { execmem } for pid=8529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 377.547874][ T36] audit: type=1400 audit(637.544:45141): avc: denied { sys_module } for pid=8528 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 377.880084][ T36] audit: type=1400 audit(637.874:45142): avc: denied { execmem } for pid=8530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 379.118256][ C1] net_ratelimit: 149522 callbacks suppressed [ 379.118277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.118455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 379.124356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.136222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.148194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.160074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 379.171936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.183798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.195757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.207619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.278710][ T36] audit: type=1400 audit(639.265:45143): avc: denied { execmem } for pid=8531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 384.127704][ C1] net_ratelimit: 170346 callbacks suppressed [ 384.127724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.127762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 384.133783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.145645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.157636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.169501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 384.181364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.193234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.205188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.217059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.018905][ T36] audit: type=1400 audit(647.015:45144): avc: denied { read } for pid=8533 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 388.388316][ T36] audit: type=1400 audit(647.015:45145): avc: denied { read open } for pid=8533 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 389.137148][ C1] net_ratelimit: 170335 callbacks suppressed [ 389.137170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.137332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 389.143222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.155090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.167094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.178964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 389.190796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.202670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.214617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.226498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.711016][ T36] audit: type=1400 audit(651.716:45146): avc: denied { mounton } for pid=8533 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 392.427399][ T36] audit: type=1400 audit(652.406:45147): avc: denied { execmem } for pid=8534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 393.428096][ T36] audit: type=1400 audit(652.416:45148): avc: denied { sys_module } for pid=8533 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 393.857257][ T36] audit: type=1400 audit(653.496:45149): avc: denied { read } for pid=8535 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 394.146526][ C1] net_ratelimit: 164558 callbacks suppressed [ 394.146546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.146559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.146620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 394.152616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.164487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.176352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.188339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.200171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.212120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.224000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.498066][ T36] audit: type=1400 audit(653.496:45150): avc: denied { read open } for pid=8535 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 395.176440][ T36] audit: type=1400 audit(653.886:45151): avc: denied { mounton } for pid=8535 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 395.318193][ T37] INFO: task kworker/0:1:10 blocked for more than 124 seconds. [ 395.325789][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 396.496849][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.505557][ T37] task:kworker/0:1 state:D stack:0 pid:10 tgid:10 ppid:2 flags:0x00004000 [ 396.517301][ T36] audit: type=1400 audit(654.536:45152): avc: denied { sys_module } for pid=8535 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 397.976976][ T37] Workqueue: events_power_efficient reg_check_chans_work [ 397.984083][ T37] Call Trace: [ 397.988962][ T36] audit: type=1400 audit(656.277:45153): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1541]" dev="pipefs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 398.458832][ T37] [ 398.461812][ T37] __schedule+0x1322/0x1df0 [ 398.947616][ T37] ? __sched_text_start+0x10/0x10 [ 398.952699][ T37] ? wake_up_process+0x14/0x20 [ 398.971382][ T37] ? kick_pool+0x3d8/0x550 [ 398.975843][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 398.981102][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 398.986331][ T37] schedule+0xc6/0x240 [ 398.990403][ T37] schedule_preempt_disabled+0x14/0x30 [ 398.995865][ T37] __mutex_lock+0x81e/0x1b50 [ 399.000492][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 399.007317][ T37] ? tg_unthrottle_up+0x980/0x980 [ 399.012360][ T37] ? kvm_sched_clock_read+0x15/0x30 [ 399.017611][ T37] ? sched_clock+0x44/0x60 [ 399.022034][ T37] ? sched_clock_cpu+0x75/0x400 [ 399.026904][ T37] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 399.032807][ T37] ? __cfi_sched_clock_cpu+0x10/0x10 [ 399.038129][ T37] __mutex_lock_slowpath+0xe/0x20 [ 399.043156][ T37] mutex_lock+0x102/0x1c0 [ 399.047506][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 399.052356][ T37] ? __switch_to+0xc7b/0x1310 [ 399.057054][ T37] rtnl_lock+0x19/0x20 [ 399.061131][ T37] reg_check_chans_work+0x8c/0xce0 [ 399.066259][ T37] ? _raw_spin_unlock+0x45/0x60 [ 399.071117][ T37] ? finish_task_switch+0x13a/0x780 [ 399.076337][ T37] ? __switch_to_asm+0x3d/0x70 [ 399.081106][ T37] ? __cfi_reg_check_chans_work+0x10/0x10 [ 399.086843][ T37] ? __schedule+0x132a/0x1df0 [ 399.091518][ T37] ? kick_pool+0xad/0x550 [ 399.095856][ T37] process_scheduled_works+0x7d5/0x1020 [ 399.101443][ T37] worker_thread+0xc58/0x1250 [ 399.106134][ T37] kthread+0x2c7/0x370 [ 399.110204][ T37] ? __cfi_worker_thread+0x10/0x10 [ 399.115321][ T37] ? __cfi_kthread+0x10/0x10 [ 399.119931][ T37] ret_from_fork+0x64/0xa0 [ 399.124350][ T37] ? __cfi_kthread+0x10/0x10 [ 399.128965][ T37] ret_from_fork_asm+0x1a/0x30 [ 399.133740][ T37] [ 399.155968][ C1] net_ratelimit: 160907 callbacks suppressed [ 399.155985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.156014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.162055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.173920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.185782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.198009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 399.209610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.221477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.233438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.245315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 399.297254][ T37] INFO: task kworker/u8:14:6333 blocked for more than 128 seconds. [ 399.305180][ T37] Not tainted syzkaller #0 [ 399.486224][ T36] audit: type=1400 audit(656.277:45154): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1541]" dev="pipefs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 399.757219][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.796611][ T37] task:kworker/u8:14 state:D stack:0 pid:6333 tgid:6333 ppid:2 flags:0x00004000 [ 400.546433][ T36] audit: type=1400 audit(656.277:45155): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1541]" dev="pipefs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 401.888035][ T37] Workqueue: ipv6_addrconf addrconf_dad_work [ 401.894087][ T37] Call Trace: [ 402.486592][ T37] [ 402.489573][ T37] __schedule+0x1322/0x1df0 [ 402.494085][ T37] ? __sched_text_start+0x10/0x10 [ 404.165425][ C1] net_ratelimit: 159540 callbacks suppressed [ 404.165446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.165803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 404.171507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.183391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.195389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.207269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:15:0b:c3:d0:fd, vlan:0) [ 404.219108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.230979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.242942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.254809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)