last executing test programs: 2m36.695738629s ago: executing program 0 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000004a00)) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)) rt_sigprocmask(0x1000000, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req={0x80000000, 0x6, 0x7, 0x1}, 0x10) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000a40)=0x2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="8001000010000100fdfffffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000df0b000000000800ffffff7f030000000b00000027bd7000fc3f00000a0004004400000000000000480003"], 0x180}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r7, r4, 0x0, 0x80000000) 2m36.520795203s ago: executing program 0 (id=167): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x6, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x6000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0x10, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0x3000, 0x2004, 0xf, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x6c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.335446818s ago: executing program 0 (id=168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1f) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000040f8030003000040"]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040)) setresuid(0x0, r8, 0x0) (async) setresuid(0x0, r8, 0x0) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_setup(0x5e7f, &(0x7f0000000000)) io_submit(r2, 0x0, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000100)={{0x0, 0x2, 0x1, 0x8, 0x1, 0x200, 0x10, 0x3, 0x8, 0x200, 0x2, 0x20, 0x4, 0x80000001}, 0x18, [0x0, 0x0, 0x0]}) 2m36.094585187s ago: executing program 0 (id=170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x5) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mmap(&(0x7f0000373000/0x4000)=nil, 0x4000, 0xc, 0x4010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x2, 0x2, 0x5, 0xffffffffffff8000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="f12c571b6ee978c16aa4579b97d68abe5f946e497d55f465e1b3e3b129c5dd9646c32a45b4dd0ad3289ff2347a72a2", @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m36.023529383s ago: executing program 0 (id=172): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x1, 'veth0_vlan\x00', {}, 0x7f}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000140)={0x7, 0xb, 0x2}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000240)=@buf={0x8d, &(0x7f0000000180)="1330c1c248a9b7b13e9bf20d21d77484f0e4986ba3d161deec6b3064dd1c700f93387b45e731113f45896961ddba9b3e4c2043506c721e50950ead76032f3d40eea6eb0276976e76c2b74705df83622936a94897a50c7c43bcdf883cb2678a11cb3b3c05b0f55b5ae9281c20a161d4d0943326c5af6e3e8170137f2a1ad47aad27a833f2668f89f82c70033f30"}) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$sock(r2, &(0x7f0000001d80)=[{{&(0x7f0000000280)=@isdn={0x22, 0x0, 0x6, 0x3, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="6ef0c74536e79d29447ce09869705b025cb6a34303fe28169d9c893aba9a2e917f9b3eb1bc64066100b31e09bf1a8b63c54a02029548ed2079133a096f0bae7461bbf3006546ab46e65ce28aaae37044bf4e50d23120f015fe47bc108b3f595585a9954cd5959bc47df3cc3d3b48a6c42722732c37d2365c2f4766d5af0852d1ad48e451ef372402ba13077c95ce89d4c26c9975d92d59007921348f743903a5c4ec378a97b83b436c66c8ecfdcba82e2f826b29ca767036fb45f3c99cbafca0ae16d50926a5a7399a2a570473453940b788a085094eb99b7e9b5c575df5d1fccb4d4b1d1c951c0759de901854c95516183734eb", 0xf4}, {&(0x7f0000000400)="e3848647a19516b913940b55920ace98c099a407a96ae0b6e493ce2869a80bed27f69833a1684270e103cdea5c3453aeaa48862d21f60f19c688ba8d620e107f9979c096d2a01fad8d453bd4a175e14447f6b0c96e78887a62e2af44266c063728908c9f2eea107b4eb82887b2e8a6472146d02b38105e9e27b439878db7a434387aa348da87ccd70d48c188568c0689e64e0ad20f537a78984936529d7f53360c94089929bc1224d7b6179bcc21372874071f3ac1a2a5fbc5ed6ea3e8c932aa496443db4ddde26414d101e4491536a7d51317b6025dd5364187df28154eb00e081654c59550938989ac2aa7f01b18", 0xef}], 0x2, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}, {{&(0x7f0000000580)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="12edbb25b378a76ff82b96ec11596cd052bfc48a67af7b33ebb861fb79d83d9d077c94010ca9dabb8b1841cb13e0c9107563489356e289a557edda17232110c6bb7eaedfa4cb6603684c02923fd4e675555163f23ece04d0191b1ae3b03fa3fe7de853a9f57b0e0a2f7ca47024089e4612d7045c6b8ab011bce4bed00be5d33fef1dc3f2ea44f1bd0535ec98ad07f412309d574bc41e9f7a2703f98814411a01efd9533d36b8e32b9a1c697793430d2d56e42606e9ccec124d27bcc330c600fcfa816f83ba797d64f6273c3080169683a78b37452e1b1b4c92d61c79ed660ab0a7e48a6c30184c72b2c91c1dd05a64da684bf646a0801e74187651d33d4d", 0xfe}], 0x1, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xf50}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14}}], 0xa8}}, {{&(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x3, 0x3, 0x4, 0x3}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000880)="55e6ecd34933d5eba088ea5db884499d9c90b2c0228c1b2059e210b77b139d87fc312615d8128c4a0f2815a4eeb99fde5fbb046becf201f4ed05", 0x3a}, {&(0x7f00000008c0)="55f95470567ff5826b4e27a1a075d82bed3900e3c11db3c2f78cca9464d1899764a3be1b532aa808a57d53887b0f0cadb8d273333493f7e7fb40249f24aebaf710711db19d71cb840a08e26d91ef4dc0", 0x50}, {&(0x7f0000000940)="a532e0e1ee8840e08248f11add09b06c827e46d2b5478d6c89b11e629213c2b747e9", 0x22}, {&(0x7f0000000980)="94e0f3d10e96136392b78525647b8d63fca61fe90bfd43547064b595edb80b278b13844babf8e0feaee13e642c83daa84e5081a6008ae9ac25a22ef5c3f6b78c396874b76e80a46c56904756c7938c0c257d76fd5398f96a5b73a232817dd9e4a3a0a63d5f4c74c468ff7c8954f2ad39facab827d57612c425ed59121572f228b8dc9dc07270a8fbd1424435", 0x8c}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="977a040cdcfa1f668bc6e1e36d23824781e477461735bba9e29027da8402b7829691bff45654181f6b6ec2321a071dae9645bb1afcf80e1aaf63f15d5e8f10507a096526a91e9f3ee31fb5fd391a03e52bbbdb4d0053b5f7c24f36c3797f67d378b8716bf271082c82247d8f438bddff0a3905d36a2cb146e661c2b799632a8118ee97126bce521aba018fc06d0e53fdea86be3cede69b953280e3d4a9da2b476cce", 0xa2}, {&(0x7f0000001b00)="46e5f1001d922e7ab494ca534541892369ebcb55b61b4387c687e61c492bad9ae653ed01accfc3dbbdd41b1649130872270c056b3a1eff2e57fdc5af12c91fff0cfc5ec38e0e535e25ed027b9f015cfa18c8bb73adff3dbc028314feccd1cfb6984fb7cfea8e3f73072a6c9cc92c291e213e20bd03660b6dbd15acca268502d2b463107c31034c64d6825b26e0ad60b52aa770f166923cdcfb936719fd6b2b1d8ba245e5692afd54741281305218223f5c70d27bd2ebad37d1d3ef221baf018bb2ef42a9", 0xc4}, {&(0x7f0000001c00)="893e157fd7ef76e1d3acff7fbea5e7b0167f64c50f3cb76bee66c85592af107a98ad1814ab4f020f2a65a821ce36d41413772c9582ee2c6f9430a15070baa5ecc3c95e117d8c2a2ae6ebaa6151125ca208fb2efce4de61c516df2e367a027dcde3d9bb3533448bb4df21e6f93c5c5e97", 0x70}], 0x8, &(0x7f0000001d00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1e2c7b06}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}], 0x3, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001e40)=0x0) write$cgroup_pid(r0, &(0x7f0000001e80)=r3, 0x12) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001ec0)) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4080) getpeername$unix(r0, &(0x7f0000002000), &(0x7f0000002080)=0x6e) pipe(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000002140)={0x5, 0x30, '\x00', 0x0, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = accept4(r0, &(0x7f0000002180)=@qipcrtr, &(0x7f0000002200)=0x80, 0x40800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000002240)={0x6, 'veth1_to_team\x00', {0x7628}, 0x3}) sendmsg(r2, &(0x7f0000003780)={&(0x7f0000002280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002300)="9bee182d85cfa19f2de6fa3936e9b1cbf2c72614983cba16310d5bd4", 0x1c}, {&(0x7f0000002340)="f683323ba1fbcb1dcca596bba4254742e2efb8d18c430f6949f293537928f9ddf18db12623eed25a3b8c461f30fc2e3881dc45f7280d44d8933598f79a047a15bb4c6615ea13b6e0ef6aa32b6358e89cf48e86e0fdf7", 0x56}, {&(0x7f00000023c0)="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", 0xfb}, {&(0x7f00000024c0)="4e24ae2442b5694df1b930e8490b93964cf8073d503237e554f578974f0ed35f628fd50f37b8bec269a1a38e03fdae1c0f674bed90aa0592e776833241671399cc2a071cd41747f490d857a9179512cbd85f04408ca9edbfc11fa35fa9d26224e3b15557ba92d20962dbb19b40fdd550ee", 0x71}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="dcb406081debe4d6f8f62e1f455ff38b052b46e85b2d295d0b71f296bff2f8dad1564fc26d55be531efb995656cf80598b344ab3ee3db1464f88569b962fee4b33e48f83dcc1912acc7e531590884ed9f8989a95de1641654b4040a222430cff13a9829e52f1e81ed8e7bce8fd5ce4d4b13c27141e6d610d5c439190fc5678820650e845d22ac51ac3478d79ae721b3b81316d9b52bc078dacffd950bcbb3b9a68314df9a15d71576da1de3c934629cb83f454eec478417915247471", 0xbc}], 0x6, &(0x7f0000003680)=[{0x98, 0x0, 0xfffffeff, "e460245bd7d4e1c7e7bf48ade1a3cb81b533677d8f3172a9c25e974001402ce78c93c0a6f9cb8b7b371bb5a563f1b506d5b22493f241a9d14ccd30951363e4328bbc13a2203e3f041e584a6767b62124db9434ee8b3abc3fe1358d5be9b6ebfeff941db0a637f74f45eebd266c8c20a704d0de1154e1b65082cb7cbd7233050bbfe35e7f"}, {0x68, 0x0, 0x5, "ab9fe5b935d7e6f9c6b6d384d922b324d3eea8a3f410cde46ea2287d977e79eee052b3a449c8837364af8160b2f0fc06782cf8a981486ed65244a81430ff2cb93be1fd459ec0df5b3b41ff0366399acfd5c179c1f4f9ca89"}], 0x100}, 0x20000091) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000037c0)={0x0, "202aabcb0f1c936cf80cf9e61d11c42d"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f00000047c0)={0x0, 0x81, 0x1, [0x6, 0xae10, 0x1, 0x1, 0xcea], [0xfffffffffffffee9, 0xd, 0xd, 0x3, 0x3ff, 0x100000001, 0x9, 0x6, 0x40, 0xc245, 0x73b, 0x0, 0x8, 0x3, 0x7fffffff, 0x5, 0x71b, 0x91d, 0x5, 0x97, 0x10, 0x2dc, 0x9, 0x400, 0x9, 0x40000000000, 0x1, 0x387, 0x1, 0xffff, 0xbdd6, 0x8, 0x6, 0xc, 0x7, 0x9, 0x4, 0x2, 0x8000000000000000, 0xffff, 0x55, 0xffffffffffff8001, 0x4, 0x4, 0x7, 0x0, 0x0, 0x1, 0x9, 0x101, 0x5, 0x81, 0xfffffffffffffff8, 0x8, 0x4800000000, 0x2, 0x7ff, 0x0, 0x101, 0x6, 0x8000000000000000, 0x100000001, 0x1, 0xfffffffffffffffd, 0x346a, 0x8, 0x5, 0xaedb242, 0x1, 0x100000000000000, 0xff, 0xfffffffffffffff8, 0x9, 0x7, 0x2, 0xff, 0x9a, 0x6, 0x9, 0x800, 0x7, 0x8, 0x9, 0x713, 0xffffffff, 0x2000000000, 0x800, 0xe, 0x6, 0xffff, 0x6, 0x3, 0xffffffff9a1d68a6, 0x2, 0x1, 0xc9f, 0x3, 0x1, 0x10, 0x0, 0x45, 0x4, 0x6, 0x7, 0x2f0, 0xeb4c, 0xb4b, 0x5d, 0x9, 0x3, 0x7, 0x4, 0x9, 0xf40, 0x5, 0xc8a1, 0x8, 0x2, 0x9, 0x7, 0x1]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000004c00)={0x0, 0x0, {0x1, @usage=0xffffffffffffffc2, r7, 0x0, 0x1, 0xffffffffffffff1e, 0x2, 0x9, 0x1, @usage=0x8, 0x8, 0x0, [0xffffffffffff0000, 0x8001, 0x7f4bcbf2, 0x7, 0x6]}, {0x4, @struct={0x8, 0x1}, 0x0, 0x59a, 0x761, 0x0, 0x4, 0x0, 0x81, @struct={0xfff, 0x2}, 0xf, 0xfffffffb, [0x18, 0x5, 0x4, 0x1, 0x2, 0x2]}, {0x4, @usage=0xc445, r8, 0x200000000000000, 0xfffffffffffff85e, 0x4, 0xffffffff, 0xffffffff, 0x20, @usage=0x30000000000000, 0x5, 0x10000, [0x4, 0x8000000000000001, 0x3, 0x915, 0x3, 0x100000001]}, {0x80000000, 0x6, 0x10}}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000005000)='*\\\x87\x00', &(0x7f0000005040)='./file0\x00', r5) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000005080), 0x2, 0x0) fcntl$setsig(r9, 0xa, 0x22) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000050c0), 0x400, 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000005100)) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000005140)=0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000005180)={0x0, 0x8, [0x0, 0x5, 0x8, 0x3, 0x2, 0x7]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x3, 0xa, 0x1) ioctl$RTC_AIE_ON(r4, 0x7001) 2m35.981762966s ago: executing program 0 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x957acd2f5556811e}], 0x0, 0x0, 0x0}) 2m35.896128493s ago: executing program 32 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x957acd2f5556811e}], 0x0, 0x0, 0x0}) 2m35.370768556s ago: executing program 4 (id=174): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x2000200b}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7b983e6c727d6b63, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x2000200b}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7b983e6c727d6b63, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 2m35.280760943s ago: executing program 4 (id=183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x80}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x3, r0, 0x5}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 2m34.428819402s ago: executing program 4 (id=199): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000040)=ANY=[]) 2m34.427474902s ago: executing program 4 (id=201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x90) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4088}, 0x48000) 2m34.395429495s ago: executing program 4 (id=202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xea7, 0xa) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3020c1, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0xd, 0x0, 0x5, 0x2000000, 0x10, "0062ba5d8200000000000800"}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) r4 = syz_open_pts(r2, 0x12280) dup3(r4, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) 2m19.430195204s ago: executing program 33 (id=202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xea7, 0xa) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3020c1, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0xd, 0x0, 0x5, 0x2000000, 0x10, "0062ba5d8200000000000800"}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) r4 = syz_open_pts(r2, 0x12280) dup3(r4, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) 2m16.3808s ago: executing program 5 (id=363): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000380)=0x2, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400cf00", @ANYRES16=r4, @ANYBLOB="410000000000000000000100000000000000014100000018001704000000000000005974683a76"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r6 = openat(r3, &(0x7f00000003c0)='./file0\x00', 0xc0000, 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x91) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@verity_require}, {@userxattr}]}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000480)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x32, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200000b0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r9) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x5501, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf25870000000c009900fe0000006c0000000600480031000000060048000a000000060048001e00000036002a00710701ff0100010701831f100a00000007000000ffffffffffffd00000000406cf0800000500000039002a007606bd011800090004060804a70001043c04000230026804000006002a010768040a000300720603030303030372060303030303030000000a00060008021100000100"/178], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffedb, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 2m15.688817986s ago: executing program 5 (id=374): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xe0a40, 0x0) mmap(&(0x7f00001ab000/0x3000)=nil, 0x3000, 0x1000005, 0x830, r3, 0x656b6000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r7, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40103d0b, &(0x7f0000002200)={0x0, 0x4}) mlock(&(0x7f0000858000/0x1000)=nil, 0x1000) 2m15.627463691s ago: executing program 5 (id=375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioprio_set$uid(0x3, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m15.444765836s ago: executing program 5 (id=380): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/227, 0xe3}], 0x1}, 0x10}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54010000100001"], 0x154}, 0x1, 0x0, 0x0, 0xc000}, 0x4810) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f00000008c0)=""/22, 0x16}, {&(0x7f0000000900)=""/28, 0x1c}, {&(0x7f0000000940)=""/89, 0x59}, {&(0x7f00000009c0)=""/84, 0x54}], 0x9, &(0x7f0000000b00)=""/134, 0x86}, 0x5}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/1, 0x1}, {&(0x7f0000000c00)=""/44, 0x2c}, {&(0x7f0000000c40)=""/40, 0x28}], 0x3, &(0x7f0000000cc0)=""/131, 0x83}, 0x3}], 0x2, 0x40000040, &(0x7f0000000e00)={0x0, 0x3938700}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open$dir(0x0, 0x101800, 0x212) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2d4, 0x8, 0x9, 0x101, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0xa}, [@generic="5b52870a5ad009e5bd04bd424b611fa546461fdff15e8c3e2f75432e00cea236a2fa5eefb31533fb8315e0ccd56f9be9cf677458af30614cc2311e15aa829eee574982b3d3b36f35972e1de8b87a9aec37d8d7f4adb9a6efcf7800c553bb1f153affaaefbbce46f5289f7266c683cfa6f9405eb0f72763eb7f999d2928e95cff02cb9ca3b7b45d519ccc72e42db01ca5", @generic="2a6f78c9bebebfe65d1aa4f0a4cbd8eaf5757b0c20cc56c6f6feeeb56183f7326a31c5e4df7197697f6e8c48dc02edb8a2d168f5fab37aed73eec695ec2823e655fcb165dd98e6c067b24bc88ddf2afc9e6c1beed13d033c7ece1be618f8d034cd4edba1a531e072708ab8695ec5119591051d1905d51a205d464d8f7ea92b588899288c74b454d18606ff61e79721d4f3a78c97b583ddda2f22e9344869ff57dd6b24439ace203f543f5507abe94164414e9d", @generic="45ecaddcddca66072c950abe516a2f2cd362a745fb8dd9fe45e4f0e01a7f3bb8f0eaadac1c652e0e897f94a114adca4cc479182520d155314b2d6776c7c56421796a81938ca9c706b91a97f0b535939f838550855450c5431b59a6d703ed2d192f13b40bfb7b94622873ca3c8d5d732023077e1b93b20613ad90e3d2525d53e7e38306beee701376928a3fcc4fbf1ed44749383552d6f9928e0489780d372df175d673cd4707af7d3e6f", @typed={0xcf, 0x82, 0x0, 0x0, @binary="048df31477e432453c5debef0ff1c8e9a41198116297eebb8876884f8e817297e8d3043741e7d11b7e9d2628fb61db269c3b854aff25bbffabca936d52eddb95d6292bacd6af45714eaff52ac4999c73f27be299abcdc06ee8f69f9af1de489f1d6d25b88f37efdbc7372833ea15ad0865a1d41f1e24d64e6d59aeb0fc1feb7c4f5308296c7833aad51031df2d914e87c109a1bca5a4dd98d7148895408f1504317a0010896ced4b5febccc1bd6b3ecb2041879e1b10075f7df2bca619f567702b11b6940c172f98838385"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) 2m15.39908919s ago: executing program 5 (id=381): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@mcast2}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m15.27013136s ago: executing program 5 (id=387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x5) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x20, 0x0, &(0x7f0000000ac0)=[@clear_death, @free_buffer={0x40086303, r1}, @enter_looper], 0x59, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1d85699694d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x6}, @fda={0x66646185, 0x6, 0x0, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/132, 0x84, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m15.195482656s ago: executing program 34 (id=387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x5) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x20, 0x0, &(0x7f0000000ac0)=[@clear_death, @free_buffer={0x40086303, r1}, @enter_looper], 0x59, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1d85699694d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x6}, @fda={0x66646185, 0x6, 0x0, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/132, 0x84, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 51.648981097s ago: executing program 1 (id=1767): open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x7, {0x7, 0x23, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x5085) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000001440)) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000200)={r4, 0x1, 0x6}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@handle={0x73682a85, 0x100a, 0x800003}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 50.068274024s ago: executing program 1 (id=1791): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x20000) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(r0, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 50.006659699s ago: executing program 1 (id=1793): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="660f3815dcb8000000800f23d80f21f835400000d00f23f8f4c4c15c144c850766b8d5008ed00f067100b9b20b0000b8fa7e0000ba000000000f3066baa000edb9550b0000b88b060000ba000000000f30", 0x51}], 0x1, 0xb, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x122, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x9eab867c51d5e7a3, 0x40, 0xa2, 0x9b, 0x8, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "6c652397e51374493fb12a3e0c6d305302ae46e81123eb78"}}]}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0xfffffed6, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe1579650a78a34d6, &(0x7f0000000040)=0x10001, 0x4) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x61) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0xfeba, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0xcf}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 49.473603502s ago: executing program 1 (id=1824): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000b2c000/0x2000)=nil}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 49.354832012s ago: executing program 1 (id=1825): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xf74afb67edcebf00, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x6, 0x1, 0x3}}) 49.298025896s ago: executing program 1 (id=1826): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000340)="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", 0xfc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x88a8}, @val={0x0, 0x4, 0x5, 0x2, 0x2, 0x7}, @x25={0x1, 0x0, 0x17, "92ebf17f54d39625bdbc9a54c03a3b569b954628be1092328e74d6fc44bcc71f35c971c12b473de1dece6a1854b63bc288ed27510c94ef30ccd09077c79b2fa8c23e47df913774ed71486b4d3bc59ebbead379ab9b3ad7f85dc47984767f1add3e270c95c8aba414b0b97c8961a8973241b85e9c4d00fbd9ed40ee5aa4cc976c05dd77d376a6cee782e90ea589175a16a31ac0c40be11e0f"}}, 0x2c) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0xf, 0x9}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x3e4, 0x20, 0xe}, 0x2f) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) inotify_init() bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="7365636c6162656c2c003a4971251ac756bffc679a68f246ba1d597c559b273255c03956f6b3b707b4cad7af3b9c6c1c75399ba7ebbc3f317e7b258e37daee8b330e3b7d90e00ebee52dbb27a70b78dabad6f7ba720c16b195f852dc6e5781c354b7d2503751b9a8a27dc2ddb0d02f3b221622ba5e1d6ce04b291926e00fe2eae02e24aa3eedd4485fee774a8bf3068e8d52adedd7ba1743f056a6401741c23dfac4f4542017c84b76086f837c6d68c8fa385d76a9966423b663c1c9ec912e5502b351dce99d9f8075ff900ac5594ad3dc53f07a"]) 49.104901512s ago: executing program 6 (id=1832): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x6, 0x8, 0x140, 0x4690, 0xf, "4a7da32282954ad3306d7e645adab79eb978b0"}) mmap(&(0x7f0000889000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x81365000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 48.977481602s ago: executing program 6 (id=1835): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) r1 = eventfd(0x3) r2 = eventfd(0x2) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x6, 0x3, r2}) r3 = signalfd(r1, &(0x7f0000000080), 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00', 0x800}) rt_sigsuspend(&(0x7f0000000100)={[0xd315]}, 0x8) ioctl$TIOCNXCL(r0, 0x540d) fcntl$setstatus(r3, 0x4, 0x42800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) fcntl$setown(r2, 0x8, r4) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x4840, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000200)) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000240)=0x8, 0x4) fcntl$setown(r0, 0x8, r4) rt_sigaction(0x34, &(0x7f0000000300)={&(0x7f0000000280)="8877020f1810f3e10ec401957d4f04f3af44fac4a2358e2f2e470fb0c6f3460fd6cf8fa810a2560e06", 0x4, &(0x7f00000002c0)="6464360fae7705d130c42121e2c8c4c25d9a750c660f38015a00c42151f909c40189fca700000000c4032d694b0000f343af6666470f5b5312", {[0x3]}}, 0x0, 0x8, &(0x7f0000000340)) socketpair(0xb, 0xa, 0xd, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000003c0)=[{r6, 0x8100}, {0xffffffffffffffff, 0x18}, {0xffffffffffffffff, 0x84}, {r1, 0x42}, {r3, 0x211}, {r1, 0x8208}], 0x6, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000440)={[0xd32]}, 0x8) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000480), 0x20300, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000004c0)) rmdir(&(0x7f0000000500)='./file0\x00') write$cgroup_subtree(r3, &(0x7f0000000540)={[{0x2b, 'blkio'}]}, 0x7) r8 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000580)={r3, 0x0, 0x1000000, 0xfffff000}) dup2(r0, r8) r9 = open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x1c1) rt_sigaction(0x31, &(0x7f00000006c0)={&(0x7f0000000600)="c461f8ae90260000000f177b4a0f02d4f00fbb823d28cabdc482b58e20c4a27d9e62892645dc7b00c461a1572365450f5ccf44de5f73", 0x8000000, &(0x7f0000000640)="c483b55deb3a660fec12c48279799800088041460f01875e660000c442113c25238e0000c4239d6fc176d9f46647d8b42d447d8bd766f346d8a30d0000008f6978c36c3000", {[0x5e]}}, 0x0, 0x8, &(0x7f0000000700)) syncfs(r6) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000000740)={{0x0, 0x8, 0x1, 0x100000000, 0x8000, 0x4, 0x80000001, 0x101, 0x10000, 0x6, 0x0, 0x9, 0x7, 0x1, 0x7ff}}) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000001740)={{r10, 0x7fffffffffffffff, 0xf674, 0x8, 0x4, 0x0, 0x9, 0x9, 0x9, 0xe5e, 0x2, 0x4, 0x66, 0x7fffffff, 0x5}}) 48.75674686s ago: executing program 2 (id=1840): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async, rerun: 64) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) (rerun: 64) madvise(&(0x7f0000b75000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) madvise(&(0x7f00008ec000/0x2000)=nil, 0x2000, 0x4) (async, rerun: 32) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x0, 0x80000001, {0x77359400}, {0x77359400}, {0x1}, 0x1, @canfd={{0x2, 0x1}, 0x4, 0x7, 0x0, 0x0, "9c7138fdcef83aaa4d707abcee271028495a5ae4ff5177bf939433b16a41a05365ad94947c9b35ed90ce74953916eca8302006737f82531616f44b8017f5e643"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x404c800) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000d, 0x80010, r1, 0x4052c000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) (async) readv(r3, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @remote}, {0x1}, 0x2e, {0x2, 0x4e22, @empty}}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000048c0)) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 48.220412743s ago: executing program 6 (id=1841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r1, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x4110, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) listen(r2, 0x7fffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 48.185133546s ago: executing program 3 (id=1842): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) ioctl$SIOCSIFHWADDR(r0, 0x40305839, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r3 = userfaultfd(0x80801) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000540)=[{0x6, 0x6, 0x1, 0x2e3}]}, 0x10) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0xb, 0x0, &(0x7f0000000040)) flistxattr(r0, &(0x7f0000000500)=""/5, 0x5) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000001c0)={"68b9286141827dfb720de88bb3037e9c", 0x0, 0x0, {0x6, 0x7}, {0x4, 0x4}, 0x2116, [0x0, 0x1, 0x3, 0xb7, 0xff, 0x8, 0x1c00000000, 0xfffffffffffffffd, 0x1, 0x7, 0x8, 0x59e4b08b, 0x10001, 0x4, 0x481, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"f63d09cd2035be897f16117f51d93320", 0x0, 0x0, {0x8, 0x1}, {0x1, 0x7}, 0x7, [0x4, 0x7, 0x4f, 0x849, 0xde50, 0xc, 0x1, 0x4, 0xffffffffffffff81, 0x7, 0x7, 0x3, 0x59c, 0x4, 0x1000009, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000400)={"6859c99a6e87875ba29bc14753278a26", r6, r7, {0xe, 0x800}, {0x3, 0x3}, 0x0, [0xfffffffffffffffd, 0x9, 0x3, 0x8, 0x604a, 0x955, 0x3ff, 0x6, 0xfff, 0x1, 0x2, 0x9, 0x3, 0x8, 0x4c5, 0x7]}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x40}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000740)={'vxcan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="000027bd7000fcdbdf25070000000c00018008000300030000002800018008000300010000000800030001000000140002006970766c616e30000000000000000000040001804c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000000000008000100", @ANYRES32, @ANYBLOB="140002007369743000000000000000000000002208000100", @ANYRESDEC=r0, @ANYBLOB="d4"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4000) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_pidfd_open(0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) 48.128789201s ago: executing program 6 (id=1843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000200)=0x6, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r6, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40012100) madvise(&(0x7f0000280000/0x4000)=nil, 0x4000, 0xe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x5, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x1, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x8001, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x8, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xa, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x80, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d6, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x3, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x10, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write(r3, &(0x7f00000002c0)="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", 0xfc) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) 48.121923521s ago: executing program 3 (id=1844): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x226282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = syz_clone(0x4000000, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r8, r6, 0x7, r7, &(0x7f0000000180)={0xffffffffffffffff, r7, 0xfffffffc}) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xb33, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x32, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200400b1) lseek(r3, 0x289e0cb5, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000fe4000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b805002000b9fa0000000fa303d9d9c3d96dfac61bf7b805000000c4c27958fc0fae41d901107c7c00b87f8b7f26ba230000000f30660fc775022e0fe90c9866ba4100ec0f3566b8578b0000b842c700000f23c80f21f890380a0a23f8", 0x5d}], 0x1, 0x40, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000080)=0xc, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r11, 0x57788000) fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca60) socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000001c0)=""/75, 0xa000, 0x1800, 0xb}, 0x20) 43.861211086s ago: executing program 3 (id=1845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x265f, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x8, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x40009, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x4, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000010000000c50100"]) unshare(0x64000600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x100) r5 = dup3(r4, r0, 0x80000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x10, r0, 0x6ce73000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r5, 0x5104}, {r4, 0x8000}, {r5}, {r1, 0x10}], 0x4, &(0x7f0000000180)={r6, r7+60000000}, &(0x7f00000001c0)={[0x10000]}, 0x8) 42.866732146s ago: executing program 2 (id=1846): connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000085b000/0x1000)=nil, 0x1000, 0x2000002, 0x3032, 0xffffffffffffffff, 0xf4d55000) r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0xd) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r3, &(0x7f0000000400)="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", 0x1f000) 40.460265051s ago: executing program 6 (id=1847): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004013, &(0x7f0000000000)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300000009210500000122050009e8800320000000070905020310"], 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 38.321701803s ago: executing program 2 (id=1848): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) write$vga_arbiter(r0, 0x0, 0xff35) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 37.74395673s ago: executing program 6 (id=1849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) ioprio_set$uid(0x3, 0x0, 0x6000) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}}, 0x90) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001500)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x28, 0x0, "0dcec2bebf6b8366868a9231aceb9780f37161a56c105d85f7287f240efd7e97faf6087e63aebcf40582abdf75e0063c2857a39fabb9104d1ae739858d54f681813fef59dd7d13d658fdf11fdfbb9f55"}, 0xd8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="dc61002e660f3881610aba430066b87700000066efbad004b051eef0811e5b00000080330e2e3ef3f0fe850080ba2100ed260f01cf360fcd", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r10, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0x18c, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf7c6a08f763bfd06}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x44084}, 0x41) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, r9}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 36.578609584s ago: executing program 3 (id=1850): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd99000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) cachestat(r5, &(0x7f0000004280)={0x9, 0x3ff}, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000540)={0x30, 0x5, 0x0, {0x0, 0x2, 0x10000, 0xb}}, 0x30) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x280c00c, &(0x7f0000002180)=ANY=[@ANYBLOB="6661766f7264796e6d6f64732c6e65745d636c738b77"]) pread64(r0, &(0x7f0000000000)=""/126, 0x7e, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r9, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="40c80000a42cb3fd9096a031edda7403b18eff73b4275940c27a6e85ac321b6992310d80ec8c16a1dd71605c53013462e96aab25c20fc93edb335453c3227390c58129cb7f43f329ffc94c8c43d988902f8152cfea85246004187dd71205519addbc6cea5163f4fd83403ff0777a9b1d4f5b675b4be8098d0169c189546d00d3457bab0f72390fcf7ac6c42d8e1fcc1e83bcf0d4bc787c8132334eeaa4595c0b1611fbde274cc77bfed649a8e489fbff4d35b6b72002b387", @ANYRES16=r6, @ANYBLOB="000826bd7000fcdbdf2503000000140001000000000000000000000000000000000108000300080000000500050005000000"], 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000200)={@private1}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x5, r11, 0x1, 0x3, 0x6, @multicast}, 0x14) 35.544906958s ago: executing program 2 (id=1851): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x42) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r4, 0x0, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000500)={0x6, &(0x7f00000004c0)=[{0x6, 0x6, 0xd5, 0x40}, {0x4, 0x7, 0x1, 0x3}, {0x2, 0x2, 0x5, 0x80}, {0x8, 0x4, 0x5, 0x7}, {0x620, 0x0, 0x4, 0x8000}, {0x8, 0x1d, 0x42, 0xd6}]}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@obj_user={'obj_user', 0x3d, '/dev/rnullb0\x00'}}, {@obj_role={'obj_role', 0x3d, '*{\\-]#&*'}}, {@uid_gt={'uid>', r7}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x101]}, 0x8, 0x80000) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r10 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x5) read(r11, &(0x7f0000000540)=""/18, 0x12) ioctl$KVM_GET_DEBUGREGS(r8, 0x8080aea1, &(0x7f0000000580)) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="74723d000000edff06000000000000", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,cache=readahead,fowner<', @ANYRESDEC=r1, @ANYBLOB=',subj_type=/dev/rnullb0\x00,\x00']) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000140)=0x800000e9, 0x4) fchdir(r11) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r13, 0x8935, &(0x7f0000000400)={'bridge0\x00'}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0xffffc000) 34.198592266s ago: executing program 35 (id=1826): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000340)="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", 0xfc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x88a8}, @val={0x0, 0x4, 0x5, 0x2, 0x2, 0x7}, @x25={0x1, 0x0, 0x17, "92ebf17f54d39625bdbc9a54c03a3b569b954628be1092328e74d6fc44bcc71f35c971c12b473de1dece6a1854b63bc288ed27510c94ef30ccd09077c79b2fa8c23e47df913774ed71486b4d3bc59ebbead379ab9b3ad7f85dc47984767f1add3e270c95c8aba414b0b97c8961a8973241b85e9c4d00fbd9ed40ee5aa4cc976c05dd77d376a6cee782e90ea589175a16a31ac0c40be11e0f"}}, 0x2c) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0xf, 0x9}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x3e4, 0x20, 0xe}, 0x2f) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) inotify_init() bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="7365636c6162656c2c003a4971251ac756bffc679a68f246ba1d597c559b273255c03956f6b3b707b4cad7af3b9c6c1c75399ba7ebbc3f317e7b258e37daee8b330e3b7d90e00ebee52dbb27a70b78dabad6f7ba720c16b195f852dc6e5781c354b7d2503751b9a8a27dc2ddb0d02f3b221622ba5e1d6ce04b291926e00fe2eae02e24aa3eedd4485fee774a8bf3068e8d52adedd7ba1743f056a6401741c23dfac4f4542017c84b76086f837c6d68c8fa385d76a9966423b663c1c9ec912e5502b351dce99d9f8075ff900ac5594ad3dc53f07a"]) 30.426718331s ago: executing program 2 (id=1853): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$P9_RRENAME(r0, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x100000001, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYRES32]) 28.420932433s ago: executing program 3 (id=1854): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) (async) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000403"], 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) sendto$inet(r1, &(0x7f00000000c0)="196d508ea93bc558942e706b899a9700b484162305d2534d125a48c4df1657288c08c822cf9f8e49b34f39c665c6f1d470d085ac5d444299c9f04cf43241a1cc97aef96c7c5eb89d4b5c1cfa8b9cb78d849e686c27abad36aab6399ff7e90f1984aec82d036a1033bd", 0x69, 0x810, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3, 0x13, r0, 0x85b83000) 21.997809292s ago: executing program 36 (id=1849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) ioprio_set$uid(0x3, 0x0, 0x6000) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"}) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}}, 0x90) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001500)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x28, 0x0, "0dcec2bebf6b8366868a9231aceb9780f37161a56c105d85f7287f240efd7e97faf6087e63aebcf40582abdf75e0063c2857a39fabb9104d1ae739858d54f681813fef59dd7d13d658fdf11fdfbb9f55"}, 0xd8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="dc61002e660f3881610aba430066b87700000066efbad004b051eef0811e5b00000080330e2e3ef3f0fe850080ba2100ed260f01cf360fcd", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r10, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0x18c, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf7c6a08f763bfd06}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x44084}, 0x41) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, r9}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 19.969716456s ago: executing program 2 (id=1856): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = getpgid(0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="40070002"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0x80}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000500)) r3 = syz_open_procfs(r0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r3, &(0x7f0000000140), 0x48) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x88602, 0x0) 19.67440749s ago: executing program 3 (id=1857): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0x80, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xc, 0x9, 0x5, 0x2}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c0014001462"], 0x30}}, 0xc840) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048840}, 0x40840) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2.757527047s ago: executing program 37 (id=1856): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = getpgid(0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="40070002"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0x80}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000500)) r3 = syz_open_procfs(r0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r3, &(0x7f0000000140), 0x48) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x88602, 0x0) 0s ago: executing program 38 (id=1857): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0x80, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xc, 0x9, 0x5, 0x2}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c0014001462"], 0x30}}, 0xc840) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048840}, 0x40840) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) kernel console output (not intermixed with test programs): ][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.709449][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.716814][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.724148][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.730755][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.737238][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.744421][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.751660][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.758382][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.765828][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.772519][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.779487][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.787140][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.793961][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.800624][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.807187][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.813978][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.821153][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.827740][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.834361][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.840962][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.848071][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.932661][ T2130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.939881][ T2130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.946878][ T2130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 74.962986][ T2131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.998150][ T2137] rust_binder: Write failure EFAULT in pid:347 [ 75.078609][ T331] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 75.092117][ T331] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 75.099823][ T331] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 75.107252][ T331] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 75.114829][ T331] wacom 0003:056A:00BB.0008: unknown main item tag 0x0 [ 75.122800][ T331] wacom 0003:056A:00BB.0008: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 75.133742][ T331] wacom 0003:056A:00BB.0008: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.6-1/input0 [ 75.146655][ T331] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00BB.0008/input/input9 [ 75.162582][ T2152] rust_binder: Error while translating object. [ 75.162634][ T2152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.184216][ T2152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 75.188370][ T2154] netlink: 'syz.2.604': attribute type 28 has an invalid length. [ 75.302000][ T31] usb 7-1: USB disconnect, device number 7 [ 75.527596][ T331] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 75.582755][ T2189] netlink: 'syz.3.613': attribute type 4 has an invalid length. [ 75.601245][ T2194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.614'. [ 75.677608][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 75.683960][ T331] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.695010][ T331] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.704842][ T331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.711852][ T331] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 75.721392][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.733077][ T331] usb 2-1: config 0 descriptor?? [ 75.834477][ T2225] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 76.096489][ T2242] mmap: syz.6.631 (2242): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 76.149845][ T331] hid-generic 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 76.345246][ T36] audit: type=1400 audit(1756653135.499:437): avc: denied { write } for pid=2248 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.355636][ T2166] rust_binder: Write failure EFAULT in pid:369 [ 76.367169][ T2249] overlayfs: failed to clone upperpath [ 76.419190][ T562] usb 2-1: USB disconnect, device number 17 [ 76.983567][ T36] audit: type=1400 audit(1756653136.139:438): avc: denied { setattr } for pid=2269 comm="syz.6.640" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.019353][ T2270] netlink: 16 bytes leftover after parsing attributes in process `syz.6.640'. [ 77.047817][ T2270] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 16385 [ 77.090888][ T36] audit: type=1400 audit(1756653136.249:439): avc: denied { create } for pid=2292 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.121184][ T2296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=2296 comm=syz.3.648 [ 77.155442][ T2298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 77.327671][ T331] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 77.350807][ T2315] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 77.439997][ T2323] binder: Unknown parameter 'se' [ 77.457945][ T331] usb 2-1: device descriptor read/64, error -71 [ 77.697853][ T331] usb 2-1: device descriptor read/64, error -71 [ 77.937588][ T331] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 78.059002][ T2350] fuseblk: Unknown parameter '·'ª¢‰¿ü' [ 78.077584][ T331] usb 2-1: device descriptor read/64, error -71 [ 78.317653][ T331] usb 2-1: device descriptor read/64, error -71 [ 78.427688][ T331] usb usb2-port1: attempt power cycle [ 78.615270][ T2369] overlayfs: failed to clone upperpath [ 78.767620][ T331] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 78.788772][ T331] usb 2-1: device descriptor read/8, error -71 [ 78.918764][ T331] usb 2-1: device descriptor read/8, error -71 [ 78.943299][ T36] kauditd_printk_skb: 597 callbacks suppressed [ 78.943317][ T36] audit: type=1400 audit(1756653138.099:1037): avc: denied { read } for pid=2378 comm="syz.3.674" path="socket:[15194]" dev="sockfs" ino=15194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.978955][ T2384] overlayfs: failed to clone upperpath [ 79.157564][ T331] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 79.178625][ T331] usb 2-1: device descriptor read/8, error -71 [ 79.264660][ T36] audit: type=1400 audit(1756653138.419:1038): avc: denied { map } for pid=2396 comm="syz.2.680" path="socket:[14261]" dev="sockfs" ino=14261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.288993][ T36] audit: type=1400 audit(1756653138.449:1039): avc: denied { read } for pid=2396 comm="syz.2.680" path="socket:[14261]" dev="sockfs" ino=14261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.312550][ T331] usb 2-1: device descriptor read/8, error -71 [ 79.427675][ T331] usb usb2-port1: unable to enumerate USB device [ 80.229104][ T2457] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 80.249610][ T2459] netlink: 'syz.1.699': attribute type 4 has an invalid length. [ 80.291948][ T36] audit: type=1400 audit(1756653139.449:1040): avc: denied { write } for pid=2462 comm="syz.1.700" name="if_inet6" dev="proc" ino=4026532353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.542429][ T36] audit: type=1326 audit(1756653139.699:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.2.705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11ff78ebe9 code=0x0 [ 80.637532][ T331] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 80.689562][ T2488] overlay: ./bus is not a directory [ 80.782639][ T36] audit: type=1400 audit(1756653139.939:1042): avc: denied { append } for pid=2490 comm="syz.6.710" name="pfkey" dev="proc" ino=4026532838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.809295][ T331] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 80.818815][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.826881][ T331] usb 2-1: Product: syz [ 80.831651][ T331] usb 2-1: Manufacturer: syz [ 80.836308][ T331] usb 2-1: SerialNumber: syz [ 80.908290][ T2500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.908334][ T2500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 80.918202][ T2500] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.927874][ T2500] rust_binder: Read failure Err(EFAULT) in pid:151 [ 81.061781][ T331] rtl8150 2-1:1.0: couldn't reset the device [ 81.074824][ T331] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 81.084402][ T331] usb 2-1: USB disconnect, device number 22 [ 81.187555][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 81.245442][ T2473] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 81.297000][ T2503] rust_binder: 416: no such ref 0 [ 81.302780][ T2503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 81.339429][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.358896][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.368852][ T31] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.378327][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.386687][ T31] usb 7-1: SerialNumber: syz [ 81.595497][ T31] usb 7-1: 0:2 : does not exist [ 81.602501][ T31] usb 7-1: USB disconnect, device number 8 [ 81.612605][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.296845][ T36] audit: type=1400 audit(1756653141.449:1043): avc: denied { unmount } for pid=2517 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 83.112313][ T2539] overlayfs: failed to clone upperpath [ 83.242299][ T36] audit: type=1400 audit(1756653142.399:1044): avc: denied { setopt } for pid=2545 comm="syz.6.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.264896][ T36] audit: type=1400 audit(1756653142.399:1045): avc: denied { write } for pid=2545 comm="syz.6.727" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.270269][ T2546] rust_binder: Error while translating object. [ 83.289009][ T2546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.295501][ T2546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 83.312257][ T36] audit: type=1400 audit(1756653142.469:1046): avc: denied { unmount } for pid=1509 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 83.469800][ T2567] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.667087][ T2583] overlayfs: missing 'lowerdir' [ 83.731178][ T2601] netlink: 5 bytes leftover after parsing attributes in process `syz.3.748'. [ 84.271039][ T2626] overlayfs: failed to clone upperpath [ 84.276969][ T2625] overlayfs: failed to clone upperpath [ 84.286507][ T2621] rust_binder: Error in use_page_slow: ESRCH [ 84.286534][ T2621] rust_binder: use_range failure ESRCH [ 84.297595][ T2621] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 84.303393][ T2621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 84.311744][ T2621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 84.417654][ T2639] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 84.507109][ T2642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.510624][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 84.510642][ T36] audit: type=1400 audit(1756653143.669:1051): avc: denied { setopt } for pid=2641 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.589483][ T2646] rust_binder: Write failure EFAULT in pid:438 [ 84.607068][ T2651] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.615398][ T2651] rust_binder: Read failure Err(EFAULT) in pid:187 [ 84.624338][ T2651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:187 [ 84.638741][ T36] audit: type=1400 audit(1756653143.799:1052): avc: denied { append } for pid=2655 comm="syz.1.769" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.891051][ T36] audit: type=1400 audit(1756653144.049:1053): avc: denied { mount } for pid=2684 comm="syz.3.777" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 85.041253][ T2711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 85.041291][ T2711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:202 [ 85.083686][ T36] audit: type=1400 audit(1756653144.239:1054): avc: denied { create } for pid=2699 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 101.070385][ T2745] overlayfs: failed to clone upperpath [ 101.101170][ T2758] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 101.234782][ T36] audit: type=1400 audit(1756653160.389:1055): avc: denied { mounton } for pid=2784 comm="syz.2.809" path="/file0" dev="ramfs" ino=16001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 101.317562][ T64] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 101.489657][ T64] usb 2-1: config 6 has an invalid interface number: 132 but max is 0 [ 101.498124][ T64] usb 2-1: config 6 has no interface number 0 [ 101.504216][ T64] usb 2-1: config 6 interface 132 has no altsetting 0 [ 101.512772][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice=d1.6e [ 101.520270][ T2823] overlayfs: failed to clone upperpath [ 101.522266][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.536162][ T64] usb 2-1: Product: syz [ 101.543461][ T64] usb 2-1: Manufacturer: syz [ 101.550757][ T64] usb 2-1: SerialNumber: syz [ 101.591006][ T2831] overlayfs: failed to clone lowerpath [ 101.659711][ T2834] tipc: Enabling of bearer rejected, failed to enable media [ 101.674222][ T2836] tmpfs: Unknown parameter 'Vhp1£K ƒäÌç4KÐÇ ú4¶åÁWGjAKÑ9âËœñD7"ÒOód.åUÖÎû z- *' [ 101.764832][ T64] cdc_subset 2-1:6.132: probe with driver cdc_subset failed with error -22 [ 101.792471][ T64] usb 2-1: USB disconnect, device number 23 [ 101.832503][ T36] audit: type=1400 audit(1756653160.989:1056): avc: denied { module_load } for pid=2843 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 101.832513][ T2844] Invalid ELF header type: 2 != 1 [ 101.866834][ T2846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 101.969565][ T36] audit: type=1400 audit(1756653161.129:1057): avc: denied { setattr } for pid=2739 comm="syz.1.796" name="CAN_BCM" dev="sockfs" ino=16099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.061076][ T2851] syz.3.835 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.462783][ T2866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 102.472591][ T2866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'. [ 102.515171][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.515203][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.521918][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.528832][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.535461][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.542319][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.614010][ T36] audit: type=1326 audit(1756653161.769:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 102.681409][ T2885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.681723][ T2885] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 102.734965][ T2886] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 102.734990][ T2886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 102.743124][ T2886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:235 [ 103.037116][ T36] audit: type=1400 audit(1756653162.189:1059): avc: denied { remount } for pid=2892 comm="syz.3.847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.157510][ T36] audit: type=1326 audit(1756653162.309:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2915 comm="syz.3.853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f790558ebe9 code=0x0 [ 103.787621][ T64] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 103.939125][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64 [ 103.956449][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.969929][ T64] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 103.979507][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.987264][ T2960] overlayfs: failed to clone upperpath [ 103.988551][ T64] usb 7-1: config 0 descriptor?? [ 103.998678][ T2948] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 104.041188][ T2966] netlink: 104 bytes leftover after parsing attributes in process `syz.3.869'. [ 104.408398][ T3002] rust_binder: Write failure EINVAL in pid:500 [ 104.421955][ T3007] binder: Unknown parameter 'fscontext?}' [ 104.539100][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.909345][ T3065] rust_binder: inc_ref_done called when no active inc_refs [ 104.919929][ T3067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.923862][ T3066] rust_binder: inc_ref_done called when no active inc_refs [ 104.947876][ T64] usbhid 7-1:0.0: can't add hid device: -71 [ 104.964615][ T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 104.974987][ T64] usb 7-1: USB disconnect, device number 9 [ 104.978756][ T3069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.988008][ T3069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.006374][ T3069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:545 [ 105.152821][ T3083] rust_binder: 265: no such ref 3 [ 105.220627][ T3093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.909'. [ 105.239160][ T36] audit: type=1400 audit(1756653164.399:1061): avc: denied { setopt } for pid=3092 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.295890][ T3102] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 105.303839][ T3102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.913'. [ 105.324058][ T3105] netlink: 'syz.3.914': attribute type 10 has an invalid length. [ 105.332524][ T36] audit: type=1400 audit(1756653164.489:1062): avc: denied { getopt } for pid=3104 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.352544][ T36] audit: type=1400 audit(1756653164.509:1063): avc: denied { connect } for pid=3104 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.407567][ T64] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 105.567555][ T64] usb 7-1: Invalid ep0 maxpacket: 32 [ 105.676726][ T3119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.916'. [ 105.687847][ T3119] 9pnet_fd: Insufficient options for proto=fd [ 105.700042][ T64] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 105.857579][ T64] usb 7-1: Invalid ep0 maxpacket: 32 [ 105.863084][ T64] usb usb7-port1: attempt power cycle [ 106.207664][ T64] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 106.227974][ T64] usb 7-1: Invalid ep0 maxpacket: 32 [ 106.357564][ T64] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 106.377930][ T64] usb 7-1: Invalid ep0 maxpacket: 32 [ 106.383887][ T64] usb usb7-port1: unable to enumerate USB device [ 106.483758][ T36] audit: type=1326 audit(1756653165.639:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3172 comm="syz.1.934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x0 [ 107.369812][ T3191] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 107.369848][ T3191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 107.378127][ T3191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:561 [ 107.444648][ T3202] rust_binder: 567: no such ref 0 [ 108.023921][ T3227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41762 sclass=netlink_route_socket pid=3227 comm=syz.3.954 [ 108.037464][ T36] audit: type=1400 audit(1756653167.189:1065): avc: denied { write } for pid=3226 comm="syz.3.954" name="/" dev="configfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.059789][ T36] audit: type=1400 audit(1756653167.189:1066): avc: denied { add_name } for pid=3226 comm="syz.3.954" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.081630][ T36] audit: type=1400 audit(1756653167.199:1067): avc: denied { create } for pid=3226 comm="syz.3.954" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 108.170470][ T3238] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 108.178301][ T3238] rust_binder: Write failure EINVAL in pid:267 [ 108.418205][ T3262] rust_binder: Write failure EFAULT in pid:278 [ 108.451997][ T3268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.969'. [ 108.624713][ T3283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.936282][ T3289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.943542][ T3289] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 108.950111][ T3289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 108.958423][ T3289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:292 [ 108.975464][ T36] audit: type=1326 audit(1756653168.129:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.3.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790558ebe9 code=0x7ffc0000 [ 109.009089][ T36] audit: type=1326 audit(1756653168.129:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.3.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790558ebe9 code=0x7ffc0000 [ 109.032530][ T36] audit: type=1326 audit(1756653168.139:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.3.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f790558ebe9 code=0x7ffc0000 [ 109.055924][ T36] audit: type=1326 audit(1756653168.139:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.3.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790558ebe9 code=0x7ffc0000 [ 109.079514][ T36] audit: type=1326 audit(1756653168.139:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.3.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7905590b07 code=0x7ffc0000 [ 109.103863][ T36] audit: type=1326 audit(1756653168.139:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.3.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7905590a7c code=0x7ffc0000 [ 109.572639][ T3315] overlayfs: failed to clone upperpath [ 109.619163][ T3321] binder: Binderfs stats mode cannot be changed during a remount [ 109.905585][ T896] tipc: Subscription rejected, illegal request [ 110.612886][ T3417] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 110.669593][ T3429] fuse: Bad value for 'user_id' [ 110.676066][ T3429] fuse: Bad value for 'user_id' [ 110.720565][ T3436] __vm_enough_memory: pid: 3436, comm: syz.6.1024, bytes: 18014402804453376 not enough memory for the allocation [ 110.752435][ T3438] rust_binder: Write failure EFAULT in pid:332 [ 110.772810][ T3440] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1026'. [ 110.863999][ T3443] kvm: kvm [3442]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 110.872896][ T3443] kvm: kvm [3442]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 110.888787][ T3440] SELinux: security_context_str_to_sid () failed with errno=-22 [ 110.959796][ T3448] cannot load conntrack support for proto=3 [ 111.051234][ T3449] __vm_enough_memory: pid: 3449, comm: syz.1.1027, bytes: 18014402804453376 not enough memory for the allocation [ 111.114705][ T3451] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.136523][ T3451] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 111.146585][ T3451] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.156488][ T3451] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 111.287549][ T331] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 111.555456][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 111.555477][ T36] audit: type=1400 audit(1756653170.709:1105): avc: denied { nlmsg_write } for pid=3478 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 111.582951][ T36] audit: type=1400 audit(1756653170.709:1106): avc: denied { audit_write } for pid=3478 comm="syz.2.1039" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.608058][ T36] audit: type=1107 audit(1756653170.709:1107): pid=3478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='[† [ 111.608058][ T36] –8ûÓ}Îõë´6ä–«W'ño)“*ð³¶Ú˜BLÄñ÷»Œð†k—Á 4z|X‹Ág&Ÿ»dâ%/Mãï±v>ïx6 ¾€G[´µ“õËWQ”_ [ 111.608058][ T36] rðý]J*jîðµ^ÉQû\Ýűé*˜õ½èF¬öUÈs{ˆÍ殓3]+1lŸMg:K³“,3?WÜé:¼5U¸' [ 111.642657][ T36] audit: type=1400 audit(1756653170.749:1108): avc: denied { connect } for pid=3483 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.741155][ T3496] binder: Unknown parameter 'defcontext01777777777777777777777' [ 111.797821][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.831146][ T3508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.850007][ T3508] rust_binder: 363: no such ref 2 [ 111.920191][ T36] audit: type=1400 audit(1756653171.079:1109): avc: denied { lock } for pid=3519 comm="syz.6.1053" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.971057][ T3522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.971200][ T3522] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 111.981007][ T3522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 111.989577][ T3522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:369 [ 112.053409][ T3530] cgroup: Name too long [ 112.150453][ T3539] netlink: 'syz.2.1060': attribute type 10 has an invalid length. [ 112.514406][ T3543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.514446][ T3543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 112.524332][ T3543] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.533788][ T3543] rust_binder: Read failure Err(EFAULT) in pid:377 [ 112.669629][ T3556] kvm: user requested TSC rate below hardware speed [ 112.714722][ T3558] /dev/loop0: Can't lookup blockdev [ 112.879274][ T36] audit: type=1400 audit(1756653172.039:1110): avc: denied { name_bind } for pid=3590 comm="syz.2.1078" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.037547][ T1108] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 113.109072][ T3601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 113.177677][ T1108] usb 7-1: device descriptor read/64, error -71 [ 113.264441][ T36] audit: type=1400 audit(1756653172.419:1111): avc: denied { write } for pid=3607 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.417655][ T1108] usb 7-1: device descriptor read/64, error -71 [ 113.657578][ T1108] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 113.787585][ T1108] usb 7-1: device descriptor read/64, error -71 [ 113.887743][ T3625] overlayfs: failed to clone lowerpath [ 114.027623][ T1108] usb 7-1: device descriptor read/64, error -71 [ 114.138783][ T1108] usb usb7-port1: attempt power cycle [ 114.239742][ T3640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.242851][ T3640] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 114.249614][ T3640] rust_binder: Read failure Err(EFAULT) in pid:589 [ 114.258814][ T3640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:589 [ 114.287357][ T3644] rust_binder: 593: no such ref 2 [ 114.302131][ T3644] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 114.309666][ T3644] rust_binder: 593: no such ref 3 [ 114.314822][ T3644] rust_binder: Write failure EFAULT in pid:593 [ 114.369732][ T3646] kvm: emulating exchange as write [ 114.487838][ T1108] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 114.508738][ T1108] usb 7-1: device descriptor read/8, error -71 [ 114.638772][ T1108] usb 7-1: device descriptor read/8, error -71 [ 114.877600][ T1108] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 114.898730][ T1108] usb 7-1: device descriptor read/8, error -71 [ 115.028799][ T1108] usb 7-1: device descriptor read/8, error -71 [ 115.138253][ T1108] usb usb7-port1: unable to enumerate USB device [ 115.418389][ T3670] overlayfs: failed to clone upperpath [ 115.478699][ T3660] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 115.980700][ T3703] overlayfs: failed to clone upperpath [ 116.346084][ T36] audit: type=1400 audit(1756653175.499:1112): avc: denied { accept } for pid=3717 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 116.552757][ T36] audit: type=1400 audit(1756653175.709:1113): avc: denied { map } for pid=3737 comm="syz.3.1127" path="socket:[20252]" dev="sockfs" ino=20252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.577330][ T36] audit: type=1400 audit(1756653175.709:1114): avc: denied { read } for pid=3737 comm="syz.3.1127" path="socket:[20252]" dev="sockfs" ino=20252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.907597][ T1108] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 116.989455][ T3763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.990131][ T3763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.996633][ T3763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:614 [ 117.042682][ T3771] devpts: called with bogus options [ 117.058640][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.069748][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.079589][ T1108] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.093918][ T1108] usb 7-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 117.103127][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 117.111391][ T1108] usb 7-1: SerialNumber: syz [ 117.117076][ T1108] usb 7-1: config 0 descriptor?? [ 117.314557][ T3781] fuse: Bad value for 'fd' [ 117.322498][ T36] audit: type=1400 audit(1756653176.479:1115): avc: denied { ioctl } for pid=3780 comm="syz.1.1142" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.351974][ T3761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.364617][ T3761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.375077][ T1108] usbhid 7-1:0.0: can't add hid device: -71 [ 117.382150][ T1108] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 117.390827][ T36] audit: type=1400 audit(1756653176.529:1116): avc: denied { read } for pid=3784 comm="syz.1.1143" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.418315][ T36] audit: type=1400 audit(1756653176.529:1117): avc: denied { open } for pid=3784 comm="syz.1.1143" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.418516][ T1108] usb 7-1: USB disconnect, device number 18 [ 117.568719][ T3793] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 117.577025][ T3793] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 117.750373][ T36] audit: type=1400 audit(1756653176.909:1118): avc: denied { accept } for pid=3820 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.784512][ T3825] /dev/sr0: Can't lookup blockdev [ 117.790989][ T3826] /dev/sr0: Can't lookup blockdev [ 117.818429][ T3825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 117.845616][ T3839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 117.847064][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.865590][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.899211][ T3852] syz.2.1166 uses obsolete (PF_INET,SOCK_PACKET) [ 117.944934][ T36] audit: type=1400 audit(1756653177.099:1119): avc: denied { create } for pid=3862 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.107570][ T562] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 118.257684][ T64] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 118.268880][ T562] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.280161][ T562] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 118.289526][ T562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.298489][ T562] usb 2-1: config 0 descriptor?? [ 118.304643][ T562] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 118.356331][ T3910] tipc: Started in network mode [ 118.361587][ T3910] tipc: Node identity ac14140f, cluster identity 4711 [ 118.368593][ T3910] tipc: New replicast peer: 255.255.255.255 [ 118.374833][ T3910] tipc: Enabled bearer , priority 10 [ 118.381618][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 118.391678][ T3910] tipc: Disabling bearer [ 118.427573][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 118.434079][ T64] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.443098][ T64] usb 7-1: config 0 has no interface number 0 [ 118.449454][ T64] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.460832][ T64] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.470722][ T64] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 118.480135][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.490397][ T64] usb 7-1: config 0 descriptor?? [ 118.501405][ T36] audit: type=1400 audit(1756653177.659:1120): avc: denied { ioctl } for pid=3913 comm="syz.3.1188" path="/354/file2" dev="tmpfs" ino=1924 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.903386][ T64] uclogic 0003:28BD:0071.000A: failed retrieving string descriptor #100: -71 [ 118.912705][ T64] uclogic 0003:28BD:0071.000A: failed retrieving pen parameters: -71 [ 118.921151][ T64] uclogic 0003:28BD:0071.000A: pen probing failed: -71 [ 118.928258][ T64] uclogic 0003:28BD:0071.000A: failed probing parameters: -71 [ 118.937554][ T64] uclogic 0003:28BD:0071.000A: probe with driver uclogic failed with error -71 [ 118.942817][ T3963] rust_binder: 409: no such ref 0 [ 118.948089][ T64] usb 7-1: USB disconnect, device number 19 [ 118.970497][ T3965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.186197][ T3979] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1201'. [ 119.338174][ T64] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 119.507526][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 119.518763][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 119.529471][ T64] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 119.546876][ T64] usb 7-1: config 0 has no interface number 0 [ 119.559823][ T64] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 119.571441][ T36] audit: type=1326 audit(1756653178.735:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.3.1217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f790558ebe9 code=0x0 [ 119.594448][ T64] usb 7-1: config 0 interface 88 has no altsetting 0 [ 119.603213][ T64] usb 7-1: string descriptor 0 read error: -22 [ 119.609636][ T64] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 119.620332][ T64] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 119.638397][ T64] usb 7-1: config 0 descriptor?? [ 119.645502][ T64] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input14 [ 119.670488][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 119.678238][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 119.848554][ T331] usb 7-1: USB disconnect, device number 20 [ 120.229335][ T4028] /dev/loop0: Can't lookup blockdev [ 120.488664][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.497998][ T64] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.792194][ T64] usb 2-1: USB disconnect, device number 25 [ 120.956986][ T4070] 9pnet_fd: Insufficient options for proto=fd [ 120.983246][ T4074] overlayfs: failed to clone upperpath [ 120.990384][ T4074] 9pnet_fd: Insufficient options for proto=fd [ 121.187565][ T64] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 121.338796][ T64] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 121.347229][ T64] usb 2-1: config 0 has no interface number 0 [ 121.353480][ T64] usb 2-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.364896][ T64] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 121.374356][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.382459][ T64] usb 2-1: Product: syz [ 121.386651][ T64] usb 2-1: Manufacturer: syz [ 121.391656][ T64] usb 2-1: SerialNumber: syz [ 121.397119][ T64] usb 2-1: config 0 descriptor?? [ 121.403167][ T64] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 121.409595][ T64] usb 2-1: No valid video chain found. [ 121.611913][ T4101] overlayfs: failed to clone upperpath [ 121.623126][ T64] usb 2-1: USB disconnect, device number 26 [ 121.895167][ T4112] netlink: 'syz.3.1249': attribute type 29 has an invalid length. [ 122.099483][ T4114] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 122.110138][ T4115] FAT-fs (rnullb0): bogus number of reserved sectors [ 122.117239][ T4115] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 122.309447][ T4132] /dev/sr0: Can't lookup blockdev [ 122.398380][ T36] audit: type=1400 audit(1756653188.558:1122): avc: denied { search } for pid=4138 comm="syz.6.1259" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 122.597539][ T64] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 122.637541][ T1108] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 122.747538][ T64] usb 2-1: Using ep0 maxpacket: 8 [ 122.757520][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.768155][ T64] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 122.776545][ T64] usb 2-1: config 0 has no interface number 0 [ 122.780944][ T4179] netlink: 'syz.3.1274': attribute type 16 has an invalid length. [ 122.791235][ T1108] usb 7-1: Using ep0 maxpacket: 16 [ 122.796701][ T4179] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1274'. [ 122.797563][ T64] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 122.807265][ T1108] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 122.817130][ T64] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 122.817164][ T64] usb 2-1: config 0 interface 88 has no altsetting 0 [ 122.830368][ T4179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.849650][ T64] usb 2-1: string descriptor 0 read error: -22 [ 122.853472][ T1108] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.859886][ T64] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 122.871604][ T1108] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.884877][ T64] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 122.890986][ T4179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.903832][ T64] usb 2-1: config 0 descriptor?? [ 122.908233][ T1108] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 122.917733][ T64] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input15 [ 122.928657][ T1108] usb 7-1: config 7 interface 0 has no altsetting 0 [ 122.962655][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 122.977538][ T1108] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 122.989685][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 122.997404][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.126805][ T64] usb 2-1: USB disconnect, device number 27 [ 123.222761][ T4202] netlink: 'syz.2.1282': attribute type 20 has an invalid length. [ 123.231408][ T4203] netlink: 'syz.2.1282': attribute type 20 has an invalid length. [ 123.263553][ T4210] cgroup2: Unknown parameter 'net_cls' [ 123.409001][ T4221] 9pnet_fd: Insufficient options for proto=fd [ 123.423466][ T1108] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.000C/input/input16 [ 123.444824][ T1108] kye 0003:0458:5010.000C: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 123.730138][ T36] audit: type=1400 audit(1756653189.888:1123): avc: denied { create } for pid=4138 comm="syz.6.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 123.737673][ T562] usb 7-1: USB disconnect, device number 21 [ 123.751278][ C1] kye 0003:0458:5010.000C: usb_submit_urb(ctrl) failed: -19 [ 123.766003][ T36] audit: type=1400 audit(1756653189.888:1124): avc: denied { read } for pid=4138 comm="syz.6.1259" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 123.788389][ T36] audit: type=1400 audit(1756653189.888:1125): avc: denied { watch } for pid=4138 comm="syz.6.1259" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 123.907595][ T64] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 123.958026][ T4262] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 124.002044][ T36] audit: type=1326 audit(1756653190.158:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.1308" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ff78ebe9 code=0x0 [ 124.034560][ T36] audit: type=1326 audit(1756653190.188:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.1310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f790558ebe9 code=0x0 [ 124.078886][ T64] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.088091][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.097056][ T64] usb 2-1: config 0 descriptor?? [ 124.597557][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 124.747518][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 124.754300][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.765422][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.775646][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 124.785057][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.794653][ T10] usb 7-1: config 0 descriptor?? [ 124.956070][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 125.202310][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x6 [ 125.209470][ T10] apple 0003:05AC:024B.000D: ignoring exceeding usage max [ 125.218111][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.225719][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.232896][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.240082][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.246993][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.254226][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.261221][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.268242][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.275252][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.282482][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.289613][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.296779][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.304448][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.312560][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.319708][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.326875][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.333964][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.341054][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.348147][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.355204][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.362283][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.369270][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.376163][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.383351][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.390465][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.397451][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.405096][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.412363][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.420060][ T10] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 125.429516][ T10] apple 0003:05AC:024B.000D: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.6-1/input0 [ 125.444799][ T10] usb 7-1: USB disconnect, device number 22 [ 125.461143][ T4322] fido_id[4322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 125.572259][ T4329] /dev/rnullb0: Can't lookup blockdev [ 126.070583][ T4345] rust_binder: Write failure EFAULT in pid:465 [ 126.081948][ T4349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.150145][ T64] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 126.180521][ T64] asix 2-1:0.0: probe with driver asix failed with error -71 [ 126.195032][ T64] usb 2-1: USB disconnect, device number 28 [ 126.557737][ T4392] rust_binder: Write failure EFAULT in pid:492 [ 126.593987][ T4399] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1346'. [ 126.815130][ T36] audit: type=1400 audit(1756653192.968:1128): avc: denied { map } for pid=4413 comm="syz.1.1352" path="socket:[23156]" dev="sockfs" ino=23156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 126.867874][ T36] audit: type=1400 audit(1756653192.968:1129): avc: denied { accept } for pid=4413 comm="syz.1.1352" path="socket:[23156]" dev="sockfs" ino=23156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 127.007615][ T36] audit: type=1326 audit(1756653193.158:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4420 comm="syz.6.1354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3c078ebe9 code=0x0 [ 127.876689][ T36] audit: type=1400 audit(1756653194.028:1131): avc: denied { setattr } for pid=4432 comm="syz.6.1358" name="" dev="pipefs" ino=23201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 127.911753][ T4437] netlink: 'syz.6.1359': attribute type 4 has an invalid length. [ 127.922667][ T4437] netlink: 'syz.6.1359': attribute type 4 has an invalid length. [ 127.993967][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1360'. [ 128.003590][ T4441] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 128.003943][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1360'. [ 128.022055][ T4439] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1360'. [ 128.036508][ T4439] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1360'. [ 128.078120][ T36] audit: type=1400 audit(1756653194.238:1132): avc: denied { mounton } for pid=4445 comm="syz.6.1362" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.104516][ T4446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.230547][ T4456] loop2: detected capacity change from 0 to 7 [ 128.244620][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.254198][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.262809][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.272176][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.281099][ T4456] loop2: unable to read partition table [ 128.287001][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 128.296961][ T4456] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 128.310759][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.320020][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.329863][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.339354][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.348154][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.357732][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.366525][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.375809][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.384314][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.393566][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.780410][ T4465] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 128.790567][ T4465] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 128.943721][ T4476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.944903][ T4476] rust_binder: 679: no such ref 1 [ 128.956961][ T4476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:679 [ 129.001396][ T4485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.090178][ T4489] fuse: Unknown parameter 'è°­' [ 129.105520][ T4489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4489 comm=syz.1.1378 [ 129.207592][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 129.234369][ T4499] binder: Bad value for 'defcontext' [ 129.258932][ T4504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.261694][ T4504] rust_binder: Error while translating object. [ 129.268362][ T4504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 129.274670][ T4504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:697 [ 129.333082][ T4510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.343051][ T4509] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 129.349709][ T4509] rust_binder: Read failure Err(EFAULT) in pid:702 [ 129.357938][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 129.378965][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 129.388277][ T10] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 129.406086][ T10] usb 7-1: config 0 has no interface number 0 [ 129.422870][ T10] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 129.438074][ T10] usb 7-1: config 0 interface 88 has no altsetting 0 [ 129.447206][ T10] usb 7-1: string descriptor 0 read error: -22 [ 129.453780][ T10] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 129.456317][ T4527] /dev/rnullb0: Can't lookup blockdev [ 129.463255][ T10] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 129.477819][ T10] usb 7-1: config 0 descriptor?? [ 129.486075][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input17 [ 129.498125][ T4530] netlink: 'syz.1.1389': attribute type 4 has an invalid length. [ 129.512719][ T4530] netlink: 'syz.1.1389': attribute type 4 has an invalid length. [ 129.523531][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 129.531740][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 129.557316][ T4542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.568089][ T36] audit: type=1400 audit(1756653195.728:1133): avc: denied { create } for pid=4545 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.609243][ T4550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:718 [ 129.686214][ T10] usb 7-1: USB disconnect, device number 23 [ 130.155327][ T36] audit: type=1400 audit(1756653196.308:1134): avc: denied { accept } for pid=4571 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 130.234598][ T4565] fuse: Bad value for 'rootmode' [ 130.776550][ T4600] netlink: 'syz.2.1411': attribute type 25 has an invalid length. [ 130.974008][ T4638] fuse: Unknown parameter '00000000000000000003' [ 131.029136][ T4652] fuse: Unknown parameter 'dootmode' [ 131.029352][ T4653] fuse: Unknown parameter 'dootmode' [ 131.067559][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 131.134800][ T36] audit: type=1400 audit(1756653197.288:1135): avc: denied { accept } for pid=4664 comm="syz.2.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.228895][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.240117][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.255588][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.265064][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.273179][ T31] usb 2-1: Product: syz [ 131.277463][ T31] usb 2-1: Manufacturer: syz [ 131.279892][ T4679] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1436'. [ 131.282103][ T31] usb 2-1: SerialNumber: syz [ 131.293417][ T4679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 131.296098][ T4679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:540 [ 131.318117][ T4682] netlink: 'syz.6.1437': attribute type 4 has an invalid length. [ 131.335962][ T4681] netlink: 'syz.6.1437': attribute type 4 has an invalid length. [ 131.344092][ T4682] netlink: 'syz.6.1437': attribute type 4 has an invalid length. [ 131.361827][ T4681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=4681 comm=syz.6.1437 [ 132.016179][ T4707] /dev/rnullb0: Can't lookup blockdev [ 132.309335][ T31] cdc_ncm 2-1:1.0: bind() failure [ 132.315192][ T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 132.322232][ T31] cdc_ncm 2-1:1.1: bind() failure [ 132.480251][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 132.536668][ T36] audit: type=1400 audit(1756653198.688:1136): avc: denied { listen } for pid=4719 comm="syz.3.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.592460][ T4729] /dev/rnullb0: Can't lookup blockdev [ 132.640339][ T36] audit: type=1400 audit(1756653198.798:1137): avc: denied { accept } for pid=4719 comm="syz.3.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.669505][ T4741] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1455'. [ 132.678921][ T4743] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1455'. [ 132.680384][ T4744] /dev/rnullb0: Can't lookup blockdev [ 132.690008][ T4741] overlayfs: failed to clone upperpath [ 132.700594][ T4743] overlayfs: failed to clone upperpath [ 132.760108][ T36] audit: type=1326 audit(1756653198.918:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.3.1462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f790558ebe9 code=0x0 [ 132.912685][ T4778] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1462'. [ 133.032056][ T4776] devpts: called with bogus options [ 133.600258][ T4784] /dev/loop0: Can't lookup blockdev [ 133.618399][ T4789] netlink: 'syz.3.1471': attribute type 29 has an invalid length. [ 133.626600][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 133.692879][ T4804] netlink: 'syz.3.1474': attribute type 1 has an invalid length. [ 133.726603][ T4814] /dev/sr0: Can't lookup blockdev [ 133.837263][ T9] usb 2-1: USB disconnect, device number 29 [ 134.187572][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 134.337543][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 134.344199][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.355738][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 134.368764][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 134.378313][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.387309][ T9] usb 2-1: config 0 descriptor?? [ 134.408698][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1490'. [ 134.645870][ T4881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1500'. [ 134.798331][ T9] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 134.810131][ T4891] overlayfs: failed to clone upperpath [ 134.816710][ T9] lg-g15 0003:046D:C222.000E: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 134.842023][ T4899] overlayfs: failed to clone upperpath [ 135.001929][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.015750][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.028876][ T31] usb 2-1: USB disconnect, device number 30 [ 135.048902][ T4916] overlayfs: missing 'lowerdir' [ 135.532874][ T36] audit: type=1326 audit(1756653201.683:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.3.1541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f790558ebe9 code=0x0 [ 135.701747][ T5007] 9pnet_fd: Insufficient options for proto=fd [ 135.814510][ T5017] 9pnet_fd: Insufficient options for proto=fd [ 135.973437][ T5034] /dev/rnullb0: Can't lookup blockdev [ 136.741136][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1576'. [ 136.780846][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1577'. [ 136.945209][ T36] audit: type=1326 audit(1756653203.092:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.1.1583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x0 [ 137.010941][ T36] audit: type=1326 audit(1756653203.151:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.1581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f790558ebe9 code=0x0 [ 137.056713][ T36] audit: type=1400 audit(1756653203.201:1142): avc: denied { remount } for pid=5116 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 137.056734][ T5119] sysfs: Unknown parameter 'verity' [ 137.257443][ T5128] overlayfs: failed to clone upperpath [ 137.323061][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1590'. [ 137.348366][ T5143] netlink: 'syz.6.1591': attribute type 4 has an invalid length. [ 137.358405][ T5143] netlink: 'syz.6.1591': attribute type 4 has an invalid length. [ 137.753468][ T5190] fuse: Unknown parameter 'rootmode' [ 137.820380][ T36] audit: type=1400 audit(1756653203.945:1143): avc: denied { setattr } for pid=5194 comm="syz.1.1612" name="NETLINK" dev="sockfs" ino=25592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.885678][ T5215] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 137.885713][ T5215] rust_binder: Error while translating object. [ 137.908420][ T5215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.915253][ T5215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:761 [ 137.980887][ T5222] overlayfs: failed to clone upperpath [ 138.028789][ T36] audit: type=1400 audit(1756653204.164:1144): avc: denied { shutdown } for pid=5224 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.103681][ T36] audit: type=1400 audit(1756653204.243:1145): avc: denied { create } for pid=5239 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 138.178345][ T5255] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 138.236064][ T5266] rust_binder: 782: no such ref 0 [ 138.249447][ T5266] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 138.257228][ T5266] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 138.264928][ T5266] rust_binder: Read failure Err(EAGAIN) in pid:782 [ 138.389437][ T36] audit: type=1400 audit(1756653204.521:1146): avc: denied { execute } for pid=5275 comm="syz.6.1639" path="/dev/rnullb0" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.432577][ T36] audit: type=1400 audit(1756653204.561:1147): avc: denied { create } for pid=5267 comm="syz.1.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.453223][ T36] audit: type=1400 audit(1756653204.571:1148): avc: denied { write } for pid=5267 comm="syz.1.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.676809][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 138.717830][ T5300] fuseblk: Bad value for 'fd' [ 138.723048][ T5301] fuseblk: Bad value for 'fd' [ 138.838021][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 138.845218][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.853907][ T31] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 138.862261][ T31] usb 2-1: config 0 has no interface number 0 [ 138.869068][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 138.879953][ T31] usb 2-1: config 0 interface 88 has no altsetting 0 [ 138.888602][ T31] usb 2-1: string descriptor 0 read error: -22 [ 138.895077][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 138.904360][ T31] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 138.913970][ T31] usb 2-1: config 0 descriptor?? [ 138.920733][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input18 [ 138.937544][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 138.945622][ T2749] udevd[2749]: Unable to EVIOCGABS device "/dev/input/event3" [ 139.123243][ T9] usb 2-1: USB disconnect, device number 31 [ 139.384692][ T5308] overlayfs: failed to clone upperpath [ 139.472156][ T5324] /dev/rnullb0: Can't lookup blockdev [ 140.016675][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 140.167717][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 140.174580][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.183406][ T31] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.194343][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 140.202547][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 140.212089][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.220346][ T31] usb 2-1: Product: syz [ 140.224705][ T31] usb 2-1: Manufacturer: syz [ 140.229361][ T31] usb 2-1: SerialNumber: syz [ 140.437977][ T5369] syz.1.1671 (5369): /proc/5368/oom_adj is deprecated, please use /proc/5368/oom_score_adj instead. [ 140.453217][ T31] usb 2-1: USB disconnect, device number 32 [ 140.990805][ T5417] rust_binder: Fixups oob 164 166 363 196 [ 140.990831][ T5417] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 140.996942][ T5417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.005522][ T5417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:800 [ 141.091090][ T5427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5427 comm=syz.1.1687 [ 141.115509][ T5427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.167706][ T5428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:810 [ 141.586493][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.603551][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.611176][ T5435] bridge_slave_0: entered allmulticast mode [ 141.617973][ T5435] bridge_slave_0: entered promiscuous mode [ 141.626909][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.634209][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.641754][ T5435] bridge_slave_1: entered allmulticast mode [ 141.648641][ T5435] bridge_slave_1: entered promiscuous mode [ 141.705606][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.713279][ T5435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.720826][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.727954][ T5435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.747944][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.755467][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.765793][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.772973][ T3937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.783911][ T3934] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.791033][ T3934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.824526][ T5435] veth0_vlan: entered promiscuous mode [ 141.840653][ T5435] veth1_macvtap: entered promiscuous mode [ 141.898776][ T5454] netlink: 'syz.2.1690': attribute type 4 has an invalid length. [ 141.909245][ T5454] netlink: 'syz.2.1690': attribute type 4 has an invalid length. [ 141.953229][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 141.953250][ T36] audit: type=1400 audit(1756653208.055:1155): avc: denied { mounton } for pid=5459 comm="syz.1.1695" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 142.005312][ T5468] rust_binder: Write failure EFAULT in pid:818 [ 142.024144][ T5465] __vm_enough_memory: pid: 5465, comm: syz.2.1694, bytes: 18014402804453376 not enough memory for the allocation [ 142.156724][ T5483] usb usb8: usbfs: process 5483 (syz.2.1702) did not claim interface 63 before use [ 142.167180][ T5483] rust_binder: Error while translating object. [ 142.167232][ T5483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 142.173613][ T5483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 142.288681][ T5488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27 sclass=netlink_audit_socket pid=5488 comm=syz.2.1705 [ 142.310575][ T5488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5488 comm=syz.2.1705 [ 142.323488][ T5488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=5488 comm=syz.2.1705 [ 142.336245][ T5488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=5488 comm=syz.2.1705 [ 142.348934][ T5488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=5488 comm=syz.2.1705 [ 142.361568][ T5488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=5488 comm=syz.2.1705 [ 142.455178][ T5496] rust_binder: Write failure EFAULT in pid:825 [ 142.489758][ T5504] netlink: 'syz.2.1710': attribute type 4 has an invalid length. [ 142.505321][ T5504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5504 comm=syz.2.1710 [ 142.518204][ T5505] netlink: 'syz.2.1710': attribute type 4 has an invalid length. [ 142.540721][ T5511] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 142.670202][ T5513] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 142.677754][ T5513] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 242) [ 142.677783][ T5513] rust_binder: Error while translating object. [ 142.689541][ T5513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.695861][ T5513] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 142.706079][ T5513] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:29 [ 142.767122][ T31] rust_binder: 0: removing orphan mapping 0:24 [ 143.308160][ T5547] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 143.308183][ T5547] rust_binder: Error while translating object. [ 143.321199][ T5547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.327523][ T5547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:828 [ 143.497043][ T36] audit: type=1400 audit(1756653209.594:1156): avc: denied { bind } for pid=5551 comm="syz.1.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.577706][ T5560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 143.577746][ T5560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:837 [ 143.659084][ T5569] /dev/nullb0: Can't lookup blockdev [ 143.696803][ T5573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=5573 comm=syz.2.1733 [ 143.829010][ T5582] binder: Unknown parameter 'ˆ'ÐÍ' [ 143.886748][ T3937] bridge_slave_1: left allmulticast mode [ 143.892630][ T3937] bridge_slave_1: left promiscuous mode [ 143.898543][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.917195][ T3937] bridge_slave_0: left allmulticast mode [ 143.922918][ T3937] bridge_slave_0: left promiscuous mode [ 143.928921][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.038382][ T3937] veth1_macvtap: left promiscuous mode [ 144.048700][ T3937] veth0_vlan: left promiscuous mode [ 144.100958][ T5598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 144.100983][ T5598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:64 [ 144.126499][ T36] audit: type=1400 audit(1756653210.220:1157): avc: denied { accept } for pid=5599 comm="syz.1.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.166796][ T5602] tipc: Can't bind to reserved service type 0 [ 144.173870][ T5602] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 144.256025][ T5606] binder: Bad value for 'stats' [ 144.287150][ T5609] netlink: 'syz.2.1746': attribute type 4 has an invalid length. [ 144.296360][ T5608] netlink: 'syz.2.1746': attribute type 4 has an invalid length. [ 144.426761][ T36] audit: type=1326 audit(1756653210.508:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.6.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c078ebe9 code=0x7fc00000 [ 144.482301][ T36] audit: type=1326 audit(1756653210.568:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c078ebe9 code=0x7ffc0000 [ 144.506369][ T36] audit: type=1326 audit(1756653210.568:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c078ebe9 code=0x7ffc0000 [ 144.530266][ T36] audit: type=1326 audit(1756653210.568:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c078ebe9 code=0x7ffc0000 [ 144.554561][ T36] audit: type=1326 audit(1756653210.568:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c078ebe9 code=0x7ffc0000 [ 144.578968][ T36] audit: type=1326 audit(1756653210.568:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c078ebe9 code=0x7ffc0000 [ 144.602499][ T36] audit: type=1326 audit(1756653210.568:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c078ebe9 code=0x7ffc0000 [ 145.013533][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 145.052638][ T5650] rust_binder: 85: no such ref 0 [ 145.058635][ T5650] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 145.066317][ T5650] rust_binder: 85: no such ref 0 [ 145.071400][ T5650] rust_binder: 85: no such ref 2 [ 145.077015][ T5650] rust_binder: 85: no such ref 1 [ 145.118489][ T5660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1763'. [ 145.128015][ T5661] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1763'. [ 145.138879][ T5660] rust_binder: Write failure EFAULT in pid:852 [ 145.138932][ T5660] rust_binder: Write failure EFAULT in pid:852 [ 145.164541][ T5671] exFAT-fs (rnullb0): invalid boot record signature [ 145.177770][ T5671] exFAT-fs (rnullb0): failed to read boot sector [ 145.184445][ T5671] exFAT-fs (rnullb0): failed to recognize exfat type [ 145.268648][ T5679] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1769'. [ 145.278540][ T5679] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 145.278567][ T5679] rust_binder: Error while translating object. [ 145.291066][ T5679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.297568][ T5679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 145.329067][ T5681] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1770'. [ 145.348858][ T5681] netlink: 'syz.2.1770': attribute type 4 has an invalid length. [ 145.424346][ T331] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 145.586592][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.601133][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.611838][ T331] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 145.621625][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.635062][ T331] usb 2-1: config 0 descriptor?? [ 146.045343][ T331] cp2112 0003:10C4:EA90.000F: item fetching failed at offset 5/7 [ 146.053476][ T5674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.053722][ T331] cp2112 0003:10C4:EA90.000F: parse failed [ 146.061197][ T5674] rust_binder: Error in use_page_slow: ESRCH [ 146.066322][ T5674] rust_binder: use_range failure ESRCH [ 146.066542][ T331] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -22 [ 146.072552][ T5674] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 146.087014][ T5674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 146.095288][ T5674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:859 [ 146.429238][ T5714] fuse: Invalid rootmode [ 146.444090][ T5714] fuse: Unknown parameter 'fqÈ0x0000000000000007' [ 146.462200][ T5717] overlayfs: failed to resolve './file0': -2 [ 146.702023][ T5735] bridge0: port 3(veth0_to_bridge) entered blocking state [ 146.709373][ T5735] bridge0: port 3(veth0_to_bridge) entered disabled state [ 146.716953][ T5735] veth0_to_bridge: entered allmulticast mode [ 146.723631][ T5735] veth0_to_bridge: entered promiscuous mode [ 146.729642][ T5735] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.743123][ T5735] bridge0: port 3(veth0_to_bridge) entered blocking state [ 146.750555][ T5735] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 146.759046][ T5737] netlink: 4960 bytes leftover after parsing attributes in process `syz.2.1790'. [ 146.782027][ T3937] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.798186][ T5748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.817061][ T5748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.832347][ T5755] fuse: Unknown parameter 'rRpN1íQotmode' [ 146.904865][ T5778] binder: Unknown parameter ';îÇæÄÁÌÞÞÝ–‰Šå íØo¥œfbÅ„Mü;RØŽ‘Ë¥€ÍfLøíjí˜xÚT›16Ù«²†õƒ We~Å;ÛòcÛ”«]»c•µÎ"\@V' [ 147.052925][ T5803] netlink: 'syz.3.1814': attribute type 12 has an invalid length. [ 147.069145][ T5803] /dev/loop0: Can't lookup blockdev [ 147.084392][ T36] kauditd_printk_skb: 176 callbacks suppressed [ 147.084411][ T36] audit: type=1400 audit(1756653213.150:1341): avc: denied { accept } for pid=5810 comm="syz.6.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.127725][ T5815] can: request_module (can-proto-0) failed. [ 147.188114][ T36] audit: type=1400 audit(1756653213.260:1342): avc: denied { setopt } for pid=5823 comm="syz.6.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.307867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.320315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.332914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.345343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.357687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.370442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.382900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.395082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.407327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.419560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.562088][ T5839] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1829'. [ 147.571196][ T36] audit: type=1400 audit(1756653213.588:1343): avc: denied { bind } for pid=5834 comm="syz.6.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.628232][ T5842] overlayfs: failed to clone upperpath [ 147.771856][ T5855] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 148.344714][ T36] audit: type=1326 audit(1756653214.412:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 148.375045][ T36] audit: type=1326 audit(1756653214.432:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 148.400007][ T36] audit: type=1326 audit(1756653214.432:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 148.424068][ T36] audit: type=1326 audit(1756653214.432:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 148.448786][ T36] audit: type=1326 audit(1756653214.432:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 148.473141][ T36] audit: type=1326 audit(1756653214.432:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 148.504192][ T36] audit: type=1326 audit(1756653214.432:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de2b8ebe9 code=0x7fc00000 [ 148.850610][ T362] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.860204][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 152.348046][ C0] net_ratelimit: 116576 callbacks suppressed [ 152.348076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.348082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.348180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.354197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.366412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.378537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.390781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.403118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.415185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.427210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.917320][ C0] sched: DL replenish lagged too much [ 156.052139][ T5881] netlink: 'syz.6.1843': attribute type 12 has an invalid length. [ 157.387117][ C1] net_ratelimit: 82484 callbacks suppressed [ 157.387143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.387190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.393381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.405415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.417957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.430458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.442320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.454505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.466620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.478752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.233513][ T5891] overlayfs: failed to resolve './file2': -2 [ 160.351631][ T36] kauditd_printk_skb: 1209 callbacks suppressed [ 160.351658][ T36] audit: type=1400 audit(1756653226.014:2560): avc: denied { read write } for pid=5893 comm="syz.2.1848" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 161.891384][ T36] audit: type=1400 audit(1756653226.014:2561): avc: denied { open } for pid=5893 comm="syz.2.1848" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.423856][ C1] net_ratelimit: 83173 callbacks suppressed [ 162.423878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.423899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.430099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.442182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.454174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.466438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.478328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.490428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.502505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.515021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.749032][ T36] audit: type=1400 audit(1756653231.695:2562): avc: denied { getopt } for pid=5903 comm="syz.2.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.815188][ T64] usb 2-1: USB disconnect, device number 33 [ 167.458642][ C1] net_ratelimit: 100535 callbacks suppressed [ 167.458666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.458684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 167.464830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.477543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.489523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.501856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.513945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.526242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 167.538244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.550186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.491571][ C0] net_ratelimit: 122070 callbacks suppressed [ 172.491597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 172.491611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.491698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.497937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.510036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.521956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.534029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.546351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 172.558265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.570228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.522630][ C0] net_ratelimit: 125338 callbacks suppressed [ 177.522657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 177.522687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.528870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.540917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.552927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.564977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.577179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 177.589048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.601163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.613224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.552138][ C0] net_ratelimit: 127418 callbacks suppressed [ 182.552159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.552197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.558245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.570530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.582962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 182.594845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.607230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.619150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.631078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.643252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.580185][ C1] net_ratelimit: 132226 callbacks suppressed [ 187.580213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.580235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.586326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.598353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.610609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.622839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 187.635061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.647354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.659422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.671517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.606875][ C0] net_ratelimit: 131882 callbacks suppressed [ 192.606902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 192.606914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.606977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.613064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.625062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.637484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.649795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.661974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 192.673904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.685843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.632257][ C1] net_ratelimit: 128012 callbacks suppressed [ 197.632283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.632390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.638402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.650847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.662963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.675009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 197.686962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.699154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.711219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.723585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.656453][ C1] net_ratelimit: 127580 callbacks suppressed [ 202.656479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.656555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 202.662615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.675394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.687735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.699723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.712326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.724962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 202.736869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.749285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.679646][ C1] net_ratelimit: 122923 callbacks suppressed [ 207.679674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.679699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.685828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.697847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 207.709764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.722605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.736037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.748459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.760724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.773258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 212.701751][ C0] net_ratelimit: 128500 callbacks suppressed [ 212.701775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.701797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.708042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.720470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.732901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 212.744853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.756860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.769306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.781794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.793791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.722968][ C1] net_ratelimit: 125550 callbacks suppressed [ 217.722989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.723001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.723124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 217.729240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.741529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.753705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.766079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.778560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.790965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 217.802868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.743324][ C1] net_ratelimit: 129806 callbacks suppressed [ 222.743349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.743353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 222.743488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.749561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.761849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.774420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.787221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 222.799091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.811234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.823618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.762945][ C1] net_ratelimit: 121235 callbacks suppressed [ 227.762967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.762993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.769681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.782095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.794826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.807288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 227.819802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.832646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.845060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.857880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.781755][ C0] net_ratelimit: 121693 callbacks suppressed [ 232.781779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 232.781801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.788151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.800831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.812873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.825170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.837347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 232.849615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.862190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.874171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.799969][ C1] net_ratelimit: 119164 callbacks suppressed [ 237.799996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.799998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.800048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.806115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.818407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 237.830423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.842806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.854993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.867219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.879349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.817475][ C1] net_ratelimit: 123626 callbacks suppressed [ 242.817502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.817553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.823686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.835789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.848059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.860386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 242.872432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.884535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.896862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.908948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.834504][ C0] net_ratelimit: 128570 callbacks suppressed [ 247.834530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 247.834577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.840998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.852893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.864936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.877060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.889453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 247.901400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.913549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.925866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.850913][ C1] net_ratelimit: 133952 callbacks suppressed [ 252.850941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.850965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.857201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.869644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 252.881828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.894055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.906218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.918369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.930446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.943053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 257.866873][ C1] net_ratelimit: 134456 callbacks suppressed [ 257.866897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.866922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 257.873078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.885394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.897409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.909382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.921760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.933891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 257.945907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.958950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.882394][ C1] net_ratelimit: 135015 callbacks suppressed [ 262.882420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.882433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.882473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.888526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.900760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 262.912817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.925256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.937160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.949542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.961532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.897478][ C0] net_ratelimit: 136648 callbacks suppressed [ 267.897501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.897539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.903714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 267.915684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.928243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.940802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.952905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.965219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.977448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 267.989316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.912177][ C1] net_ratelimit: 144064 callbacks suppressed [ 272.912200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.912205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.912255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.918407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.930719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.943314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.955838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 272.968419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.980840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.992711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.926564][ C1] net_ratelimit: 150089 callbacks suppressed [ 277.926590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.926594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.926662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.932937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.945267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.957765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.969982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.981887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.994018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 278.006235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.940532][ C0] net_ratelimit: 142743 callbacks suppressed [ 282.940559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.940579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.940657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.946707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.960051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.972021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 282.984038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.996081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.008309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.020788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.954286][ C0] net_ratelimit: 130047 callbacks suppressed [ 287.954314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.954357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.961490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.973902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.986208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 287.998047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.010284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.022511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.035143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.047267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.116806][ T37] INFO: task syz.1.285:1216 blocked for more than 122 seconds. [ 289.124511][ T37] Not tainted syzkaller #0 [ 289.177358][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.276938][ T36] audit: type=1400 audit(1756653354.920:2563): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2876]" dev="pipefs" ino=2876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.365857][ T37] task:syz.1.285 state:D stack:0 pid:1216 tgid:1216 ppid:288 flags:0x00004006 [ 289.517479][ T37] Call Trace: [ 289.520910][ T37] [ 289.523863][ T37] __schedule+0x1322/0x1df0 [ 289.621114][ T37] ? __sched_text_start+0x10/0x10 [ 289.650830][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 289.705683][ T37] ? __kasan_check_write+0x18/0x20 [ 289.710977][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 289.767741][ T37] ? __kasan_check_write+0x18/0x20 [ 289.773128][ T37] ? trace_contention_begin+0xc0/0xc0 [ 290.027074][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 290.032109][ T37] schedule+0xc6/0x240 [ 290.095909][ T37] schedule_preempt_disabled+0x14/0x30 [ 290.101444][ T37] __mutex_lock+0x81e/0x1b50 [ 290.177929][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 290.184854][ T37] ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10 [ 290.347494][ T37] ? __call_rcu_common+0x41f/0x700 [ 290.353046][ T37] __mutex_lock_slowpath+0xe/0x20 [ 290.399269][ T37] mutex_lock+0x102/0x1c0 [ 290.403853][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 292.967674][ C0] net_ratelimit: 123476 callbacks suppressed [ 292.967703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.967732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.974268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 292.986178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.998202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.010156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.022192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.034123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.046265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.058335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.611096][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 294.617908][ T37] rcu_barrier+0x4d/0x530 [ 294.701594][ T37] ? __kasan_check_write+0x18/0x20 [ 294.707005][ T37] ? kvm_destroy_vcpus+0x1c0/0x250 [ 294.714807][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 294.729897][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 294.734994][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 294.740286][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 294.746235][ T37] ? __kasan_check_write+0x18/0x20 [ 294.751442][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 294.757544][ T37] ? free_pages+0x86/0x90 [ 294.762150][ T37] kvm_put_kvm+0xb04/0x12b0 [ 294.766874][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 294.772474][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 294.778442][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 294.783743][ T37] kvm_vm_release+0x47/0x70 [ 294.788762][ T37] __fput+0x1fe/0xa00 [ 294.793204][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 294.798905][ T37] ____fput+0x20/0x30 [ 294.803382][ T37] task_work_run+0x1e3/0x250 [ 294.808347][ T37] ? __cfi_task_work_run+0x10/0x10 [ 294.813692][ T37] ? __kasan_check_write+0x18/0x20 [ 294.819753][ T37] do_exit+0x9bc/0x2630 [ 294.824122][ T37] ? __sched_text_start+0x10/0x10 [ 294.829488][ T37] ? __cfi_do_exit+0x10/0x10 [ 294.834371][ T37] ? __kasan_check_write+0x18/0x20 [ 294.840095][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 294.845371][ T37] ? __kasan_check_read+0x15/0x20 [ 294.850643][ T37] ? cgroup_update_frozen+0x160/0x990 [ 294.856188][ T37] do_group_exit+0x22a/0x300 [ 294.861301][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 294.866803][ T37] get_signal+0x139d/0x14f0 [ 294.871401][ T37] arch_do_signal_or_restart+0x96/0x720 [ 294.877555][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 294.883927][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 294.889567][ T37] ? __kasan_check_write+0x18/0x20 [ 294.894814][ T37] ? recalc_sigpending+0x185/0x1d0 [ 294.900264][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 294.905722][ T37] ? calculate_sigpending+0x81/0x90 [ 294.911247][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 294.916911][ T37] ret_from_fork+0x3a/0xa0 [ 294.921659][ T37] ret_from_fork_asm+0x1a/0x30 [ 294.926720][ T37] RIP: 0033:0x7f8de2b8ebe9 [ 294.931270][ T37] RSP: 002b:00007f8de3ac6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 294.939946][ T37] RAX: 0000000000000000 RBX: 00007f8de2dc6090 RCX: 00007f8de2b8ebe9 [ 294.948117][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.956459][ T37] RBP: 00007f8de2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 294.965303][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.973480][ T37] R13: 00007f8de2dc6128 R14: 00007f8de2dc6090 R15: 00007ffc0dd89da8 [ 294.981763][ T37] [ 295.161896][ T37] INFO: task syz.1.934:3175 blocked for more than 128 seconds. [ 295.259272][ T37] Not tainted syzkaller #0 [ 295.264657][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.273997][ T37] task:syz.1.934 state:D stack:0 pid:3175 tgid:3175 ppid:288 flags:0x00004006 [ 295.284519][ T37] Call Trace: [ 295.287822][ T37] [ 295.290825][ T37] __schedule+0x1322/0x1df0 [ 295.295484][ T37] ? __sched_text_start+0x10/0x10 [ 295.300759][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 295.306520][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 295.311804][ T37] ? __kasan_check_write+0x18/0x20 [ 295.317298][ T37] ? trace_contention_begin+0xc0/0xc0 [ 295.322724][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 295.328904][ T37] schedule+0xc6/0x240 [ 295.333121][ T37] schedule_preempt_disabled+0x14/0x30 [ 295.338879][ T37] __mutex_lock+0x81e/0x1b50 [ 295.343570][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 295.350368][ T37] ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10 [ 295.357177][ T37] ? __call_rcu_common+0x41f/0x700 [ 295.362470][ T37] __mutex_lock_slowpath+0xe/0x20 [ 295.367544][ T37] mutex_lock+0x102/0x1c0 [ 295.371953][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 295.377095][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 295.383744][ T37] rcu_barrier+0x4d/0x530 [ 295.388227][ T37] ? __kasan_check_write+0x18/0x20 [ 295.393404][ T37] ? kvm_destroy_vcpus+0x1c0/0x250 [ 295.398817][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 295.404262][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 295.409058][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 295.414235][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 295.419920][ T37] ? __kasan_check_write+0x18/0x20 [ 295.425228][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 295.431019][ T37] ? free_pages+0x86/0x90 [ 295.435368][ T37] kvm_put_kvm+0xb04/0x12b0 [ 295.440082][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 295.445297][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 295.451165][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 295.456420][ T37] kvm_vm_release+0x47/0x70 [ 295.461261][ T37] __fput+0x1fe/0xa00 [ 295.465265][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 295.470995][ T37] ____fput+0x20/0x30 [ 295.475284][ T37] task_work_run+0x1e3/0x250 [ 295.479975][ T37] ? __cfi_task_work_run+0x10/0x10 [ 295.485226][ T37] ? __kasan_check_write+0x18/0x20 [ 295.490619][ T37] do_exit+0x9bc/0x2630 [ 295.494900][ T37] ? __sched_text_start+0x10/0x10 [ 295.500218][ T37] ? __cfi_do_exit+0x10/0x10 [ 295.504828][ T37] ? __kasan_check_write+0x18/0x20 [ 295.510215][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 295.515432][ T37] ? __kasan_check_read+0x15/0x20 [ 295.520532][ T37] ? cgroup_update_frozen+0x160/0x990 [ 295.526023][ T37] do_group_exit+0x22a/0x300 [ 295.530665][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 295.536190][ T37] get_signal+0x139d/0x14f0 [ 295.540788][ T37] arch_do_signal_or_restart+0x96/0x720 [ 295.546627][ T37] ? common_nsleep+0x93/0xb0 [ 295.551450][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 295.557721][ T37] ? __se_sys_clock_nanosleep+0x300/0x390 [ 295.563595][ T37] ? __kasan_check_read+0x15/0x20 [ 295.568766][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 295.575075][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 295.580687][ T37] do_syscall_64+0x64/0xf0 [ 295.585313][ T37] ? clear_bhb_loop+0x50/0xa0 [ 295.590117][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 295.596242][ T37] RIP: eccb:0xe4a421182f13d611 [ 295.601036][ T37] RSP: 002b:00007f8de3ac6f80 EFLAGS: 00000756 ORIG_RAX: d1d66dbfed01019b [ 295.609475][ T37] RAX: 0000000000000001 RBX: 0000000041b945c9 RCX: 000000006d3f6aeb [ 295.617453][ T37] RDX: 00000000151ff1ed RSI: 0000000036566808 RDI: 00000000000086ba [ 295.625541][ T37] RBP: 0000000000000000 R08: dbce39d105fdbf88 R09: ae9ea378b9c9fbc7 [ 295.633821][ T37] R10: 33740f3b8630618c R11: 2450ade207355af5 R12: 0a61688f027fb1a4 [ 295.641845][ T37] R13: 339c71c774e61334 R14: 28baed4a0483d193 R15: 7c1f9cf2b758efdc [ 295.649964][ T37] [ 295.661879][ T37] INFO: task syz.1.1826:5832 blocked for more than 128 seconds. [ 296.049256][ T37] Not tainted syzkaller #0 [ 296.056844][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.065573][ T37] task:syz.1.1826 state:D stack:0 pid:5832 tgid:5832 ppid:288 flags:0x00004004 [ 296.076269][ T37] Call Trace: [ 296.079556][ T37] [ 296.082544][ T37] __schedule+0x1322/0x1df0 [ 296.087339][ T37] ? __sched_text_start+0x10/0x10 [ 296.092606][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 296.098131][ T37] ? _raw_spin_unlock+0x45/0x60 [ 296.103118][ T37] ? rcu_barrier_entrain+0x350/0x4d0 [ 296.108447][ T37] schedule+0xc6/0x240 [ 296.112650][ T37] schedule_timeout+0xb2/0x3a0 [ 296.117521][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 296.123223][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 296.128859][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 296.134174][ T37] ? generic_exec_single+0x20a/0x500 [ 296.139492][ T37] wait_for_common+0x359/0x630 [ 296.144340][ T37] ? wait_for_completion+0x40/0x40 [ 296.150083][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 296.155565][ T37] wait_for_completion+0x1c/0x40 [ 296.160926][ T37] rcu_barrier+0x415/0x530 [ 296.165475][ T37] netdev_run_todo+0x10e/0xcb0 [ 296.170547][ T37] ? kvfree+0x39/0x50 [ 296.174553][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 296.180279][ T37] rtnl_unlock+0x12/0x20 [ 296.184544][ T37] tun_chr_close+0xc5/0x150 [ 296.189146][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 296.194389][ T37] __fput+0x1fe/0xa00 [ 296.198667][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 296.204893][ T37] ____fput+0x20/0x30 [ 296.209013][ T37] task_work_run+0x1e3/0x250 [ 296.213729][ T37] ? __cfi_task_work_run+0x10/0x10 [ 296.218856][ T37] ? __kasan_check_write+0x18/0x20 [ 296.224332][ T37] resume_user_mode_work+0x36/0x50 [ 296.229826][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 296.235479][ T37] do_syscall_64+0x64/0xf0 [ 296.240101][ T37] ? clear_bhb_loop+0x50/0xa0 [ 296.244914][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 296.251124][ T37] RIP: 0033:0x7f8de2b8ebe9 [ 296.255788][ T37] RSP: 002b:00007ffc0dd89f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 296.264408][ T37] RAX: 0000000000000000 RBX: 00007f8de2dc7da0 RCX: 00007f8de2b8ebe9 [ 296.272682][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 296.280878][ T37] RBP: 00007f8de2dc7da0 R08: 0000000000000134 R09: 000000110dd8a1ff [ 296.289036][ T37] R10: 00007f8de2dc7cb0 R11: 0000000000000246 R12: 00000000000244ce [ 296.297283][ T37] R13: 00007f8de2dc6090 R14: ffffffffffffffff R15: 00007ffc0dd8a020 [ 296.306095][ T37] [ 296.369359][ T37] NMI backtrace for cpu 1 [ 296.369387][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 296.369415][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.369427][ T37] Call Trace: [ 296.369433][ T37] [ 296.369442][ T37] __dump_stack+0x21/0x30 [ 296.369474][ T37] dump_stack_lvl+0x10c/0x190 [ 296.369499][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 296.369525][ T37] dump_stack+0x19/0x20 [ 296.369548][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 296.369573][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 296.369596][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 296.369620][ T37] ? sched_show_task+0x379/0x560 [ 296.369644][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 296.369666][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 296.369690][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 296.369713][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 296.369739][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 296.369762][ T37] watchdog+0xd8f/0xed0 [ 296.369789][ T37] ? __cfi_watchdog+0x10/0x10 [ 296.369815][ T37] ? __kasan_check_read+0x15/0x20 [ 296.369836][ T37] ? __kthread_parkme+0x138/0x180 [ 296.369853][ T37] ? schedule+0xc6/0x240 [ 296.369879][ T37] kthread+0x2c7/0x370 [ 296.369898][ T37] ? __cfi_watchdog+0x10/0x10 [ 296.369921][ T37] ? __cfi_kthread+0x10/0x10 [ 296.369940][ T37] ret_from_fork+0x67/0xa0 [ 296.369974][ T37] ? __cfi_kthread+0x10/0x10 [ 296.369993][ T37] ret_from_fork_asm+0x1a/0x30 [ 296.370021][ T37] [ 296.527499][ T37] Sending NMI from CPU 1 to CPUs 0: [ 296.535001][ C0] NMI backtrace for cpu 0 [ 296.535015][ C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 296.535037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.535047][ C0] RIP: 0010:stack_trace_consume_entry+0x130/0x2a0 [ 296.535077][ C0] Code: c4 4c 89 cb e8 41 cb 67 00 49 89 d9 4d 89 e0 4c 89 f2 48 8b 75 c0 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 42 01 00 00 <41> 3b 19 0f 92 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d7 [ 296.535090][ C0] RSP: 0018:ffffc90000006f50 EFLAGS: 00000246 [ 296.535104][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000006f00 [ 296.535115][ C0] RDX: dffffc0000000000 RSI: ffffffff81dbdc2f RDI: ffffc90000007060 [ 296.535126][ C0] RBP: ffffc90000006f98 R08: ffffc90000007070 R09: ffffc90000007068 [ 296.535137][ C0] R10: 0000000000000002 R11: ffffffff81744340 R12: ffffc9000000706c [ 296.535148][ C0] R13: 1ffff92000000e0d R14: ffffc900000070e0 R15: ffffc900000070f0 [ 296.535159][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 296.535172][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.535182][ C0] CR2: 000055e9ac197b98 CR3: 000000010b77e000 CR4: 00000000003526b0 [ 296.535196][ C0] Call Trace: [ 296.535201][ C0] [ 296.535208][ C0] ? __kasan_slab_free+0x5f/0x80 [ 296.535225][ C0] ? __kernel_text_address+0x11/0x40 [ 296.535243][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 296.535264][ C0] arch_stack_walk+0x12d/0x170 [ 296.535287][ C0] ? __kasan_slab_free+0x5f/0x80 [ 296.535302][ C0] stack_trace_save+0x9d/0xe0 [ 296.535321][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 296.535342][ C0] kasan_save_track+0x3e/0x80 [ 296.535356][ C0] ? kasan_save_track+0x3e/0x80 [ 296.535369][ C0] ? kasan_save_free_info+0x4a/0x60 [ 296.535387][ C0] ? __kasan_slab_free+0x5f/0x80 [ 296.535406][ C0] ? fdb_notify+0x78/0x150 [ 296.535426][ C0] ? br_fdb_update+0x4b7/0x680 [ 296.535444][ C0] ? br_handle_frame_finish+0x39c/0x1720 [ 296.535465][ C0] kasan_save_free_info+0x4a/0x60 [ 296.535484][ C0] __kasan_slab_free+0x5f/0x80 [ 296.535499][ C0] kmem_cache_free+0x1c1/0x510 [ 296.535522][ C0] ? ret_from_fork+0x67/0xa0 [ 296.535541][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 296.535563][ C0] ? skb_release_data+0x72f/0x9a0 [ 296.535585][ C0] skb_release_data+0x72f/0x9a0 [ 296.535606][ C0] __kfree_skb+0x62/0x210 [ 296.535624][ C0] ? netlink_broadcast_filtered+0x10e7/0x1200 [ 296.535646][ C0] consume_skb+0x65/0x1a0 [ 296.535665][ C0] netlink_broadcast_filtered+0x10e7/0x1200 [ 296.535688][ C0] nlmsg_notify+0xf1/0x1b0 [ 296.535709][ C0] rtnl_notify+0x9e/0xd0 [ 296.535726][ C0] fdb_notify+0xce/0x150 [ 296.535744][ C0] br_fdb_update+0x4b7/0x680 [ 296.535762][ C0] ? __cfi_br_fdb_update+0x10/0x10 [ 296.535780][ C0] ? ip6_rcv_finish+0x344/0x3c0 [ 296.535797][ C0] ? process_backlog+0x44b/0xae0 [ 296.535817][ C0] ? __napi_poll+0xd0/0x610 [ 296.535835][ C0] ? net_rx_action+0x584/0xce0 [ 296.535853][ C0] ? __do_softirq+0xf/0x16 [ 296.535875][ C0] ? do_softirq+0xa6/0x100 [ 296.535897][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 296.535917][ C0] ? rcu_do_batch+0x5c6/0xd20 [ 296.535937][ C0] br_handle_frame_finish+0x39c/0x1720 [ 296.535960][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 296.535984][ C0] br_handle_frame+0x5a6/0xba0 [ 296.536010][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 296.536031][ C0] __netif_receive_skb_core+0xf48/0x3940 [ 296.536051][ C0] ? ip6_mc_input+0x4f3/0x670 [ 296.536068][ C0] ? ip6_mc_input+0x4f3/0x670 [ 296.536085][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 296.536102][ C0] ? qdisc_run_end+0x120/0x120 [ 296.536120][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 296.536136][ C0] ? ip6_rcv_finish+0x344/0x3c0 [ 296.536153][ C0] ? ipv6_rcv+0xed/0x220 [ 296.536169][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 296.536185][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 296.536201][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 296.536221][ C0] process_backlog+0x3e5/0xae0 [ 296.536243][ C0] __napi_poll+0xd0/0x610 [ 296.536259][ C0] net_rx_action+0x584/0xce0 [ 296.536277][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 296.536294][ C0] ? sched_clock+0x44/0x60 [ 296.536312][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 296.536332][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 296.536348][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 296.536368][ C0] handle_softirqs+0x1ab/0x630 [ 296.536390][ C0] __do_softirq+0xf/0x16 [ 296.536409][ C0] do_softirq+0xa6/0x100 [ 296.536430][ C0] [ 296.536434][ C0] [ 296.536440][ C0] ? __cfi_do_softirq+0x10/0x10 [ 296.536460][ C0] ? dst_destroy+0x37d/0x460 [ 296.536475][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 296.536489][ C0] __local_bh_enable_ip+0x74/0x80 [ 296.536509][ C0] rcu_do_batch+0x5c6/0xd20 [ 296.536530][ C0] ? rcu_core+0xd20/0xd20 [ 296.536547][ C0] ? __kasan_check_write+0x18/0x20 [ 296.536567][ C0] ? _raw_spin_lock+0x8c/0x120 [ 296.536586][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 296.536606][ C0] ? __kasan_check_read+0x15/0x20 [ 296.536625][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 296.536646][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 296.536667][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 296.536687][ C0] ? __kasan_check_write+0x18/0x20 [ 296.536706][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 296.536726][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 296.536745][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 296.536764][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 296.536779][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 296.536793][ C0] ? __kasan_check_read+0x15/0x20 [ 296.536812][ C0] ? __kthread_parkme+0x138/0x180 [ 296.536825][ C0] ? schedule+0xc6/0x240 [ 296.536845][ C0] kthread+0x2c7/0x370 [ 296.536859][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 296.536879][ C0] ? __cfi_kthread+0x10/0x10 [ 296.536893][ C0] ret_from_fork+0x67/0xa0 [ 296.536911][ C0] ? __cfi_kthread+0x10/0x10 [ 296.536925][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.536947][ C0] [ 297.980845][ C0] net_ratelimit: 100784 callbacks suppressed [ 297.980869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:50:47:1f:6c:76, vlan:0) [ 297.980884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.980960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.987052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.999119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.011355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.023550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.035516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.047633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.059839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)