last executing test programs: 2m2.407452136s ago: executing program 3 (id=620): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0xfffffffffffffd7f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m2.373584107s ago: executing program 3 (id=622): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async) r2 = socket(0x2, 0x2, 0x1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r5}) (async) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107, r5}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) (async) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}}) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', r5, 0x1, 0x50, 0x0, 0x10, {{0x13, 0x4, 0x0, 0x3d, 0x4c, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x37, 0x1, [{0x0, 0xc, "43236381c03001b16dbf"}, {0x1, 0xb, "d9c74e208f2b2ba4a8"}, {0x5, 0xa, "3562e27a8d54ef0f"}, {0x0, 0x6, "9bafd13d"}, {0x2, 0xa, "4f0fa6458470227f"}]}]}}}}}) (async) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x10) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r7, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 2m2.362820177s ago: executing program 3 (id=623): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) (async) close(0x3) 2m2.294360948s ago: executing program 3 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m2.281316178s ago: executing program 3 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) lseek(r1, 0x11, 0x4) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) ppoll(&(0x7f00000001c0)=[{r0, 0x7200}, {r2, 0x2000}], 0x2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40804) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x3fcf, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x2, 0x0, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "4a620761efe46bde"}, 0x10}}, 0x1) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f00000002c0)={@local, @empty}) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000480)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @empty, @multicast1, @loopback, @remote, @multicast2]}, 0x30) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x81, r8, 0x100}, 0xc) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x40047705, 0x0) 2m2.22878703s ago: executing program 3 (id=626): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe4) r4 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x300, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ptrace$pokeuser(0x6, r2, 0x8001, 0xffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0x4, 0x2002) 2m2.17862966s ago: executing program 32 (id=626): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe4) r4 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x300, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ptrace$pokeuser(0x6, r2, 0x8001, 0xffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0x4, 0x2002) 47.724178259s ago: executing program 4 (id=1944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x5c, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}, @mark={0xc, 0x15, {0x35075d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='sfclabel, ']) 47.585645051s ago: executing program 4 (id=1946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x48400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) r4 = dup(0xffffffffffffffff) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', r8, 0x1, 0x40, 0x622, 0x400, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x67, 0x0, 0xdb, 0x4, 0x0, @remote, @multicast2, {[@noop, @timestamp={0x44, 0x4, 0x48, 0x0, 0x5}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000d40)=ANY=[@ANYBLOB="24060000", @ANYRES16=0x0, @ANYBLOB="000027bd7000fbdbdf2501000000100008800c00008008000a000100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020077673100000000000000000000000000087efb55b0f82d011e522e263cb0a25cd04dc41526465250889aa0ac826d2e7eef74acd1dd812b10b8fb7e30858e226ee06757b7e7a6a20a405d56b7113a69dde6ad7785d611e60a3d667623a60c19285c0e6184fec6163a4d750000000900"/125, @ANYRES32=r8, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB], 0x624}, 0x1, 0x0, 0x0, 0x48081}, 0x80c0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r10, 0x0, 0x20, 0x0, &(0x7f0000000300)) syz_usb_control_io$hid(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r11, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10002, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r13 = dup(r12) poll(&(0x7f0000000000)=[{r12, 0x5410}, {0xffffffffffffffff, 0x480}, {0xffffffffffffffff, 0x2}, {r4, 0x4141}, {r11, 0x8000}, {r13, 0xc004}, {r13, 0x4000}], 0x7, 0x4eb) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x100, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 44.337559124s ago: executing program 4 (id=1974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x71, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x19, 0x0) (async) umount2(&(0x7f0000000500)='./file0\x00', 0x2) (async) userfaultfd(0x80000) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f20d83508000000f040185a72c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, &(0x7f0000000080)) (async, rerun: 32) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) (rerun: 32) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x30, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x36}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4028841}, 0x24009094) (async, rerun: 64) r9 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) r10 = socket(0x11, 0x2, 0x24) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, r11) tgkill(r9, r9, 0x21) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 43.159205507s ago: executing program 0 (id=1997): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0x44000, 0x8) symlinkat(&(0x7f0000000140)='./file3\x00', r1, &(0x7f00000001c0)='./file3\x00') fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00fb15050d6e1994616a5da7db7d35cec701d6c288eb9f87ccf564d3"], 0x15, 0x0) (async) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00fb15050d6e1994616a5da7db7d35cec701d6c288eb9f87ccf564d3"], 0x15, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file7\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r2) (async) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000028b000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000200)="ba6100ecb880068ed0f30fc7300f322e0f086436670ffe6657baf80c66b876ba138966efbafc0cb84527ef660f3881323e2e822d5c360f0131", 0x39}], 0x1, 0x1, &(0x7f0000000300)=[@efer={0x2, 0x400}, @cstype3={0x5, 0x4}], 0x2) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r7], 0x20}}, 0x40816) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 43.097820348s ago: executing program 0 (id=1998): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x82, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x4}]) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="f4837e629eda4a7ea9"]}, 0x20}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r3, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 42.946600551s ago: executing program 0 (id=1999): r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a001501f7bf2ce0039ec5665e2470"], 0x1c}], 0x1}, 0x200000c8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_secret(0x0) 42.853778343s ago: executing program 0 (id=2003): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="0080000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 42.330244283s ago: executing program 0 (id=2011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffffffffe40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') faccessat2(r5, &(0x7f0000000040)='\x00', 0x1, 0x1300) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x2000, 0x1) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000280)) 41.461406139s ago: executing program 4 (id=2023): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2d667fc4af"], 0x15) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x40000000) 41.127040256s ago: executing program 1 (id=2025): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 41.056935258s ago: executing program 1 (id=2026): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc5})\')&}*\xe9S\xe9\xaf\x9f\xb9\xc9\xce\xa55\x9d$]\xd0\x1e\xf5cM\xfaW\xd3m\x8d\xf4\x9c\xfalN\x9d\x05\x82\xed\'L0%\x89k\xc62+8U\xcb\xa7\x1c\x1e\xf8\xfb\xe9\x8b`H\xbf\"\xe0\xf1\x18y\x01eE\xec\xe6\x1el\xaaI\xf7\xe5\xba\xef\xcc\xa3\x1aO\x1c\xc3\xbei\xfcM\x05\xb1.e\x0f\xa8\x18\xa9G\n\x88\xe3\xe4\xfbKN\x7f\xb9\x02\xbfM\x10\x1e1\xed\xfdU\xfd\xaf/`\xeeHl\x86\x17S\xfc\xda\xe5\xf6\xb9\x82\x81vg\xf1Z\x84\xfc\n\xcb\x1a\x9f\x04', 0x3a, '', 0x3a, './file0'}, 0xbf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0xffb5) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x6, 0x5}, @sack_perm, @window={0x3, 0x40, 0x15}, @timestamp, @window={0x3, 0xdcc4, 0x85}, @window={0x3, 0xf28e, 0x1000}, @timestamp], 0x8) (async) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000007c0)="17000000020001000002d68c5ee17688a200d3135447dd376874ae08bc447a32080300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039000000000000000002ffff02dfccebf6ba0008400300000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2127c3d0", 0xb8) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x94822, &(0x7f00000003c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}]}) (async) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@dev, @empty}, &(0x7f0000000040)=0xc) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB="796e172c00"]) 41.056602367s ago: executing program 1 (id=2027): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="20000000110001000000000002969a0ca400000007"], 0x20}}, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x34, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, '\x00\x00(\x00'}}, 0x48}, 0x300}, 0x4844) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x401) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000000", @ANYRES32, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="058978456934307e5e0d2ed8fb48a73f7491782368fcca9c45d6a2c2b59cae9771d87771a876cc4d7bbeb1af0420e1618856cf3f373ca63942420d9be98ca92820593e1ba3a025bcb76373c6a032a1d5ec0b60c43a384694ec0b0aecda9446cb3f638ac65d15f6d95df4d43ef275176d8ac3d89a23e0239532d8d146e73028baf1ff3399669ad5e29549fa3b56a8251d290e4df617be9e7ed4dbe38353ca68e232133b35fd240b7723e0372b1b10578cca0749c6ef18b04886cef0a28899e74300ca8036b938385b4cc121cf356488869d60c591c01bfb8d1d8b9dc96b561b04a22f085c4553374db79fafe8c5"], 0x48}, 0x300, 0x0, 0x0, 0x20048014}, 0x8040) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x70003, 0x0, [0x8000000006, 0x8eba, 0x1, 0x3, 0xfffffffffffffeff, 0x8, 0x1, 0x4]}) ptrace$setregset(0x4205, r7, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000140)={0x6, "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"}) 41.034192438s ago: executing program 1 (id=2028): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x9, 0xa8, 0x18, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0xb, 0xd}}) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x40, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6tnl0\x00', r2, 0x2f, 0xe, 0x6, 0x7fff, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x20, 0x1, 0x1}}) dup3(r4, 0xffffffffffffffff, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@decrefs={0x40046307, 0x2}, @free_buffer, @free_buffer, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/212, 0x0, 0x2, 0x27}, @flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x2, 0xb}}, &(0x7f00000002c0)}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x9, 0x1, 0x2f}, @fd}, &(0x7f00000003c0)}}, @register_looper], 0x0, 0x0, 0x0}) 40.987850549s ago: executing program 1 (id=2029): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0x40047705, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = gettid() syz_pidfd_open(r7, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000880)=0xc) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0x1a, r9, 0xba, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x3d, &(0x7f00000006c0)=[{&(0x7f0000002a00)={0x0, 0x37, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x0, 0x31, 0x0, 0x0, @binary="429de6db94c11a0d2d83c9d6e72cd980a0450e08b65102c9aabcd6df4dc6e168e1c04af190d5614578bbb5959caee1eaeb544df0e30ab734d0a8560c3ef2054f643959ddf8629e8b8aa11cd0c4519ec7503d57d02b42cacd4e258b68d0e7343bb10fd9d0f534b44b5841a26629df286df030099ac7c839e765e574265c17dc5ea556c72d4ba08526aac69535f3eb5307d352f5fc76f0c83a45a166d5462d8667e59a01487b57ffd92e241670e73b6efc69f3a0eb2d812d39735df05a75d7cbb6d15ef6d88ebd3db0dbedd05af18920ada119e9"}, @generic="a3a592f130ec2f701290a81f267772b1d5cb80a989a437ec5b92449a73b1e8e62b1790c721c0e868646530b6666b7c96070297da9fc9ce1a95c1777671bce711d0a4793f497b075f9dc4b4ca52e12351b90993b43caa077fc96db96ebd40aab4592857c446f40f50a825c934314af3810052f575ddbab85d535b031718", @nested={0x0, 0x73, 0x0, 0x1, [@nested={0x0, 0xd9, 0x0, 0x1, [@nested={0x0, 0xf1}]}]}, @nested={0x0, 0x19, 0x0, 0x1, [@typed={0x0, 0x5f, 0x0, 0x0, @str='\x00'}, @typed={0x0, 0xf5, 0x0, 0x0, @fd=r3}, @generic="8cc4194e8f91696597d989717b0bdb942e6e", @generic="d6596f727d0b65b42c75cad17f2d46d56406c937415d9e2a739996a104fde2f7880257dd27c220b826e179ab1b9ae3ac19d9efeb", @nested={0x0, 0x12a, 0x0, 0x1, [@nested={0x0, 0x27, 0x0, 0x1, [@generic="29a4abbfbd0375c1a1251dce97f5793041a13e13011e618da127d6bce6171c32d73dc28a44f33f5cab380f7a32559e463a98fdf8f5ca1c79e5c7d7337ef3dbcfbdeb54aed484a0b3e9b56adfc1b50e4617f1abe75f559719", @typed={0x0, 0x113, 0x0, 0x0, @pid=r9}, @nested={0x0, 0x129}, @typed={0x0, 0x120, 0x0, 0x0, @ipv6=@loopback}, @nested={0x0, 0x108}, @nested={0x0, 0x87}, @generic="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", @generic="7d58c57ff4b9ba908be4cadfe199ea264be6ed4a1c91e98d5b6590fe73486e687517c1968baf6bce6fb31286e4e87e83f7ed21460c73fc20f6554d08119f9b0208462844c1d85d64880b6d818bdde41e13ab4ab4ced74d8191ca39070c2846dd0c43f154f4ca9c83278fc519c990fb39bb6d10d8885919e9"]}]}, @generic="b27cc8849b144b1315a1feed7b5dab4e8a41a142358c0d3dbcd44d7dfb584e47cd240662093946454c1912e9f02d960aa47abbcdf783e1e2c5d5392ecb95ef50eacbdbf75354178a5afec7474ef148214a91b3db3767b4588f8b3961e228c5f9b520607ea85bb7c58f032b8a455c4098581a2ac8ecb17ddb0ae66bac0c7a936a808de9054e5c692d5ad9eb770e2c8bc0579426e96dcf6ddcd2dce912bda5be069e23607ab98e656cfdb3dfd08b936aa71f666aee9e1f7e419a469c536f635c82e75f774dad2d89d9f5ffecc7c1276101a34e604437b1e37ef70cdbf8bebee9b9e1b1aaa67a905736d6fdd4ffe88cbb0049953be967dc91", @generic="243ded8c7486e15a56b9bfd01a82bce8a3d2fc8c6fb60fca555138510eff489ee3d52cb154931069275f0ff508be7a7001ff14f4455e3232b78cd14d66a5ca93f223b498073e96896c8bf89f023f5b473c8890257f1cdc1796c4ff9c9d6a64bc10540c6840d8b2b4f64ab4c1d830646a1f68d00187f9d00f90d2fbb3c16bf204cefc0a72a215fd5ee461094a50a74ea37c0cb00a5d8bf382e4c72c107c21533b539692a91037da", @typed={0x0, 0x24, 0x0, 0x0, @pid=r7}, @typed={0x0, 0xaf, 0x0, 0x0, @u64=0x5}, @generic="8fb8a47bf0"]}, @typed={0x0, 0xc5, 0x0, 0x0, @u32=0x7}, @typed={0x0, 0x28, 0x0, 0x0, @uid=r8}, @typed={0x0, 0xe5}, @nested={0x0, 0x2, 0x0, 0x1, [@generic="968e18f71704810eef9a7f8e3d305b3484b08304a6002c8ce222734b4e7483bcfc", @generic="7fcdf0bab5106a12b2b4490daf6e61781bdb244c51436a3f0828e59e0c6093ca66fb091b6834daac538c83c7545ee614578f8f224d62a5eb90fded58629afa6369", @nested={0x0, 0x9b, 0x0, 0x1, [@generic="9528229a3de87d6e119af6faa07d94c49239b1587e85cd96910eac8efa42b1875995457fe0c8f50edb34cb2707bcdf153d95c384a76a15b47070ac112416d1eb092782f00c45bd0e57f42d8b4bb94f2aa213720e2aa9790c46e9eeb739bbc529520700cfd7d17a36fa215f6c2bd35eb3e10864c54bae97e5", @typed={0x0, 0x150, 0x0, 0x0, @u64=0x8}, @typed={0x0, 0x2c, 0x0, 0x0, @u64=0x10000000}, @typed={0x0, 0x56}, @typed={0x0, 0x139, 0x0, 0x0, @fd=r4}]}, @typed={0x0, 0xfa, 0x0, 0x0, @str='\x00'}, @typed={0x0, 0x51, 0x0, 0x0, @pid=r9}]}]}}], 0x0, 0x0, 0x0, 0x80}, 0x440c1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(r3, &(0x7f00000010c0)=[{&(0x7f0000000780)="ed67925073d4caed87a51bd9b3b7cf1d393cce1299", 0x15}, {&(0x7f00000007c0)="563afb7d8d06e647aed2521d6f7e94f7338ebb7cf98e3d1605b637afb587a00590438cc457a34f5b98bf694d00d80883f4d150b79253f83ef569655a4edb2791fcafa7455bd388540a", 0x49}, {&(0x7f00000008c0)="01fca8323d30f4a011a5886919f8b7b3673ff618fb4a806b8d9ff9b1fec0a381d458463e27d5e3d1f640f7410ab77f0393049153054510d7ccc0438caaab3a487bf4c976c1095c11dd6e39b9feeb289dd8772b111da4c05d0c630a41458ce52773b44cf437326794042a3efd63f09217c66ad72b24d7772e9c2b572d598d96bab71adfea88eaab3a20c29aeecff82417e06e0d09be30a15f32dfc3400086950d1c7059db8a9b1c0a2f9f", 0xaa}, {&(0x7f0000000980)="0d799e254d8e56922f3e49b00656c564e36430a66317c6ca12a1a2fe5310335a9f6777ce7fc98f599a0b4bd0d18150d21468dc659120a403c714fefe87aeac36368de9d56b29cc89c7b9fae990bb72350ac76d183011ba7984e600f9f22068569c9a233b8ee9772b55ef4a093038b9633baf1936318c7d247fa930566063827351655bbd67a9042edc7dd321132142dd565b37147183d909d99f8207a083d083a73a402916026e83c132cfa401022bb81e02582ae843d14b3fad4a25c9a483bf9e52651b2c6fdc7f1cfc47769d1564494adddd3458536587896875a2e599c0a3714e2d456685ae5a3bfd311f08", 0xed}, {&(0x7f0000000a80)="bc1a6a24546a2d00147eaa70d17ac54947afdacef5cebe6495089e950c839a3398582e6dfd9b0fe85d684556d84d34d1a7d4b92471009bed5ad7ba6b8e4f4aefc7b03fff2799b2a619639c030e9c50324e5596bbaa4e80f1e8405559b69d9b14c88600be9f59b072a4a16cb1b9aef4ae041c61cdb17967f574017406e03acf3ba9ba0aa2d0851d05e7d1e8d846463e6f9bea64a1d7361cc1b14300d4a6bbfc41dd9f6634c5ea9ed67e940f27195116ac43b0a9133b038089b11ffa5690f48eeb41513b3dd249409e776144742d6a1c236fd1699820013f1bcbaa3aea1f7ba343631f26bd62", 0xe5}, {&(0x7f0000000b80)="63eef2886edf1f1bc84d70e2c5ac59aa97613435e571436bdeb9ca220edd47b7b64ddaa058c240090e59f2e24f6687d2c0718a0d7a13c0522e6e228e1bea05f0cc2a0cc9d40ae68ac6b01f994428c0e75f8b0571ad06a7c168618bd3045c89859895f87d067c1e4314de90ae0c3157e34879957bc64f9dd7c75b72071586d81b0ef270f4d5d68aa98d67ac4e4cf6ebe0b0ee5173087e12d71334c3c4e477447a971700c81714946fa22088896b60dfb81132", 0xb2}, {&(0x7f0000001040)="961952d8784ff6c17b39e4d5b042878253f232cfc774d25d92736690787d9fe28c872173b1c8d925f67c0570b119ed77f84b2a86658dca274974958dc26a74ace6ce57d389089b249d25bec4fc019a4ea1eff4a9bedc8d676699", 0x5a}], 0x7) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000c40)={"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"}) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000340)=@llc={0x1a, 0xfffe, 0x45, 0x3, 0x1, 0x0, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)="a1f782238c02e75de0cc27ac13f228962284a72c1a357ddd0a501e3e9a45fee45aab24a0a83093581e3d7d4b4de881d0d8ac6b7856bfe6bcda45a487e4208947d81bb8b9368f8239a5d3eff26a26ac568760389841da56c89c73efdc09889e07b995959f6fda5e400caf409ef3bef4fda1b2b825fd97e7416144110325aef514e862e2e785001c119a1c48e9", 0x8c}, {&(0x7f0000000480)="660d3989b96fe4cc6ddaa8e9dbdde7371ca1421451c3e066204ed6a0541b2897e00f57e3b011a626c6b1e9e843c448d9ada51a121c780e6cd235d2a1bff589569b12775815fe44144ae4abf029fd32e134515f95566fc2", 0x57}, {&(0x7f0000000500)="158c1ce9f7adebb208ff75b7fa57ce50cd1cc8d8574272dc1383669a1fc2893b7e3c00edeb1fd8a7f4a5c116e49344032bc9ef8c01d0408d483f9301a0355bb96fb083f1b924bab6a9600f7c4420cf5d96a81ecf404975ad37a236169b95b3af358ad7f2caea3f0331d4489ab647293ec4a6fee89a6965d696788f7ccf416b3a4c1ee48df6c694eb57091024916e414d31058684002cc3a02ee4290f15c665c0b43932abd8bcb46f65d7d25639e6d19e4fc0adf4ae8d28264c239af9fb0a81fc552270e8db7b983620b3e4d5e4a3baa6e9b39a07397d14ced266882bcf4d1b94991ec0319dcf22ec5134", 0xea}, {&(0x7f0000000600)="e8dbc5c65c88a1fb7a8401a6c18788b459207ad1316d445476685ece537a67cf0fb9e090b23bcd0068b187bb884b1928c0e0992059cdd4d87392e8b15ef516d09bc5f9c14e10df59eb89ad3dc8fdc5df13bd4b9165aed6b0bc53f296c9c86a1ced7d80bf696e4410b9e8aab57fa7d498ae2c02b1dbbd1d887abf7ef3b006f7bba3874e66df0ba135568b368654604a811328f56671baf110318bea7dc393c4faad4bbc588bb8298c", 0xa8}], 0x4, &(0x7f0000001180)=[{0x90, 0x110, 0x9, "536e05d0046f0ba73be9f6d2a0aa653b1d53351f95d0281f0e62d8738ba48e412ad3a10414895fe465754fc3a7f5eb322cf987e2342ecbc022be3425b06ae787a658fb371fc787f764201211ae60a69d446e26b2b884cf39bad97cb983f70daf3c99f96288be8b60316c552134c863ac0e557b7018ab721f175bcef0"}, {0x18, 0x108, 0x9, "6a6b9af13fef72c9"}, {0x10, 0x109, 0x132}, {0x1010, 0x0, 0x4, "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"}, {0xc8, 0x10f, 0x3, "09e5ed5d30e68c52403649175a668245da7623c14654ccd81393d2a7e9926a5c861a87b4f30b285f679410b73699aee57e07ebed6b6e05f5da98f8b49aac77a6d1eb56e9edccbd806af51dfb39521bec9d121442e032a6bce1e271bffb344cc12cb95026bb92554e8ea30dcf3a5cf699129c83d2d389d3917fff2357cdafc0143b857ad00e0531d995307efbec14639ce589f0334e05d64ff85c73553435a0011f8779f5f8c8ac9348eb19ae32e539cfe8870a8da7bd78"}, {0xc0, 0x103, 0x6, "1666eaa147b2b288057708c790bc914394a0f03ef4c1ea23c776a1bc2f94e25356412fe25477be45b8ad0f00f932a6ea701bd7c0381ee68782e700bac8286940401c79831ce5e5823391ed643ebe13396965b56bff33c359df2a6a8c6dfc6aaa3eee4235fbfc54e50f69fe528acec05fdfeeb24feb775a944c243c42a85a7f2e2e9228dfaf2c6dd6bf929b4b50bed94b9df11ca102c7ee273d80d14b88bd76eee9eaff6307c778bd52f7314bc933d00b"}, {0x28, 0x117, 0x9, "2467fa9ce6d72ee1e5b928225992d75130"}, {0x88, 0x109, 0x1, "69baf2b0b4cc25008ea334aef3f0857c8768d46ff591c430c2f7a15566a965964b5f722b56817d90af854c78627a33bdf25bbc89cb23f6413725f796124cd1621128cceb5e4407620a0280fdd741f5230c01650958ae77f8675c067edd203832ff3b57748fd2d0fd984ff7d84a840f6c35"}], 0x1300}, 0x40080) 40.92880783s ago: executing program 2 (id=2030): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) getdents64(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendto$inet6(r0, &(0x7f0000000500)="98b3117a72c2b656bb5e19f9a22c172fc20b71ff1b54dfc48f0d64c0fda0b109aa5ff277594bc841e0d0138bb0e0003b939c3fc167168bdcfa224eccc17240dad6e663b80b7790855db8774a52d6f2ff3e48b48624624fe55960dccf4966a6", 0x5f, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000"], 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x148, 0x0, &(0x7f0000000880)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xa}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x9, 0x0, 0x33}, @ptr={0x70742a85, 0x2001, &(0x7f00000001c0)=""/98, 0x62, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/157, 0x9d, 0x0, 0x1b}}, &(0x7f0000000380)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0x14}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}}, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x0, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000000a00)=""/199, 0xc7, 0x0, 0x2e}, @fda={0x66646185, 0x7, 0x0, 0x3e}}, &(0x7f00000005c0)={0x0, 0x20, 0x48}}, 0x1000}, @increfs={0x40046304, 0x3}, @increfs_done], 0x2d, 0x0, &(0x7f0000000740)="cbcede5bddc760f26b211d00fe428202c6c65d1a460d338169c8498d2f99debaebbfcdadaedcd74102cdc5b69b"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000007c0)=[@timestamp, @timestamp, @mss={0x2, 0x1ff}, @window={0x3, 0x8, 0x9}, @mss={0x2, 0x1}], 0x5) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000580)={0x5, {{0xa, 0x4e21, 0x200000f, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) read(r5, &(0x7f0000000040)=""/32, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000840)={0x5, &(0x7f0000000800)=[{0x8, 0x8, 0x67, 0x6}, {0x7, 0x3, 0x5, 0x4}, {0x6, 0x2, 0xd1}, {0x0, 0x9, 0x4, 0x8001}, {0x5, 0xf, 0xd, 0x8}]}) 40.91713033s ago: executing program 2 (id=2031): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x626540) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x484202, 0x197) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f700000000d81a8ca55ba131c01802c4dae4162e43ac61b79f33", [0x2, 0x7]}}) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) ftruncate(r2, 0x9) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="82ef", 0x2}], 0x1}}], 0x1, 0x4400c800) (async) write(r4, &(0x7f0000000440)="7d79b2fe1671370dfed8eeb59eea8b6a261804d87b03f5", 0x17) (async) lseek(r3, 0x11, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) (async) unlinkat(r1, 0x0, 0x200) read(r0, 0x0, 0x0) (async) sendfile(r1, r0, 0x0, 0x80000005) 40.870357711s ago: executing program 1 (id=2032): socketpair(0x11, 0x6, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="ca17914b3e239b11895b766ac44645cbdcc55fc88878b23f246b6ba6d5d7cffcf7734b9f9a76a06ee82c4f0522a328680b24c3972b23328dcad32f50b218c00ddb237ad79ae194ca012990046c691862d65d35d367c90edd6695b4f8118ed5626ed01b", 0x63}, {&(0x7f0000001140)="24901a51b36a2f98da9395b35f5d46a1759eac5266fd75f29b23d1206fdd672382b0553132240928557710b39f73ab458b2f42605ad94a51c94251f02071a51ce0afe92dd1b68427b0a3d4499da38ec8fa1bc359458b57db005f76788f5faf2730fb541fdd4ded28b0adf4db34dab7566e071c82d68aaa3ede968ad7", 0x7c}, {&(0x7f00000011c0)="92816cf92a40f0c919a3ca693e5b43ee9563e442d743", 0x16}], 0x4, &(0x7f0000001240)=[{0xb8, 0x10d, 0xc2fa, "4ebfa18db1a14446e3f93b17b827517c833250472545c734b64f0a04b81827ddb00a453acb596f5d2de4e4c4c445504ef27944e68b1666b6384d9d74d740c6a5c5320330cc3f43e7d6f15aa530ca3d812ccbdc6ea5739d63d3d5200c97da1b0a59a41e90da327244a34f75e6b976eb491c62591d756d69c2906dc5f9121e93f3e32c717bb1a834bbc454e1168f2fa9252dc00b95ed21492b9398c69a3c7b3d05b1c5b79975ed50"}], 0xb8}}], 0x1, 0x20000004) socketpair(0x2a, 0x800, 0x3, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001380)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'syztnl1\x00', r4, 0x29, 0x5, 0x0, 0x3, 0x5c, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7, 0xfffffffe, 0x3}}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001480)=0x8, 0x1) getpeername$packet(r0, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001500)=0x14) epoll_create(0x7) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={0x104, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x268d54aace4e1ad1}, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000001740)=0x1, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001780)={'pim6reg\x00', {0x2, 0x4e22, @multicast1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) mlockall(0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000017c0), &(0x7f0000001800)=0x4) mlockall(0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000001840)={'pimreg\x00'}) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001880)={0x9, 0xb347, 0x4, 0x5, 0x6, 0x0, [{0x2, 0x3, 0x8, '\x00', 0x83}, {0x0, 0x1, 0xad6}, {0x7, 0x8, 0x9, '\x00', 0x1000}, {0x1, 0x70, 0x0, '\x00', 0xc00}, {0x1, 0x900000000000, 0x5605, '\x00', 0x81}, {0x6, 0x9, 0xffffffffffff7fff, '\x00', 0x385}]}) r8 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x440000, 0x13b) mount_setattr(r8, &(0x7f0000001a40)='./file0\x00', 0x100, &(0x7f0000001a80)={0x0, 0x1, 0x20000, {r6}}, 0x20) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) r10 = getpgrp(r9) bind$can_raw(r3, &(0x7f0000001b40)={0x1d, r5}, 0x10) sched_setattr(r10, &(0x7f0000001b80)={0x38, 0x0, 0x45, 0x4, 0x34000000, 0x5, 0xd, 0x7, 0x3}, 0x0) sched_setattr(r10, &(0x7f0000001bc0)={0x38, 0x5, 0x1000002a, 0x2, 0x0, 0x2bd, 0x0, 0x7, 0x6, 0x8}, 0x0) dup2(r7, r0) io_setup(0x7, &(0x7f0000001c00)=0x0) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) io_pgetevents(r11, 0x4, 0x4, &(0x7f0000001c40)=[{}, {}, {}, {}], &(0x7f0000001d00)={r12, r13+60000000}, &(0x7f0000001d80)={&(0x7f0000001d40)={[0x8001]}, 0x8}) 40.780965922s ago: executing program 2 (id=2033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 40.780718652s ago: executing program 2 (id=2034): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2000, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x20004, &(0x7f0000000180)={'trans=virtio,', {[{@noxattr}], [{@smackfsdef={'smackfsdef', 0x3d, 'binder\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x1e+{'}}, {@uid_gt={'uid>', r1}}]}}) 39.105257175s ago: executing program 2 (id=2035): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@inode32}]}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r5, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x80, 0x10001}}, 0x50) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, r4}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) r6 = socket$inet6(0xa, 0x80001, 0x0) sendmmsg(r6, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) 38.985657027s ago: executing program 0 (id=2036): openat$rnullb(0xffffffffffffff9c, 0x0, 0x402001, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fstat(r1, &(0x7f0000000040)) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000040)=0x6ab7, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000020100c00000000002"]) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) 34.562515163s ago: executing program 4 (id=2037): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x361202, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f00000012c0)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8a1eaa0000000000004acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6bbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f7265f210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d65cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d1b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b40900f5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266ba65dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584143a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd83bd223a1e64a3a8271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3777c64b42336d70f0000000000000062e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, 0x0, &(0x7f0000000080)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x133) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r9, 0x1) close(r7) inotify_init1(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/56, 0x38, 0x1, 0x2d}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 28.181789986s ago: executing program 4 (id=2038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x1, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) shutdown(r4, 0x1) (async) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) (async, rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="6b3fbcf97cd95b5c7bd0891da049e03820e324f69ffa67d943c4af53b7", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="0c00990027ce00003500000008000500050000000a00180003030303030300000a00180003030303030300000500530000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) (async) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffa) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) timerfd_settime(r9, 0x2, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) write$binfmt_script(r9, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) (async) ioctl$ASHMEM_SET_NAME(r8, 0x8008770b, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) 25.840900511s ago: executing program 2 (id=2039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r2, 0x3000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) (async) socket$netlink(0x10, 0x3, 0x0) (async) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r2, 0x3000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) setgroups(0x1, &(0x7f0000000080)=[0x0]) (async) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) (async) 20.580060933s ago: executing program 33 (id=2032): socketpair(0x11, 0x6, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="ca17914b3e239b11895b766ac44645cbdcc55fc88878b23f246b6ba6d5d7cffcf7734b9f9a76a06ee82c4f0522a328680b24c3972b23328dcad32f50b218c00ddb237ad79ae194ca012990046c691862d65d35d367c90edd6695b4f8118ed5626ed01b", 0x63}, {&(0x7f0000001140)="24901a51b36a2f98da9395b35f5d46a1759eac5266fd75f29b23d1206fdd672382b0553132240928557710b39f73ab458b2f42605ad94a51c94251f02071a51ce0afe92dd1b68427b0a3d4499da38ec8fa1bc359458b57db005f76788f5faf2730fb541fdd4ded28b0adf4db34dab7566e071c82d68aaa3ede968ad7", 0x7c}, {&(0x7f00000011c0)="92816cf92a40f0c919a3ca693e5b43ee9563e442d743", 0x16}], 0x4, &(0x7f0000001240)=[{0xb8, 0x10d, 0xc2fa, "4ebfa18db1a14446e3f93b17b827517c833250472545c734b64f0a04b81827ddb00a453acb596f5d2de4e4c4c445504ef27944e68b1666b6384d9d74d740c6a5c5320330cc3f43e7d6f15aa530ca3d812ccbdc6ea5739d63d3d5200c97da1b0a59a41e90da327244a34f75e6b976eb491c62591d756d69c2906dc5f9121e93f3e32c717bb1a834bbc454e1168f2fa9252dc00b95ed21492b9398c69a3c7b3d05b1c5b79975ed50"}], 0xb8}}], 0x1, 0x20000004) socketpair(0x2a, 0x800, 0x3, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001380)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'syztnl1\x00', r4, 0x29, 0x5, 0x0, 0x3, 0x5c, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7, 0xfffffffe, 0x3}}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001480)=0x8, 0x1) getpeername$packet(r0, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001500)=0x14) epoll_create(0x7) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={0x104, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x268d54aace4e1ad1}, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000001740)=0x1, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001780)={'pim6reg\x00', {0x2, 0x4e22, @multicast1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) mlockall(0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000017c0), &(0x7f0000001800)=0x4) mlockall(0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000001840)={'pimreg\x00'}) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001880)={0x9, 0xb347, 0x4, 0x5, 0x6, 0x0, [{0x2, 0x3, 0x8, '\x00', 0x83}, {0x0, 0x1, 0xad6}, {0x7, 0x8, 0x9, '\x00', 0x1000}, {0x1, 0x70, 0x0, '\x00', 0xc00}, {0x1, 0x900000000000, 0x5605, '\x00', 0x81}, {0x6, 0x9, 0xffffffffffff7fff, '\x00', 0x385}]}) r8 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x440000, 0x13b) mount_setattr(r8, &(0x7f0000001a40)='./file0\x00', 0x100, &(0x7f0000001a80)={0x0, 0x1, 0x20000, {r6}}, 0x20) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) r10 = getpgrp(r9) bind$can_raw(r3, &(0x7f0000001b40)={0x1d, r5}, 0x10) sched_setattr(r10, &(0x7f0000001b80)={0x38, 0x0, 0x45, 0x4, 0x34000000, 0x5, 0xd, 0x7, 0x3}, 0x0) sched_setattr(r10, &(0x7f0000001bc0)={0x38, 0x5, 0x1000002a, 0x2, 0x0, 0x2bd, 0x0, 0x7, 0x6, 0x8}, 0x0) dup2(r7, r0) io_setup(0x7, &(0x7f0000001c00)=0x0) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) io_pgetevents(r11, 0x4, 0x4, &(0x7f0000001c40)=[{}, {}, {}, {}], &(0x7f0000001d00)={r12, r13+60000000}, &(0x7f0000001d80)={&(0x7f0000001d40)={[0x8001]}, 0x8}) 5.016727414s ago: executing program 34 (id=2036): openat$rnullb(0xffffffffffffff9c, 0x0, 0x402001, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fstat(r1, &(0x7f0000000040)) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000040)=0x6ab7, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000020100c00000000002"]) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) 470.554771ms ago: executing program 35 (id=2039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r2, 0x3000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) (async) socket$netlink(0x10, 0x3, 0x0) (async) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r2, 0x3000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) setgroups(0x1, &(0x7f0000000080)=[0x0]) (async) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) (async) 0s ago: executing program 36 (id=2038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x1, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) shutdown(r4, 0x1) (async) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) (async, rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="6b3fbcf97cd95b5c7bd0891da049e03820e324f69ffa67d943c4af53b7", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="0c00990027ce00003500000008000500050000000a00180003030303030300000a00180003030303030300000500530000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) (async) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffa) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) timerfd_settime(r9, 0x2, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) write$binfmt_script(r9, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) (async) ioctl$ASHMEM_SET_NAME(r8, 0x8008770b, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) kernel console output (not intermixed with test programs): terval 255, changing to 7 [ 71.046427][ T10] usb 5-1: config 3 interface 136 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 71.060017][ T10] usb 5-1: config 3 interface 136 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 71.070733][ T10] usb 5-1: config 3 interface 133 altsetting 135 has a duplicate endpoint with address 0x3, skipping [ 71.082916][ T10] usb 5-1: config 3 interface 133 altsetting 135 has a duplicate endpoint with address 0x4, skipping [ 71.094052][ T10] usb 5-1: config 3 interface 133 altsetting 135 has an invalid descriptor for endpoint zero, skipping [ 71.105257][ T10] usb 5-1: config 3 interface 133 altsetting 135 has 4 endpoint descriptors, different from the interface descriptor's value: 10 [ 71.118684][ T10] usb 5-1: config 3 interface 3 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 71.145698][ T10] usb 5-1: config 3 interface 3 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 71.156370][ T10] usb 5-1: config 3 interface 3 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 71.167097][ T10] usb 5-1: config 3 interface 3 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 71.178394][ T10] usb 5-1: config 3 interface 136 has no altsetting 0 [ 71.186705][ T10] usb 5-1: config 3 interface 133 has no altsetting 0 [ 71.193604][ T10] usb 5-1: config 3 interface 3 has no altsetting 0 [ 71.202523][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 71.208661][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0030, bcdDevice=c0.81 [ 71.217863][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.225991][ T10] usb 5-1: Product: syz [ 71.230265][ T10] usb 5-1: Manufacturer: syz [ 71.234884][ T10] usb 5-1: SerialNumber: syz [ 71.346240][ T2970] tipc: Can't bind to reserved service type 0 [ 72.558876][ T591] Bluetooth: hci0: command 0x1003 tx timeout [ 72.558876][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.577741][ T10] cdc_acm 5-1:3.136: skipping garbage [ 72.586160][ T10] usb-storage 5-1:3.133: USB Mass Storage device detected [ 72.587991][ T3010] binder: Unknown parameter 'dont_hash' [ 72.599271][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.631646][ T10] cdc_acm 5-1:3.3: skipping garbage [ 72.639410][ T10] usb 5-1: USB disconnect, device number 5 [ 72.987769][ T3034] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 73.074721][ T3044] fuse: Bad value for 'group_id' [ 73.079707][ T3044] fuse: Bad value for 'group_id' [ 73.145700][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 74.638899][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.638905][ T777] Bluetooth: hci0: command 0x1003 tx timeout [ 74.710498][ T3071] rust_binder: Error while translating object. [ 74.710523][ T3071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 74.716745][ T3071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:546 [ 75.198932][ T591] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 75.198940][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 75.499879][ T3083] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 75.508122][ T3083] rust_binder: Write failure EINVAL in pid:549 [ 75.557175][ T3090] incfs: mount failed -22 [ 75.567799][ T3090] incfs: mount failed -22 [ 75.572354][ T3090] incfs: mount failed -22 [ 75.576754][ T3090] incfs: mount failed -22 [ 75.581261][ T3090] incfs: mount failed -22 [ 75.585734][ T3090] incfs: mount failed -22 [ 75.590234][ T3090] incfs: mount failed -22 [ 75.594789][ T3090] incfs: mount failed -22 [ 75.599419][ T3090] incfs: mount failed -22 [ 75.603813][ T3090] incfs: mount failed -22 [ 75.608248][ T3090] incfs: mount failed -22 [ 75.612794][ T3090] incfs: mount failed -22 [ 75.617249][ T3090] incfs: mount failed -22 [ 75.621707][ T3090] incfs: mount failed -22 [ 75.628299][ T3090] incfs: mount failed -22 [ 75.628849][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 75.628862][ T36] audit: type=1400 audit(1773711277.292:403): avc: denied { read append } for pid=3087 comm="syz.0.905" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.632768][ T3090] incfs: mount failed -22 [ 75.641418][ T3088] /dev/rnullb0: Can't open blockdev [ 75.666387][ T3090] incfs: mount failed -22 [ 75.666974][ T36] audit: type=1400 audit(1773711277.292:404): avc: denied { open } for pid=3087 comm="syz.0.905" path="/180/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.672170][ T3090] incfs: mount failed -22 [ 75.676394][ T36] audit: type=1400 audit(1773711277.302:405): avc: denied { ioctl } for pid=3087 comm="syz.0.905" path=2F3138302F66696C65302F2E70656E64696E675F7265616473202864656C6574656429 dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.702067][ T3090] incfs: mount failed -22 [ 75.739195][ T3090] incfs: mount failed -22 [ 75.748969][ T3090] incfs: mount failed -22 [ 75.763833][ T3090] incfs: mount failed -22 [ 75.765837][ T3094] netlink: 9 bytes leftover after parsing attributes in process `syz.2.907'. [ 75.768279][ T3090] incfs: mount failed -22 [ 75.781386][ T3094] gretap0: entered promiscuous mode [ 75.783388][ T3090] incfs: mount failed -22 [ 75.792905][ T3090] incfs: mount failed -22 [ 75.795347][ T3094] netlink: 5 bytes leftover after parsing attributes in process `syz.2.907'. [ 75.797415][ T3090] incfs: mount failed -22 [ 75.806672][ T3094] 0{X: renamed from gretap0 [ 75.810662][ T3090] incfs: mount failed -22 [ 75.820314][ T3094] 0{X: left promiscuous mode [ 75.823640][ T3090] incfs: mount failed -22 [ 75.825680][ T3094] 0{X: entered allmulticast mode [ 75.836254][ T3090] incfs: mount failed -22 [ 75.836312][ T3094] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 75.840745][ T3090] incfs: mount failed -22 [ 75.860918][ T3090] incfs: mount failed -22 [ 75.865483][ T3090] incfs: mount failed -22 [ 75.870073][ T3090] incfs: mount failed -22 [ 75.874688][ T3090] incfs: mount failed -22 [ 75.879809][ T3090] incfs: mount failed -22 [ 75.884578][ T3090] incfs: mount failed -22 [ 75.886368][ T3099] fuse: Bad value for 'fd' [ 75.889146][ T3090] incfs: mount failed -22 [ 75.897943][ T3090] incfs: mount failed -22 [ 75.902699][ T3090] incfs: mount failed -22 [ 75.910930][ T3090] incfs: mount failed -22 [ 75.915393][ T3090] incfs: mount failed -22 [ 75.924236][ T3090] incfs: mount failed -22 [ 75.933267][ T3090] incfs: mount failed -22 [ 75.939028][ T3090] incfs: mount failed -22 [ 75.943459][ T3090] incfs: mount failed -22 [ 75.947834][ T3090] incfs: mount failed -22 [ 75.953046][ T3090] incfs: mount failed -22 [ 75.957622][ T3090] incfs: mount failed -22 [ 75.962145][ T3090] incfs: mount failed -22 [ 75.966546][ T3090] incfs: mount failed -22 [ 75.971447][ T3090] incfs: mount failed -22 [ 75.976153][ T3090] incfs: mount failed -22 [ 75.980899][ T3090] incfs: mount failed -22 [ 75.985584][ T3090] incfs: mount failed -22 [ 75.990027][ T3090] incfs: mount failed -22 [ 75.994414][ T3090] incfs: mount failed -22 [ 75.998784][ T3090] incfs: mount failed -22 [ 76.003249][ T3090] incfs: mount failed -22 [ 76.007682][ T3090] incfs: mount failed -22 [ 76.013036][ T3090] incfs: mount failed -22 [ 76.017908][ T3111] 9pnet_fd: Insufficient options for proto=fd [ 76.022670][ T3090] incfs: mount failed -22 [ 76.025079][ T3111] 9pnet_fd: Insufficient options for proto=fd [ 76.032118][ T3090] incfs: mount failed -22 [ 76.045053][ T3090] incfs: mount failed -22 [ 76.060636][ T3119] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 76.118688][ T3129] 9pnet_fd: Insufficient options for proto=fd [ 76.136065][ T3133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 76.196305][ T36] audit: type=1400 audit(1773711277.852:406): avc: denied { map } for pid=3146 comm="syz.1.925" path="socket:[19192]" dev="sockfs" ino=19192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.228400][ T36] audit: type=1400 audit(1773711277.852:407): avc: denied { read } for pid=3146 comm="syz.1.925" path="socket:[19192]" dev="sockfs" ino=19192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.275296][ T36] audit: type=1400 audit(1773711277.932:408): avc: denied { create } for pid=3153 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.279552][ T3149] netlink: 'syz.0.926': attribute type 27 has an invalid length. [ 76.314289][ T3149] sit0: left promiscuous mode [ 76.327924][ T3157] random: crng reseeded on system resumption [ 76.336145][ T3149] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.343342][ T3149] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.354589][ T3159] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 76.355712][ T36] audit: type=1400 audit(1773711278.012:409): avc: denied { ioctl } for pid=3156 comm="syz.4.930" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 76.627756][ T3149] veth1_virt_wifi: left promiscuous mode [ 76.633428][ T3149] veth1_virt_wifi: left allmulticast mode [ 76.668388][ T3171] rust_binder: 571: no such ref 1 [ 76.673588][ T3171] rust_binder: Write failure EFAULT in pid:571 [ 76.680579][ T3173] rust_binder: 573: no such ref 2 [ 76.692301][ T3173] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 76.699538][ T3173] rust_binder: 573: no such ref 3 [ 76.704755][ T3173] rust_binder: Write failure EFAULT in pid:573 [ 76.902473][ T3204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 76.955415][ T3216] rust_binder: Write failure EINVAL in pid:591 [ 77.060930][ T3227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.100656][ T36] audit: type=1400 audit(1773711278.762:410): avc: denied { sqpoll } for pid=3237 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.144135][ T3246] overlayfs: failed to clone lowerpath [ 77.165604][ T36] audit: type=1400 audit(1773711278.822:411): avc: denied { mount } for pid=3249 comm="syz.1.963" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 77.188255][ T3250] overlayfs: failed to clone lowerpath [ 77.277835][ T3262] vcan0: left promiscuous mode [ 77.318925][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 77.438885][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.470016][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.480174][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.489716][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 77.498755][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.506756][ T9] usb 1-1: SerialNumber: syz [ 77.514012][ T9] usb 1-1: 0:2 : does not exist [ 77.600495][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.610712][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.619625][ T45] usb 5-1: config 1 has no interface number 0 [ 77.625771][ T45] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.636704][ T45] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 77.647164][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.656275][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.664296][ T45] usb 5-1: Product: syz [ 77.668456][ T45] usb 5-1: Manufacturer: syz [ 77.673061][ T45] usb 5-1: SerialNumber: syz [ 77.919333][ T3232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.931848][ T3232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.949567][ T9] usb 1-1: USB disconnect, device number 16 [ 78.069535][ T3321] netlink: 'syz.2.987': attribute type 4 has an invalid length. [ 78.077340][ T3321] netlink: 17 bytes leftover after parsing attributes in process `syz.2.987'. [ 78.289284][ T45] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 78.295291][ T45] cdc_ncm 5-1:1.1: bind() failure [ 78.302327][ T45] usb 5-1: USB disconnect, device number 6 [ 78.509772][ T36] audit: type=1400 audit(1773711280.172:412): avc: denied { lock } for pid=3341 comm="syz.0.996" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.552805][ T3348] fuse: Unknown parameter '0x00000000000000030000000000000000000000000000000000000000' [ 78.563929][ T3348] rust_binder: Write failure EFAULT in pid:622 [ 78.575684][ T3348] binder: Bad value for 'stats' [ 78.586835][ T3350] /dev/rnullb0: Can't lookup blockdev [ 78.714083][ T3358] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 78.722348][ T3358] rust_binder: Write failure EINVAL in pid:624 [ 78.976208][ T3375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 78.995608][ T3379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 78.998494][ T3378] fuse: Bad value for 'fd' [ 79.005787][ T3379] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1009'. [ 79.027635][ T45] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 79.037937][ T3379] /dev/rnullb0: Can't open blockdev [ 79.180042][ T45] usb 1-1: config 1 has an invalid interface number: 146 but max is 0 [ 79.188250][ T45] usb 1-1: config 1 has no interface number 0 [ 79.194356][ T45] usb 1-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 79.206595][ T45] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 79.215659][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.223646][ T45] usb 1-1: Product: syz [ 79.227777][ T45] usb 1-1: Manufacturer: syz [ 79.232375][ T45] usb 1-1: SerialNumber: syz [ 79.239996][ T45] usbserial_generic 1-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 79.251669][ T45] usbserial_generic 1-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 79.262557][ T45] usbserial_generic 1-1:1.146: generic converter detected [ 79.270532][ T45] usb 1-1: generic converter now attached to ttyUSB0 [ 79.308888][ T331] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.468885][ T331] usb 5-1: Using ep0 maxpacket: 16 [ 79.477234][ T331] usb 5-1: config index 0 descriptor too short (expected 25953, got 27) [ 79.488885][ T331] usb 5-1: config 9 has an invalid interface number: 144 but max is 0 [ 79.497197][ T331] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 79.499168][ T3416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.520827][ T331] usb 5-1: config 9 has no interface number 0 [ 79.526279][ T3416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.531817][ T331] usb 5-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.544417][ T9] usb 1-1: USB disconnect, device number 17 [ 79.553926][ T331] usb 5-1: config 9 interface 144 has no altsetting 0 [ 79.571669][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 79.571831][ T331] usb 5-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 79.585521][ T9] usbserial_generic 1-1:1.146: device disconnected [ 79.595489][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.604435][ T3420] overlayfs: failed to resolve './file0': -2 [ 79.618851][ T331] usb 5-1: Product: syz [ 79.623017][ T331] usb 5-1: Manufacturer: syz [ 79.634308][ T331] usb 5-1: SerialNumber: syz [ 79.644990][ T3431] overlayfs: failed to clone upperpath [ 79.652115][ T331] r8152-cfgselector 5-1: Unknown version 0x0000 [ 79.664938][ T3433] overlayfs: failed to clone upperpath [ 79.891687][ T331] r8152 5-1:9.144: Expected endpoints are not found [ 79.910327][ T331] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 80.368997][ T3459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 80.433897][ T3465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 80.470419][ T3475] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1041'. [ 80.481034][ T3478] rust_binder: Error while translating object. [ 80.481034][ T3477] rust_binder: Error while translating object. [ 80.481061][ T3478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 80.487194][ T3477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 80.493764][ T3478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:202 [ 80.502791][ T3477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:202 [ 80.674443][ T3499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 80.929526][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 80.929541][ T36] audit: type=1400 audit(1773711282.592:416): avc: denied { append } for pid=3504 comm="syz.4.1053" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.065036][ T3510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 81.210910][ T3517] 9pnet_fd: Insufficient options for proto=fd [ 81.773660][ T3532] netlink: 'syz.4.1065': attribute type 4 has an invalid length. [ 81.787726][ T3532] netlink: 'syz.4.1065': attribute type 4 has an invalid length. [ 81.820737][ T36] audit: type=1400 audit(1773711283.482:417): avc: denied { create } for pid=3539 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 81.978072][ T3552] 9pnet: Could not find request transport: fdS [ 82.022881][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 82.039162][ T3557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 82.039191][ T3557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:641 [ 82.403856][ T3607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3607 comm=syz.2.1094 [ 82.443466][ T3607] 9pnet_fd: Insufficient options for proto=fd [ 82.452232][ T36] audit: type=1400 audit(1773711284.122:418): avc: denied { shutdown } for pid=3606 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.489242][ T3610] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1095'. [ 82.688423][ T3624] binder: Bad value for 'max' [ 82.775130][ T3633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1019 sclass=netlink_tcpdiag_socket pid=3633 comm=syz.4.1102 [ 82.789124][ T3631] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1102'. [ 82.798520][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.050843][ T36] audit: type=1400 audit(1773711284.712:419): avc: denied { accept } for pid=3638 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.071007][ T3637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:649 [ 83.071238][ T3642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.146335][ T3647] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 83.297041][ T3678] /dev/nbd0: Can't lookup blockdev [ 83.331877][ T3659] cgroup: fork rejected by pids controller in /syz2 [ 84.348064][ T36] audit: type=1326 audit(1773711286.002:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.2.1128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd38318ebe9 code=0x0 [ 84.389314][ T3750] incfs: Error accessing: incremental-fs. [ 84.395114][ T3750] incfs: mount failed -2 [ 84.634233][ T36] audit: type=1400 audit(1773711286.292:421): avc: denied { accept } for pid=3764 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.785667][ T3770] tipc: Started in network mode [ 84.790579][ T3770] tipc: Node identity 867d463c6585, cluster identity 4711 [ 84.797764][ T3770] tipc: Enabled bearer , priority 0 [ 84.804375][ T591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.829189][ T3770] netlink: 'syz.0.1134': attribute type 12 has an invalid length. [ 84.839688][ T3769] tipc: Disabling bearer [ 84.849772][ T36] audit: type=1400 audit(1773711286.512:422): avc: denied { create } for pid=3773 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.884943][ T3777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 84.983197][ T3787] kvm: kvm [3782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 84.991935][ T3787] kvm: kvm [3782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 85.188875][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.249097][ T3806] /dev/loop0: Can't lookup blockdev [ 85.269569][ T3814] /dev/loop0: Can't lookup blockdev [ 85.275087][ T3814] /dev/loop0: Can't lookup blockdev [ 85.349778][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 85.357779][ T10] usb 5-1: config 1 has no interface number 0 [ 85.368875][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 85.378667][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 85.388339][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 85.397995][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 64, changing to 10 [ 85.408978][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xC has invalid maxpacket 9757, setting to 1024 [ 85.421399][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 85.430527][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.438532][ T10] usb 5-1: Product: syz [ 85.442729][ T10] usb 5-1: Manufacturer: syz [ 85.447318][ T10] usb 5-1: SerialNumber: syz [ 85.452905][ T3791] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.461652][ T3791] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.603303][ T3821] veth1: entered allmulticast mode [ 85.608659][ T3820] veth1: left allmulticast mode [ 85.810709][ T3839] tipc: Enabling of bearer rejected, failed to enable media [ 85.855881][ T3844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1159'. [ 85.866104][ T3844] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11796 sclass=netlink_xfrm_socket pid=3844 comm=syz.2.1159 [ 86.317159][ T3861] x_tables: duplicate underflow at hook 1 [ 86.323243][ T36] audit: type=1326 audit(1773711287.992:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3860 comm="syz.1.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f8558ebe9 code=0x0 [ 86.420429][ T36] audit: type=1400 audit(1773711288.082:424): avc: denied { map } for pid=3862 comm="syz.2.1165" path="socket:[22443]" dev="sockfs" ino=22443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.450373][ T3868] 9pnet_fd: Insufficient options for proto=fd [ 87.866754][ T3904] syz.1.1177 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.951520][ T10] usb 5-1: USB disconnect, device number 8 [ 88.010407][ T3913] rust_binder: Error in use_page_slow: ESRCH [ 88.010422][ T3913] rust_binder: use_range failure ESRCH [ 88.016443][ T3913] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 88.021928][ T3913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 88.029767][ T3913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:248 [ 88.123014][ T3916] rust_binder: Error while translating object. [ 88.132131][ T3916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.138283][ T3916] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 88.148327][ T3916] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:251 [ 88.163595][ T10] rust_binder: 3915: removing orphan mapping 0:24 [ 88.235082][ T36] audit: type=1400 audit(1773711289.892:425): avc: denied { read write } for pid=3926 comm="syz.4.1186" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.265679][ T36] audit: type=1400 audit(1773711289.892:426): avc: denied { open } for pid=3926 comm="syz.4.1186" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.296318][ T3930] rust_binder: Error while translating object. [ 88.296346][ T3930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 88.302689][ T3930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:706 [ 88.374633][ T36] audit: type=1400 audit(1773711290.032:427): avc: denied { listen } for pid=3933 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.435378][ T3947] bridge0: entered promiscuous mode [ 88.440666][ T3947] bridge0: entered allmulticast mode [ 88.456749][ T3949] binder: Binderfs stats mode cannot be changed during a remount [ 88.487486][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.489018][ T36] audit: type=1400 audit(1773711290.142:428): avc: denied { create } for pid=3952 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.496041][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 88.561810][ T3967] fuse: Unknown parameter '000000000000000000000000x0000000000000004' [ 88.744179][ T36] audit: type=1400 audit(1773711290.402:429): avc: denied { create } for pid=3974 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.764252][ T36] audit: type=1400 audit(1773711290.422:430): avc: denied { sys_admin } for pid=3974 comm="syz.4.1202" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.812998][ T3981] netlink: 'syz.4.1204': attribute type 4 has an invalid length. [ 88.825987][ T3982] netlink: 'syz.4.1204': attribute type 4 has an invalid length. [ 88.834349][ T3981] netlink: 'syz.4.1204': attribute type 4 has an invalid length. [ 88.973863][ T3987] incfs: Error accessing: ./file0. [ 88.979126][ T3987] incfs: mount failed -20 [ 89.057440][ T1580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=1580 comm=kworker/0:5 [ 89.115862][ T36] audit: type=1400 audit(1773711290.772:431): avc: denied { accept } for pid=3997 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 89.151180][ T4006] netlink: 'syz.1.1211': attribute type 4 has an invalid length. [ 89.159307][ T4006] netlink: 'syz.1.1211': attribute type 4 has an invalid length. [ 89.177748][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 89.184320][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 89.191402][ T4007] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 89.576523][ T4042] netlink: 'syz.2.1224': attribute type 2 has an invalid length. [ 89.592469][ T4044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 89.612557][ T4048] netlink: 'syz.1.1227': attribute type 16 has an invalid length. [ 89.620444][ T4048] netlink: 'syz.1.1227': attribute type 3 has an invalid length. [ 89.628141][ T4048] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.1227'. [ 90.208867][ T1580] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 90.360358][ T1580] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.368506][ T1580] usb 5-1: not running at top speed; connect to a high speed hub [ 90.376272][ T1580] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 90.388917][ T1580] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 90.396591][ T1580] usb 5-1: can't read configurations, error -61 [ 90.496821][ T36] audit: type=1326 audit(1773711292.152:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.1236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8558ebe9 code=0x0 [ 90.528983][ T1580] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 90.558872][ T777] Bluetooth: hci0: command 0x1003 tx timeout [ 90.558872][ T591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.680211][ T1580] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.688199][ T1580] usb 5-1: not running at top speed; connect to a high speed hub [ 90.696066][ T1580] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 90.704952][ T1580] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 90.712538][ T1580] usb 5-1: can't read configurations, error -61 [ 90.718902][ T1580] usb usb5-port1: attempt power cycle [ 90.808855][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 90.958870][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 90.965116][ T45] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 90.973456][ T45] usb 1-1: config 1 has no interface number 0 [ 90.979644][ T45] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 90.989633][ T45] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 90.999827][ T45] usb 1-1: config 1 interface 105 has no altsetting 0 [ 91.007890][ T45] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 91.016942][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.024938][ T45] usb 1-1: Product: syz [ 91.029102][ T45] usb 1-1: Manufacturer: syz [ 91.033681][ T45] usb 1-1: SerialNumber: syz [ 91.039298][ T4077] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.046510][ T4077] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.058911][ T1580] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 91.080671][ T1580] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.088639][ T1580] usb 5-1: not running at top speed; connect to a high speed hub [ 91.096443][ T1580] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 91.109029][ T1580] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 91.116815][ T1580] usb 5-1: can't read configurations, error -61 [ 91.198865][ T591] Bluetooth: hci1: command 0x1003 tx timeout [ 91.204900][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 91.248908][ T1580] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 91.257930][ T45] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 91.270768][ T1580] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.279337][ T1580] usb 5-1: not running at top speed; connect to a high speed hub [ 91.280154][ T45] usb 1-1: USB disconnect, device number 18 [ 91.288442][ T1580] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 91.308677][ T1580] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 91.316502][ T1580] usb 5-1: can't read configurations, error -61 [ 91.323007][ T1580] usb usb5-port1: unable to enumerate USB device [ 91.388947][ T4083] /dev/loop1: Can't lookup blockdev [ 91.394516][ T4083] netlink: 'syz.1.1239': attribute type 6 has an invalid length. [ 91.402278][ T4083] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.417468][ T4085] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1240'. [ 91.810449][ T4104] netlink: 'syz.0.1246': attribute type 13 has an invalid length. [ 91.818942][ T4104] erspan0: refused to change device tx_queue_len [ 91.844069][ T4109] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 91.852023][ T4110] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 91.905084][ T4113] devpts: called with bogus options [ 91.985521][ T4118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 91.995371][ T4118] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1251'. [ 92.004900][ T4118] tipc: Invalid UDP bearer configuration [ 92.004920][ T4118] tipc: Enabling of bearer rejected, failed to enable media [ 92.019765][ T4118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 92.129518][ T4140] rust_binder: Error while translating object. [ 92.129549][ T4140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 92.135782][ T4140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:749 [ 92.152029][ T4144] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 92.270735][ T4148] overlayfs: failed to clone upperpath [ 92.302893][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'. [ 92.459668][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.667706][ T36] audit: type=1326 audit(1773711294.322:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.691102][ T36] audit: type=1326 audit(1773711294.322:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.714669][ T36] audit: type=1326 audit(1773711294.362:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.738794][ T36] audit: type=1326 audit(1773711294.362:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.762171][ T36] audit: type=1326 audit(1773711294.362:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.785819][ T36] audit: type=1326 audit(1773711294.382:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.809131][ T36] audit: type=1326 audit(1773711294.382:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.832580][ T36] audit: type=1326 audit(1773711294.382:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.856326][ T36] audit: type=1326 audit(1773711294.402:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.856767][ T4183] netlink: 61 bytes leftover after parsing attributes in process `syz.2.1273'. [ 92.879668][ T36] audit: type=1326 audit(1773711294.402:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7ffc0000 [ 92.988294][ T4201] fuseblk: Bad value for 'user_id' [ 92.993818][ T4201] fuseblk: Bad value for 'user_id' [ 92.995545][ T4204] overlayfs: failed to clone upperpath [ 93.017800][ T4206] rust_binder: Error while translating object. [ 93.017842][ T4206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.024238][ T4206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 93.068593][ T4211] 9pnet_fd: Insufficient options for proto=fd [ 93.098649][ T4213] rust_binder: Error while translating object. [ 93.098683][ T4213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 93.104894][ T4213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310 [ 93.129757][ T4215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 93.158942][ T4222] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 93.175177][ T4222] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 93.182752][ T4222] rust_binder: 319: no such ref 7 [ 93.195853][ T4224] binder: Bad value for 'stats' [ 93.634088][ T4247] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1293'. [ 94.388902][ T4269] 9pnet_fd: Insufficient options for proto=fd [ 94.478869][ T591] Bluetooth: hci0: command 0x1003 tx timeout [ 94.478888][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.499535][ T4281] 9pnet_fd: Insufficient options for proto=fd [ 94.513182][ T4283] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1307'. [ 94.892890][ T4336] binder: Unknown parameter '' [ 94.984889][ T4354] binder: Binderfs stats mode cannot be changed during a remount [ 95.012946][ T4357] 9pnet_fd: Insufficient options for proto=fd [ 95.057427][ T4361] rust_binder: Write failure EFAULT in pid:800 [ 95.059358][ T4361] rust_binder: Write failure EFAULT in pid:800 [ 95.180010][ T4386] fuse: Invalid gid '00000000000037777777777' [ 95.192668][ T4389] loop2: detected capacity change from 0 to 7 [ 95.199403][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.208550][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 95.217261][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.226423][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 95.234317][ T4389] loop2: unable to read partition table [ 95.241660][ T4389] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 95.256245][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.265395][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 95.273448][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.282619][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 95.290678][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.299811][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 95.307967][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.317118][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 95.325179][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.334328][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 95.345453][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 95.385084][ T4396] 9pnet_fd: Insufficient options for proto=fd [ 95.414714][ T4402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1348'. [ 95.465112][ T4411] validate_nla: 2 callbacks suppressed [ 95.465127][ T4411] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 95.480695][ T4411] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 95.693632][ T4441] netlink: 'syz.1.1359': attribute type 16 has an invalid length. [ 95.701476][ T4441] netlink: 'syz.1.1359': attribute type 4 has an invalid length. [ 95.709236][ T4441] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.1359'. [ 95.722100][ T4441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4441 comm=syz.1.1359 [ 95.969951][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 96.048976][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 96.267404][ T4479] /dev/rnullb0: Can't lookup blockdev [ 96.887036][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 96.913881][ T4510] rust_binder: 842: no such ref 0 [ 96.919656][ T4510] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 96.926912][ T4510] rust_binder: 842: no such ref 0 [ 97.139959][ T4558] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1399'. [ 97.237519][ T4573] binder: Bad value for 'stats' [ 97.477444][ T4587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:875 [ 97.495313][ T4593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4593 comm=syz.0.1411 [ 97.517320][ T4591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.533681][ T4597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.642516][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1414'. [ 97.683176][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 97.683192][ T36] audit: type=1400 audit(1773711299.342:512): avc: denied { mounton } for pid=4608 comm="syz.0.1417" path="/file0/file0" dev="ramfs" ino=25692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.694057][ T4611] fuse: Bad value for 'rootmode' [ 98.298887][ T1580] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 98.458861][ T1580] usb 1-1: Using ep0 maxpacket: 32 [ 98.469562][ T1580] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.488839][ T1580] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.498571][ T1580] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.505304][ T1580] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 98.514599][ T1580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.523295][ T1580] usb 1-1: config 0 descriptor?? [ 98.594402][ T36] audit: type=1326 audit(1773711300.252:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38318ebe9 code=0x7fc00000 [ 98.641186][ T36] audit: type=1400 audit(1773711300.282:514): avc: denied { write } for pid=4654 comm="syz.1.1432" name="file2" dev="tmpfs" ino=3244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.671728][ T12] tipc: Subscription rejected, illegal request [ 98.679017][ T36] audit: type=1400 audit(1773711300.282:515): avc: denied { ioctl } for pid=4654 comm="syz.1.1432" path="/597/file2" dev="tmpfs" ino=3244 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.144881][ T1580] usbhid 1-1:0.0: can't add hid device: -71 [ 99.150880][ T1580] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 99.159626][ T1580] usb 1-1: USB disconnect, device number 19 [ 99.366731][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'. [ 99.375621][ T4683] netlink: 'syz.2.1440': attribute type 3 has an invalid length. [ 99.552324][ T12] bridge_slave_1: left allmulticast mode [ 99.558029][ T12] bridge_slave_1: left promiscuous mode [ 99.563643][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.571023][ T12] bridge_slave_0: left allmulticast mode [ 99.576639][ T12] bridge_slave_0: left promiscuous mode [ 99.582304][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.653490][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.660600][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.667815][ T4676] bridge_slave_0: entered allmulticast mode [ 99.674657][ T4676] bridge_slave_0: entered promiscuous mode [ 99.681230][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.688254][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.695526][ T4676] bridge_slave_1: entered allmulticast mode [ 99.701992][ T4676] bridge_slave_1: entered promiscuous mode [ 99.711342][ T12] veth1_macvtap: left promiscuous mode [ 99.716865][ T12] veth0_vlan: left promiscuous mode [ 99.777552][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.784601][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.791896][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.798935][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.824267][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.831434][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.841760][ T2251] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.848781][ T2251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.862830][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.869877][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.877947][ T1580] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.919445][ T4676] veth0_vlan: entered promiscuous mode [ 99.929779][ T4676] veth1_macvtap: entered promiscuous mode [ 100.029009][ T1580] usb 5-1: Using ep0 maxpacket: 32 [ 100.035229][ T1580] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 100.045621][ T1580] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 100.059648][ T1580] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.070731][ T1580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.078785][ T1580] usb 5-1: SerialNumber: syz [ 100.094698][ T36] audit: type=1326 audit(1773711301.752:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.1.1459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa98bd8ebe9 code=0x0 [ 100.143489][ T4752] fuse: Bad value for 'fd' [ 100.388860][ T331] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.538861][ T331] usb 2-1: Using ep0 maxpacket: 8 [ 100.544975][ T331] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 100.553303][ T331] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.561346][ T331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.571425][ T331] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 100.580408][ T331] usb 2-1: config 0 has no interface number 0 [ 100.586531][ T331] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.599513][ T331] usb 2-1: config 0 interface 150 has no altsetting 0 [ 100.606285][ T331] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 100.615326][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.624019][ T331] usb 2-1: config 0 descriptor?? [ 100.700056][ T36] audit: type=1400 audit(1773711302.362:517): avc: denied { shutdown } for pid=4766 comm="syz.2.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.384347][ T4785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.392894][ T4785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.407059][ T4785] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 102.249040][ T4793] 9pnet_fd: Insufficient options for proto=fd [ 102.256009][ T4793] 9pnet_fd: Insufficient options for proto=fd [ 102.271201][ T4796] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.465577][ T1580] cdc_acm 5-1:1.0: Zero length descriptor references [ 102.479452][ T1580] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 102.490042][ T1580] usb 5-1: USB disconnect, device number 13 [ 102.532969][ T36] audit: type=1400 audit(1773711304.192:518): avc: denied { accept } for pid=4810 comm="syz.4.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.552954][ T36] audit: type=1400 audit(1773711304.192:519): avc: denied { map } for pid=4810 comm="syz.4.1479" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.794580][ T36] audit: type=1400 audit(1773711304.452:520): avc: denied { map } for pid=4824 comm="syz.0.1484" path="socket:[26229]" dev="sockfs" ino=26229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.818680][ T36] audit: type=1400 audit(1773711304.452:521): avc: denied { accept } for pid=4824 comm="syz.0.1484" path="socket:[26229]" dev="sockfs" ino=26229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.098681][ T1580] usb 2-1: USB disconnect, device number 6 [ 103.113181][ T4832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 103.501127][ T425] rust_binder: 4821: removing orphan mapping 0:24 [ 103.528994][ T1580] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.569703][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 103.578376][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 103.632128][ T4855] kvm_intel: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf [ 103.643050][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf [ 103.651812][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae [ 103.662599][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b [ 103.673010][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a [ 103.681720][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a [ 103.699986][ T1580] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.712735][ T1580] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.727002][ T1580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.742488][ T1580] usb 2-1: Product: syz [ 103.747325][ T1580] usb 2-1: Manufacturer: syz [ 103.752215][ T1580] usb 2-1: SerialNumber: syz [ 103.854228][ T36] audit: type=1400 audit(1773711305.512:522): avc: denied { create } for pid=4878 comm="syz.2.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.895284][ T4884] bridge0: entered allmulticast mode [ 103.896043][ T36] audit: type=1400 audit(1773711305.552:523): avc: denied { execute_no_trans } for pid=4883 comm="syz.0.1506" path="/322/file0" dev="tmpfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.901413][ T4884] incfs: Error accessing: ./file0. [ 103.929731][ T4884] incfs: mount failed -20 [ 103.960215][ T36] audit: type=1400 audit(1773711305.622:524): avc: denied { ioctl } for pid=4838 comm="syz.1.1489" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.015176][ T36] audit: type=1400 audit(1773711305.672:525): avc: denied { sys_nice } for pid=4897 comm="syz.4.1511" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 104.535009][ T4906] netlink: 'syz.0.1514': attribute type 4 has an invalid length. [ 104.761612][ T1580] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 104.768161][ T1580] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 104.775917][ T1580] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 104.950105][ T36] audit: type=1400 audit(1773711306.612:526): avc: denied { read write } for pid=4914 comm="syz.4.1518" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.974037][ T36] audit: type=1400 audit(1773711306.612:527): avc: denied { open } for pid=4914 comm="syz.4.1518" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.014328][ T36] audit: type=1400 audit(1773711306.672:528): avc: denied { map } for pid=4914 comm="syz.4.1518" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.014399][ T4915] __vm_enough_memory: pid: 4915, comm: syz.4.1518, bytes: 18014402804453376 not enough memory for the allocation [ 105.168589][ T4839] /dev/rnullb0: Can't open blockdev [ 105.174501][ T1580] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 105.183939][ T1580] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 105.199901][ T1580] usb 2-1: USB disconnect, device number 7 [ 105.207640][ T1580] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 105.223346][ T36] audit: type=1400 audit(1773711306.882:529): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.256689][ T4927] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1522'. [ 105.269940][ T4927] netlink: 'syz.0.1522': attribute type 4 has an invalid length. [ 105.469550][ T4959] overlayfs: failed to clone upperpath [ 105.469658][ T4960] overlayfs: failed to clone upperpath [ 105.691217][ T4962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.691241][ T4962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 106.109846][ T4989] pim6reg1: entered promiscuous mode [ 106.137052][ T4989] pim6reg1: entered allmulticast mode [ 106.152719][ T4994] 9pnet_fd: Insufficient options for proto=fd [ 106.167413][ T4996] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.182764][ T4998] bridge0: port 3(veth0_to_bridge) entered blocking state [ 106.189920][ T4998] bridge0: port 3(veth0_to_bridge) entered disabled state [ 106.197293][ T4998] veth0_to_bridge: entered allmulticast mode [ 106.206466][ T4998] veth0_to_bridge: entered promiscuous mode [ 106.212493][ T4998] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 106.225585][ T4998] bridge0: port 3(veth0_to_bridge) entered blocking state [ 106.232714][ T4998] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 106.245997][ T5003] loop7: detected capacity change from 0 to 7 [ 106.572149][ T5025] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 106.580857][ T5024] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 106.646605][ T5036] netlink: 'syz.1.1552': attribute type 63 has an invalid length. [ 106.657796][ T5036] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1552'. [ 106.666886][ T5036] gretap0: entered allmulticast mode [ 106.672606][ T5036] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 106.689478][ T5036] rust_binder: Write failure EFAULT in pid:38 [ 106.734343][ T5049] rust_binder: validate_parent_fixup: new_min_offset=17179869242, sg_entry.length=238 [ 106.740501][ T5049] rust_binder: Error while translating object. [ 106.750246][ T5049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.756630][ T5049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 106.769233][ T5042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.778881][ T5042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:449 [ 106.817213][ T5059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.872778][ T5061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 106.879272][ T5061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:455 [ 107.028874][ T331] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.134201][ T5077] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1565'. [ 107.152946][ T5080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5080 comm=syz.4.1566 [ 107.165608][ T5080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5080 comm=syz.4.1566 [ 107.198875][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 107.205204][ T331] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.213576][ T331] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.222193][ T331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.231140][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.240820][ T331] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.250469][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.263438][ T331] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.272476][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.281285][ T331] usb 2-1: config 0 descriptor?? [ 107.299506][ T5082] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 107.306832][ T5082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:473 [ 107.480237][ T5091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1570'. [ 107.489018][ T331] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.490277][ T5091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.505447][ T331] usb 2-1: USB disconnect, device number 8 [ 107.518951][ T5091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 107.523239][ T5091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:479 [ 107.524953][ T331] usblp0: removed [ 107.686783][ T5103] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 107.714171][ T5105] pim6reg1: entered promiscuous mode [ 107.719517][ T5105] pim6reg1: entered allmulticast mode [ 107.822279][ T5110] rust_binder: Write failure EFAULT in pid:490 [ 107.998937][ T331] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.158907][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 108.165275][ T331] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.173765][ T331] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.182463][ T331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.191491][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.201137][ T331] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.210783][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.223748][ T331] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.232791][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.241575][ T331] usb 2-1: config 0 descriptor?? [ 108.448169][ T331] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.462279][ T331] usb 2-1: USB disconnect, device number 9 [ 108.468592][ T331] usblp0: removed [ 108.681153][ T5118] /dev/rnullb0: Can't open blockdev [ 108.697422][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 108.697435][ T36] audit: type=1400 audit(108.660:552): avc: denied { create } for pid=5119 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.946507][ T36] audit: type=1400 audit(108.910:553): avc: denied { write } for pid=5129 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.966187][ T5130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31181 sclass=netlink_route_socket pid=5130 comm=syz.4.1583 [ 108.985843][ T5130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.985864][ T5130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:511 [ 109.428854][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.588876][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 109.595160][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.603335][ T31] usb 2-1: config 0 has no interface number 0 [ 109.609521][ T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.620497][ T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.630253][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 109.639301][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.647770][ T31] usb 2-1: config 0 descriptor?? [ 110.137068][ T5141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.137174][ T5141] rust_binder: 519: no such ref 3 [ 110.148722][ T5141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 110.150655][ T5141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 110.254689][ T31] uclogic 0003:28BD:0071.0004: pen parameters not found [ 110.270823][ T31] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 110.457511][ T9] usb 2-1: USB disconnect, device number 10 [ 111.102785][ T5169] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.154337][ T5171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:527 [ 111.169194][ T5171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.195545][ T5175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.203356][ T5175] rust_binder: Error while translating object. [ 111.209892][ T5175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 111.216196][ T5175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:532 [ 111.258124][ T5181] bridge_slave_1: left allmulticast mode [ 111.273445][ T5181] bridge_slave_1: left promiscuous mode [ 111.279551][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.288735][ T5181] bridge_slave_0: left allmulticast mode [ 111.295568][ T5181] bridge_slave_0: left promiscuous mode [ 111.301483][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.310514][ T5181] bridge0 (unregistering): left allmulticast mode [ 111.441419][ T36] audit: type=1400 audit(111.410:554): avc: denied { write } for pid=5197 comm="syz.0.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 111.531531][ T5210] rust_binder: Error while translating object. [ 111.531567][ T5210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.537745][ T5210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 111.549185][ T5210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.567592][ T5211] rust_binder: Error while translating object. [ 111.567634][ T5211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.574116][ T5211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 111.607118][ T5221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.616788][ T5220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 111.616796][ T5221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 111.616814][ T5220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:64 [ 111.623643][ T5221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:64 [ 111.718887][ T331] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 111.739368][ T5227] 9pnet_fd: Insufficient options for proto=fd [ 111.752688][ T36] audit: type=1400 audit(111.720:555): avc: denied { create } for pid=5228 comm="syz.0.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.771719][ T36] audit: type=1400 audit(111.740:556): avc: denied { map } for pid=5228 comm="syz.0.1615" path="socket:[28826]" dev="sockfs" ino=28826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.878882][ T331] usb 5-1: Using ep0 maxpacket: 8 [ 111.885057][ T331] usb 5-1: config 0 has no interfaces? [ 111.894810][ T331] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 111.903980][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.913281][ T331] usb 5-1: Product: syz [ 111.917517][ T331] usb 5-1: Manufacturer: syz [ 111.922138][ T331] usb 5-1: SerialNumber: syz [ 111.927698][ T331] usb 5-1: config 0 descriptor?? [ 111.945196][ T64] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.110700][ T64] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 112.118932][ T64] usb 2-1: config 14 has no interface number 0 [ 112.125081][ T64] usb 2-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 112.135159][ T64] usb 2-1: config 14 interface 21 has no altsetting 0 [ 112.143923][ T64] usb 2-1: string descriptor 0 read error: -22 [ 112.150220][ T64] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 112.159638][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.168469][ T5220] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.177049][ T31] usb 5-1: USB disconnect, device number 14 [ 112.184032][ T64] usb 2-1: MIDIStreaming interface descriptor not found [ 112.383723][ T31] usb 2-1: USB disconnect, device number 11 [ 112.706223][ T5285] rust_binder: inc_ref_done called when no active inc_refs [ 112.728299][ T5294] binder: Unknown parameter 'context' [ 112.832688][ T36] audit: type=1400 audit(112.800:557): avc: denied { ioctl } for pid=5306 comm="syz.0.1644" path="socket:[28971]" dev="sockfs" ino=28971 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.925107][ T36] audit: type=1400 audit(112.890:558): avc: denied { nlmsg_write } for pid=5315 comm="syz.1.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.982537][ T36] audit: type=1400 audit(112.940:559): avc: denied { append } for pid=5319 comm="syz.1.1649" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.986566][ T5310] overlayfs: failed to clone upperpath [ 113.023123][ T5330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.114161][ T5368] incfs: Error accessing: /dev/nullb0. [ 113.126145][ T5368] incfs: mount failed -2 [ 113.210685][ T5370] netlink: 'syz.0.1664': attribute type 46 has an invalid length. [ 113.258843][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 113.283450][ T36] audit: type=1400 audit(113.250:560): avc: denied { ioctl } for pid=5388 comm="syz.0.1671" path="socket:[28293]" dev="sockfs" ino=28293 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.419962][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.430181][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.440627][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.449929][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.458019][ T9] usb 5-1: SerialNumber: syz [ 113.645167][ T5409] sit0: entered promiscuous mode [ 113.651577][ T5409] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 113.659347][ T5409] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1678'. [ 113.665646][ T5330] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 113.678215][ T5330] rust_binder: Write failure EINVAL in pid:556 [ 113.681407][ T9] usb 5-1: 0:2 : does not exist [ 113.694750][ T9] usb 5-1: unit 5 not found! [ 113.701514][ T9] usb 5-1: USB disconnect, device number 15 [ 113.712233][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.785409][ T5420] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 113.793291][ T5420] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.1683'. [ 114.679411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.691614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.703715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.715819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.727912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.740012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.752104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.764208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.776304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.788388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 114.864482][ T5457] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1694'. [ 115.160802][ T5479] netlink: 'syz.2.1700': attribute type 4 has an invalid length. [ 115.612935][ T5496] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 115.629117][ T5496] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 115.713992][ T36] audit: type=1400 audit(371.682:561): avc: denied { getopt } for pid=5503 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.843044][ T5508] 9pnet_fd: Insufficient options for proto=fd [ 115.908879][ T5511] netlink: 'syz.4.1712': attribute type 4 has an invalid length. [ 115.916811][ T5512] netlink: 'syz.4.1712': attribute type 4 has an invalid length. [ 116.002017][ T5517] /dev/rnullb0: Can't open blockdev [ 116.332126][ T36] audit: type=1400 audit(372.302:562): avc: denied { map } for pid=5543 comm="syz.0.1725" path="socket:[29520]" dev="sockfs" ino=29520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.421981][ T36] audit: type=1326 audit(372.392:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.0.1727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2081d8ebe9 code=0x0 [ 116.506950][ T36] audit: type=1400 audit(372.472:564): avc: denied { bind } for pid=5559 comm="syz.1.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.526849][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.546831][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.571279][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.592274][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.614689][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 117.352109][ T5593] tipc: Enabling of bearer rejected, failed to enable media [ 117.377736][ T5594] tipc: Enabling of bearer rejected, failed to enable media [ 117.469248][ T5604] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 117.495452][ T5604] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 117.575545][ T5606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65385 sclass=netlink_route_socket pid=5606 comm=syz.0.1742 [ 117.707297][ T5612] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1745'. [ 117.754321][ T5613] overlayfs: failed to clone upperpath [ 118.158854][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.165004][ T591] Bluetooth: hci0: command 0x1003 tx timeout [ 118.266157][ T36] audit: type=1400 audit(374.232:565): avc: denied { create } for pid=5643 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 118.299878][ T5638] tipc: Started in network mode [ 118.312332][ T5638] tipc: Node identity fffffffa, cluster identity 4711 [ 118.338247][ T5638] tipc: Node number set to 4294967290 [ 118.414497][ T5655] KVM: debugfs: duplicate directory 5655-9 [ 119.102813][ T5714] netlink: 'syz.2.1778': attribute type 4 has an invalid length. [ 119.111107][ T5714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=5714 comm=syz.2.1778 [ 119.220898][ T5721] tc_dump_action: action bad kind [ 119.688871][ C0] net_ratelimit: 83868 callbacks suppressed [ 119.688893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.706911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.719007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.731190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.743305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.755409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.767503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.779588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.791674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.803782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 119.921562][ T5736] batadv_slave_0: entered promiscuous mode [ 119.948635][ T5736] batadv_slave_0: left promiscuous mode [ 120.203205][ T36] audit: type=1400 audit(376.172:566): avc: denied { audit_write } for pid=5740 comm="syz.2.1787" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 120.243700][ T36] audit: type=1107 audit(376.192:567): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='toJTl!T [ 120.243700][ T36] cݹ>$C= qcK' [ 120.366258][ T5744] netlink: 'syz.4.1789': attribute type 4 has an invalid length. [ 120.384624][ T5744] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1789'. [ 120.871548][ T5762] /dev/loop0: Can't lookup blockdev [ 121.139021][ T36] audit: type=1326 audit(633.111:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5770 comm="syz.1.1798" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa98bd8ebe9 code=0x0 [ 121.683824][ T5794] binder: Bad value for 'max' [ 122.005875][ T36] audit: type=1326 audit(633.971:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 122.108858][ T36] audit: type=1326 audit(634.001:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 122.201210][ T36] audit: type=1326 audit(634.001:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 122.304766][ T36] audit: type=1326 audit(634.001:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 122.422131][ T36] audit: type=1326 audit(634.001:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 122.526292][ T36] audit: type=1326 audit(634.001:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 122.621336][ T36] audit: type=1326 audit(634.001:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 122.692120][ T36] audit: type=1326 audit(634.001:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 122.757092][ T36] audit: type=1326 audit(634.001:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2081d8ebe9 code=0x7ffc0000 [ 123.159290][ T5848] tipc: Enabling of bearer rejected, failed to enable media [ 123.859237][ T5885] 9pnet_fd: Insufficient options for proto=fd [ 123.865447][ T5885] 9pnet_fd: Insufficient options for proto=fd [ 124.470445][ T5909] bpf: Bad value for 'uid' [ 124.698856][ C0] net_ratelimit: 72627 callbacks suppressed [ 124.698876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.716882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.728974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.737249][ T5928] fuse: Unknown parameter 'group#d' [ 124.741081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.747696][ T5928] fuse: Unknown parameter 'group#d' [ 124.758326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.773902][ T5929] fuse: Unknown parameter 'group#d' [ 124.775612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.792851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.804959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.808972][ T425] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 124.817062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.836599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 124.979901][ T425] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 124.993913][ T425] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.011967][ T425] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 125.029666][ T425] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 125.038888][ T425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.046995][ T425] usb 5-1: Product: syz [ 125.054491][ T425] usb 5-1: Manufacturer: syz [ 125.060553][ T425] usb 5-1: SerialNumber: syz [ 125.069170][ T425] usb 5-1: config 0 descriptor?? [ 125.083208][ T425] usb-storage 5-1:0.0: USB Mass Storage device detected [ 125.096762][ T425] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 125.753713][ T425] usb 5-1: USB disconnect, device number 16 [ 126.514532][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 126.514548][ T36] audit: type=1400 audit(638.481:598): avc: denied { getopt } for pid=6038 comm="syz.0.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.781314][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'. [ 127.266983][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 127.290905][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1877'. [ 127.709314][ T6088] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1879'. [ 127.726940][ T6088] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1879'. [ 127.759951][ T6088] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1879'. [ 128.073813][ T6131] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1890'. [ 128.228560][ T6139] overlayfs: failed to clone upperpath [ 129.621407][ T6171] netlink: 1331 bytes leftover after parsing attributes in process `syz.2.1907'. [ 129.708810][ C0] net_ratelimit: 82150 callbacks suppressed [ 129.708831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.726844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.738936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.751051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.763151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.775256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.787353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.799447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.811529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.823617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 129.958899][ T6198] netlink: 'syz.2.1916': attribute type 46 has an invalid length. [ 130.132323][ T6205] netlink: 'syz.0.1920': attribute type 4 has an invalid length. [ 130.150367][ T6205] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1920'. [ 130.199295][ T6208] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 130.215263][ T6213] fuse: Unknown parameter '18446744073709551615' [ 130.245669][ T6216] netlink: 'syz.2.1924': attribute type 4 has an invalid length. [ 130.260881][ T6216] netlink: 'syz.2.1924': attribute type 4 has an invalid length. [ 130.295446][ T6221] tmpfs: Unknown parameter '00000000000000000002537' [ 130.564627][ T6237] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1930'. [ 131.340378][ T6275] binder: Unknown parameter 'sfclabel' [ 131.616242][ T36] audit: type=1400 audit(643.581:599): avc: denied { create } for pid=6280 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 131.738846][ T425] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 131.878869][ T425] usb 5-1: device descriptor read/64, error -71 [ 131.909120][ T6307] tipc: Enabling of bearer rejected, media not registered [ 132.128848][ T425] usb 5-1: device descriptor read/64, error -71 [ 132.296080][ T36] audit: type=1400 audit(644.261:600): avc: denied { create } for pid=6350 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.321995][ T6355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6355 comm=syz.1.1964 [ 132.388843][ T425] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 132.528842][ T425] usb 5-1: device descriptor read/64, error -71 [ 132.788868][ T425] usb 5-1: device descriptor read/64, error -71 [ 132.911422][ T425] usb usb5-port1: attempt power cycle [ 133.068916][ T331] kernel read not supported for file inotify (pid: 331 comm: kworker/1:3) [ 133.279207][ T425] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 133.329809][ T425] usb 5-1: device descriptor read/8, error -71 [ 133.463320][ T425] usb 5-1: device descriptor read/8, error -71 [ 133.728878][ T425] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 133.781147][ T425] usb 5-1: device descriptor read/8, error -71 [ 133.919822][ T425] usb 5-1: device descriptor read/8, error -71 [ 134.038951][ T425] usb usb5-port1: unable to enumerate USB device [ 134.718893][ C0] net_ratelimit: 73923 callbacks suppressed [ 134.718913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.736938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.749065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.761193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.773340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.785477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.797624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.809761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.821901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.834028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 134.913198][ T6387] 9pnet_fd: Insufficient options for proto=fd [ 135.002171][ T36] audit: type=1326 audit(646.971:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.0.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2081d8ebe9 code=0x50000 [ 135.088834][ T36] audit: type=1326 audit(646.971:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.0.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2081d8ebe9 code=0x50000 [ 135.158819][ T36] audit: type=1326 audit(646.971:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.0.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2081dc14a5 code=0x50000 [ 135.219421][ T36] audit: type=1326 audit(646.971:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.0.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2081d8ebe9 code=0x50000 [ 136.823782][ T6496] 9pnet_fd: Insufficient options for proto=fd [ 137.007450][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2017'. [ 137.571669][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.728849][ C0] net_ratelimit: 90473 callbacks suppressed [ 139.728868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 139.728906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.734859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 139.746792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.758839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 139.770757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.782633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 139.794619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.806453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 139.818404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.854764][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.738800][ C1] net_ratelimit: 130840 callbacks suppressed [ 144.738822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.738872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 144.744880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.756912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 144.768875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.780741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 144.792665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.804773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 144.816555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.828562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 144.941649][ T2236] sched: DL replenish lagged too much [ 149.748837][ C0] net_ratelimit: 117159 callbacks suppressed [ 149.748859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 149.748859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.748924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.754913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 149.766916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.779022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 149.790745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.802731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 149.814587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.826642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 154.758802][ C1] net_ratelimit: 120166 callbacks suppressed [ 154.758823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.758849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 154.764904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.776848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 154.788858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.800731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 154.812681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.824717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 154.836496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.848397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 159.768796][ C0] net_ratelimit: 122922 callbacks suppressed [ 159.768815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 159.768835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.774879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 159.786852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.798855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 159.810742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.822851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 159.834592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.846456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 159.858464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.778856][ C1] net_ratelimit: 129912 callbacks suppressed [ 164.778878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.778892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 164.778971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 164.784955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.796911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.808947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 164.820854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.832726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.844613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 164.856569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.788830][ C1] net_ratelimit: 134296 callbacks suppressed [ 169.788850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.788877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 169.795002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.806887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 169.818822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.830670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.842681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.854507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.866393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.878351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 174.798830][ C1] net_ratelimit: 133420 callbacks suppressed [ 174.798850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.798852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.798933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 174.804932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.817016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 174.828823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.840811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 174.852719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.864683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.876690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 179.808799][ C0] net_ratelimit: 131082 callbacks suppressed [ 179.808819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 179.808861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.814917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 179.826874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.838903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.850891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 179.862755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.874565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.886577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 179.898526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.818836][ C0] net_ratelimit: 132119 callbacks suppressed [ 184.818876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 184.818904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.824938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.836925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.848833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.860691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.872552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 184.884511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.896477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 184.908327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.828832][ C1] net_ratelimit: 134197 callbacks suppressed [ 189.828851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.828884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 189.834973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 189.846938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 189.858791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.870740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 189.882723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.894707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.906762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.918775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.838773][ C0] net_ratelimit: 134441 callbacks suppressed [ 194.838793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.838851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 194.844864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.856759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.868804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 194.880715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.892789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 194.904602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.916571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 194.928530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.848790][ C1] net_ratelimit: 132838 callbacks suppressed [ 199.848809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.848840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 199.854879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.866841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 199.878812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.890767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.902787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 199.914617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.926505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.938451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 204.858801][ C1] net_ratelimit: 137315 callbacks suppressed [ 204.858822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.858872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 204.864928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 204.876787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 204.888761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.900670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.912652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.924621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.936454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.948435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 209.868784][ C0] net_ratelimit: 137007 callbacks suppressed [ 209.868804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.868830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 209.874861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.886760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.898717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 209.910723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.922850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 209.934648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.946661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 209.958593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.878805][ C0] net_ratelimit: 136430 callbacks suppressed [ 214.878826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 214.878868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.885021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 214.896872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.908869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 214.920797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.932742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.944761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 214.956593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.968445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.888806][ C1] net_ratelimit: 137033 callbacks suppressed [ 219.888825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.888855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 219.894922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.906773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 219.918804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.930585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.942596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.954521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.966368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.978330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 224.898770][ C1] net_ratelimit: 135747 callbacks suppressed [ 224.898791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.898910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 224.904874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.916753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 224.928714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.940592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.952563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.964447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.976302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.988157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 229.908769][ C0] net_ratelimit: 136118 callbacks suppressed [ 229.908790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.908829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.914859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 229.926838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.938954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 229.950713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.962566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 229.974547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.986373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.998341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.918821][ C1] net_ratelimit: 135747 callbacks suppressed [ 234.918844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 234.918892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 234.924924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.936857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.948845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.960819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.972641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.984619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 234.996569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.008567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 239.928797][ C1] net_ratelimit: 137309 callbacks suppressed [ 239.928818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.928861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 239.934871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.946865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 239.958857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 239.970683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.982732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.994627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.006481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.018436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 244.938753][ C0] net_ratelimit: 133632 callbacks suppressed [ 244.938774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 244.938811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.944867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 244.956825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.968816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.980769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.992662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.004577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.016471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 245.028382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.948757][ C0] net_ratelimit: 134107 callbacks suppressed [ 249.948776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 249.948812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.955009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 249.966839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.978709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 249.990728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.002532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.014510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.026563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.038394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.958796][ C1] net_ratelimit: 132908 callbacks suppressed [ 254.958816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.958852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 254.964860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.976872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 254.988830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.000678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.012656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.024680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.036439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.048309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 259.968761][ C1] net_ratelimit: 123218 callbacks suppressed [ 259.968782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.968836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 259.974911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.986786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 259.998755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.010598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.022583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.034583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.046332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.058195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 264.978795][ C1] net_ratelimit: 120598 callbacks suppressed [ 264.978816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.978869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 264.984894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.996887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 265.008829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.020683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.032656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.044658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.056389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.068306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 267.921141][ T37] INFO: task syz.1.2032:6552 blocked for more than 123 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 267.988980][ T37] Not tainted syzkaller #0 [ 267.993942][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.320411][ T36] audit: type=1400 audit(780.001:605): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[619]" dev="pipefs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 268.436837][ T37] task:syz.1.2032 state:D stack:0 pid:6552 tgid:6549 ppid:4676 flags:0x00004000 [ 268.447103][ T37] Call Trace: [ 268.450416][ T37] [ 268.453350][ T37] __schedule+0x1322/0x1df0 [ 268.457873][ T37] ? __sched_text_start+0x10/0x10 [ 268.462915][ T37] ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10 [ 268.469604][ T37] ? __call_rcu_common+0x41f/0x700 [ 268.474717][ T37] schedule+0xc6/0x240 [ 268.478804][ T37] schedule_timeout+0xb2/0x3a0 [ 268.483579][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 268.488980][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 268.494535][ T37] ? __percpu_ref_switch_mode+0x345/0x5f0 [ 268.500270][ T37] wait_for_common+0x359/0x630 [ 268.505035][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 268.510951][ T37] ? wait_for_completion+0x40/0x40 [ 268.516070][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 268.521900][ T37] ? percpu_ref_kill_and_confirm+0xf4/0x220 [ 268.527797][ T37] ? kill_ioctx+0x2b0/0x3d0 [ 268.532323][ T37] wait_for_completion+0x1c/0x40 [ 268.537262][ T37] exit_aio+0x2df/0x3b0 [ 268.541442][ T37] ? __cfi_exit_aio+0x10/0x10 [ 268.546206][ T37] ? uprobe_clear_state+0x2cd/0x340 [ 268.551458][ T37] __mmput+0x30/0x320 [ 268.555447][ T37] ? mmput+0x4d/0x170 [ 268.559448][ T37] mmput+0x55/0x170 [ 268.563708][ T37] do_exit+0x918/0x2630 [ 268.567870][ T37] ? __cfi_do_exit+0x10/0x10 [ 268.572480][ T37] ? timerqueue_del+0xd7/0x130 [ 268.577251][ T37] ? hrtimer_try_to_cancel+0x38c/0x6b0 [ 268.582763][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 268.588590][ T37] ? hrtimer_try_to_cancel+0x3e2/0x6b0 [ 268.594073][ T37] ? __kasan_check_write+0x18/0x20 [ 268.599212][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 268.604337][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 268.609910][ T37] do_group_exit+0x22a/0x300 [ 268.614511][ T37] ? __kasan_check_write+0x18/0x20 [ 268.619657][ T37] get_signal+0x139d/0x14f0 [ 268.624175][ T37] arch_do_signal_or_restart+0x96/0x720 [ 268.629755][ T37] ? __kasan_check_read+0x15/0x20 [ 268.634798][ T37] ? __se_sys_io_pgetevents+0x362/0x430 [ 268.640377][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 268.646544][ T37] ? __kasan_check_write+0x18/0x20 [ 268.651697][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 268.657601][ T37] do_syscall_64+0x64/0xf0 [ 268.662056][ T37] ? clear_bhb_loop+0x50/0xa0 [ 268.666748][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 268.672659][ T37] RIP: 0033:0x7fa98bd8ebe9 [ 268.677088][ T37] RSP: 002b:00007fa98cc8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 268.686256][ T37] RAX: fffffffffffffdfe RBX: 00007fa98bfc5fa0 RCX: 00007fa98bd8ebe9 [ 268.694251][ T37] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 00007fa98cc69000 [ 268.702249][ T37] RBP: 00007fa98be11e19 R08: 0000200000001d00 R09: 0000200000001d80 [ 268.710238][ T37] R10: 0000200000001c40 R11: 0000000000000246 R12: 0000000000000000 [ 268.718211][ T37] R13: 00007fa98bfc6038 R14: 00007fa98bfc5fa0 R15: 00007ffd59fad848 [ 268.726202][ T37] [ 269.079422][ T37] NMI backtrace for cpu 0 [ 269.079446][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 269.079476][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.079487][ T37] Call Trace: [ 269.079493][ T37] [ 269.079500][ T37] __dump_stack+0x21/0x30 [ 269.079528][ T37] dump_stack_lvl+0x10c/0x190 [ 269.079550][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 269.079574][ T37] dump_stack+0x19/0x20 [ 269.079601][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 269.079624][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 269.079646][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 269.079668][ T37] ? sched_show_task+0x379/0x560 [ 269.079690][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 269.079710][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 269.079731][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 269.079752][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 269.079775][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 269.079796][ T37] watchdog+0xd8f/0xed0 [ 269.079820][ T37] ? __cfi_watchdog+0x10/0x10 [ 269.079841][ T37] ? __kasan_check_read+0x15/0x20 [ 269.079864][ T37] ? __kthread_parkme+0x138/0x180 [ 269.079881][ T37] ? schedule+0xc6/0x240 [ 269.079897][ T37] kthread+0x2c7/0x370 [ 269.079913][ T37] ? __cfi_watchdog+0x10/0x10 [ 269.079935][ T37] ? __cfi_kthread+0x10/0x10 [ 269.079952][ T37] ret_from_fork+0x64/0xa0 [ 269.079974][ T37] ? __cfi_kthread+0x10/0x10 [ 269.079992][ T37] ret_from_fork_asm+0x1a/0x30 [ 269.080023][ T37] [ 269.080031][ T37] Sending NMI from CPU 0 to CPUs 1: [ 269.276692][ C1] NMI backtrace for cpu 1 [ 269.276706][ C1] CPU: 1 UID: 0 PID: 6585 Comm: syz-executor Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 269.276724][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.276733][ C1] RIP: 0010:unwind_next_frame+0xa/0x750 [ 269.276760][ C1] Code: 38 c1 7c 96 48 89 df e8 a4 ee 97 00 eb 8c 66 90 b8 56 9c b7 c5 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 48 48 89 fb 48 ba 00 00 00 00 00 fc [ 269.276771][ C1] RSP: 0018:ffffc9000022fe10 EFLAGS: 00000202 [ 269.276784][ C1] RAX: 0000000000000001 RBX: ffffc9000022fee0 RCX: 000000000022fe00 [ 269.276794][ C1] RDX: dffffc0000000000 RSI: ffffffff84720da3 RDI: ffffc9000022fe28 [ 269.276805][ C1] RBP: ffffc9000022fe18 R08: ffffc9000022fef0 R09: ffffc9000022fee8 [ 269.276816][ C1] R10: 0000000000000005 R11: ffffffff81744330 R12: ffff888119ef4c00 [ 269.276826][ C1] R13: 1ffff11035d33447 R14: ffffffff81744330 R15: ffffc9000022fe28 [ 269.276837][ C1] FS: 00005555824d1500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 269.276850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.276860][ C1] CR2: 0000557ec53bcb98 CR3: 000000018cf04000 CR4: 00000000003526b0 [ 269.276873][ C1] Call Trace: [ 269.276878][ C1] [ 269.276884][ C1] arch_stack_walk+0x139/0x170 [ 269.276903][ C1] ? dst_release+0x1a3/0x240 [ 269.276918][ C1] stack_trace_save+0x9d/0xe0 [ 269.276937][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 269.276953][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 269.276972][ C1] ? ref_tracker_alloc+0x29e/0x540 [ 269.276986][ C1] kasan_save_stack+0x3e/0x60 [ 269.277000][ C1] ? kasan_save_stack+0x3e/0x60 [ 269.277012][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 269.277028][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 269.277044][ C1] ? __call_rcu_common+0xd5/0x700 [ 269.277056][ C1] ? call_rcu_hurry+0xf/0x30 [ 269.277068][ C1] ? dst_release+0x1a3/0x240 [ 269.277085][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 269.277099][ C1] __kasan_record_aux_stack+0xb2/0xd0 [ 269.277115][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 269.277128][ C1] kasan_record_aux_stack_noalloc+0xf/0x20 [ 269.277145][ C1] __call_rcu_common+0xd5/0x700 [ 269.277156][ C1] ? __kasan_check_write+0x18/0x20 [ 269.277173][ C1] ? _raw_write_lock_bh+0x90/0xf0 [ 269.277191][ C1] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 269.277209][ C1] ? call_rcu_hurry+0x30/0x30 [ 269.277220][ C1] ? rcuref_put_slowpath+0xd1/0x200 [ 269.277235][ C1] ? __cfi_rcuref_put_slowpath+0x10/0x10 [ 269.277250][ C1] ? percpu_counter_add_batch+0xfc/0x1b0 [ 269.277268][ C1] call_rcu_hurry+0xf/0x30 [ 269.277279][ C1] dst_release+0x1a3/0x240 [ 269.277293][ C1] skb_release_head_state+0x74/0x260 [ 269.277311][ C1] ? arp_process+0xd79/0x1740 [ 269.277326][ C1] __kfree_skb+0x29/0x210 [ 269.277343][ C1] ? arp_process+0xd79/0x1740 [ 269.277357][ C1] consume_skb+0x65/0x1a0 [ 269.277374][ C1] arp_process+0xd79/0x1740 [ 269.277389][ C1] ? copy_net_ns+0x513/0xa30 [ 269.277402][ C1] ? __cfi_arp_process+0x10/0x10 [ 269.277418][ C1] ? __cfi_arp_process+0x10/0x10 [ 269.277432][ C1] NF_HOOK+0x154/0x1b0 [ 269.277446][ C1] ? __cfi_arp_process+0x10/0x10 [ 269.277460][ C1] ? arp_xmit+0x1f0/0x1f0 [ 269.277475][ C1] ? __cfi_arp_process+0x10/0x10 [ 269.277489][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 269.277508][ C1] arp_rcv+0x2f8/0x490 [ 269.277522][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 269.277537][ C1] netif_receive_skb+0x22d/0x7b0 [ 269.277555][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 269.277573][ C1] ? br_flood+0x67e/0x730 [ 269.277590][ C1] br_pass_frame_up+0x126/0x1c0 [ 269.277603][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 269.277617][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 269.277631][ C1] br_handle_frame+0x5a6/0xba0 [ 269.277644][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 269.277656][ C1] __netif_receive_skb_core+0xf48/0x3940 [ 269.277673][ C1] ? dst_release+0xe3/0x240 [ 269.277686][ C1] ? arp_process+0xd81/0x1740 [ 269.277703][ C1] ? qdisc_run_end+0x120/0x120 [ 269.277718][ C1] ? __cfi_arp_process+0x10/0x10 [ 269.277733][ C1] ? NF_HOOK+0x154/0x1b0 [ 269.277751][ C1] ? __cfi_arp_process+0x10/0x10 [ 269.277766][ C1] ? arp_xmit+0x1f0/0x1f0 [ 269.277780][ C1] ? __cfi_arp_process+0x10/0x10 [ 269.277795][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 269.277812][ C1] process_backlog+0x3e5/0xae0 [ 269.277831][ C1] __napi_poll+0xd3/0x610 [ 269.277847][ C1] net_rx_action+0x584/0xce0 [ 269.277866][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 269.277883][ C1] ? sched_balance_domains+0x87a/0xa10 [ 269.277898][ C1] ? sched_balance_softirq+0xbd/0x170 [ 269.277910][ C1] handle_softirqs+0x1ab/0x630 [ 269.277929][ C1] __do_softirq+0xf/0x16 [ 269.277941][ C1] do_softirq+0xa6/0x100 [ 269.277958][ C1] [ 269.277963][ C1] [ 269.277967][ C1] ? __cfi_do_softirq+0x10/0x10 [ 269.277984][ C1] ? _raw_spin_lock_bh+0x90/0x120 [ 269.278002][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 269.278018][ C1] ? kasan_save_track+0x4f/0x80 [ 269.278030][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 269.278046][ C1] ? __kmalloc_noprof+0x1b1/0x450 [ 269.278064][ C1] ? __netlink_kernel_create+0x2af/0x8a0 [ 269.278083][ C1] __local_bh_enable_ip+0x74/0x80 [ 269.278101][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 269.278118][ C1] lock_sock_nested+0x1f5/0x290 [ 269.278133][ C1] ? __cfi_lock_sock_nested+0x10/0x10 [ 269.278150][ C1] netlink_insert+0xd5/0x1000 [ 269.278169][ C1] ? netlink_data_ready+0x20/0x20 [ 269.278186][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 269.278202][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 269.278215][ C1] ? __netlink_kernel_create+0x2af/0x8a0 [ 269.278233][ C1] __netlink_kernel_create+0x36b/0x8a0 [ 269.278251][ C1] ? __kasan_check_write+0x18/0x20 [ 269.278268][ C1] ? mutex_unlock+0x8b/0x240 [ 269.278281][ C1] ? __cfi___netlink_kernel_create+0x10/0x10 [ 269.278299][ C1] ? __asan_memcpy+0x5a/0x80 [ 269.278315][ C1] diag_net_init+0xae/0x140 [ 269.278332][ C1] ? __cfi_diag_net_init+0x10/0x10 [ 269.278349][ C1] ? __cfi_sock_diag_rcv+0x10/0x10 [ 269.278365][ C1] ? __cfi_sock_diag_bind+0x10/0x10 [ 269.278382][ C1] ? nf_register_net_hook+0xd6/0x1b0 [ 269.278395][ C1] ? nf_register_net_hooks+0x98/0x1c0 [ 269.278408][ C1] ops_init+0x1b2/0x5d0 [ 269.278422][ C1] ? rwsem_read_trylock+0x2b1/0x660 [ 269.278439][ C1] ? get_random_bytes+0x40/0x40 [ 269.278454][ C1] ? downgrade_write+0x440/0x440 [ 269.278470][ C1] setup_net+0x20e/0x990 [ 269.278483][ C1] ? copy_net_ns+0xa30/0xa30 [ 269.278496][ C1] ? down_read_killable+0x79/0xf0 [ 269.278511][ C1] ? __cfi_down_read_killable+0x10/0x10 [ 269.278526][ C1] copy_net_ns+0x513/0xa30 [ 269.278541][ C1] create_new_namespaces+0x3b5/0x720 [ 269.278559][ C1] unshare_nsproxy_namespaces+0x126/0x180 [ 269.278576][ C1] ksys_unshare+0x4fe/0x880 [ 269.278593][ C1] ? __cfi_ksys_unshare+0x10/0x10 [ 269.278608][ C1] ? __kasan_check_write+0x18/0x20 [ 269.278627][ C1] __x64_sys_unshare+0x3c/0x50 [ 269.278641][ C1] x64_sys_call+0x2998/0x2ee0 [ 269.278660][ C1] do_syscall_64+0x58/0xf0 [ 269.278677][ C1] ? clear_bhb_loop+0x50/0xa0 [ 269.278692][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 269.278706][ C1] RIP: 0033:0x7f9504f903e7 [ 269.278722][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.278733][ C1] RSP: 002b:00007ffd69e9c2a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 269.278754][ C1] RAX: ffffffffffffffda RBX: 00007f95051c5f40 RCX: 00007f9504f903e7 [ 269.278767][ C1] RDX: 0000000000000005 RSI: 00007ffd69e9c170 RDI: 0000000040000000 [ 269.278778][ C1] RBP: 00007f95051c67b8 R08: 00007f9505cf7d60 R09: 0000000000000000 [ 269.278789][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 269.278799][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 269.278812][ C1] [ 269.988767][ C0] net_ratelimit: 104815 callbacks suppressed [ 269.988784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 270.008312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.016694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.024672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.032815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.040640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.048578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 270.056559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.059696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 270.065508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.998763][ C0] net_ratelimit: 121655 callbacks suppressed [ 274.998784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.998802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.004856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 275.016845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.028964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 275.040735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.052717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 275.064764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:b8:6b:14:71:a3, vlan:0) [ 275.076561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.088566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)