last executing test programs: 3m18.357668631s ago: executing program 1 (id=52): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 3m18.000697668s ago: executing program 1 (id=60): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3m17.964473349s ago: executing program 1 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1324037, 0x0) 3m17.907860819s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m17.832723331s ago: executing program 1 (id=65): syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 3m17.689997074s ago: executing program 1 (id=68): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3m17.665216314s ago: executing program 32 (id=68): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3m8.220226847s ago: executing program 3 (id=276): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r2, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) 3m8.201250977s ago: executing program 3 (id=277): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca0b"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}, {&(0x7f0000000600)=ANY=[], 0x22e8}], 0x3}, 0x20040051) 3m8.188472767s ago: executing program 3 (id=278): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 3m8.168433908s ago: executing program 3 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) 3m8.118405369s ago: executing program 3 (id=280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x10000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0xa0000008}) 3m8.05277409s ago: executing program 3 (id=281): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e22, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0x2, @in=@multicast2, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) 3m8.05261761s ago: executing program 33 (id=281): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e22, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0x2, @in=@multicast2, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) 2m34.323290691s ago: executing program 4 (id=1118): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vST\xced\x11L\b\x00\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x87\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x019\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xee\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xc1\xb99\xfa\xb0\x15ECi2~Ur\xb4\xb0\xe4\xde8\xaf\x1b_\x1a\xc9\r\xcdM\xa5\xbf\x1fc&\x00\x8a\xcbjw\xad?\xab\x8b\xb5W=\x99X\\\xe1\xa5\xd0\xf6\aR10\x04\x19\xca\vS\x9f\x95f\xf7Pq\xd5\xb5l\xa0\x92`:E\x05\xb0\x88F\xf4+|\xe4\xee\xd8\xf8\xf0\xae\x04\x84`\xe4\x9d\x11*B\x98\xd6\x9d|\xbeS\xcb\xa6h\xc0=\x9a\xdf\xa6\xe88U\x19\xab\xf6\x024\"\xcb\x17\x9a\xb9>&X\xf1F=\xb6e1-r\xcb\xe2,\x85\xd0^\x94#\x1a\xec\xd4Q2\xc0\x12\xdb\xfe\x02$\x8a\x1bq\x96\xbeZ\x86j\xfetjn\v?\xfa\"V,4br6\xac\xdc\xb9\xf2\xc7T\x04\xca-\xe5\xebX\xac\xdb`\xb9\xb1!\x8dqA\xb8\xc5\\\x84K\xaa2\x94a\xd2\xfc\xe1XT\x02\xf3NQ>o\xe7\x95N\xbb') 2m34.265279862s ago: executing program 4 (id=1120): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) 2m34.245770942s ago: executing program 4 (id=1122): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x76c, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xffffffffffffffac}, 0xdb30}], 0x1, 0x40002042, 0x0) 2m34.233181072s ago: executing program 4 (id=1125): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 2m34.204717873s ago: executing program 4 (id=1126): r0 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m34.122467035s ago: executing program 4 (id=1131): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) lstat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m34.062996496s ago: executing program 34 (id=1131): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) lstat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m22.364027032s ago: executing program 5 (id=1402): openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2m22.363683511s ago: executing program 5 (id=1403): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x5, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x6}, {0x8, 0x0, 0x0, '\x00', 0x10}, {0x6, 0x1, 0x9, '\x00', 0x9}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0xc, 0x9, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x7f}, {0xa, 0x80, 0x2, '\x00', 0x81}, {0x1, 0x4}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0x5, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x41}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x2, 0x9, 0x9, '\x00', 0x5}, {0xa, 0x5, 0x9, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x7, 0x3, 0x9, '\x00', 0x4}, {0x8, 0xff, 0x8e, '\x00', 0xd1}, {0x2, 0x7, 0x1, '\x00', 0x8}, {0x4, 0x1, 0x5, '\x00', 0x3}, {0x5, 0x9, 0xc, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 2m21.994569789s ago: executing program 5 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @rand_addr=0x64010102, 0x4e20, 0x2, 'sed\x00', 0x36, 0x4, 0x2c}, {@broadcast, 0x4e22, 0x1, 0x4, 0x7fffffff, 0x6}}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m21.885615411s ago: executing program 5 (id=1415): mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m21.863153201s ago: executing program 5 (id=1417): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=0x0) 2m21.488821309s ago: executing program 5 (id=1427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00bef54411fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 2m21.460183049s ago: executing program 35 (id=1427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00bef54411fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 1m29.528772762s ago: executing program 7 (id=2409): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, 0x0, 0x0) 1m29.528429682s ago: executing program 7 (id=2410): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) setuid(0xee01) utimes(0x0, 0x0) 1m27.486212911s ago: executing program 7 (id=2436): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x210) 1m27.472343681s ago: executing program 7 (id=2437): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2145499, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m27.397695303s ago: executing program 7 (id=2438): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="a25e517a0ba797cd49921a2bf3c4d9fbff027d4d71ae80d99867b3740698be4b94d3b5", 0x23}], 0x1, 0x0, 0x0, 0x44000}}], 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) 1m27.176703807s ago: executing program 7 (id=2439): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff6}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0xc0) 1m27.143922618s ago: executing program 36 (id=2439): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff6}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0xc0) 55.112702696s ago: executing program 0 (id=2821): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0) capset(0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @broadcast}, 0x12, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='vxcan1\x00', 0x4, 0x12, 0x1c6}) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 55.112440546s ago: executing program 2 (id=2822): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20002002}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000157000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) 55.089120327s ago: executing program 8 (id=2823): mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x701, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) 54.639029025s ago: executing program 0 (id=2825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0x2, "c646"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000240)={0x20, 0x11, 0x2, "bf56"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000340)={0x0, 0xc, 0x2, "985d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.638800795s ago: executing program 8 (id=2826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xffffffffffffff80, 0x0, 0x0}, &(0x7f0000000580)=0x40) sendmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002f40)="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", 0x1000}], 0x1}}], 0x1, 0x24000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40) 54.577475546s ago: executing program 8 (id=2827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xd8, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 54.314397301s ago: executing program 8 (id=2828): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x600000000000000) 54.274684212s ago: executing program 2 (id=2829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x2) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 54.027249117s ago: executing program 0 (id=2830): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) chdir(&(0x7f0000000000)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 53.87676498s ago: executing program 0 (id=2831): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x20a100, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) openat$rnullb(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1f64}, 0x1c, 0x0}}], 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000140)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 53.771492782s ago: executing program 6 (id=2832): syz_io_uring_setup(0x73e8, &(0x7f00000004c0)={0x0, 0xa219, 0x1000, 0x0, 0x208}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x222302, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xffb8) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xf, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) 53.676548784s ago: executing program 6 (id=2833): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x20e00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.36479119s ago: executing program 8 (id=2834): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f00000000c0)=0x18) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 53.293979571s ago: executing program 6 (id=2835): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000340)={0x5000, 0x3000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000380)={[{0x301e, 0x101, 0x5, 0x4, 0xbd, 0xb, 0x1, 0x6, 0x3, 0x5, 0x1, 0x8, 0x4}, {0xff, 0xfff, 0x4, 0x10, 0x6, 0x6, 0xb, 0x8, 0xff, 0x10, 0x6, 0x1c, 0x7}, {0x7, 0x0, 0xd3, 0x8, 0x3, 0x3, 0x2, 0x9, 0x0, 0x1, 0x3, 0x6, 0x3}], 0x4}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x327, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b", 0x54}], 0x1}}], 0x1, 0x80d0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.982977127s ago: executing program 6 (id=2836): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r1, 0xf}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x288c1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000008010040000000000600000000000000f035dee80d92182f07dcbba8152992a2f406649edb7b7455bb28a753a5359cc49d"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@code={0xa, 0x4d, {"0f20c035010000000f22c0650f0764410f013d8c370000425e20a36642f7fbc4e1f15e76fcc4c29198e2c4e18decdb660f3a22470a6a3ef30fc73448"}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @cpuid={0x14, 0x18, {0x1000, 0x9}}, @rdmsr={0x32, 0x18, {0xbf6}}, @wr_crn={0x46, 0x20, {0x3, 0x7}}, @wr_drn={0x6e, 0x20, {0x3, 0x8000}}, @uexit={0x0, 0x18, 0xb46a}, @wr_drn={0x6e, 0x20, {0x1, 0x807}}, @wr_crn={0x46, 0x20, {0x2, 0x2}}, @wr_drn={0x6e, 0x20, {0x6, 0x4}}, @wr_drn={0x6e, 0x20, {0x7, 0x1}}, @uexit={0x0, 0x18, 0x78}], 0x18d}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 46.857433605s ago: executing program 0 (id=2837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xd8, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 46.824518156s ago: executing program 6 (id=2838): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0x2, "c646"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000240)={0x20, 0x11, 0x2, "bf56"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000340)={0x0, 0xc, 0x2, "985d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 45.494672442s ago: executing program 8 (id=2839): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 45.215329917s ago: executing program 2 (id=2840): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x95, 0x240000000008b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r3, 0x29, 0x11, 0x0, &(0x7f0000000040)) 42.522681259s ago: executing program 6 (id=2841): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10002, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.913569299s ago: executing program 0 (id=2842): syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x4800) r0 = syz_open_dev$loop(0x0, 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="dc", 0x1}, {&(0x7f0000000380)='Bb', 0x2}, {&(0x7f0000000480)="9d", 0x1}, {&(0x7f0000000340)="d9", 0x1}, {&(0x7f00000001c0)='\b', 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000000)='N', 0x1}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x82, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000003, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x100, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18.202592309s ago: executing program 2 (id=2848): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000500000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 40 (id=2848): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000500000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): 6][ T359] sony 0003:054C:03D5.0011: input,hidraw0: USB HID v5.f2 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 86.891340][ T665] usb 7-1: Using ep0 maxpacket: 16 [ 86.897747][ T665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.909010][ T665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.918912][ T665] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.931794][ T665] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.940848][ T665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.949779][ T665] usb 7-1: config 0 descriptor?? [ 86.958409][ T31] usb 3-1: USB disconnect, device number 14 [ 87.359266][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.366616][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.373901][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.381170][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.388443][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.395694][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.403379][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.410785][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.418171][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.425454][ T665] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 87.433431][ T665] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 87.441585][ T665] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 87.453037][ T665] microsoft 0003:045E:07DA.0012: no inputs found [ 87.459402][ T665] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 87.577441][ T665] usb 7-1: USB disconnect, device number 6 [ 88.233350][ T3907] sock: sock_set_timeout: `syz.0.1536' (pid 3907) tries to set negative timeout [ 88.561345][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 88.732368][ T9] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 88.740634][ T9] usb 7-1: config 1 has no interface number 0 [ 88.747246][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.754882][ T9] usb 7-1: config 1 interface 105 has no altsetting 0 [ 88.763422][ T9] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 88.772709][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.780735][ T9] usb 7-1: Product: syz [ 88.785134][ T9] usb 7-1: Manufacturer: syz [ 88.789792][ T9] usb 7-1: SerialNumber: syz [ 88.998723][ T9] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 89.009128][ T9] usb 7-1: USB disconnect, device number 7 [ 89.391341][ T665] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 89.552813][ T665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.563881][ T665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.573691][ T665] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.583076][ T665] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.594620][ T665] usb 8-1: config 0 descriptor?? [ 89.846363][ T359] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 90.001330][ T359] usb 7-1: Using ep0 maxpacket: 16 [ 90.007886][ T359] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 90.016134][ T359] usb 7-1: config 0 has no interface number 0 [ 90.022538][ T359] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 90.032679][ T359] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 90.044377][ T359] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 90.053610][ T359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.061810][ T359] usb 7-1: Product: syz [ 90.066002][ T359] usb 7-1: Manufacturer: syz [ 90.070618][ T359] usb 7-1: SerialNumber: syz [ 90.076856][ T359] usb 7-1: config 0 descriptor?? [ 90.082288][ T3982] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 90.089484][ T3982] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 90.299165][ T3982] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 90.306449][ T3982] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 90.808229][ T665] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71 [ 90.817238][ T665] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 90.825546][ T665] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71 [ 90.833677][ T665] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 90.841197][ T665] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 90.851458][ T665] usb 8-1: USB disconnect, device number 2 [ 90.916069][ T359] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 90.926322][ T359] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 90.931424][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 90.936943][ T359] asix 7-1:0.251: probe with driver asix failed with error -71 [ 90.953131][ T359] usb 7-1: USB disconnect, device number 8 [ 91.093715][ T46] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 91.102841][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.110853][ T46] usb 3-1: Product: syz [ 91.115076][ T46] usb 3-1: Manufacturer: syz [ 91.119684][ T46] usb 3-1: SerialNumber: syz [ 91.125012][ T46] usb 3-1: config 0 descriptor?? [ 91.684530][ T36] kauditd_printk_skb: 175 callbacks suppressed [ 91.684544][ T36] audit: type=1400 audit(2000000003.700:766): avc: denied { listen } for pid=4056 comm="syz.6.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.735686][ T46] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 91.903911][ T4064] overlayfs: failed to clone upperpath [ 91.951338][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 92.324254][ T4079] netlink: 'syz.7.1615': attribute type 2 has an invalid length. [ 92.380543][ T36] audit: type=1400 audit(2000000004.390:767): avc: denied { create } for pid=4081 comm="syz.7.1616" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.539080][ T46] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.549430][ T46] asix 3-1:0.0: probe with driver asix failed with error -71 [ 92.558158][ T46] usb 3-1: USB disconnect, device number 15 [ 92.609480][ T4091] incfs: Can't find or create .index dir in ./bus [ 92.616138][ T4091] incfs: mount failed -1 [ 92.621879][ T4091] incfs: Can't find or create .index dir in ./bus [ 92.628442][ T4091] incfs: mount failed -1 [ 92.657592][ T4095] netlink: 'syz.6.1622': attribute type 4 has an invalid length. [ 92.667474][ T4095] netlink: 'syz.6.1622': attribute type 4 has an invalid length. [ 92.690306][ T4093] kvm: pic: non byte write [ 92.991340][ T359] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 93.142366][ T359] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 93.159440][ T359] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.171079][ T359] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.181110][ T359] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 93.194928][ T359] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 93.204045][ T359] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 93.212188][ T359] usb 8-1: Manufacturer: syz [ 93.217644][ T359] usb 8-1: config 0 descriptor?? [ 93.284505][ T36] audit: type=1400 audit(2000000005.300:768): avc: denied { mount } for pid=4146 comm="syz.0.1646" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 93.632729][ T359] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 93.640037][ T359] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 93.661000][ T359] appleir 0003:05AC:8243.0014: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 93.771134][ T4177] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 93.882990][ T4183] netlink: 'syz.0.1661': attribute type 4 has an invalid length. [ 93.892706][ T665] usb 8-1: USB disconnect, device number 3 [ 93.902338][ T4183] netlink: 'syz.0.1661': attribute type 4 has an invalid length. [ 93.933054][ T4185] overlayfs: failed to clone upperpath [ 93.941917][ T36] audit: type=1326 audit(2000000005.960:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.6.1663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd77918eec9 code=0x0 [ 94.227284][ T36] audit: type=1400 audit(2000000006.240:770): avc: denied { execute } for pid=4199 comm="syz.2.1667" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.611180][ T4211] SELinux: failed to load policy [ 94.620501][ T36] audit: type=1400 audit(2000000006.620:771): avc: denied { load_policy } for pid=4210 comm="syz.7.1673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.731336][ T359] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 94.772322][ T4216] overlayfs: failed to clone upperpath [ 94.881372][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 94.887857][ T359] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 94.897178][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.907772][ T359] usb 3-1: config 0 descriptor?? [ 95.071319][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 95.117240][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 95.221313][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 95.227496][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.238444][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 95.247529][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.256294][ T9] usb 7-1: config 0 descriptor?? [ 95.526901][ T36] audit: type=1400 audit(2000000007.540:772): avc: denied { mounton } for pid=4224 comm="syz.7.1679" path="/26/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 95.673936][ T9] logitech 0003:046D:C211.0015: ignoring exceeding usage max [ 95.699340][ T9] logitech 0003:046D:C211.0015: hidraw0: USB HID v0.00 Device [HID 046d:c211] on usb-dummy_hcd.6-1/input0 [ 95.718741][ T9] logitech 0003:046D:C211.0015: no inputs found [ 95.878025][ T9] usb 7-1: USB disconnect, device number 9 [ 96.326929][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 96.337026][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 96.348276][ T359] asix 3-1:0.0: probe with driver asix failed with error -71 [ 96.359030][ T359] usb 3-1: USB disconnect, device number 16 [ 96.721377][ T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 96.821379][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 96.871376][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 96.877913][ T31] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.888949][ T31] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.898730][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 96.905472][ T31] usb 7-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 96.914662][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.923457][ T31] usb 7-1: config 0 descriptor?? [ 96.972669][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.983773][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.993568][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.006491][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.015650][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.027227][ T9] usb 8-1: config 0 descriptor?? [ 97.101335][ T359] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 97.252505][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.263615][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.273678][ T359] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 97.283393][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.293366][ T359] usb 3-1: config 0 descriptor?? [ 97.331472][ T31] ntrig 0003:1B96:0004.0016: unknown main item tag 0x0 [ 97.338510][ T31] ntrig 0003:1B96:0004.0016: unknown main item tag 0x0 [ 97.351091][ T31] ntrig 0003:1B96:0004.0016: unknown main item tag 0x0 [ 97.358077][ T31] ntrig 0003:1B96:0004.0016: unknown main item tag 0x0 [ 97.365004][ T31] ntrig 0003:1B96:0004.0016: unknown main item tag 0x0 [ 97.373422][ T31] ntrig 0003:1B96:0004.0016: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.6-1/input0 [ 97.436748][ T9] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 97.446171][ T9] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 97.533742][ T31] ntrig 0003:1B96:0004.0016: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 97.740465][ T46] usb 7-1: USB disconnect, device number 10 [ 97.882301][ T36] audit: type=1400 audit(2000000009.900:773): avc: denied { setopt } for pid=4308 comm="syz.0.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.904738][ T359] usb 3-1: USB disconnect, device number 17 [ 99.146253][ T36] audit: type=1400 audit(2000000011.160:774): avc: denied { mounton } for pid=4336 comm="syz.0.1727" path="/626/file0" dev="tmpfs" ino=3308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.179933][ T4339] tipc: Enabling of bearer rejected, failed to enable media [ 99.189253][ T36] audit: type=1400 audit(2000000011.200:775): avc: denied { setattr } for pid=4340 comm="syz.6.1729" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.519504][ T4371] rust_binder: Write failure EINVAL in pid:295 [ 99.523081][ T595] usb 8-1: USB disconnect, device number 4 [ 99.538803][ T4373] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 99.712140][ T495] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.252566][ T46] kernel read not supported for file inotify (pid: 46 comm: kworker/1:1) [ 100.351305][ T36] audit: type=1400 audit(2000000012.360:776): avc: denied { associate } for pid=4403 comm="syz.0.1754" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 100.417473][ T36] audit: type=1400 audit(2000000012.430:777): avc: denied { mount } for pid=4408 comm="syz.0.1757" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.480133][ T36] audit: type=1400 audit(2000000012.450:778): avc: denied { search } for pid=4408 comm="syz.0.1757" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.506435][ T36] audit: type=1400 audit(2000000012.450:779): avc: denied { read } for pid=4408 comm="syz.0.1757" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.528473][ T36] audit: type=1400 audit(2000000012.450:780): avc: denied { open } for pid=4408 comm="syz.0.1757" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.570365][ T36] audit: type=1400 audit(2000000012.450:781): avc: denied { write } for pid=4408 comm="syz.0.1757" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.605152][ T4415] netlink: 'syz.0.1760': attribute type 4 has an invalid length. [ 100.644798][ T4415] netlink: 'syz.0.1760': attribute type 4 has an invalid length. [ 100.902822][ T4430] overlayfs: statfs failed on './file0' [ 101.781319][ T1505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.787730][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 102.060265][ T4501] lo: entered allmulticast mode [ 102.074915][ T4501] lo: left allmulticast mode [ 103.277998][ T36] audit: type=1400 audit(2000000015.290:782): avc: denied { ioctl } for pid=4545 comm="syz.2.1816" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.418432][ T4556] tipc: Started in network mode [ 103.423426][ T4556] tipc: Node identity 62fdd767b901, cluster identity 4711 [ 103.430644][ T4556] tipc: Enabled bearer , priority 0 [ 103.439013][ T4555] tipc: Disabling bearer [ 105.661682][ T4608] overlayfs: failed to clone upperpath [ 105.681659][ T4612] overlayfs: failed to clone upperpath [ 106.753883][ T4676] overlayfs: failed to clone upperpath [ 107.601163][ T36] audit: type=1400 audit(2000000019.610:783): avc: denied { name_bind 0x1000000 } for pid=4705 comm="syz.7.1885" path="socket:[27000]" dev="sockfs" ino=27000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.022405][ T36] audit: type=1400 audit(2000000020.040:784): avc: denied { ioctl } for pid=4748 comm="syz.7.1896" path="socket:[28017]" dev="sockfs" ino=28017 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.547722][ T36] audit: type=1400 audit(2000000021.560:785): avc: denied { unmount } for pid=2941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 110.091328][ T46] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 110.242395][ T46] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.252623][ T46] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.262886][ T46] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.272278][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.280609][ T46] usb 8-1: SerialNumber: syz [ 110.494961][ T46] usb 8-1: 0:2 : does not exist [ 110.502804][ T46] usb 8-1: unit 5: unexpected type 0x09 [ 110.512093][ T46] usb 8-1: USB disconnect, device number 5 [ 110.520157][ T433] udevd[433]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.833080][ T4871] overlayfs: failed to clone upperpath [ 110.871380][ T595] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 111.031335][ T595] usb 7-1: Using ep0 maxpacket: 8 [ 111.037793][ T595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 111.046384][ T595] usb 7-1: config 0 has an invalid interface number: 93 but max is 0 [ 111.054559][ T595] usb 7-1: config 0 has no interface number 0 [ 111.060684][ T595] usb 7-1: config 0 interface 93 has no altsetting 0 [ 111.069075][ T595] usb 7-1: New USB device found, idVendor=3285, idProduct=06b3, bcdDevice=64.3f [ 111.078170][ T595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.086238][ T595] usb 7-1: Product: syz [ 111.090444][ T595] usb 7-1: Manufacturer: syz [ 111.095103][ T595] usb 7-1: SerialNumber: syz [ 111.100313][ T595] usb 7-1: config 0 descriptor?? [ 111.101594][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 111.261321][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 111.267690][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.278637][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.288438][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 111.297550][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.306582][ T46] usb 3-1: config 0 descriptor?? [ 111.313404][ T46] hub 3-1:0.0: USB hub found [ 111.328327][ T595] usb 7-1: USB disconnect, device number 11 [ 111.513685][ T46] hub 3-1:0.0: 1 port detected [ 111.902850][ T4890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1273447517 (10187580136 ns) > initial count (6964638232 ns). Using initial count to start timer. [ 112.126850][ T66] hub 3-1:0.0: activate --> -90 [ 112.201312][ T46] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.352421][ T46] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 112.363330][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.374281][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.384090][ T46] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 112.397916][ T46] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 112.407027][ T46] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 112.415175][ T46] usb 8-1: Manufacturer: syz [ 112.420711][ T46] usb 8-1: config 0 descriptor?? [ 112.462666][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 112.842399][ T46] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 112.860297][ T46] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 112.873943][ T46] appleir 0003:05AC:8243.0019: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 112.931962][ T66] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 112.941778][ T66] usb 3-1-port1: connect-debounce failed [ 112.950588][ T46] usb 3-1: USB disconnect, device number 18 [ 113.467105][ T36] audit: type=1400 audit(2000000025.480:786): avc: denied { write } for pid=4939 comm="syz.2.1978" name="file0" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.368020][ T595] usb 8-1: USB disconnect, device number 6 [ 114.620932][ T4994] overlayfs: failed to clone upperpath [ 114.971369][ T595] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 115.121322][ T595] usb 7-1: Using ep0 maxpacket: 8 [ 115.131345][ T66] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 115.132780][ T595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 115.150030][ T595] usb 7-1: config 8 has an invalid interface number: 112 but max is 0 [ 115.158561][ T595] usb 7-1: config 8 has no interface number 0 [ 115.165998][ T595] usb 7-1: config 8 interface 112 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 115.185937][ T595] usb 7-1: config 8 interface 112 has no altsetting 0 [ 115.203638][ T595] usb 7-1: string descriptor 0 read error: -22 [ 115.210188][ T595] usb 7-1: New USB device found, idVendor=1d2a, idProduct=0801, bcdDevice=72.c7 [ 115.219599][ T595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.282458][ T66] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.301410][ T66] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.312661][ T66] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.325703][ T66] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.334813][ T66] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.351357][ T66] usb 8-1: config 0 descriptor?? [ 115.635657][ T595] asix 7-1:8.112 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 115.645921][ T595] asix 7-1:8.112 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 115.656393][ T595] asix 7-1:8.112: probe with driver asix failed with error -71 [ 115.665542][ T595] usb 7-1: USB disconnect, device number 12 [ 115.691367][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 115.760279][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.767861][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.775443][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.782917][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.790326][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.797765][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.805207][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.812639][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.820035][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 115.827653][ T66] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 115.836544][ T66] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 115.851302][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 115.858697][ T46] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 115.869537][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 115.877674][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.886766][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.894811][ T46] usb 3-1: Product: syz [ 115.899229][ T46] usb 3-1: Manufacturer: syz [ 115.903912][ T46] usb 3-1: SerialNumber: syz [ 115.909475][ T5032] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.073350][ T595] usb 8-1: USB disconnect, device number 7 [ 116.120707][ T46] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 116.130346][ T46] usb 3-1: USB disconnect, device number 19 [ 116.571321][ T595] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 116.741359][ T595] usb 3-1: Using ep0 maxpacket: 16 [ 116.754030][ T595] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 116.778290][ T595] usb 3-1: config 1 interface 0 has no altsetting 0 [ 116.791339][ T595] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.800737][ T595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.814792][ T595] usb 3-1: Product: syz [ 116.819027][ T595] usb 3-1: Manufacturer: syz [ 116.824591][ T595] usb 3-1: SerialNumber: syz [ 116.832037][ T5032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.881335][ T36] audit: type=1400 audit(2000000028.890:787): avc: denied { link } for pid=5073 comm="syz.6.2031" name="#32" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.904383][ T36] audit: type=1400 audit(2000000028.890:788): avc: denied { rename } for pid=5073 comm="syz.6.2031" name="#33" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.246169][ T5032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.657102][ T595] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 117.762947][ T36] audit: type=1326 audit(2000000029.780:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 117.786647][ T36] audit: type=1326 audit(2000000029.780:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 117.824988][ T36] audit: type=1326 audit(2000000029.840:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 117.860674][ T36] audit: type=1326 audit(2000000029.840:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 117.888838][ T36] audit: type=1326 audit(2000000029.900:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 117.921030][ T36] audit: type=1326 audit(2000000029.900:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 117.946299][ T36] audit: type=1326 audit(2000000029.960:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 117.950278][ T66] usb 3-1: USB disconnect, device number 20 [ 117.998358][ T66] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 118.007625][ T36] audit: type=1326 audit(2000000029.960:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2038eec9 code=0x7fc00000 [ 119.011335][ T595] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 119.162421][ T595] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.174140][ T595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.185187][ T595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.195124][ T595] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.208510][ T595] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.217622][ T595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.226260][ T595] usb 7-1: config 0 descriptor?? [ 119.569999][ T5227] Zero length message leads to an empty skb [ 119.634578][ T595] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 119.645026][ T595] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 119.658568][ T595] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 119.944986][ T66] usb 7-1: USB disconnect, device number 13 [ 121.175074][ T5324] syz.2.2111: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 121.190044][ T5324] CPU: 1 UID: 0 PID: 5324 Comm: syz.2.2111 Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461 [ 121.190077][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.190105][ T5324] Call Trace: [ 121.190115][ T5324] [ 121.190126][ T5324] __dump_stack+0x21/0x30 [ 121.190172][ T5324] dump_stack_lvl+0x10c/0x190 [ 121.190205][ T5324] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.190239][ T5324] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 121.190271][ T5324] dump_stack+0x19/0x20 [ 121.190301][ T5324] warn_alloc+0x1bc/0x2a0 [ 121.190334][ T5324] ? stack_depot_save_flags+0x38/0x800 [ 121.190363][ T5324] ? __cfi_warn_alloc+0x10/0x10 [ 121.190395][ T5324] ? kasan_save_track+0x4f/0x80 [ 121.190420][ T5324] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 121.190442][ T5324] ? xskq_create+0x68/0x2a0 [ 121.190472][ T5324] ? xsk_init_queue+0xb6/0x120 [ 121.190498][ T5324] ? xsk_setsockopt+0x43f/0x6f0 [ 121.190525][ T5324] ? do_sock_setsockopt+0x26a/0x400 [ 121.190556][ T5324] ? __x64_sys_setsockopt+0x1b8/0x250 [ 121.190587][ T5324] ? x64_sys_call+0x2adc/0x2ee0 [ 121.190624][ T5324] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.190662][ T5324] __vmalloc_node_range_noprof+0x135/0x1420 [ 121.190703][ T5324] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 121.190740][ T5324] ? avc_has_perm+0x144/0x220 [ 121.190783][ T5324] ? kasan_save_alloc_info+0x40/0x50 [ 121.190818][ T5324] ? __kasan_kmalloc+0x96/0xb0 [ 121.190846][ T5324] vmalloc_user_noprof+0x77/0x90 [ 121.190880][ T5324] ? xskq_create+0xdb/0x2a0 [ 121.190912][ T5324] xskq_create+0xdb/0x2a0 [ 121.190943][ T5324] xsk_init_queue+0xb6/0x120 [ 121.190974][ T5324] xsk_setsockopt+0x43f/0x6f0 [ 121.191004][ T5324] ? __cfi_xsk_setsockopt+0x10/0x10 [ 121.191034][ T5324] ? do_futex+0x309/0x500 [ 121.191059][ T5324] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 121.191091][ T5324] ? security_socket_setsockopt+0x33/0xd0 [ 121.191116][ T5324] ? __cfi_xsk_setsockopt+0x10/0x10 [ 121.191146][ T5324] do_sock_setsockopt+0x26a/0x400 [ 121.191177][ T5324] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 121.191212][ T5324] __x64_sys_setsockopt+0x1b8/0x250 [ 121.191245][ T5324] x64_sys_call+0x2adc/0x2ee0 [ 121.191280][ T5324] do_syscall_64+0x58/0xf0 [ 121.191305][ T5324] ? clear_bhb_loop+0x50/0xa0 [ 121.191326][ T5324] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.191361][ T5324] RIP: 0033:0x7f05f998eec9 [ 121.191395][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.191418][ T5324] RSP: 002b:00007f05fa78b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.191445][ T5324] RAX: ffffffffffffffda RBX: 00007f05f9be5fa0 RCX: 00007f05f998eec9 [ 121.191463][ T5324] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 121.191479][ T5324] RBP: 00007f05f9a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 121.191495][ T5324] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.191512][ T5324] R13: 00007f05f9be6038 R14: 00007f05f9be5fa0 R15: 00007ffee68d7a78 [ 121.191531][ T5324] [ 121.281332][ T1495] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 121.283258][ T5324] Mem-Info: [ 121.289598][ T5325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.293351][ T5324] active_anon:59678 inactive_anon:3 isolated_anon:0 [ 121.293351][ T5324] active_file:24983 inactive_file:2859 isolated_file:0 [ 121.293351][ T5324] unevictable:16905 dirty:233 writeback:1 [ 121.293351][ T5324] slab_reclaimable:7148 slab_unreclaimable:70506 [ 121.293351][ T5324] mapped:24591 shmem:50381 pagetables:1087 [ 121.293351][ T5324] sec_pagetables:0 bounce:0 [ 121.293351][ T5324] kernel_misc_reclaimable:0 [ 121.293351][ T5324] free:1448768 free_pcp:2546 free_cma:0 [ 121.300501][ T5325] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 121.304312][ T5324] Node 0 active_anon:238712kB inactive_anon:12kB active_file:99932kB inactive_file:11436kB unevictable:67620kB isolated(anon):0kB isolated(file):0kB mapped:98364kB dirty:932kB writeback:4kB shmem:201524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:5728kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no [ 121.452447][ T1495] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.456955][ T5324] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965932kB mlocked:0kB bounce:0kB free_pcp:5720kB local_pcp:0kB free_cma:0kB [ 121.464714][ T1495] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.472469][ T5324] lowmem_reserve[]: [ 121.481852][ T1495] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.488577][ T5324] 0 [ 121.492022][ T1495] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.499062][ T5324] 3921 [ 121.514446][ T1495] usb 8-1: SerialNumber: syz [ 121.554058][ T5324] 3921 [ 121.676768][ T5324] Normal free:2834828kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:238680kB inactive_anon:16kB active_file:99932kB inactive_file:11436kB unevictable:67620kB writepending:956kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4336kB local_pcp:3436kB free_cma:0kB [ 121.710148][ T5324] lowmem_reserve[]: 0 0 0 [ 121.714620][ T5324] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 121.730234][ T5324] Normal: 49*4kB (ME) 20*8kB (ME) 115*16kB (UME) 25*32kB (ME) 74*64kB (UME) 113*128kB (UME) 78*256kB (UME) 39*512kB (UME) 13*1024kB (UME) 9*2048kB (UME) 669*4096kB (M) = 2834100kB [ 121.748304][ T5324] 94616 total pagecache pages [ 121.753041][ T5324] 4 pages in swap cache [ 121.757209][ T5324] Free swap = 124380kB [ 121.761435][ T5324] Total swap = 124996kB [ 121.765841][ T5324] 2097051 pages RAM [ 121.781160][ T1495] usb 8-1: 0:2 : does not exist [ 121.783510][ T5324] 0 pages HighMem/MovableOnly [ 121.798744][ T5324] 351538 pages reserved [ 121.804373][ T1495] usb 8-1: USB disconnect, device number 8 [ 121.807285][ T5324] 0 pages cma reserved [ 121.818173][ T5324] Memory allocations: [ 121.834604][ T5324] 0 B 0 init/main.c:1370 func:do_initcalls [ 121.850584][ T5324] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 121.867606][ T5324] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 121.880692][ T5324] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 121.888732][ T5324] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 121.896701][ T5324] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 121.905388][ T5324] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 121.913384][ T5324] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 121.921384][ T5324] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 121.929342][ T5324] 0 B 0 init/initramfs.c:101 func:find_link [ 122.344633][ T5366] kvm: pic: level sensitive irq not supported [ 122.414519][ T5369] syzkaller0: entered promiscuous mode [ 122.426334][ T5369] syzkaller0: entered allmulticast mode [ 123.041318][ T1495] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 123.191964][ T1495] usb 8-1: Using ep0 maxpacket: 32 [ 123.203456][ T1495] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.220686][ T1495] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 123.252511][ T1495] usb 8-1: config 0 interface 0 has no altsetting 0 [ 123.261453][ T1495] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 123.270540][ T1495] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.302058][ T1495] usb 8-1: config 0 descriptor?? [ 123.722945][ T1495] hid-thrustmaster 0003:044F:B65D.001C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 123.735161][ T1495] hid-thrustmaster 0003:044F:B65D.001C: Wrong number of endpoints? [ 123.771318][ T66] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 123.921328][ T66] usb 7-1: Using ep0 maxpacket: 32 [ 123.927738][ T66] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.930122][ C0] hid-thrustmaster 0003:044F:B65D.001C: Unknown packet type 0x0, unable to proceed further with wheel init [ 123.936103][ T66] usb 7-1: config 0 has no interface number 0 [ 123.953771][ T66] usb 7-1: config 0 interface 184 has no altsetting 0 [ 123.961912][ T66] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.971058][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.979129][ T66] usb 7-1: Product: syz [ 123.983362][ T66] usb 7-1: Manufacturer: syz [ 123.987956][ T66] usb 7-1: SerialNumber: syz [ 123.993337][ T66] usb 7-1: config 0 descriptor?? [ 123.999058][ T66] smsc75xx v1.0.0 [ 124.150121][ T665] usb 8-1: USB disconnect, device number 9 [ 124.415112][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 124.415132][ T36] audit: type=1400 audit(2000000036.430:822): avc: denied { module_load } for pid=5438 comm="syz.0.2156" path="/bus" dev="ramfs" ino=36428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 124.415360][ T5439] Invalid ELF header magic: != ELF [ 124.515681][ T5452] overlayfs: failed to clone upperpath [ 124.602251][ T66] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 124.613142][ T66] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.652738][ T36] audit: type=1400 audit(2000000036.670:823): avc: denied { getopt } for pid=5459 comm="syz.2.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.023742][ T5487] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=5487 comm=syz.0.2178 [ 125.225043][ T66] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 125.235925][ T66] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 125.245519][ T66] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 125.254974][ T66] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 125.265079][ T66] usb 7-1: USB disconnect, device number 14 [ 125.833501][ T5530] overlayfs: failed to clone upperpath [ 126.107477][ T5559] overlayfs: failed to clone upperpath [ 126.161320][ T359] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 126.311314][ T359] usb 7-1: Using ep0 maxpacket: 32 [ 126.318689][ T359] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.328930][ T359] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.339427][ T359] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 126.348635][ T359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.356720][ T359] usb 7-1: Product: syz [ 126.360958][ T359] usb 7-1: Manufacturer: syz [ 126.365639][ T359] usb 7-1: SerialNumber: syz [ 126.371675][ T359] usb 7-1: config 0 descriptor?? [ 126.588155][ T31] usb 7-1: USB disconnect, device number 15 [ 127.401320][ T359] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 127.409585][ T36] audit: type=1400 audit(2000000039.420:824): avc: denied { add_name } for pid=5615 comm="syz.7.2237" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.437091][ T36] audit: type=1400 audit(2000000039.420:825): avc: denied { create } for pid=5615 comm="syz.7.2237" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 127.457454][ T36] audit: type=1400 audit(2000000039.420:826): avc: denied { associate } for pid=5615 comm="syz.7.2237" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.522946][ T5622] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 127.522974][ T5622] rust_binder: Error while translating object. [ 127.531959][ T5622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.538257][ T5622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 127.561314][ T359] usb 7-1: Using ep0 maxpacket: 8 [ 127.598362][ T359] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.611353][ T359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.621388][ T359] usb 7-1: Product: syz [ 127.632008][ T359] usb 7-1: Manufacturer: syz [ 127.636658][ T359] usb 7-1: SerialNumber: syz [ 127.852871][ T359] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.893152][ T36] audit: type=1400 audit(2000000039.910:827): avc: denied { setopt } for pid=5646 comm="syz.7.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.056449][ T36] audit: type=1400 audit(2000000040.070:828): avc: denied { read write } for pid=5603 comm="syz.6.2232" name="lp0" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 128.066671][ T66] usb 7-1: USB disconnect, device number 16 [ 128.080252][ T36] audit: type=1400 audit(2000000040.070:829): avc: denied { open } for pid=5603 comm="syz.6.2232" path="/dev/usb/lp0" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 128.090820][ T66] usblp0: removed [ 128.171375][ T31] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 128.322478][ T31] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 128.330641][ T31] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.342229][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.353639][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.364842][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.377777][ T31] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.386911][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.398146][ T31] usb 8-1: config 0 descriptor?? [ 128.404771][ T5649] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 128.813801][ T31] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 128.822658][ T31] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 128.831642][ T31] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 128.851334][ T1495] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 129.001311][ T1495] usb 7-1: Using ep0 maxpacket: 32 [ 129.007549][ T1495] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.017891][ T1495] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.027755][ T1495] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.040734][ T1495] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.047445][ T1495] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 129.056541][ T1495] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.065489][ T1495] usb 7-1: config 0 descriptor?? [ 129.073635][ T665] usb 8-1: USB disconnect, device number 10 [ 129.297883][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 129.364219][ T5682] overlayfs: failed to clone upperpath [ 129.388945][ T5688] overlayfs: failed to clone lowerpath [ 129.389152][ T5687] overlayfs: failed to clone upperpath [ 129.416129][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 129.425211][ T5690] bridge_slave_1: left allmulticast mode [ 129.430884][ T5690] bridge_slave_1: left promiscuous mode [ 129.436647][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.444820][ T5690] bridge_slave_0: left allmulticast mode [ 129.450560][ T5690] bridge_slave_0: left promiscuous mode [ 129.456487][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.475487][ T1495] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 129.484408][ T1495] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 129.493232][ T1495] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 129.501511][ T1495] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 129.509497][ T1495] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 129.523688][ T1495] hid-thrustmaster 0003:044F:B65D.001E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 129.536330][ T1495] hid-thrustmaster 0003:044F:B65D.001E: Wrong number of endpoints? [ 129.565871][ T36] audit: type=1400 audit(2000000041.580:830): avc: denied { write } for pid=5702 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.642394][ T36] audit: type=1400 audit(2000000041.660:831): avc: denied { read } for pid=5707 comm="syz.7.2275" path="socket:[37138]" dev="sockfs" ino=37138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.682958][ C0] hid-thrustmaster 0003:044F:B65D.001E: Unknown packet type 0x0, unable to proceed further with wheel init [ 129.704057][ T5722] netlink: 'syz.7.2282': attribute type 4 has an invalid length. [ 129.884106][ T1495] usb 7-1: USB disconnect, device number 17 [ 129.937251][ T5725] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 130.407928][ T495] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.471519][ T36] audit: type=1400 audit(2000000042.480:832): avc: denied { getopt } for pid=5744 comm="syz.7.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.523839][ T5756] netlink: 'syz.0.2297': attribute type 4 has an invalid length. [ 130.533657][ T5756] netlink: 'syz.0.2297': attribute type 4 has an invalid length. [ 131.332667][ T36] audit: type=1400 audit(2000000043.350:833): avc: denied { append } for pid=5788 comm="syz.0.2311" name="file0" dev="tmpfs" ino=4423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.355852][ T36] audit: type=1400 audit(2000000043.350:834): avc: denied { ioctl } for pid=5788 comm="syz.0.2311" path="/830/file0" dev="tmpfs" ino=4423 ioctlcmd=0x5428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.765961][ T5826] wg2: entered promiscuous mode [ 131.771415][ T5826] wg2: entered allmulticast mode [ 131.814400][ T5835] overlayfs: failed to clone upperpath [ 131.844271][ T36] audit: type=1400 audit(2000000043.860:835): avc: denied { create } for pid=5839 comm="syz.0.2333" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 131.901201][ T5842] overlayfs: failed to clone upperpath [ 131.979810][ T5849] netlink: 'syz.2.2337': attribute type 11 has an invalid length. [ 132.348445][ T5871] netlink: 31 bytes leftover after parsing attributes in process `syz.7.2347'. [ 132.358286][ T5871] netlink: 31 bytes leftover after parsing attributes in process `syz.7.2347'. [ 132.394429][ T5873] tipc: Started in network mode [ 132.399420][ T5873] tipc: Node identity fe823ea0cc0f, cluster identity 4711 [ 132.406745][ T5873] tipc: Enabled bearer , priority 0 [ 132.414146][ T5872] tipc: Resetting bearer [ 132.421315][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 132.421313][ T1505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.431893][ T5872] tipc: Disabling bearer [ 132.894482][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 132.994761][ T5899] devpts: called with bogus options [ 133.177289][ T5919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (18 ns). Using initial count to start timer. [ 133.351485][ T5922] tipc: Enabled bearer , priority 0 [ 133.361988][ T5921] tipc: Resetting bearer [ 133.388137][ T5921] tipc: Disabling bearer [ 133.593127][ T36] audit: type=1400 audit(2000000045.610:836): avc: denied { unmount } for pid=3647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 133.637342][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2370'. [ 133.686941][ T5935] overlayfs: failed to clone upperpath [ 134.111348][ T31] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 134.271359][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 134.278954][ T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.288130][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.296184][ T31] usb 8-1: Product: syz [ 134.300742][ T31] usb 8-1: Manufacturer: syz [ 134.305415][ T31] usb 8-1: SerialNumber: syz [ 134.512649][ T31] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 134.687369][ T5977] 9pnet_fd: p9_fd_create_tcp (5977): problem connecting socket to 127.0.0.1 [ 134.717599][ T1495] usb 8-1: USB disconnect, device number 11 [ 134.728557][ T1495] usblp0: removed [ 135.562948][ T6018] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2404'. [ 135.639914][ T36] audit: type=1400 audit(2000000047.650:837): avc: denied { read } for pid=6025 comm="syz.7.2408" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.684022][ T36] audit: type=1400 audit(2000000047.650:838): avc: denied { open } for pid=6025 comm="syz.7.2408" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.711333][ T36] audit: type=1400 audit(2000000047.650:839): avc: denied { ioctl } for pid=6025 comm="syz.7.2408" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.836773][ T36] audit: type=1400 audit(2000000047.850:840): avc: denied { map } for pid=6033 comm="syz.0.2412" path="socket:[38945]" dev="sockfs" ino=38945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 136.031326][ T1495] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 136.160097][ T6046] Invalid ELF header magic: != ELF [ 136.181321][ T1495] usb 8-1: Using ep0 maxpacket: 8 [ 136.187650][ T1495] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 136.196055][ T1495] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 136.204650][ T1495] usb 8-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 136.207966][ T6052] overlayfs: failed to clone upperpath [ 136.215062][ T1495] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 136.229768][ T1495] usb 8-1: config 250 has no interface number 0 [ 136.236272][ T1495] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 136.248145][ T1495] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 136.258792][ T1495] usb 8-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 136.272334][ T1495] usb 8-1: config 250 interface 228 has no altsetting 0 [ 136.280329][ T1495] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 136.289466][ T1495] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 136.297797][ T1495] usb 8-1: Product: syz [ 136.302200][ T1495] usb 8-1: SerialNumber: syz [ 136.309316][ T1495] hub 8-1:250.228: bad descriptor, ignoring hub [ 136.315659][ T1495] hub 8-1:250.228: probe with driver hub failed with error -5 [ 136.771503][ T665] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 137.272960][ T6082] mmap: syz.2.2432 (6082) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.286711][ T6082] tipc: Enabled bearer , priority 10 [ 137.441405][ T665] usb 8-1: USB disconnect, device number 12 [ 138.104097][ T12] bridge_slave_1: left allmulticast mode [ 138.109896][ T12] bridge_slave_1: left promiscuous mode [ 138.115966][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.123896][ T12] bridge_slave_0: left allmulticast mode [ 138.129644][ T12] bridge_slave_0: left promiscuous mode [ 138.135701][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.237150][ T6103] overlayfs: failed to clone upperpath [ 138.287919][ T12] tipc: Left network mode [ 138.294693][ T12] veth1_macvtap: left promiscuous mode [ 138.300246][ T12] veth0_vlan: left promiscuous mode [ 138.386647][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.393993][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.401132][ T6106] bridge_slave_0: entered allmulticast mode [ 138.409099][ T6106] bridge_slave_0: entered promiscuous mode [ 138.411347][ T1495] tipc: Node number set to 3690780519 [ 138.416002][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.427589][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.434834][ T6106] bridge_slave_1: entered allmulticast mode [ 138.441471][ T6106] bridge_slave_1: entered promiscuous mode [ 138.534480][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.541602][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.548939][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.556026][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.589126][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.596574][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.607092][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.614194][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.623204][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.630312][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.657389][ T6106] veth0_vlan: entered promiscuous mode [ 138.668563][ T6106] veth1_macvtap: entered promiscuous mode [ 139.471310][ T359] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 139.642955][ T359] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.654319][ T359] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.668088][ T359] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 139.678746][ T359] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.702871][ T359] usb 7-1: config 0 descriptor?? [ 140.081359][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 140.117662][ T359] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 140.312529][ T359] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device [ 140.330246][ T359] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse [ 140.358715][ T359] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -71 [ 140.378732][ T359] usb 7-1: USB disconnect, device number 18 [ 140.659276][ T6185] 9pnet_fd: Insufficient options for proto=fd [ 140.949989][ T6195] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 141.441314][ T595] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 141.592415][ T595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.603418][ T595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.613750][ T595] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.626687][ T595] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.635775][ T595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.645294][ T595] usb 7-1: config 0 descriptor?? [ 142.055853][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.064221][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.072415][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.080119][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.087902][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.095663][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.103318][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.111687][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.119217][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.127139][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.134765][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.142578][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.150082][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.157889][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.165559][ T595] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 142.173512][ T595] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 142.183135][ T595] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 142.351759][ T6226] tipc: Started in network mode [ 142.356779][ T6226] tipc: Node identity 52c2e5189ccc, cluster identity 4711 [ 142.364138][ T6226] tipc: Enabled bearer , priority 0 [ 142.372243][ T6225] tipc: Resetting bearer [ 142.386993][ T6225] tipc: Disabling bearer [ 143.906705][ T36] audit: type=1400 audit(2000000055.920:841): avc: denied { create } for pid=6258 comm="syz.6.2496" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.942789][ T6261] futex_wake_op: syz.8.2497 tries to shift op by -1; fix this program [ 144.018568][ T6268] KVM: debugfs: duplicate directory 6268-6 [ 144.141737][ T359] usb 7-1: USB disconnect, device number 19 [ 145.159199][ T6307] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2511'. [ 145.212644][ T6313] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 145.731321][ T31] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 145.882459][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 145.892455][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.914584][ T31] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 145.916372][ T6344] overlayfs: failed to clone upperpath [ 145.924072][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.937323][ T31] usb 7-1: Product: syz [ 145.941708][ T31] usb 7-1: Manufacturer: syz [ 145.946341][ T31] usb 7-1: SerialNumber: syz [ 145.957723][ T31] usb 7-1: config 0 descriptor?? [ 145.964999][ T6340] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 145.972414][ T6340] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 146.031623][ T36] audit: type=1326 audit(2000000058.050:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.2539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c2038eec9 code=0x0 [ 146.180374][ T6340] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 146.187774][ T6340] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 146.596374][ T31] Error reading MAC address [ 146.708502][ T6368] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 146.708540][ T6368] rust_binder: Error in use_page_slow: EFAULT [ 146.719150][ T6368] rust_binder: use_range failure EFAULT [ 146.728708][ T6368] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 146.737771][ T6368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 146.746047][ T6368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63 [ 147.011342][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 147.171337][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 147.177550][ T31] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 147.185689][ T31] usb 9-1: config 0 has no interface number 0 [ 147.191825][ T31] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 147.201670][ T31] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 147.211608][ T31] usb 9-1: config 0 interface 41 has no altsetting 0 [ 147.219695][ T31] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 147.228800][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.236850][ T31] usb 9-1: Product: syz [ 147.241013][ T31] usb 9-1: Manufacturer: syz [ 147.245635][ T31] usb 9-1: SerialNumber: syz [ 147.250927][ T31] usb 9-1: config 0 descriptor?? [ 147.256230][ T6377] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 147.263507][ T6377] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 147.472108][ T6377] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 147.479352][ T6377] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 148.087993][ T31] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 148.503200][ T66] usb 7-1: USB disconnect, device number 20 [ 148.660954][ T6403] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 148.670191][ T6403] overlayfs: missing 'lowerdir' [ 148.881323][ T66] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 148.938940][ T6413] sock: sock_set_timeout: `\' (pid 6413) tries to set negative timeout [ 148.994818][ T6422] overlayfs: failed to clone upperpath [ 149.032479][ T66] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.044205][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.055781][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.065897][ T66] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.079046][ T66] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.088174][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.101566][ T66] usb 7-1: config 0 descriptor?? [ 149.512412][ T66] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 149.521928][ T66] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 149.542503][ T31] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 149.554371][ T31] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 149.564016][ T31] usb 9-1: USB disconnect, device number 2 [ 149.772004][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.780770][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.841301][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.850286][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.029613][ T6445] Invalid ELF header len 56 [ 151.029611][ T36] audit: type=1400 audit(2000000063.040:843): avc: denied { module_load } for pid=6444 comm="syz.0.2572" path="/911/file0/bus" dev="tmpfs" ino=4867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 151.080267][ T6449] rust_binder: Error while translating object. [ 151.080299][ T6449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 151.086812][ T6449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:74 [ 151.141733][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2575'. [ 151.234958][ T6456] overlayfs: failed to clone upperpath [ 151.848524][ T359] usb 7-1: USB disconnect, device number 21 [ 151.960297][ T36] audit: type=1400 audit(2000000063.970:844): avc: denied { mount } for pid=6480 comm="syz.6.2588" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 152.545337][ T36] audit: type=1400 audit(2000000064.560:845): avc: denied { unmount } for pid=2941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 153.167445][ T36] audit: type=1400 audit(2000000065.180:846): avc: denied { write } for pid=6519 comm="syz.2.2603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.507036][ T6530] tipc: Started in network mode [ 153.512101][ T6530] tipc: Node identity 7f000001, cluster identity 4711 [ 153.519121][ T6530] tipc: Enabled bearer , priority 10 [ 153.526750][ T6530] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 153.535042][ T6530] tipc: Enabled bearer , priority 10 [ 153.785120][ T36] audit: type=1400 audit(2000000065.800:847): avc: denied { watch watch_reads } for pid=6547 comm="syz.2.2613" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 154.526828][ T6563] Invalid ELF header magic: != ELF [ 154.549035][ T36] audit: type=1400 audit(2000000066.560:848): avc: denied { create } for pid=6564 comm="syz.8.2620" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 154.651330][ T359] tipc: Node number set to 2130706433 [ 154.735431][ T36] audit: type=1326 audit(2000000066.750:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.2.2622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05f998eec9 code=0x0 [ 155.130782][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 156.050573][ T6595] tipc: Failed to remove unknown binding: 66,1,1/4269801494:3898468105/3898468107 [ 156.059944][ T6595] tipc: Failed to remove unknown binding: 66,1,1/4269801494:3898468105/3898468107 [ 156.111294][ T36] audit: type=1400 audit(2000000068.120:850): avc: denied { mounton } for pid=6597 comm="syz.0.2633" path="/928/file0" dev="tmpfs" ino=4961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.134498][ T6598] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 156.158933][ T6600] netlink: 'syz.0.2634': attribute type 11 has an invalid length. [ 156.273022][ T6610] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 156.290257][ T6610] overlayfs: failed to set xattr on upper [ 156.300341][ T6610] overlayfs: ...falling back to redirect_dir=nofollow. [ 156.313940][ T6610] overlayfs: ...falling back to uuid=null. [ 156.319960][ T6610] overlayfs: failed to clone lowerpath [ 157.079058][ T6648] netlink: 'syz.2.2654': attribute type 4 has an invalid length. [ 157.090333][ T6648] netlink: 'syz.2.2654': attribute type 4 has an invalid length. [ 157.163515][ T6656] rust_binder: 6656 RLIMIT_NICE not set [ 157.163689][ T6656] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 157.169385][ T6656] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 157.177478][ T6656] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 157.193531][ T595] rust_binder: 6655: removing orphan mapping 0:24 [ 157.212794][ T6646] netlink: 1351 bytes leftover after parsing attributes in process `syz.6.2653'. [ 157.402198][ T6665] VFS: Mount too revealing [ 157.443814][ T36] audit: type=1400 audit(2000000069.460:851): avc: denied { execute } for pid=6669 comm="syz.0.2662" path="/dev/rnullb0" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.685083][ T6675] netlink: 'syz.0.2664': attribute type 4 has an invalid length. [ 157.705144][ T6675] netlink: 'syz.0.2664': attribute type 4 has an invalid length. [ 158.211402][ T595] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 158.233508][ T36] audit: type=1400 audit(2000000070.250:852): avc: denied { create } for pid=6698 comm="syz.8.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.253656][ T36] audit: type=1400 audit(2000000070.260:853): avc: denied { getopt } for pid=6698 comm="syz.8.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.313416][ T6701] kvm: pic: non byte write [ 158.320186][ T6701] kvm: Disabled LAPIC found during irq injection [ 158.372731][ T595] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 158.379779][ T6708] overlayfs: failed to clone upperpath [ 158.383743][ T595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.398896][ T595] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 158.412268][ T595] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 158.421588][ T595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.431689][ T595] usb 7-1: config 0 descriptor?? [ 158.841822][ T595] holtek_kbd 0003:04D9:A055.0022: item fetching failed at offset 5/7 [ 158.850238][ T595] holtek_kbd 0003:04D9:A055.0022: probe with driver holtek_kbd failed with error -22 [ 159.043582][ T595] usb 7-1: USB disconnect, device number 22 [ 160.786926][ T6784] bridge0: port 3(ip6gretap0) entered blocking state [ 160.793689][ T6784] bridge0: port 3(ip6gretap0) entered disabled state [ 160.800420][ T6784] ip6gretap0: entered allmulticast mode [ 160.806848][ T6784] ip6gretap0: entered promiscuous mode [ 160.812468][ T6784] bridge0: port 3(ip6gretap0) entered blocking state [ 160.819150][ T6784] bridge0: port 3(ip6gretap0) entered forwarding state [ 161.188457][ T36] audit: type=1326 audit(2000000073.200:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.2720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9c20385d67 code=0x0 [ 161.351311][ T665] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 161.502532][ T665] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 161.511729][ T665] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.520575][ T665] usb 9-1: config 0 descriptor?? [ 161.621475][ T6761] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 161.630167][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.701411][ T1505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.702456][ T54] Bluetooth: hci0: command 0x080f tx timeout [ 164.030532][ T665] usb 9-1: Cannot set autoneg [ 164.064792][ T665] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 164.068398][ T6858] 9pnet_fd: Insufficient options for proto=fd [ 164.080587][ T665] usb 9-1: USB disconnect, device number 3 [ 164.861205][ T6879] VFS: Mount too revealing [ 165.006513][ T595] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 165.181300][ T595] usb 9-1: Using ep0 maxpacket: 16 [ 165.192361][ T595] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.203829][ T6897] bridge0: port 4(veth0_to_bridge) entered blocking state [ 165.214256][ T595] usb 9-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.222503][ T6897] bridge0: port 4(veth0_to_bridge) entered disabled state [ 165.241280][ T595] usb 9-1: config 1 interface 0 has no altsetting 0 [ 165.252184][ T595] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.253982][ T6897] veth0_to_bridge: entered allmulticast mode [ 165.271299][ T595] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.279609][ T595] usb 9-1: SerialNumber: syz [ 165.298850][ T6897] veth0_to_bridge: entered promiscuous mode [ 165.319626][ T6897] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.345971][ T6897] bridge0: port 4(veth0_to_bridge) entered blocking state [ 165.353180][ T6897] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 165.513208][ T595] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 165.531222][ T595] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 165.537727][ T595] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 165.557359][ T595] usb 9-1: USB disconnect, device number 4 [ 165.562162][ T6912] overlayfs: failed to clone upperpath [ 165.571296][ T359] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 165.731306][ T359] usb 7-1: Using ep0 maxpacket: 16 [ 165.737601][ T359] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 165.748347][ T359] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.759559][ T359] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.769679][ T359] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.783913][ T359] usb 7-1: config 7 interface 0 has no altsetting 0 [ 165.790562][ T359] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 165.799963][ T359] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.127321][ T6943] netlink: 'syz.0.2772': attribute type 63 has an invalid length. [ 166.135415][ T6943] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2772'. [ 166.144600][ T6943] gretap0: entered allmulticast mode [ 166.150259][ T6943] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.232286][ T359] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0023/input/input23 [ 166.245487][ T359] kye 0003:0458:5010.0023: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 166.748914][ T36] audit: type=1400 audit(2000000078.759:855): avc: denied { create } for pid=6950 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 167.551818][ T6989] netlink: 'syz.0.2792': attribute type 4 has an invalid length. [ 167.861556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.873740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.885879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.897944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.910122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.922310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.934458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.946544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 167.958666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 168.171356][ T359] usb 7-1: USB disconnect, device number 23 [ 168.224920][ T7014] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 168.266940][ T7014] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 168.851297][ T595] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 169.032366][ T595] usb 7-1: config 3 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.052155][ T595] usb 7-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 169.075611][ T595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.507441][ T595] wacom 0003:056A:003F.0024: hidraw0: USB HID v9.14 Device [HID 056a:003f] on usb-dummy_hcd.6-1/input0 [ 169.712301][ T359] usb 7-1: USB disconnect, device number 24 [ 170.541340][ T359] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 170.691313][ T359] usb 7-1: Using ep0 maxpacket: 16 [ 170.702604][ T359] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.726195][ T359] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.750418][ T359] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.767758][ T359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.791551][ T359] usb 7-1: Product: syz [ 170.800131][ T359] usb 7-1: Manufacturer: syz [ 170.810626][ T359] usb 7-1: SerialNumber: syz [ 171.036921][ T359] usb 7-1: 0:2 : does not exist [ 171.058783][ T359] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 171.078737][ T359] usb 7-1: USB disconnect, device number 25 [ 171.151333][ C1] net_ratelimit: 39698 callbacks suppressed [ 171.151350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.169423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.181435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.188901][ T36] audit: type=1326 audit(2000000083.199:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.8.2828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6c778eec9 code=0x0 [ 171.193497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.228295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.240448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.252589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.264715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.276764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 171.288843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 172.401406][ T359] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 172.565117][ T359] usb 9-1: Using ep0 maxpacket: 32 [ 172.587545][ T359] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.616038][ T359] usb 9-1: config 0 has no interface number 0 [ 172.651284][ T359] usb 9-1: config 0 interface 184 has no altsetting 0 [ 172.684440][ T359] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 172.714772][ T359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.746227][ T359] usb 9-1: Product: syz [ 172.761315][ T359] usb 9-1: Manufacturer: syz [ 172.775663][ T359] usb 9-1: SerialNumber: syz [ 172.795606][ T359] usb 9-1: config 0 descriptor?? [ 172.821645][ T359] smsc75xx v1.0.0 [ 172.827038][ T359] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 172.857356][ T359] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 176.161313][ C0] net_ratelimit: 101206 callbacks suppressed [ 176.161336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.161381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 176.167465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.179432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 176.191351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.203229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 176.215305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.227652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 176.239742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.251658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 178.396713][ T9] usb 9-1: USB disconnect, device number 5 [ 180.211070][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 181.171327][ C1] net_ratelimit: 125030 callbacks suppressed [ 181.171350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 181.171392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.177449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 181.189526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.201463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 181.213307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.225184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 181.237189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.249086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 181.260947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.702299][ T9] usb 7-1: device not accepting address 26, error -71 [ 186.181276][ C1] net_ratelimit: 130228 callbacks suppressed [ 186.181299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 186.181315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.187431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 186.199356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.211281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 186.223149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.235085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 186.246930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.258830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 186.270827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.191267][ C1] net_ratelimit: 129598 callbacks suppressed [ 191.191291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 191.191332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.197417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 191.209332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.221301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 191.233165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.245027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 191.257065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.268972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 191.280961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.511256][ C0] sched: DL replenish lagged too much [ 196.201294][ C1] net_ratelimit: 129064 callbacks suppressed [ 196.201317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 196.201360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.207457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 196.219496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.231369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 196.243377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.255260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 196.267138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.279060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 196.290945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.211252][ C1] net_ratelimit: 130058 callbacks suppressed [ 201.211276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 201.211281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.211358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.217440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 201.229348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.241286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 201.253172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.265174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 201.277067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.288992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 206.221249][ C0] net_ratelimit: 125836 callbacks suppressed [ 206.221272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.221317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 206.227495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.239422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 206.251330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.263246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 206.275188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.287110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 206.299151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.311039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 211.231270][ C1] net_ratelimit: 124137 callbacks suppressed [ 211.231293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 211.231359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.237489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 211.249540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.261498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 211.273334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.285191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 211.297187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.309115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 211.321004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.241253][ C0] net_ratelimit: 126868 callbacks suppressed [ 216.241276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.241331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 216.247440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.259405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 216.271328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.283206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 216.295178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.307120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 216.319096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.330976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 221.251241][ C1] net_ratelimit: 131806 callbacks suppressed [ 221.251264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 221.251317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.257410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 221.269419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.281365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 221.293250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.305143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 221.317125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.328998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 221.340992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.261253][ C0] net_ratelimit: 128510 callbacks suppressed [ 226.261282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.261324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 226.267405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.279323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 226.291395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.303360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 226.315198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.327134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 226.338979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.350888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 231.271281][ C1] net_ratelimit: 130063 callbacks suppressed [ 231.271305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 231.271337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.277436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 231.289451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.301370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 231.313389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.325279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 231.337146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.349064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 231.361026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.281287][ C1] net_ratelimit: 127356 callbacks suppressed [ 236.281310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 236.281347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.287430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 236.299424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.311335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 236.323330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.335259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 236.347151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.359032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 236.370919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.291246][ C1] net_ratelimit: 128031 callbacks suppressed [ 241.291271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 241.291327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.297477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 241.309478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.321400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 241.333372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.345261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 241.357244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.369141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 241.381057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.301263][ C0] net_ratelimit: 128107 callbacks suppressed [ 246.301285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.301286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 246.301357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 246.307458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.319425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 246.331374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.343266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 246.355152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.367109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 246.379043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.462320][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.469408][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.491398][ T7139] bridge_slave_0: entered allmulticast mode [ 248.518518][ T7139] bridge_slave_0: entered promiscuous mode [ 249.324392][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.335049][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.353129][ T7139] bridge_slave_1: entered allmulticast mode [ 249.383794][ T7139] bridge_slave_1: entered promiscuous mode [ 249.686293][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.701970][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.709157][ T7138] bridge_slave_0: entered allmulticast mode [ 249.741376][ T7138] bridge_slave_0: entered promiscuous mode [ 250.041404][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.048593][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.113663][ T7140] bridge_slave_0: entered allmulticast mode [ 250.137230][ T7140] bridge_slave_0: entered promiscuous mode [ 250.382541][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.389631][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.431347][ T7138] bridge_slave_1: entered allmulticast mode [ 250.452611][ T7138] bridge_slave_1: entered promiscuous mode [ 250.517572][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.542782][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.549952][ T7140] bridge_slave_1: entered allmulticast mode [ 250.603973][ T7140] bridge_slave_1: entered promiscuous mode [ 251.311224][ C1] net_ratelimit: 125265 callbacks suppressed [ 251.311248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 251.311255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.311352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.317397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 251.329336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.341249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 251.353247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.365149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 251.377036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.389015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 252.583744][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.590834][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.652588][ T7142] bridge_slave_0: entered allmulticast mode [ 252.683763][ T7142] bridge_slave_0: entered promiscuous mode [ 253.272944][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.280087][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.308956][ T7142] bridge_slave_1: entered allmulticast mode [ 253.344498][ T7142] bridge_slave_1: entered promiscuous mode [ 256.321216][ C1] net_ratelimit: 126187 callbacks suppressed [ 256.321240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 256.321297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.327389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 256.339368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.351274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 256.363318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.375234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 256.387123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.399034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 256.410987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.331237][ C0] net_ratelimit: 130981 callbacks suppressed [ 261.331260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.331320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 261.337486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.349463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 261.361399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.373290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 261.385262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.397281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 261.409138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.421077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 266.341230][ C1] net_ratelimit: 122342 callbacks suppressed [ 266.341254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 266.341309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.347422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 266.359293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.371248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 266.383197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.395059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 266.407052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.418988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 266.430874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.351248][ C1] net_ratelimit: 124760 callbacks suppressed [ 271.351271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.351283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.357448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.369473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.381463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.393448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.405360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.417233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.429090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 271.441061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.361207][ C1] net_ratelimit: 128578 callbacks suppressed [ 276.361230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.361299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.367352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.379381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.391463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.403373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.415308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.427276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.439178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 276.451149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.371245][ C1] net_ratelimit: 121188 callbacks suppressed [ 281.371269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.371505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.377396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.389312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.401379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.413233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.425119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.437385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.448984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 281.460947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.381244][ C0] net_ratelimit: 92209 callbacks suppressed [ 286.381274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 286.381308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 286.387317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.399370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 286.411309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 286.423207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 286.435504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 286.447081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 286.459075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.471156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.391204][ C1] net_ratelimit: 91107 callbacks suppressed [ 291.391226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.391254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.397286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.409491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.421177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.433124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.445171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.457094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.468923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 291.481417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 296.401232][ C0] net_ratelimit: 95577 callbacks suppressed [ 296.401254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 296.401320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:af:09:87:4e:20, vlan:0) [ 296.407274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.419332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 296.431319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 296.443225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 296.455571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 296.467176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 296.479160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.491182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.411197][ C1] net_ratelimit: 93340 callbacks suppressed [ 301.411220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.411315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.417289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.429148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.441211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.453217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.465067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.477247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.488914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 301.500884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.421191][ C1] net_ratelimit: 91952 callbacks suppressed [ 306.421214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 306.421222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.421307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 306.427273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 306.439384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 306.451073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 306.463015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.474983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 306.486939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 306.498902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 307.405329][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.432051][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.439195][ T7159] bridge_slave_0: entered allmulticast mode [ 307.488452][ T7159] bridge_slave_0: entered promiscuous mode [ 307.725388][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.742339][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.749476][ T7159] bridge_slave_1: entered allmulticast mode [ 307.801389][ T7159] bridge_slave_1: entered promiscuous mode [ 308.723022][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.730119][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.753101][ T7156] bridge_slave_0: entered allmulticast mode [ 308.782790][ T7156] bridge_slave_0: entered promiscuous mode [ 308.904567][ T37] INFO: task syz.8.2839:7113 blocked for more than 122 seconds. [ 308.914834][ T37] Not tainted syzkaller #0 [ 308.919801][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.953173][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.000372][ T37] task:syz.8.2839 state:D stack:0 pid:7113 tgid:7111 ppid:6106 flags:0x00004006 [ 309.013321][ T36] audit: type=1400 audit(2000000221.009:857): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[755]" dev="pipefs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 309.071985][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.079120][ T7156] bridge_slave_1: entered allmulticast mode [ 309.102289][ T37] Call Trace: [ 309.105717][ T37] [ 309.108672][ T37] __schedule+0x1322/0x1df0 [ 309.293082][ T7156] bridge_slave_1: entered promiscuous mode [ 309.323991][ T37] ? __sched_text_start+0x10/0x10 [ 309.329104][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 309.612233][ T37] ? __kasan_check_write+0x18/0x20 [ 309.617522][ T37] ? llist_add_batch+0x109/0x1e0 [ 309.902876][ T37] schedule+0xc6/0x240 [ 309.907027][ T37] schedule_timeout+0xb2/0x3a0 [ 309.925892][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 309.952447][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 309.958072][ T37] ? generic_exec_single+0x201/0x500 [ 309.982829][ T37] ? __fput+0x1fe/0xa00 [ 309.987060][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 310.011461][ T37] wait_for_common+0x359/0x630 [ 310.016306][ T37] ? wait_for_completion+0x40/0x40 [ 310.042927][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 310.049526][ T37] wait_for_completion+0x1c/0x40 [ 310.072571][ T37] rcu_barrier+0x415/0x530 [ 310.077062][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 310.101414][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 310.106250][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 310.132706][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 310.138423][ T37] ? __kasan_check_write+0x18/0x20 [ 310.162411][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 310.168121][ T37] kvm_put_kvm+0xb04/0x12c0 [ 310.193373][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 310.198653][ T37] kvm_vm_release+0x47/0x70 [ 310.273234][ T37] __fput+0x1fe/0xa00 [ 310.277317][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 310.293120][ T37] ____fput+0x20/0x30 [ 310.297218][ T37] task_work_run+0x1e3/0x250 [ 310.322540][ T37] ? __cfi_task_work_run+0x10/0x10 [ 310.327732][ T37] get_signal+0x1307/0x14f0 [ 310.351668][ T37] arch_do_signal_or_restart+0x96/0x720 [ 310.357284][ T37] ? __fget_files+0x2c5/0x340 [ 310.383085][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 310.389408][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 310.413127][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 310.418672][ T37] do_syscall_64+0x64/0xf0 [ 310.441575][ T37] ? clear_bhb_loop+0x50/0xa0 [ 310.446314][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.473070][ T37] RIP: 0033:0x7fe6c778eacb [ 310.477537][ T37] RSP: 002b:00007fe6c86cd490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.502582][ T37] RAX: 0000000000000000 RBX: 00007fe6c86cdbe0 RCX: 00007fe6c778eacb [ 310.510609][ T37] RDX: 00007fe6c86cdbe0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 310.541815][ T37] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000004 [ 310.549853][ T37] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 310.582923][ T37] R13: 0000200000fea000 R14: 0000200000fe8000 R15: 00000000fec00000 [ 310.591055][ T37] [ 310.623973][ T37] NMI backtrace for cpu 0 [ 310.623994][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461 [ 310.624024][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.624038][ T37] Call Trace: [ 310.624046][ T37] [ 310.624054][ T37] __dump_stack+0x21/0x30 [ 310.624090][ T37] dump_stack_lvl+0x10c/0x190 [ 310.624121][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 310.624153][ T37] dump_stack+0x19/0x20 [ 310.624183][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 310.624207][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 310.624236][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 310.624261][ T37] ? sched_show_task+0x379/0x560 [ 310.624291][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 310.624318][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 310.624355][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 310.624384][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 310.624411][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 310.624439][ T37] watchdog+0xd8f/0xed0 [ 310.624472][ T37] ? __cfi_watchdog+0x10/0x10 [ 310.624502][ T37] ? __kasan_check_read+0x15/0x20 [ 310.624536][ T37] ? __kthread_parkme+0x138/0x180 [ 310.624557][ T37] ? schedule+0xc6/0x240 [ 310.624584][ T37] kthread+0x2c7/0x370 [ 310.624607][ T37] ? __cfi_watchdog+0x10/0x10 [ 310.624637][ T37] ? __cfi_kthread+0x10/0x10 [ 310.624660][ T37] ret_from_fork+0x67/0xa0 [ 310.624691][ T37] ? __cfi_kthread+0x10/0x10 [ 310.624714][ T37] ret_from_fork_asm+0x1a/0x30 [ 310.624750][ T37] [ 310.624758][ T37] Sending NMI from CPU 0 to CPUs 1: [ 310.835878][ C1] NMI backtrace for cpu 1 [ 310.835892][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461 [ 310.835913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.835924][ C1] RIP: 0010:update_stack_state+0xc/0x4b0 [ 310.835950][ C1] Code: 89 e5 48 8b 07 5d c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 81 ec 98 00 00 00 49 89 f7 48 89 fb 49 bd 00 00 00 00 00 fc [ 310.835964][ C1] RSP: 0018:ffffc90000230198 EFLAGS: 00000246 [ 310.835978][ C1] RAX: ffffc90000230f40 RBX: ffffc90000230248 RCX: 0000000000230200 [ 310.835991][ C1] RDX: dffffc0000000000 RSI: ffffc90000230f40 RDI: ffffc90000230248 [ 310.836003][ C1] RBP: ffffc900002301b8 R08: ffffc90000230310 R09: ffffc90000230308 [ 310.836015][ C1] R10: 000000000000000b R11: ffffffff817441e0 R12: 0000000000000000 [ 310.836026][ C1] R13: 1ffff92000046054 R14: ffffc900002302a0 R15: ffffc90000230d30 [ 310.836038][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 310.836052][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.836063][ C1] CR2: 00007f55d405c3d5 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 310.836077][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 310.836087][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 310.836097][ C1] Call Trace: [ 310.836103][ C1] [ 310.836110][ C1] unwind_next_frame+0x3c2/0x750 [ 310.836130][ C1] ? __kernel_text_address+0x11/0x40 [ 310.836151][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.836176][ C1] arch_stack_walk+0x139/0x170 [ 310.836191][ C1] ? net_rx_action+0x584/0xce0 [ 310.836212][ C1] stack_trace_save+0x9d/0xe0 [ 310.836234][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 310.836258][ C1] kasan_save_track+0x3e/0x80 [ 310.836274][ C1] ? kasan_save_track+0x3e/0x80 [ 310.836290][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 310.836311][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 310.836329][ C1] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 310.836354][ C1] ? skb_clone+0x229/0x460 [ 310.836373][ C1] ? br_flood+0x4ed/0x730 [ 310.836391][ C1] ? br_handle_frame_finish+0x12bb/0x1720 [ 310.836411][ C1] ? br_handle_frame+0x5a6/0xba0 [ 310.836430][ C1] ? __netif_receive_skb_core+0xf4b/0x3940 [ 310.836448][ C1] ? process_backlog+0x3e5/0xae0 [ 310.836465][ C1] ? __napi_poll+0xd3/0x610 [ 310.836481][ C1] ? net_rx_action+0x584/0xce0 [ 310.836504][ C1] ? __copy_skb_header+0x453/0x5e0 [ 310.836523][ C1] kasan_save_alloc_info+0x40/0x50 [ 310.836545][ C1] __kasan_slab_alloc+0x73/0x90 [ 310.836562][ C1] kmem_cache_alloc_noprof+0x131/0x3a0 [ 310.836592][ C1] ? skb_clone+0x229/0x460 [ 310.836611][ C1] skb_clone+0x229/0x460 [ 310.836630][ C1] br_flood+0x4ed/0x730 [ 310.836649][ C1] br_handle_frame_finish+0x12bb/0x1720 [ 310.836671][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 310.836694][ C1] br_handle_frame+0x5a6/0xba0 [ 310.836715][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 310.836734][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 310.836751][ C1] ? dst_release+0xe3/0x240 [ 310.836772][ C1] ? arp_process+0xd81/0x1740 [ 310.836789][ C1] ? qdisc_run_end+0x120/0x120 [ 310.836806][ C1] ? __cfi_arp_process+0x10/0x10 [ 310.836820][ C1] ? NF_HOOK+0x157/0x1b0 [ 310.836842][ C1] ? __cfi_arp_process+0x10/0x10 [ 310.836856][ C1] ? arp_xmit+0x1f0/0x1f0 [ 310.836879][ C1] ? __cfi_arp_process+0x10/0x10 [ 310.836896][ C1] process_backlog+0x3e5/0xae0 [ 310.836917][ C1] __napi_poll+0xd3/0x610 [ 310.836934][ C1] net_rx_action+0x584/0xce0 [ 310.836954][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 310.836973][ C1] ? timer_expire_remote+0xa0/0xa0 [ 310.836989][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 310.837012][ C1] handle_softirqs+0x1ab/0x630 [ 310.837038][ C1] __do_softirq+0xf/0x16 [ 310.837058][ C1] do_softirq+0xa6/0x100 [ 310.837080][ C1] [ 310.837086][ C1] [ 310.837091][ C1] ? __cfi_do_softirq+0x10/0x10 [ 310.837115][ C1] ? dst_destroy+0x37d/0x460 [ 310.837137][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 310.837159][ C1] __local_bh_enable_ip+0x74/0x80 [ 310.837182][ C1] rcu_do_batch+0x5c6/0xd20 [ 310.837206][ C1] ? rcu_core+0xd20/0xd20 [ 310.837226][ C1] ? __kasan_check_write+0x18/0x20 [ 310.837250][ C1] ? _raw_spin_lock+0x8c/0x120 [ 310.837267][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 310.837290][ C1] ? __kasan_check_read+0x15/0x20 [ 310.837313][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 310.837338][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 310.837370][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 310.837393][ C1] ? __kasan_check_write+0x18/0x20 [ 310.837449][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 310.837468][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 310.837493][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 310.837512][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 310.837536][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 310.837564][ C1] ? __kasan_check_read+0x15/0x20 [ 310.837602][ C1] ? __kthread_parkme+0x138/0x180 [ 310.837616][ C1] ? schedule+0xc6/0x240 [ 310.837637][ C1] kthread+0x2c7/0x370 [ 310.837654][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 310.837684][ C1] ? __cfi_kthread+0x10/0x10 [ 310.837701][ C1] ret_from_fork+0x67/0xa0 [ 310.837723][ C1] ? __cfi_kthread+0x10/0x10 [ 310.837740][ C1] ret_from_fork_asm+0x1a/0x30 [ 310.837767][ C1] [ 311.431261][ C1] net_ratelimit: 82383 callbacks suppressed [ 311.431284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.431394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.437345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.449320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.461320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.473841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.485239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.497468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.509171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 311.521008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.441242][ C1] net_ratelimit: 97985 callbacks suppressed [ 316.441266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.441322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.447339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.459339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.471347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.483315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.495213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.507421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.519128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 316.530982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)