last executing test programs: 1m2.109651083s ago: executing program 3 (id=158): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r4 = epoll_create1(0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x123180, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x4) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) close(r4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) sendmmsg$unix(r3, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x400c620e, 0xfffffffffffffffe) 1m2.081422904s ago: executing program 3 (id=159): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r0, &(0x7f0000001840)={[{0x0, 'devices'}]}, 0x9) utime(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x3}) 1m1.949163416s ago: executing program 3 (id=161): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newae={0x40, 0x1e, 0x301, 0x70bd2a, 0x25dfdbfa, {{@in6=@local, 0x4d6, 0x2, 0x28}, @in=@private=0xa010101, 0xa7, 0x3500}}, 0x7b}, 0x1, 0x0, 0x0, 0x40004}, 0x0) unshare(0xa000000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 1m1.924892096s ago: executing program 3 (id=162): timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m1.868730447s ago: executing program 3 (id=163): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r0, 0x4758f000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x4, 0x5, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)={0x4, 0x0, [{0xd000, 0xa, &(0x7f0000000580)=""/10}, {0x9000, 0x16, &(0x7f00000005c0)=""/22}, {0x0, 0x1a, 0x0}, {0x1, 0xfffffffffffffef1, &(0x7f0000000240)=""/192}, {0x8080000, 0x62, &(0x7f0000000400)=""/161}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)) ioctl$EVIOCSCLOCKID(r2, 0x40084503, 0x0) 1m1.738912319s ago: executing program 3 (id=164): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000002c0)={{}, "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"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380)) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_gettime(r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) madvise(&(0x7f000083e000/0x3000)=nil, 0x3000, 0xe) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000100)={'pimreg0\x00', @ifru_flags=0x200}}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000240)=0x18) (async) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) getsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000280), &(0x7f00000012c0)=0x4) 1m1.704129509s ago: executing program 32 (id=164): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000002c0)={{}, "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"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380)) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_gettime(r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) madvise(&(0x7f000083e000/0x3000)=nil, 0x3000, 0xe) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000100)={'pimreg0\x00', @ifru_flags=0x200}}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000240)=0x18) (async) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) getsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000280), &(0x7f00000012c0)=0x4) 1m1.038882689s ago: executing program 0 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="4898660f38802d5b000000c40139588454fe6fffffdf373e2e66440fe061b38fe93090a032000000660fe264ec00c4a1f173d19f420f498702000000c4a279dbaca58b000000", 0x46}], 0x1, 0x0, 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000002340)={0x1, 0x0, [{0xa57, 0x0, 0x5}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8003}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000002380)={0x5e, 0x14, 0x0, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @remote, @mcast1, @mcast2, @mcast2]}, 0xa8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$unix(r6, 0x0, 0x0, 0x10023, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0x1000}], 0x2) getsockopt$MRT6(r5, 0x29, 0xcf, &(0x7f00000022c0), &(0x7f0000002300)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f00000002c0)}) 1m0.832083802s ago: executing program 0 (id=179): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x5, 0xeef4df9d4c20654f) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r1, r3, 0xfffffffffffffc01, 0x0) (async) tee(r1, r3, 0xfffffffffffffc01, 0x0) prlimit64(0x0, 0x6ff606a799165ba6, &(0x7f0000000140)={0x2, 0x5}, 0x0) (async) prlimit64(0x0, 0x6ff606a799165ba6, &(0x7f0000000140)={0x2, 0x5}, 0x0) syz_io_uring_setup(0x747, &(0x7f00000000c0)={0x0, 0x21d5, 0x40, 0x3, 0x80256}, 0x0, 0x0) (async) syz_io_uring_setup(0x747, &(0x7f00000000c0)={0x0, 0x21d5, 0x40, 0x3, 0x80256}, 0x0, 0x0) tee(r1, r3, 0x60000000000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) (async) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x428000, 0x5e) write$tcp_congestion(r6, 0x0, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0xe6242, 0x4ebfac6bbaf7949) fcntl$lock(r7, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) (async) fcntl$lock(r7, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) finit_module(r7, 0x0, 0x3) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0x8008ae9d, &(0x7f0000000080)=""/1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 1m0.766268623s ago: executing program 0 (id=180): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x10001, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x8, "8b6c"}]}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800)=ANY=[]) chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) 59.074965679s ago: executing program 0 (id=202): ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0x80, 0x2}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0xfd9f, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x4, &(0x7f0000000240)=[{0x4, 0x5, 0x3, 0x6}, {0x6, 0xd6, 0xe, 0xffff}, {0x4, 0x16, 0x0, 0x7}, {0x3, 0x9, 0x6, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010008000100"}) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0x10, 0x0, &(0x7f0000000680)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r11, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r9}]) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES64=r8], 0x10}}, 0x24000004) close_range(r0, 0xffffffffffffffff, 0x0) 58.785706503s ago: executing program 0 (id=203): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async, rerun: 64) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x189500, 0x0) (rerun: 32) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) r4 = open(&(0x7f0000000080)='./cgroup\x00', 0xc0001, 0x80) (async) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fP,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) (rerun: 64) syz_open_dev$evdev(&(0x7f0000000000), 0x7b70, 0x389c00) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @any, 0xfe}, 0xa) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0x4004e502, &(0x7f0000000280)=0x10) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000002c0)={[{0x4, 0xe, 0x7, 0x1, 0x81, 0x1, 0x7, 0x2, 0x40, 0x2, 0x69, 0x0, 0x6}, {0x8, 0x1, 0x9, 0x8, 0xa, 0x72, 0x7, 0x0, 0x2, 0x8, 0xe, 0x1, 0x80000000800}, {0xfffffff7, 0xe576, 0xff, 0x3, 0x1, 0x1, 0x3, 0xfa, 0x0, 0xf6, 0x0, 0x2, 0x5}], 0xe}) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) (rerun: 32) 58.743203354s ago: executing program 0 (id=204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x60000}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) 58.693294334s ago: executing program 33 (id=204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x60000}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) 57.263842626s ago: executing program 1 (id=218): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x10bc01) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x1, 0x0, 0x10, 0x0}) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, r0, 0x7dfff000) 57.162804177s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x284883, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x4000}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80000) close(r2) close_range(r2, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x290, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5534}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb48a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e4a2fd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff644}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x40088c0}, 0x1041) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'dummy0\x00', 0x4000}) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000005c0)={{0x2, 0x0, 0x80, {0x8080000, 0x8000000, 0x3}}, "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", "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"}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000002640)=0x3) select(0x40, &(0x7f0000002680)={0xffffffffffffffff, 0x4, 0x0, 0x4, 0x8000000000000000, 0x7, 0x10, 0x7fff}, &(0x7f00000026c0)={0x3, 0x30, 0x7ff, 0xeeb0, 0x8001, 0x4, 0x9, 0x5}, &(0x7f0000002700)={0x5, 0x2, 0x18ef, 0x9, 0x0, 0x9, 0x100000001, 0x10}, &(0x7f0000002740)={0x77359400}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) mkdirat(r2, &(0x7f0000002900)='./file0\x00', 0x101) r6 = open(&(0x7f0000002940)='./file0\x00', 0x90000, 0x8) setns(r6, 0x20000000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000029c0)={0x3, 0x8, 0x2b, &(0x7f0000002980)=""/43}) socket(0x2, 0xa, 0x4) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000002a00)={0x4, 0x0, [{0x5, 0x5, 0x1, 0x0, @sint={0x80000001, 0x81}}, {0x345, 0x2, 0x1, 0x0, @msi={0x5, 0x6, 0x5, 0x6}}, {0x4, 0x1, 0x1, 0x0, @sint={0xffff, 0x2}}, {0xffff, 0x2, 0x1, 0x0, @adapter={0x40, 0x8, 0x7, 0xc9, 0x1ff}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002b00), 0x450040, 0x0) syz_clone(0x24100000, &(0x7f0000002b40)="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", 0xfc, &(0x7f0000002c40), &(0x7f0000002c80), &(0x7f0000002cc0)="a835d3886d49dd1a51f7526bb88bea71d27be529ebe0c5ddf8df19a7a7448d019adbaca25948d612f8700bc00cba12fd8666c1326df20d589509db9ea3b120b87ef5603bce531c8d316f954474e670b3cfff00db4f1069b5006c4f5f994645d1cf332373c428e5b8f5c025fdac68f6ea38da9df912111792ffdaeabf29bc3cfdf7776cbe3ad960e0852f7834d111ccec90db4879e6b1e204c62d5300640f800d32248e3286d3152b9af9b37a8b54bc31f9d925a9995b6ee12a4742") ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000002d80)={0x81, 0x0, 0x2}) write$cgroup_subtree(r6, &(0x7f0000002e00)={[{0x2d, 'freezer'}]}, 0x9) setresuid(0x0, 0x0, 0x0) 57.162500647s ago: executing program 1 (id=220): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047452, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66d80, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1a5142, 0x0) sendfile(r4, r3, 0x0, 0x3895) 57.161720517s ago: executing program 1 (id=221): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r3, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x48, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x200a}, @flat, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @enter_looper], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 57.094216938s ago: executing program 1 (id=222): r0 = socket$inet(0x2, 0xa, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvlan1\x00', 0x1}, 0x18) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 56.992766549s ago: executing program 1 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fcntl$dupfd(r0, 0x406, r0) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r3, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r4) setresuid(r1, r2, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(r0, 0x0, 0x0, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) (async) fcntl$dupfd(r0, 0x406, r0) (async) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000380)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) fstat(r3, &(0x7f0000001980)) (async) setfsuid(r4) (async) setresuid(r1, r2, r4) (async) 56.926029351s ago: executing program 34 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fcntl$dupfd(r0, 0x406, r0) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r3, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r4) setresuid(r1, r2, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(r0, 0x0, 0x0, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) (async) fcntl$dupfd(r0, 0x406, r0) (async) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000380)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) fstat(r3, &(0x7f0000001980)) (async) setfsuid(r4) (async) setresuid(r1, r2, r4) (async) 49.906213555s ago: executing program 4 (id=305): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000000)=""/78, 0x4e) (async) getdents(r0, &(0x7f0000000200)=""/251, 0xfb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x285, 0x0, 0x8be}]}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0xcc01, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x266, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast}}}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc018aec0, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x1000, &(0x7f00005ed000/0x1000)=nil}) (async) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000200)=0x4, 0x4) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x800, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r9, 0xffffffffffffffff, 0x2) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x3, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x40a}}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="0207000002000000ff0e0000000000a94394d3fd9a2fcf20dcc59500"], 0x10}, 0x1, 0x7}, 0x8) (async) syz_usb_connect$uac1(0x6, 0xa5, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x8, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x29e, 0x6}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0xffff, 0x21}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0xc8b, 0x4, "fc61a3"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x81, 0x3, "f569"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x4, "559e8e13"}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x2, 0x4, "48ce359d"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "11"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x4, 0x3, {0x7, 0x25, 0x1, 0x1, 0xa, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x4, 0x2, {0x7, 0x25, 0x1, 0x2, 0x6, 0x6}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x5, 0x3, 0x40, 0x10, 0x1}, 0x51, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f510005111003fc8f3a8bc2103ad26b69d0c3e5630c100a008000000000fffdff10100a0841aa10000f0f07000000ff00141004065d1f693311ecf3bcd3ac4608cbb4574d0b10010200005900080003"], 0xa, [{0xcb, &(0x7f0000000bc0)=@string={0xcb, 0x3, "4cb76e8a4f6e04f578c8651ca5918575ea84daaf7d4394dfeaf5c9e4fa8305d05e72e7d3fb3dedca6bb5059244a0acea720611ee9eb3187b636ab3231342d2fbfce222aabc48932a7afeead74eb35c608bd466a6ad4e69d4751f41a5eac0acf5fe43641f6d2fc38f36d6366be7208dc18b4e7f90793a5bafdaf9f01f1c2c6b9a871923b5f6e401ba9c11ce17a51a422097cf178aec616c46344f04b87ad67052cb294e044058db1a9ebfdef8a7ccbbfd2a7092a8a12acec4c9a40cdece17ad6c661b896044ba2e70e9"}}, {0x23, &(0x7f0000000580)=@string={0x23, 0x3, "a721811a0b990c73a0213cd8e4cfbeeb694552b7a4ec39f1d8f378553b03d787fa"}}, {0xa7, &(0x7f00000005c0)=@string={0xa7, 0x3, "b633eff4fe703e61e8daac4432df68f83016cba9319cc8adfc3b397cd8f36f3befef7ee6abc7803197820cc261fc4dc6c1787eb6d1415470f5c7c04eeead8c64fad9e225b8e54efd29b3ceb244de8a9388f521bd6cab39360c2de14c2c5fa5e6d91c0081608b96689170e185132e5f3afa66a1e92125ed41fcee9bc6cb263c1f117de6f940abcee4992822a9bd586836af3f5db3d1b8ddce9c92b2b9985baf35e26969bbd1"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x98, &(0x7f0000000740)=@string={0x98, 0x3, "833292303439c33549985c0d6e6296a6db32b6a5f1650cae3ab177dfad5ecbdc6029855578ab4fa81b5c8285bc121d5d2bcfa921413c29c3b2b5a602952ef58e2e907a9cb05b5d551695c963075760ea5e584b50cb08b14409fa8fa2c3040a46680cf8b1973646de83971d497c0bcb0758a09a5fda96f2cbea0beb268a35b99c7123d41c17a4e0acf8188cdce4036daa31a2dab42431"}}, {0xe1, &(0x7f00000008c0)=@string={0xe1, 0x3, "c93ba4674fdd14b04082ded79433c124771c89515562b913f5fa1c5a2fe84a5ce3e4b0eaaca183dd701d7ccb2a980ff62618817347aff96ba3ca777223987dcc787e16e95878c908278b7847ecdf00e1837c3d7b4c4b0c5a48573e6f4f2b79f5a3e747569130a6cf6285d962bfd710cfdf44bb5fb2620b5ea53a1b945e246a6d8eb15d62f03a2e00298888ab19dbaeb20f8009e5c725c6a26e7e9d08ddb250aea0115d62043b4c3d6f37ec05ae21d21fda1481215ff344b64a177934ab37d17c93323d1f514f2a6c0ddb25c08b76eabd573ab5e3762794fa5bc245825796f5"}}, {0xa7, &(0x7f00000009c0)=@string={0xa7, 0x3, "7229d9baa6f9e60992ec27e4cff5482022e1c3db78095096b89f706dc7e0bb8b6761a4333ab3da643533ed72d12b247f149410f41838b2f5a23e655ded2518c48bd13aac8230e90bd8169411dc147b33f76e03802a36def449e069504b970e4834959ea6f708c451554950621b76a8c9b70bbda792bb136d69aa4cac1aba896b5d99776cff2f315b6fd18c048c0c79b8381744d42f9d7f3f04a9f936bd2041a9fa792d319b"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42c}}]}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x13, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 49.796803407s ago: executing program 2 (id=308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) (async) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x4, 0x5c, 0x1000, r3}) (async) getpid() gettid() (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 49.764177587s ago: executing program 2 (id=309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000004c0)="170000000a0001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f00000002c0)="0938b89b9c5a9fd4b86939120a0c3245c7bff7896ac4da57b66fc38449aec2245dcb7a8421ca483d1d30eb4deb60ee28abcc1a40081d901fd27f5c72f7c68508e2412abb3ab79b004f1526dd400d52a1ca739351463cf4459431e7420a49012f0204d94827042e49f614d4c9811ca78f9278", 0x72) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x8c1d, 0x2]}, &(0x7f0000000080)=0x44) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'rose0\x00', 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000240)=""/69, 0x45, 0x0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0, 0xff95}], 0x2) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4008192}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x5e09312e, 0x9, 0x1) sendfile(r1, r1, 0x0, 0x7ffff000) 49.738319438s ago: executing program 4 (id=310): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186, 0x0, 0x3}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) 49.539045741s ago: executing program 4 (id=311): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x85) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x4) listen(r2, 0xfff) 49.463161892s ago: executing program 4 (id=313): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "29c0c7a1"}]}}, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0, 0xff95}], 0x2) 48.854632271s ago: executing program 2 (id=321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xacc6241095675696}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6d}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4b2b}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x4000014) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40841}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x40041) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r8, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfff}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x2c}}, 0x20004088) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x4000004) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r1, 0xfe8673966876f7e5, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x24008810) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000b80)='./file0\x00', 0x9000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x9c, r8, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008800}, 0x800c0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r11, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r12, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ec0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r13, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xf22e9edd7365218c}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r14, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x90, r15, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3d6, 0x6b}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 48.853723341s ago: executing program 2 (id=323): ioprio_set$pid(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 48.801068642s ago: executing program 5 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x6, [@broadcast, @random="8574e68b04d8", @local, @broadcast, @local, @local]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) process_mrelease(r2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x540000a}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1e}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa7b}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf161}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x24a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400408d}, 0x20000000) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000440)={0x0, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000480)={0x1, 0x5, [@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @empty, @local]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}}, 0x4000010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x26e00, 0x0) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x101}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000680)={0x0, 0x3, [@local, @remote, @remote]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000700)={r7, 0x1, 0x6}, 0x10) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000740)={0x0, 0x6, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}]}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000780)) r8 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r8, 0x0, 0xfffffffffffffffa) close(r6) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000840)=0x80000000, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x76b306b3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0xa, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xc, 0x2, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0xc0) close_range(r2, r2, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000a80), 0x200200, 0x0) mkdirat(r1, &(0x7f0000000ac0)='./file0\x00', 0x10) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) ppoll(&(0x7f0000000f00)=[{0xffffffffffffffff, 0x8000}, {r0, 0x4}, {r9, 0x1040}, {0xffffffffffffffff, 0xa1}, {r9, 0x2500}, {r5, 0x140}, {r2, 0x916}, {r1, 0xc8}], 0x8, &(0x7f0000000f40), &(0x7f0000000f80)={[0x9]}, 0x8) 48.722970183s ago: executing program 5 (id=326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 48.604396335s ago: executing program 5 (id=328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc0401, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) write$snapshot(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$inet6(r2, &(0x7f0000002040)=""/167, 0xa7, 0x10020, &(0x7f0000002100)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r3, &(0x7f0000005e80)={0x2020}, 0x2049) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)={0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x4ce}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x20) 48.554464255s ago: executing program 2 (id=329): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) pipe2$9p(&(0x7f00000001c0), 0x0) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 48.554267105s ago: executing program 6 (id=330): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0xa0040, 0x10, 0xc}, 0x18) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x1214802, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext=\"']) 48.523913986s ago: executing program 6 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x2}]}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xf42) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x3, 0x8000000000000001, 0x3, 0x4, 0xffffffff7fffffff, 0xfff, 0x3, 0x9b9, 0xfff, 0xe, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x20106}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x80, 0x7800, 0x6, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @private=0xa010100}}}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) 48.453682757s ago: executing program 2 (id=332): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x600000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x7fff, 0x7f, 0xfffffffe, 0x8d52, 0x9, "0a0021341c00000000000000050100"}) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r2, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b96d0b00000f320f01c4bad00466b86500000066ef66660f38091d2a900f002e0f090f01cfbaf80c66b82763a78566efbafc0cec66b9800000c00f326635000800000f30660f3820d9", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r2, r2, 0x0, 0x7ffff000) 48.146957262s ago: executing program 6 (id=333): chroot(0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xc0046209, 0x1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xc0046209, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x4211, r3) 48.134464802s ago: executing program 6 (id=334): mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @typed={0x4, 0xe5}]}, 0x1c}], 0x1}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) rt_sigaction(0x19, &(0x7f0000000000)={&(0x7f0000000340)="dfd3bf2e36c07fff7066440f1ed20000d3a41039000000f344aa643e3ef08104dc19b4000041d8d041de7dd3c4e2f9db8179d90000f3410f5d4efe", 0x5c000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = socket$pptp(0x18, 0x1, 0x2) close_range(r0, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x7) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x1802, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 47.929569325s ago: executing program 6 (id=335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x804, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r4, 0x4, 0x7c00) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x2, 0xffffffffffffffff, &(0x7f0000010180)=0x60) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) dup3(r5, r4, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/42, 0x2a, 0x1, 0x14}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x1c}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) vmsplice(r2, &(0x7f0000000ac0)=[{&(0x7f0000000740)="eeb3e11664ea4f299db4ed77ee86acdd47f89e245e0c5f593c2d43e2ec0c0d40a7178a228f48445900daa532df9237b98687ab4883dc1e8612b0ca98c748691321553d1921cd316e9e2bc07391d294562605e3f4ffe44bc987405853973f20101aeac004d06a667dda48c5c1f81bc80131c3dc81e0d626eae8", 0x79}, {&(0x7f0000001080)="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", 0x548}], 0x2, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r8, 0x0, 0x2000000002ffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"}) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="091dba0ec714b43e25744111051b05cc1f83d929b619af1f940b29f7fad93fce73761a7b61d67286ddbdf98b1a611e3bcefc7cc28f9e1202fb12fefe602969f2370b47c9af57ed0f29cc3e1f6b505886282a6ce127a9870437c82c7dc877a4ee0e41e8f87e0a8691636c59a878a63a644649628aea1653a852e079d48175466d3b0ec096e08d529502ed7c0c309913cb9d1783125e13cd22620d2b8b7792267af02db46a865d95685513f6595fea", &(0x7f0000000080)="288f75a20f6cf3695ce08277b71e893b01"}}, &(0x7f0000bbdffc)=0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f00000004c0)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r9, 0x0, &(0x7f0000000280), 0x0) 47.766852817s ago: executing program 4 (id=336): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xc, 0x5, 0x0, 0xd, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x0, 0x101, 0x7559bacb, 0x6, 0x40}, @sadb_address={0x3, 0x13, 0x5f, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27, 0x3500}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26, 0x3507}]}, 0x68}}, 0x40010) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/warn_count', 0x1, 0x68) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x6, 0xf1, 0x9, 0x10, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x9, 0x77, 0x3, 0xc0000000}, @sadb_key={0xa, 0x8, 0x228, 0x0, "4a5eb885c45cb52b16473d9b49b235c71839c32b3d7df4a23962cf92f2617e9c144fcea7e6db4d0da5280db32fea1baf22ef43eace7526ca04618fc182840505e47d4cad2b"}, @sadb_ident={0x2, 0xa, 0x0, 0x0, 0x4}]}, 0x80}}, 0x4) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x1, 0x7, 0x30, 0x1000}, {0x5, 0x3d, 0x4, 0x400}]}) readv(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/71, 0x47}, {&(0x7f0000001400)=""/106, 0x6a}, {&(0x7f0000001480)=""/105, 0x69}, {&(0x7f0000001500)=""/131, 0x83}], 0x6) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) write$tcp_congestion(r0, &(0x7f0000001640)='scalable\x00', 0x9) ioctl$FITHAW(r1, 0xc0045878) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001680)={{0x0, 0x2, 0xb5}, 0x6, 0x6, 0xb6}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/notes', 0x301000, 0x100) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) connect$inet(r3, &(0x7f0000001740)={0x2, 0x4e20, @broadcast}, 0x10) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000027c0)={0x10, 0x0, &(0x7f0000001780)=[@request_death={0x400c630e, 0x3}], 0x1000, 0x0, &(0x7f00000017c0)="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"}) (async) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xc) (async) sendto$inet6(r0, &(0x7f0000002800)="fe83d0063ad6b7787e0fe049b27855a30634ed687decd468e2d7e7f2819113a97de8a321344a093dfded446080733383ded913943cb2d34f7968d7dfc5deba3610c48342", 0x44, 0x20008000, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000002880)) r5 = openat$cgroup_ro(r0, &(0x7f00000028c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002e80)={0xf0, 0x0, &(0x7f0000002c80)=[@enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002a00)={@fda={0x66646185, 0x5, 0x0, 0x19}, @flat=@weak_binder={0x77622a85, 0x101, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000002900)=""/217, 0xd9, 0x1, 0x3e}}, &(0x7f0000002a80)={0x0, 0x20, 0x38}}}, @decrefs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002ac0)={@fd, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x101, 0x2}}, &(0x7f0000002b40)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002bc0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000002b80)=""/42, 0x2a, 0x1, 0x2b}}, &(0x7f0000002c40)={0x0, 0x18, 0x30}}, 0x40}, @decrefs={0x40046307, 0x3}], 0xd3, 0x0, &(0x7f0000002d80)="d87b5219f6094cccd198d0e20fe9bd60134fcdbc4002540d106af3ee1fbf53ae1ef2b5ac0f0c2ee09521a1d36fc601c240081f1651728c27d125c19cab331723f6249655e865875fa22ab5ec7c68967366f9fa339e35e887b697530f8634aa85abbceca15542faef314bbc4788c8bda8053ba91890f9f553a35b4827b5b1cf7fc58a444201367f947cc82835ce226e45b6d09b430b677fb969af64423563ee38877ad5812751bbcef06e7fa63b7d1c545456016ba07b65b2f42af68a5193bce6a9eaf0fa0e528095c6e6d96adb707a682eb6f0"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x423, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) (async) recvmsg(r5, &(0x7f0000003200)={&(0x7f0000002f00)=@nfc, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f80)=""/199, 0xc7}, {&(0x7f0000003080)=""/236, 0xec}], 0x2, &(0x7f00000031c0)=""/52, 0x34}, 0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003240)) (async) write$binfmt_register(r5, &(0x7f0000003280)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x5, 0x3a, '-', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x43]}, 0x2a) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000032c0)=0xffff, 0x4) (async) recvmmsg(r4, &(0x7f0000006900)=[{{&(0x7f0000003300)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/213, 0xd5}, {&(0x7f0000005480)=""/13, 0xd}, {&(0x7f00000054c0)=""/171, 0xab}, {&(0x7f0000005580)=""/255, 0xff}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/197, 0xc5}, {&(0x7f0000006780)}], 0x9, &(0x7f0000006880)=""/100, 0x64}, 0x4}], 0x1, 0x1, &(0x7f0000006940)={0x77359400}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000006980)={'dummy0\x00', 0x4}) (async) timer_create(0x0, &(0x7f0000006ac0)={0x0, 0x3b, 0x4, @thr={&(0x7f00000069c0)="ee2fd73ce72d505758b71f2838b770f9a9bb7c71db89610f05f4b7c1efc9", &(0x7f0000006a00)="4502eb9e0fdfc37540aaee266fa2bf407916c27f696b22fd9349e2a13994273c8631ffd03c346de02b40aea723cb58517576ecfe3455355d80b9722e2725982e07e21c694711a9a8f5f61af05b24625eceb65c2584bf3b57d1640dad886696f79c9122b7a0038b02de158dfbd5accaa87bef13d3e33265f1a6f0b394e81adde5afd900b233d4ae42fb0ab6af1aadfcf9a1ecd36188d9093828e56c8eee85e84dc312c56156205b89db80e70566f51726e971288fc63c9cef94f7"}}, &(0x7f0000006b00)=0x0) timer_settime(r6, 0x0, &(0x7f0000006b40), &(0x7f0000006b80)) ptrace$setregs(0xd, 0xffffffffffffffff, 0x7, &(0x7f0000006bc0)="b6e83ebcbdbea33138f94099b5383e4d0146a3e0a6bcacb8959a5aee9ebdb580982e78deeab7925a") 47.649790809s ago: executing program 5 (id=337): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) (async) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0x18}}], 0x1, 0x20000844) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 47.649351699s ago: executing program 4 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) recvfrom(r5, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6c6f6f652c00e5057b1bc3d17f333cbca9299e6df364e40a603f4258073233e0b0f626"]) lstat(0x0, &(0x7f0000000580)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000480)=""/244, &(0x7f0000000240)=0xf4) socket(0x1e, 0x4, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x1, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x7f, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x4}, {0x3, 0x58, 0xa1, '\x00', 0x1}, {0x9, 0x5, 0x5, '\x00', 0xfa}, {0x1, 0x1, 0x2, '\x00', 0x81}, {0x5, 0x3, 0xff, '\x00', 0xa}, {0x47, 0x1, 0x7, '\x00', 0x45}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x5, 0x9}, {0xa, 0x1, 0xff, '\x00', 0x7}, {0x3, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2e}, {0x2, 0x8, 0x0, '\x00', 0x8}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x7, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000104000022000040"]) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000200)=0x201880, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 47.55296755s ago: executing program 5 (id=339): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x1, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,acces\a\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x1, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r2) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,acces\a\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) (async) 47.401857363s ago: executing program 5 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) r2 = getpgrp(0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000040)=0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 44.352984488s ago: executing program 6 (id=341): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x800, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x103, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xba, &(0x7f0000000040)) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x3fa, 0x200, 0x70bd29, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xe, 0x5, 0x4, 0xfffffffb}, {0x6, 0x3, 0x8, 0x8000}, {0x1, 0x3, 0x6, 0x9}, {0x7, 0x7a, 0x7, 0x5}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r6, 0x1, r5, 0x6}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) 31.48326186s ago: executing program 35 (id=332): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x600000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x7fff, 0x7f, 0xfffffffe, 0x8d52, 0x9, "0a0021341c00000000000000050100"}) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r2, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b96d0b00000f320f01c4bad00466b86500000066ef66660f38091d2a900f002e0f090f01cfbaf80c66b82763a78566efbafc0cec66b9800000c00f326635000800000f30660f3820d9", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r2, r2, 0x0, 0x7ffff000) 25.214335994s ago: executing program 36 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) r2 = getpgrp(0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000040)=0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 10.632958541s ago: executing program 37 (id=341): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x800, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x103, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xba, &(0x7f0000000040)) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x3fa, 0x200, 0x70bd29, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xe, 0x5, 0x4, 0xfffffffb}, {0x6, 0x3, 0x8, 0x8000}, {0x1, 0x3, 0x6, 0x9}, {0x7, 0x7a, 0x7, 0x5}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r6, 0x1, r5, 0x6}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) 0s ago: executing program 38 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) recvfrom(r5, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6c6f6f652c00e5057b1bc3d17f333cbca9299e6df364e40a603f4258073233e0b0f626"]) lstat(0x0, &(0x7f0000000580)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000480)=""/244, &(0x7f0000000240)=0xf4) socket(0x1e, 0x4, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x1, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x7f, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x4}, {0x3, 0x58, 0xa1, '\x00', 0x1}, {0x9, 0x5, 0x5, '\x00', 0xfa}, {0x1, 0x1, 0x2, '\x00', 0x81}, {0x5, 0x3, 0xff, '\x00', 0xa}, {0x47, 0x1, 0x7, '\x00', 0x45}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x5, 0x9}, {0xa, 0x1, 0xff, '\x00', 0x7}, {0x3, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2e}, {0x2, 0x8, 0x0, '\x00', 0x8}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x7, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000104000022000040"]) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000200)=0x201880, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): h-speed USB device number 2 using dummy_hcd [ 27.698867][ T64] usb 4-1: device descriptor read/64, error -71 [ 27.925939][ T327] capability: warning: `syz.1.6' uses deprecated v2 capabilities in a way that may be insecure [ 27.937587][ T327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 27.937702][ T327] rust_binder: Read failure Err(EFAULT) in pid:4 [ 27.948832][ T64] usb 4-1: device descriptor read/64, error -71 [ 28.198833][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.338806][ T64] usb 4-1: device descriptor read/64, error -71 [ 28.458840][ T305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.578903][ T64] usb 4-1: device descriptor read/64, error -71 [ 28.610673][ T305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.621893][ T305] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 28.632009][ T305] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 28.641762][ T305] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 28.651586][ T306] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.660806][ T305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.673743][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.682312][ T305] usb 3-1: Product: syz [ 28.686519][ T305] usb 3-1: Manufacturer: syz [ 28.691283][ T305] usb 3-1: SerialNumber: syz [ 28.701375][ T305] cdc_mbim 3-1:1.0: skipping garbage [ 28.706936][ T64] usb usb4-port1: attempt power cycle [ 28.814783][ T360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.818840][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 28.827896][ T306] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 28.836250][ T306] usb 1-1: config 0 has no interface number 0 [ 28.842543][ T306] usb 1-1: config 0 interface 67 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 28.856026][ T306] usb 1-1: config 0 interface 67 has no altsetting 0 [ 28.864353][ T306] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 28.875662][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.883790][ T306] usb 1-1: Product: syz [ 28.888046][ T306] usb 1-1: Manufacturer: syz [ 28.892693][ T306] usb 1-1: SerialNumber: syz [ 28.897952][ T306] usb 1-1: config 0 descriptor?? [ 28.905774][ T306] smsc95xx v2.0.0 [ 28.909536][ T306] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 28.919716][ T306] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 28.928210][ T305] cdc_mbim 3-1:1.0: bind() failure [ 28.937677][ T305] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 28.939960][ T373] netlink: 165 bytes leftover after parsing attributes in process `syz.1.20'. [ 28.947070][ T305] cdc_ncm 3-1:1.1: bind() failure [ 28.955509][ T373] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 144) [ 28.958621][ T373] rust_binder: Error while translating object. [ 28.960422][ T305] usb 3-1: USB disconnect, device number 2 [ 28.969564][ T373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.981873][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 29.048868][ T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.079977][ T64] usb 4-1: device descriptor read/8, error -71 [ 29.210018][ T64] usb 4-1: device descriptor read/8, error -71 [ 29.448893][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.456723][ T374] TCP: TCP_TX_DELAY enabled [ 29.469946][ T64] usb 4-1: device descriptor read/8, error -71 [ 29.599846][ T64] usb 4-1: device descriptor read/8, error -71 [ 29.708860][ T64] usb usb4-port1: unable to enumerate USB device [ 29.731509][ T380] can0: slcan on ttyS3. [ 29.760784][ T380] can0 (unregistered): slcan off ttyS3. [ 29.766890][ T337] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.847748][ T396] syzkaller0: entered promiscuous mode [ 29.854268][ T396] syzkaller0: entered allmulticast mode [ 29.918786][ T337] usb 3-1: device descriptor read/64, error -71 [ 30.158914][ T337] usb 3-1: device descriptor read/64, error -71 [ 30.344775][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 30.344793][ T36] audit: type=1400 audit(1751540305.630:144): avc: denied { accept } for pid=420 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 30.398785][ T337] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.431170][ T36] audit: type=1400 audit(1751540305.720:145): avc: denied { create } for pid=426 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.528945][ T337] usb 3-1: device descriptor read/64, error -71 [ 30.564085][ T36] audit: type=1400 audit(1751540305.850:146): avc: denied { create } for pid=431 comm="syz.3.29" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.585599][ T36] audit: type=1400 audit(1751540305.850:147): avc: denied { ioctl } for pid=431 comm="syz.3.29" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4481 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.631998][ T36] audit: type=1400 audit(1751540305.920:148): avc: denied { write } for pid=435 comm="syz.3.30" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.656277][ T36] audit: type=1400 audit(1751540305.920:149): avc: denied { open } for pid=435 comm="syz.3.30" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.681081][ T36] audit: type=1400 audit(1751540305.920:150): avc: denied { ioctl } for pid=435 comm="syz.3.30" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.706878][ T36] audit: type=1400 audit(1751540305.920:151): avc: denied { write } for pid=435 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.727196][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.727450][ T36] audit: type=1400 audit(1751540305.920:152): avc: denied { read } for pid=435 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.828823][ T337] usb 3-1: device descriptor read/64, error -71 [ 30.878879][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 30.885267][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 30.893464][ T31] usb 2-1: config 0 has no interface number 0 [ 30.901272][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 30.910385][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.918401][ T31] usb 2-1: Product: syz [ 30.922624][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.930150][ T31] usb 2-1: Manufacturer: syz [ 30.934750][ T31] usb 2-1: SerialNumber: syz [ 30.940312][ T337] usb usb3-port1: attempt power cycle [ 30.940567][ T31] usb 2-1: config 0 descriptor?? [ 30.951505][ T31] smsc95xx v2.0.0 [ 31.088956][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 31.095264][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.106219][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.116095][ T306] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 31.125204][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.133974][ T306] usb 4-1: config 0 descriptor?? [ 31.151866][ T36] audit: type=1400 audit(1751540306.440:153): avc: denied { create } for pid=426 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.278865][ T337] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.300122][ T337] usb 3-1: device descriptor read/8, error -71 [ 31.371732][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 31.382681][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 31.429884][ T337] usb 3-1: device descriptor read/8, error -71 [ 31.668830][ T337] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.689939][ T337] usb 3-1: device descriptor read/8, error -71 [ 31.741436][ T306] usbhid 4-1:0.0: can't add hid device: -32 [ 31.747529][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 31.759678][ T441] rust_binder: Error while translating object. [ 31.759717][ T441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.765954][ T441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 31.819940][ T337] usb 3-1: device descriptor read/8, error -71 [ 31.869715][ T64] usb 4-1: USB disconnect, device number 6 [ 31.939021][ T337] usb usb3-port1: unable to enumerate USB device [ 32.295147][ T306] usb 1-1: USB disconnect, device number 2 [ 32.325842][ T450] rust_binder: Write failure EFAULT in pid:32 [ 32.795702][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 32.812746][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 32.822182][ T31] usb 2-1: USB disconnect, device number 2 [ 33.335198][ T501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 33.436951][ T507] syzkaller0: entered promiscuous mode [ 33.451791][ T507] syzkaller0: entered allmulticast mode [ 33.548857][ T337] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.586667][ T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 33.642911][ T521] rust_binder: Write failure EINVAL in pid:60 [ 33.663754][ T523] rust_binder: Error while translating object. [ 33.664143][ T524] rust_binder: Error while translating object. [ 33.669900][ T523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.676103][ T524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.682690][ T523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:62 [ 33.692175][ T524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:62 [ 33.711029][ T337] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 33.730410][ T337] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 33.739522][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.755170][ T337] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 33.808795][ T306] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.938790][ T306] usb 3-1: device descriptor read/64, error -71 [ 33.958941][ T425] usb 2-1: USB disconnect, device number 3 [ 34.054029][ T528] binder: Bad value for 'stats' [ 34.060955][ T528] binder: Bad value for 'stats' [ 34.093135][ T532] rust_binder: 532: no such ref 0 [ 34.150425][ T534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.150670][ T532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 34.188791][ T306] usb 3-1: device descriptor read/64, error -71 [ 34.438808][ T306] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.578805][ T306] usb 3-1: device descriptor read/64, error -71 [ 34.728831][ T337] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.818814][ T306] usb 3-1: device descriptor read/64, error -71 [ 34.848787][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.878775][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 34.885019][ T337] usb 2-1: config 0 has no interfaces? [ 34.892049][ T337] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 34.901176][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.909219][ T337] usb 2-1: Product: syz [ 34.913383][ T337] usb 2-1: Manufacturer: syz [ 34.917978][ T337] usb 2-1: SerialNumber: syz [ 34.926715][ T337] usb 2-1: config 0 descriptor?? [ 34.938999][ T306] usb usb3-port1: attempt power cycle [ 34.998858][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 35.005274][ T64] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.016618][ T64] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.023272][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 35.032396][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.041566][ T64] usb 1-1: config 0 descriptor?? [ 35.064243][ T554] batadv_slave_1: entered promiscuous mode [ 35.129499][ T554] batadv_slave_1: left promiscuous mode [ 35.138846][ T540] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 35.156556][ T557] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 35.164277][ T557] SELinux: failed to load policy [ 35.278816][ T306] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 35.306038][ T306] usb 3-1: device descriptor read/8, error -71 [ 35.439875][ T306] usb 3-1: device descriptor read/8, error -71 [ 35.454007][ T64] logitech-djreceiver 0003:046D:C71B.0001: hidraw0: USB HID v0.05 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input0 [ 35.653228][ T425] usb 2-1: USB disconnect, device number 4 [ 35.680701][ T306] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 35.711255][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 35.711274][ T36] audit: type=1400 audit(1751540311.000:208): avc: denied { write } for pid=568 comm="syz.1.77" name="/" dev="incremental-fs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.740666][ T36] audit: type=1400 audit(1751540311.030:209): avc: denied { add_name } for pid=568 comm="syz.1.77" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.762455][ T36] audit: type=1400 audit(1751540311.030:210): avc: denied { create } for pid=568 comm="syz.1.77" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.783403][ T306] usb 3-1: device descriptor read/8, error -71 [ 35.790343][ T36] audit: type=1400 audit(1751540311.030:211): avc: denied { associate } for pid=568 comm="syz.1.77" name="memory.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.912379][ T550] SELinux: ebitmap start bit (3808428352) is beyond the end of the bitmap (1472) [ 35.925287][ T550] SELinux: failed to load policy [ 35.929804][ T306] usb 3-1: device descriptor read/8, error -71 [ 35.932058][ T550] mmap: syz.0.69 (550) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.950398][ T337] usb 1-1: USB disconnect, device number 3 [ 36.038876][ T306] usb usb3-port1: unable to enumerate USB device [ 36.353471][ T574] rust_binder: Error while translating object. [ 36.353500][ T574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.359870][ T574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 36.535172][ T36] audit: type=1326 audit(1751540311.820:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=568 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f018e929 code=0x7fc00000 [ 36.573932][ T36] audit: type=1400 audit(1751540311.840:213): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.650379][ T36] audit: type=1400 audit(1751540311.940:214): avc: denied { create } for pid=583 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.734730][ T592] overlayfs: failed to resolve './file1': -2 [ 36.739000][ T591] overlayfs: failed to resolve './file1': -2 [ 36.747014][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 36.779347][ T591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.782764][ T591] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.789305][ T591] rust_binder: Read failure Err(EFAULT) in pid:56 [ 36.797563][ T591] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.804014][ T591] rust_binder: Read failure Err(EFAULT) in pid:56 [ 36.968798][ T306] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 36.984427][ T36] audit: type=1400 audit(1751540312.270:215): avc: denied { getopt } for pid=604 comm="syz.0.89" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.052113][ T608] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.065994][ T36] audit: type=1400 audit(1751540312.350:216): avc: denied { ioctl } for pid=607 comm="syz.0.90" path="socket:[5111]" dev="sockfs" ino=5111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.091462][ T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.129876][ T306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.140149][ T306] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.159411][ T306] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 37.177776][ T619] rust_binder: Error while translating object. [ 37.177807][ T619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 37.184183][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.201808][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:69 [ 37.205288][ T306] usb 3-1: config 0 descriptor?? [ 37.219644][ T36] audit: type=1400 audit(1751540312.500:217): avc: denied { listen } for pid=620 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.222170][ T621] tipc: Started in network mode [ 37.240424][ T306] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 37.246548][ T621] tipc: Node identity ca70ec1f83f, cluster identity 4711 [ 37.259102][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 37.265289][ T621] tipc: Enabled bearer , priority 0 [ 37.273411][ T64] usb 2-1: too many endpoints for config 1 interface 1 altsetting 3: 158, using maximum allowed: 30 [ 37.286102][ T64] usb 2-1: config 1 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 37.299423][ T64] usb 2-1: config 1 interface 1 has no altsetting 0 [ 37.307269][ T620] tipc: Disabling bearer [ 37.307612][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.322187][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.330537][ T64] usb 2-1: Product: syz [ 37.334746][ T64] usb 2-1: Manufacturer: syz [ 37.339427][ T64] usb 2-1: SerialNumber: syz [ 37.638787][ T419] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.748886][ T600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.757477][ T600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.768779][ T419] usb 1-1: device descriptor read/64, error -71 [ 37.808672][ T337] usb 3-1: USB disconnect, device number 11 [ 37.967450][ T64] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.978286][ T64] usb 2-1: USB disconnect, device number 5 [ 37.990443][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.008799][ T419] usb 1-1: device descriptor read/64, error -71 [ 38.029008][ T630] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 38.029050][ T630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 38.037076][ T630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:71 [ 38.188816][ T337] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 38.258843][ T419] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.328917][ T337] usb 3-1: device descriptor read/64, error -71 [ 38.378862][ T306] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.388822][ T419] usb 1-1: device descriptor read/64, error -71 [ 38.511153][ T643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.511751][ T643] rust_binder: Got transaction with invalid offset. [ 38.518302][ T643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.525091][ T643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 38.528762][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 38.550050][ T306] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 38.558399][ T306] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 38.559470][ T645] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.568825][ T337] usb 3-1: device descriptor read/64, error -71 [ 38.568867][ T306] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 38.576266][ T645] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.582010][ T306] usb 4-1: config 0 has no interface number 0 [ 38.590572][ T645] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.598045][ T306] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 38.622426][ T306] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 38.631688][ T650] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 38.634198][ T650] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.634585][ T306] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 38.642148][ T419] usb 1-1: device descriptor read/64, error -71 [ 38.653110][ T306] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 38.666718][ T650] rust_binder: Read failure Err(EFAULT) in pid:71 [ 38.668640][ T306] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.700658][ T306] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 38.710052][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.718079][ T306] usb 4-1: Product: syz [ 38.722524][ T306] usb 4-1: Manufacturer: syz [ 38.727156][ T306] usb 4-1: SerialNumber: syz [ 38.732639][ T306] usb 4-1: config 0 descriptor?? [ 38.737931][ T638] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 38.778917][ T419] usb usb1-port1: attempt power cycle [ 38.828835][ T337] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 38.947358][ T638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=638 comm=syz.3.101 [ 38.959756][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.967332][ T337] usb 3-1: device descriptor read/64, error -71 [ 39.118837][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 39.124089][ T419] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.132790][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 39.141026][ T9] usb 2-1: config 0 has no interface number 0 [ 39.147164][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 39.155297][ T419] usb 1-1: device descriptor read/8, error -71 [ 39.161970][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 39.171067][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.179108][ T9] usb 2-1: Product: syz [ 39.183281][ T9] usb 2-1: Manufacturer: syz [ 39.187901][ T9] usb 2-1: SerialNumber: syz [ 39.195617][ T9] usb 2-1: config 0 descriptor?? [ 39.201491][ T9] smsc75xx v1.0.0 [ 39.208801][ T337] usb 3-1: device descriptor read/64, error -71 [ 39.289909][ T419] usb 1-1: device descriptor read/8, error -71 [ 39.318890][ T337] usb usb3-port1: attempt power cycle [ 39.528824][ T419] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.549835][ T419] usb 1-1: device descriptor read/8, error -71 [ 39.658828][ T337] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 39.679940][ T337] usb 3-1: device descriptor read/8, error -71 [ 39.686211][ T419] usb 1-1: device descriptor read/8, error -71 [ 39.798952][ T419] usb usb1-port1: unable to enumerate USB device [ 39.810062][ T337] usb 3-1: device descriptor read/8, error -71 [ 40.048809][ T337] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 40.069822][ T337] usb 3-1: device descriptor read/8, error -71 [ 40.199852][ T337] usb 3-1: device descriptor read/8, error -71 [ 40.308887][ T337] usb usb3-port1: unable to enumerate USB device [ 40.463361][ T661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:111 [ 40.798790][ T446] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.815789][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 40.826744][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.836571][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 40.851477][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 40.851496][ T36] audit: type=1400 audit(1751540316.130:227): avc: denied { write } for pid=651 comm="syz.1.106" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.882664][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 40.892623][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 40.898833][ T36] audit: type=1400 audit(1751540316.180:228): avc: denied { read } for pid=666 comm="syz.2.110" path="socket:[5245]" dev="sockfs" ino=5245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.903239][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 40.936153][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 40.946692][ T9] usb 2-1: USB disconnect, device number 6 [ 40.956418][ T36] audit: type=1400 audit(1751540316.230:229): avc: denied { connect } for pid=666 comm="syz.2.110" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.971606][ T446] usb 1-1: Using ep0 maxpacket: 16 [ 40.993108][ T36] audit: type=1400 audit(1751540316.230:230): avc: denied { write } for pid=666 comm="syz.2.110" laddr=fe80::78dc:85ff:fef1:8ce lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.993780][ T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.028215][ T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.038224][ T446] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 41.047578][ T446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.056852][ T446] usb 1-1: config 0 descriptor?? [ 41.108888][ T306] usb 4-1: USB disconnect, device number 7 [ 41.134515][ T665] udevd[665]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.469419][ T446] playstation 0003:054C:05C4.0002: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 41.508792][ T306] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.663682][ T446] playstation 0003:054C:05C4.0002: Invalid reportID received, expected 18 got 202 [ 41.673168][ T446] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 pairing info: -22 [ 41.682910][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 41.688265][ T446] playstation 0003:054C:05C4.0002: Failed to get MAC address from DualShock4 [ 41.697628][ T446] playstation 0003:054C:05C4.0002: Failed to create dualshock4. [ 41.706013][ T306] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 41.714468][ T306] usb 4-1: config 0 has no interface number 0 [ 41.720922][ T306] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 41.738947][ T446] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -22 [ 41.752777][ T306] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 41.773435][ T36] audit: type=1400 audit(1751540317.060:231): avc: denied { setopt } for pid=681 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.776898][ T306] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 41.802226][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.812512][ T306] usb 4-1: Product: syz [ 41.816766][ T306] usb 4-1: Manufacturer: syz [ 41.821638][ T306] usb 4-1: SerialNumber: syz [ 41.828619][ T306] usb 4-1: config 0 descriptor?? [ 41.840414][ T674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 41.848545][ T674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 41.918210][ T685] syz.2.116 (685): attempted to duplicate a private mapping with mremap. This is not supported. [ 41.928940][ T687] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.947315][ T36] audit: type=1400 audit(1751540317.230:232): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 41.972034][ T691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 41.985196][ T693] rust_binder: 693: no such ref 7 [ 42.050540][ T693] rust_binder: Read failure Err(EFAULT) in pid:66 [ 42.057833][ T674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.072273][ T674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.328831][ T419] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 42.479838][ T419] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 42.488124][ T306] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 42.488575][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.498778][ T306] asix 4-1:0.251: probe with driver asix failed with error -524 [ 42.509070][ T419] usb 3-1: config 0 has no interfaces? [ 42.516727][ T425] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.522892][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.539863][ T419] usb 3-1: config 0 has no interfaces? [ 42.546067][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.556214][ T419] usb 3-1: config 0 has no interfaces? [ 42.562689][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.572832][ T419] usb 3-1: config 0 has no interfaces? [ 42.579228][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.589377][ T419] usb 3-1: config 0 has no interfaces? [ 42.595767][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.605917][ T419] usb 3-1: config 0 has no interfaces? [ 42.612136][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.622270][ T419] usb 3-1: config 0 has no interfaces? [ 42.628585][ T419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.638746][ T419] usb 3-1: config 0 has no interfaces? [ 42.645740][ T419] usb 3-1: New USB device found, idVendor=0525, idProduct=3aa1, bcdDevice=87.b4 [ 42.654838][ T419] usb 3-1: New USB device strings: Mfr=204, Product=231, SerialNumber=43 [ 42.663306][ T419] usb 3-1: Product: syz [ 42.667544][ T419] usb 3-1: Manufacturer: syz [ 42.672192][ T419] usb 3-1: SerialNumber: syz [ 42.677488][ T419] usb 3-1: config 0 descriptor?? [ 42.691519][ T674] binder: Bad value for 'max' [ 42.692530][ T425] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 42.696790][ T674] netlink: 'syz.3.112': attribute type 46 has an invalid length. [ 42.707954][ T425] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 42.716136][ T674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.112'. [ 42.732550][ T425] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 42.747253][ T425] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 42.756350][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.768863][ T709] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 42.796231][ T306] usb 4-1: USB disconnect, device number 8 [ 42.889364][ T702] SELinux: policydb string length 1048584 does not match expected length 8 [ 42.898177][ T702] SELinux: failed to load policy [ 43.332239][ T36] audit: type=1400 audit(1751540318.620:233): avc: denied { bind } for pid=710 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.355309][ T36] audit: type=1400 audit(1751540318.650:234): avc: denied { lock } for pid=710 comm="syz.3.124" path="socket:[6270]" dev="sockfs" ino=6270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.392702][ T36] audit: type=1400 audit(1751540318.680:235): avc: denied { write } for pid=713 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.422493][ T36] audit: type=1400 audit(1751540318.680:236): avc: denied { read } for pid=713 comm="syz.3.125" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.446266][ T419] usb 3-1: USB disconnect, device number 16 [ 43.460430][ T720] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 196) [ 43.460454][ T720] rust_binder: Error while translating object. [ 43.477883][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.484580][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 43.494920][ T306] usb 1-1: USB disconnect, device number 8 [ 43.554990][ T727] rust_binder: Write failure EINVAL in pid:101 [ 43.838779][ T419] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 43.878816][ T306] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.009819][ T419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.018810][ T306] usb 1-1: device descriptor read/64, error -71 [ 44.019703][ T419] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 44.041593][ T419] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 44.060864][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.079562][ T419] usb 3-1: config 0 descriptor?? [ 44.242405][ T745] rust_binder: 745: no such ref 1 [ 44.248244][ T745] rust_binder: 745: no such ref 1 [ 44.253592][ T745] rust_binder: Write failure EINVAL in pid:118 [ 44.258804][ T306] usb 1-1: device descriptor read/64, error -71 [ 44.491331][ T419] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 44.508841][ T306] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.516701][ T305] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.648850][ T306] usb 1-1: device descriptor read/64, error -71 [ 44.668796][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 44.675199][ T305] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.686157][ T305] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.697114][ T305] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 44.706408][ T305] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 44.714845][ T305] usb 4-1: Product: syz [ 44.719063][ T305] usb 4-1: Manufacturer: syz [ 44.725987][ T305] hub 4-1:4.0: USB hub found [ 44.888776][ T306] usb 1-1: device descriptor read/64, error -71 [ 44.891237][ T419] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 44.903507][ T419] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 44.911190][ T419] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71 [ 44.925400][ T419] usb 3-1: USB disconnect, device number 17 [ 44.925647][ T305] hub 4-1:4.0: 1 port detected [ 44.998866][ T306] usb usb1-port1: attempt power cycle [ 45.338779][ T306] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.359997][ T306] usb 1-1: device descriptor read/8, error -71 [ 45.369682][ T305] hub 4-1:4.0: set hub depth failed [ 45.376383][ T305] usb 4-1: USB disconnect, device number 9 [ 45.489813][ T306] usb 1-1: device descriptor read/8, error -71 [ 45.768867][ T306] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 45.790160][ T306] usb 1-1: device descriptor read/8, error -71 [ 45.891394][ T776] mmap: syz.3.143 (776): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 45.919795][ T306] usb 1-1: device descriptor read/8, error -71 [ 46.008805][ T419] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 46.028866][ T306] usb usb1-port1: unable to enumerate USB device [ 46.138832][ T419] usb 3-1: device descriptor read/64, error -71 [ 46.148854][ T446] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.299922][ T446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.310911][ T446] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 46.320015][ T446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.328799][ T446] usb 4-1: config 0 descriptor?? [ 46.388809][ T419] usb 3-1: device descriptor read/64, error -71 [ 46.562005][ T778] batadv_slave_1: entered promiscuous mode [ 46.569065][ T778] batadv_slave_1: left promiscuous mode [ 46.588021][ T425] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 46.596377][ T425] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 46.606758][ T780] netlink: 72 bytes leftover after parsing attributes in process `syz.0.145'. [ 46.607834][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 46.607852][ T36] audit: type=1400 audit(1751540321.890:245): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=479 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.618006][ T425] usb 2-1: USB disconnect, device number 7 [ 46.621792][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 46.659818][ T419] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 46.676076][ T36] audit: type=1400 audit(1751540321.890:246): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=479 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.706095][ T36] audit: type=1400 audit(1751540321.890:247): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=479 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.737966][ T446] monterey 0003:0566:3004.0004: item fetching failed at offset 6/7 [ 46.746214][ T446] monterey 0003:0566:3004.0004: probe with driver monterey failed with error -22 [ 46.803573][ T780] syzkaller0: entered promiscuous mode [ 46.828799][ T419] usb 3-1: device descriptor read/64, error -71 [ 46.887621][ T785] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 46.927926][ T36] audit: type=1400 audit(1751540322.210:248): avc: denied { bind } for pid=784 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.928628][ T785] futex_wake_op: syz.0.147 tries to shift op by 144; fix this program [ 46.949274][ T36] audit: type=1400 audit(1751540322.210:249): avc: denied { read } for pid=784 comm="syz.0.147" path="socket:[6507]" dev="sockfs" ino=6507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.960148][ T785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.147'. [ 47.036115][ T446] usb 4-1: USB disconnect, device number 10 [ 47.078854][ T419] usb 3-1: device descriptor read/64, error -71 [ 47.171079][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.171928][ T793] rust_binder: Error in use_page_slow: ESRCH [ 47.188452][ T793] rust_binder: use_range failure ESRCH [ 47.200379][ T419] usb usb3-port1: attempt power cycle [ 47.215824][ T793] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 47.215851][ T793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.234209][ T793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:88 [ 47.370866][ T36] audit: type=1400 audit(1751540322.660:250): avc: denied { getopt } for pid=802 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.464224][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.468469][ T36] audit: type=1400 audit(1751540322.750:251): avc: denied { connect } for pid=804 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.483502][ T805] rust_binder: Error in use_page_slow: ESRCH [ 47.511572][ T36] audit: type=1400 audit(1751540322.750:252): avc: denied { write } for pid=804 comm="syz.1.153" laddr=::1 lport=1 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.521167][ T805] rust_binder: use_range failure ESRCH [ 47.568976][ T419] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 47.571481][ T36] audit: type=1400 audit(1751540322.750:253): avc: denied { read } for pid=804 comm="syz.1.153" laddr=::1 lport=1 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.609792][ T419] usb 3-1: device descriptor read/8, error -71 [ 47.627809][ T805] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 47.627838][ T805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.659157][ T805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 47.749773][ T419] usb 3-1: device descriptor read/8, error -71 [ 47.802402][ T807] KVM: debugfs: duplicate directory 807-5 [ 47.956680][ T36] audit: type=1400 audit(1751540323.240:254): avc: denied { watch } for pid=809 comm="syz.0.156" path="/42/control" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.048774][ T419] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 48.079816][ T419] usb 3-1: device descriptor read/8, error -71 [ 48.116457][ T823] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 48.170602][ T828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.206461][ T830] rust_binder: Error while translating object. [ 48.213049][ T830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.219600][ T830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 48.229599][ T419] usb 3-1: device descriptor read/8, error -71 [ 48.256700][ T828] rust_binder: Error while translating object. [ 48.256734][ T828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.263783][ T828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 48.317804][ T304] bridge_slave_1: left allmulticast mode [ 48.349117][ T304] bridge_slave_1: left promiscuous mode [ 48.354803][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.368894][ T419] usb usb3-port1: unable to enumerate USB device [ 48.375525][ T304] bridge_slave_0: left allmulticast mode [ 48.388962][ T304] bridge_slave_0: left promiscuous mode [ 48.399833][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.544258][ T304] veth1_macvtap: left promiscuous mode [ 48.549928][ T304] veth0_vlan: left promiscuous mode [ 48.670637][ T841] tmpfs: Bad value for 'huge' [ 48.687997][ T833] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.695199][ T833] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.703494][ T833] bridge_slave_0: entered allmulticast mode [ 48.710663][ T833] bridge_slave_0: entered promiscuous mode [ 48.717334][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.724492][ T833] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.731659][ T833] bridge_slave_1: entered allmulticast mode [ 48.738054][ T833] bridge_slave_1: entered promiscuous mode [ 48.788465][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.795567][ T833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.802898][ T833] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.810069][ T833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.850401][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.857874][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.865247][ T853] exFAT-fs (rnullb0): invalid boot record signature [ 48.873682][ T853] exFAT-fs (rnullb0): failed to read boot sector [ 48.882365][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.889454][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.897476][ T853] exFAT-fs (rnullb0): failed to recognize exfat type [ 48.904626][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.911713][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.943686][ T833] veth0_vlan: entered promiscuous mode [ 48.955479][ T833] veth1_macvtap: entered promiscuous mode [ 49.371481][ T895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.371517][ T895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:122 [ 49.381227][ T895] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.390750][ T895] rust_binder: Read failure Err(EFAULT) in pid:122 [ 49.408998][ T419] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 49.422101][ T897] batadv_slave_1: entered promiscuous mode [ 49.439241][ T897] batadv_slave_1: left promiscuous mode [ 49.568807][ T419] usb 5-1: Invalid ep0 maxpacket: 64 [ 49.609475][ T334] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 49.651990][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.652811][ T917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137 [ 49.677579][ T917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 49.728847][ T419] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 49.769884][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.771985][ T920] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 233) [ 49.780994][ T920] rust_binder: Error while translating object. [ 49.781151][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.792129][ T920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.807722][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 49.809115][ T334] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 49.836070][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.849469][ T334] usb 1-1: config 0 descriptor?? [ 49.858238][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.858517][ T923] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.875161][ T922] rust_binder: Write failure EINVAL in pid:141 [ 49.908853][ T419] usb 5-1: Invalid ep0 maxpacket: 64 [ 49.921028][ T419] usb usb5-port1: attempt power cycle [ 49.952318][ T927] netlink: 'syz.2.192': attribute type 27 has an invalid length. [ 50.014773][ T927] Zero length message leads to an empty skb [ 50.168793][ T64] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 50.193163][ T930] random: crng reseeded on system resumption [ 50.216352][ T930] process 'syz.2.193' launched './file0' with NULL argv: empty string added [ 50.258826][ T419] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 50.268292][ T334] cp2112 0003:10C4:EA90.0005: report_id 27787 is invalid [ 50.275427][ T334] cp2112 0003:10C4:EA90.0005: item 0 2 1 8 parsing failed [ 50.283175][ T334] cp2112 0003:10C4:EA90.0005: parse failed [ 50.289337][ T419] usb 5-1: Invalid ep0 maxpacket: 64 [ 50.294771][ T334] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -22 [ 50.319840][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.336632][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.346648][ T64] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 50.355778][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.365115][ T64] usb 2-1: config 0 descriptor?? [ 50.419185][ T944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 50.428832][ T419] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 50.437269][ T944] /dev/nullb0: Can't lookup blockdev [ 50.449372][ T419] usb 5-1: Invalid ep0 maxpacket: 64 [ 50.461684][ T419] usb usb5-port1: unable to enumerate USB device [ 50.480122][ T419] usb 1-1: USB disconnect, device number 13 [ 50.776046][ T64] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 50.783090][ T64] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 50.790175][ T64] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 50.797094][ T64] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 50.804100][ T64] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 50.811032][ T64] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 50.817917][ T64] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 50.825645][ T64] hkems 0003:2006:0118.0006: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 50.836756][ T64] hkems 0003:2006:0118.0006: no inputs found [ 50.839466][ T425] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 50.842791][ T64] hkems 0003:2006:0118.0006: force feedback init failed [ 50.982664][ T64] usb 2-1: USB disconnect, device number 8 [ 50.988789][ T425] usb 3-1: device descriptor read/64, error -71 [ 51.228775][ T425] usb 3-1: device descriptor read/64, error -71 [ 51.371095][ T46] bridge_slave_1: left allmulticast mode [ 51.376843][ T46] bridge_slave_1: left promiscuous mode [ 51.382738][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.390709][ T46] bridge_slave_0: left allmulticast mode [ 51.396388][ T46] bridge_slave_0: left promiscuous mode [ 51.402397][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.471614][ T425] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 51.511597][ T46] tipc: Left network mode [ 51.522069][ T46] veth1_macvtap: left promiscuous mode [ 51.527728][ T46] veth0_vlan: left promiscuous mode [ 51.623546][ T425] usb 3-1: device descriptor read/64, error -71 [ 51.637549][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.644726][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.651943][ T963] bridge_slave_0: entered allmulticast mode [ 51.658301][ T963] bridge_slave_0: entered promiscuous mode [ 51.664972][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.672109][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.679283][ T963] bridge_slave_1: entered allmulticast mode [ 51.685634][ T963] bridge_slave_1: entered promiscuous mode [ 51.735907][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.742989][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.750385][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.757458][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.779630][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.787150][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.796614][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.803710][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.814117][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.821202][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.849355][ T963] veth0_vlan: entered promiscuous mode [ 51.860862][ T963] veth1_macvtap: entered promiscuous mode [ 51.878767][ T64] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.888834][ T425] usb 3-1: device descriptor read/64, error -71 [ 51.998915][ T425] usb usb3-port1: attempt power cycle [ 52.041389][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 52.041403][ T36] audit: type=1400 audit(1751540327.330:283): avc: denied { read } for pid=977 comm="syz.5.209" path="socket:[7806]" dev="sockfs" ino=7806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.071951][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.082109][ T64] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 52.091751][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.100070][ T36] audit: type=1400 audit(1751540327.390:284): avc: denied { write } for pid=977 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.120907][ T64] usb 2-1: config 0 descriptor?? [ 52.127369][ T36] audit: type=1400 audit(1751540327.390:285): avc: denied { bind } for pid=977 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.329115][ T64] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 52.342628][ T64] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71 [ 52.349133][ T425] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 52.359204][ T64] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71 [ 52.376061][ T64] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71 [ 52.384369][ T64] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71 [ 52.390010][ T425] usb 3-1: device descriptor read/8, error -71 [ 52.394895][ T64] usb 2-1: USB disconnect, device number 9 [ 52.457959][ T997] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.457978][ T997] rust_binder: Read failure Err(EFAULT) in pid:152 [ 52.468831][ T306] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.489034][ T999] fuse: Unknown parameter 'rootZod' [ 52.519904][ T425] usb 3-1: device descriptor read/8, error -71 [ 52.590062][ T1002] input: syz1 as /devices/virtual/input/input6 [ 52.609227][ T306] usb 6-1: device descriptor read/64, error -71 [ 52.813564][ T36] audit: type=1400 audit(1751540328.100:286): avc: denied { ioctl } for pid=1007 comm="syz.4.217" path="socket:[8531]" dev="sockfs" ino=8531 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.829905][ T425] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 52.863738][ T1010] usb usb1: usbfs: process 1010 (syz.1.218) did not claim interface 1 before use [ 52.879463][ T425] usb 3-1: device descriptor read/8, error -71 [ 52.922904][ T1012] syz.1.219 uses obsolete (PF_INET,SOCK_PACKET) [ 52.963967][ T36] audit: type=1400 audit(1751540328.250:287): avc: denied { mount } for pid=1016 comm="syz.1.221" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.969548][ T1017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.986197][ T306] usb 6-1: device descriptor read/64, error -71 [ 52.987261][ T36] audit: type=1400 audit(1751540328.260:288): avc: denied { mounton } for pid=1016 comm="syz.1.221" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 53.026471][ T36] audit: type=1400 audit(1751540328.310:289): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.030204][ T425] usb 3-1: device descriptor read/8, error -71 [ 53.108836][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.121740][ T304] bridge_slave_1: left allmulticast mode [ 53.127628][ T304] bridge_slave_1: left promiscuous mode [ 53.133806][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.141777][ T304] bridge_slave_0: left allmulticast mode [ 53.147452][ T304] bridge_slave_0: left promiscuous mode [ 53.153460][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.170937][ T425] usb usb3-port1: unable to enumerate USB device [ 53.228821][ T306] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.261762][ T304] veth1_macvtap: left promiscuous mode [ 53.267313][ T304] veth0_vlan: left promiscuous mode [ 53.283127][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 53.299518][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 53.308255][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 53.317792][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.330386][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.348235][ T9] usb 5-1: config 1 has no interface number 1 [ 53.354579][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 53.369032][ T306] usb 6-1: device descriptor read/64, error -71 [ 53.376745][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.386329][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.394439][ T9] usb 5-1: Product: syz [ 53.398670][ T9] usb 5-1: Manufacturer: syz [ 53.405928][ T9] usb 5-1: SerialNumber: syz [ 53.406840][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.418234][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.425660][ T1021] bridge_slave_0: entered allmulticast mode [ 53.432755][ T1021] bridge_slave_0: entered promiscuous mode [ 53.439917][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.446970][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.454165][ T1021] bridge_slave_1: entered allmulticast mode [ 53.460680][ T1021] bridge_slave_1: entered promiscuous mode [ 53.539515][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.546595][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.556336][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.563449][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.592072][ T1021] veth0_vlan: entered promiscuous mode [ 53.606744][ T1021] veth1_macvtap: entered promiscuous mode [ 53.609395][ T306] usb 6-1: device descriptor read/64, error -71 [ 53.660408][ T1029] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 53.668693][ T1029] rust_binder: Write failure EINVAL in pid:2 [ 53.669816][ T1030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.730110][ T306] usb usb6-port1: attempt power cycle [ 53.749176][ T9] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 53.757061][ T9] usb 5-1: found format II with max.bitrate = 8, frame size=9 [ 53.767899][ T9] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 53.778308][ T9] usb 5-1: USB disconnect, device number 6 [ 53.791112][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.019041][ T425] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 54.028809][ T446] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 54.088820][ T306] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 54.109875][ T306] usb 6-1: device descriptor read/8, error -71 [ 54.169963][ T425] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.181104][ T446] usb 3-1: Using ep0 maxpacket: 32 [ 54.186297][ T425] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 54.197035][ T425] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.203774][ T425] usb 7-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 54.213695][ T425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.222078][ T446] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 54.231175][ T446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.239945][ T425] usb 7-1: config 0 descriptor?? [ 54.245268][ T1038] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 54.245671][ T306] usb 6-1: device descriptor read/8, error -71 [ 54.258932][ T446] usb 3-1: config 0 descriptor?? [ 54.472346][ T446] usbhid 3-1:0.0: can't add hid device: -71 [ 54.479445][ T446] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 54.488431][ T446] usb 3-1: USB disconnect, device number 26 [ 54.494142][ T36] audit: type=1326 audit(1751540329.780:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.2.228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f389698e929 code=0x0 [ 54.518809][ T306] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 54.539803][ T306] usb 6-1: device descriptor read/8, error -71 [ 54.564442][ T1043] SELinux: failed to load policy [ 54.661407][ T425] uclogic 0003:28BD:0055.0008: interface is invalid, ignoring [ 54.671216][ T306] usb 6-1: device descriptor read/8, error -71 [ 54.778861][ T306] usb usb6-port1: unable to enumerate USB device [ 54.861159][ T306] usb 7-1: USB disconnect, device number 2 [ 55.275793][ T36] audit: type=1400 audit(1751540330.560:291): avc: denied { open } for pid=1057 comm="syz.5.232" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.286707][ T1058] 9pnet_fd: Insufficient options for proto=fd [ 55.326415][ T1060] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.388675][ T36] audit: type=1400 audit(1751540330.670:292): avc: denied { read } for pid=1064 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.400140][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.408024][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.414632][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.421167][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.427665][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.434348][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.442778][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.450298][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.457566][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.464346][ T1068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 55.470643][ T1067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.501189][ T1076] exFAT-fs (rnullb0): invalid boot record signature [ 55.515088][ T1076] exFAT-fs (rnullb0): failed to read boot sector [ 55.521533][ T1076] exFAT-fs (rnullb0): failed to recognize exfat type [ 55.594485][ T1084] batadv_slave_1: entered promiscuous mode [ 55.637029][ T1086] netlink: 'syz.6.242': attribute type 13 has an invalid length. [ 55.647513][ T1086] SELinux: syz.6.242 (1086) set checkreqprot to 1. This is no longer supported. [ 55.659812][ T1086] /dev/rnullb0: Can't open blockdev [ 55.688774][ T425] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 55.846876][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.858553][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.868562][ T425] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.871988][ T1090] fuse: Bad value for 'fd' [ 55.885091][ T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.889696][ T334] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 55.898774][ T425] usb 3-1: config 0 descriptor?? [ 55.912728][ T425] hub 3-1:0.0: USB hub found [ 56.060038][ T334] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.070801][ T334] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.080797][ T334] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 56.090291][ T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.098548][ T334] usb 6-1: SerialNumber: syz [ 56.107140][ T425] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 56.312457][ T334] usb 6-1: 0:2 : does not exist [ 56.318538][ T1084] batadv_slave_1: left promiscuous mode [ 56.329100][ T334] usb 6-1: USB disconnect, device number 6 [ 56.350557][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.485814][ T1096] tmpfs: Unknown parameter 'h' [ 56.509050][ T1096] rust_binder: Write failure EFAULT in pid:16 [ 56.509251][ T1096] rust_binder: Write failure EINVAL in pid:16 [ 56.926355][ T1103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.932730][ T1103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30 [ 57.165299][ T334] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 57.288221][ T1119] binder: Unknown parameter 'uid>18446744073709551615' [ 57.295464][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 57.295498][ T36] audit: type=1400 audit(1751540332.580:306): avc: denied { remount } for pid=1114 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.322021][ T1118] binder: Unknown parameter 'uid>18446744073709551615' [ 57.349828][ T334] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.367971][ T334] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 57.369948][ T1123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 57.380160][ T36] audit: type=1400 audit(1751540332.650:307): avc: denied { accept } for pid=1120 comm="syz.6.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.389090][ T1123] rust_binder: Write failure EINVAL in pid:22 [ 57.399617][ T334] usb 6-1: config 0 interface 0 has no altsetting 0 [ 57.429280][ T1125] rust_binder: 1125: no such ref 0 [ 57.438480][ T1125] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 57.443902][ T334] usb 6-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 57.458916][ T1125] rust_binder: Write failure EINVAL in pid:47 [ 57.465142][ T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.480531][ T334] usb 6-1: config 0 descriptor?? [ 57.489704][ T1098] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 57.523713][ T1129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.523744][ T1129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 57.590843][ T1127] kvm: emulating exchange as write [ 57.812997][ T1147] tmpfs: Bad value for 'nr_blocks' [ 57.856815][ T1149] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.856843][ T1149] rust_binder: Read failure Err(EFAULT) in pid:62 [ 57.875799][ T1149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 57.886676][ T1153] netlink: 188 bytes leftover after parsing attributes in process `syz.4.265'. [ 57.907698][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.916260][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.928512][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.940313][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.947392][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.954824][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.970394][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.982960][ T334] wacom 0003:056A:0300.0009: unknown main item tag 0x0 [ 57.998461][ T334] wacom 0003:056A:0300.0009: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 58.015288][ T334] wacom 0003:056A:0300.0009: hidraw0: USB HID vc.ec Device [HID 056a:0300] on usb-dummy_hcd.5-1/input0 [ 58.036001][ T334] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0300.0009/input/input7 [ 58.115480][ T306] usb 6-1: USB disconnect, device number 7 [ 58.418240][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.428803][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.436779][ T1180] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.444281][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.453130][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.460776][ T1180] bridge0: port 3(veth0_to_bridge) entered disabled state [ 58.468208][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.475843][ T1180] veth0_to_bridge: entered allmulticast mode [ 58.482029][ T36] audit: type=1326 audit(1751540333.770:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.6.274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8ef38e929 code=0x0 [ 58.508764][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.519269][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.523070][ T1180] veth0_to_bridge: entered promiscuous mode [ 58.528334][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.540126][ T1184] rust_binder: 1184: no such ref 3 [ 58.542367][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.555237][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.559259][ T1183] Invalid ELF header len 16 [ 58.563313][ T1180] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.581511][ T36] audit: type=1400 audit(1751540333.850:309): avc: denied { module_load } for pid=1179 comm="syz.4.273" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 58.610452][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.618988][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.619359][ T1180] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.626782][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.634016][ T1180] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 58.642214][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.656994][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.665327][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.674641][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.685298][ T36] audit: type=1400 audit(1751540333.980:310): avc: denied { bind } for pid=1186 comm="syz.5.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.707026][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.724092][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.731931][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.741075][ T36] audit: type=1400 audit(1751540334.030:311): avc: denied { getopt } for pid=1186 comm="syz.5.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.761846][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.769489][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.777214][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.785124][ T36] audit: type=1400 audit(1751540334.030:312): avc: denied { getopt } for pid=1186 comm="syz.5.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.805542][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.813037][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.820598][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.828063][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.835606][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.843090][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.850803][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.858270][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.865860][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.873447][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.880997][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.888457][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.896448][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.903943][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.911649][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.919131][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.926639][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.934331][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.941885][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.949496][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.959099][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.966534][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.977281][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.985066][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 58.992591][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.001679][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.010744][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.015846][ T425] usbhid 3-1:0.0: can't add hid device: -71 [ 59.018291][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.032290][ T425] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 59.033257][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.052476][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.063645][ T1191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41490 sclass=netlink_route_socket pid=1191 comm=\ [ 59.075916][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.082900][ T425] usb 3-1: USB disconnect, device number 27 [ 59.083617][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.104400][ T36] audit: type=1400 audit(1751540334.390:313): avc: denied { read } for pid=1190 comm="\" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.111417][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.132468][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.140069][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.147527][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.157125][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.164612][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.172690][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.185186][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.192810][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.200259][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.207682][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.217005][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.233332][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.245335][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.257156][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.264770][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.272266][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.281211][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.288680][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.296274][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.307243][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.327499][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.339328][ T1206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.339359][ T1206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 59.348860][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.374297][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.394407][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.403910][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.411834][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.419689][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.428940][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.437299][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.445450][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.453231][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.461890][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.493257][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.501095][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.509245][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.516854][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.524616][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.532441][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.546752][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.554796][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.562509][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.579732][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.589116][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.596842][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.607586][ T1224] binder: Unknown parameter 'defcontext01777777777777777777777' [ 59.626564][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.639933][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.641129][ T36] audit: type=1400 audit(1751540334.930:314): avc: denied { bind } for pid=1230 comm="syz.6.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.652865][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.688430][ T36] audit: type=1400 audit(1751540334.930:315): avc: denied { name_bind } for pid=1230 comm="syz.6.290" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 59.695095][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.717025][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.725084][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.726965][ T1235] rust_binder: pid 1235 performed invalid decrement on ref [ 59.733911][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.740390][ T1235] rust_binder: Write failure EINVAL in pid:72 [ 59.747467][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.761494][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.771404][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.779220][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.786846][ T1237] veth0_to_hsr: entered promiscuous mode [ 59.786960][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.792887][ T1237] veth0_to_hsr: entered allmulticast mode [ 59.800422][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.813591][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.821498][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.829399][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.837109][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.844828][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.852633][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.860331][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.867811][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.875586][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.883206][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.890840][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.898505][ T9] hid-generic 0000:009B:07FF.000A: unknown main item tag 0x0 [ 59.910104][ T9] hid-generic 0000:009B:07FF.000A: hidraw0: HID v0.03 Device [syz1] on syz1 [ 59.930049][ T1252] fido_id[1252]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.127238][ T1269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.127275][ T1269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 60.156292][ T1272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.185152][ T1277] binder: Bad value for 'stats' [ 60.242567][ T1284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:205 [ 60.242849][ T1284] SELinux: security_context_str_to_sid () failed with errno=-22 [ 60.306972][ T1289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.307259][ T1289] rust_binder: Error in use_page_slow: ESRCH [ 60.314549][ T1289] rust_binder: use_range failure ESRCH [ 60.321463][ T1289] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 60.327266][ T1289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.335648][ T1289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:210 [ 60.411809][ T1295] kvm: kvm [1294]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 60.439057][ T1295] rust_binder: 1295: no such ref 0 [ 60.452024][ T1296] rust_binder: Write failure EINVAL in pid:74 [ 60.452079][ T1295] rust_binder: Write failure EINVAL in pid:74 [ 60.573513][ T1300] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 60.588813][ T1300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 60.597398][ T1300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:77 [ 60.783301][ T1307] overlayfs: conflicting options: nfs_export=on,index=off [ 60.928765][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.032377][ T1314] rust_binder: 1314: no such ref 0 [ 61.040077][ T1314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.090026][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.107909][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.117729][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 61.126873][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.139007][ T9] usb 5-1: config 0 descriptor?? [ 61.150978][ T1320] netlink: 92 bytes leftover after parsing attributes in process `syz.5.319'. [ 61.160843][ T1320] rust_binder: Write failure EFAULT in pid:105 [ 61.250064][ T1328] fuseblk: Unknown parameter 'g¶OÐ(_id' [ 61.379680][ T1335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.379720][ T1335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:116 [ 61.416988][ T1335] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.457869][ T1335] rust_binder: Read failure Err(EFAULT) in pid:116 [ 61.557239][ T1344] SELinux: security_context_str_to_sid () failed with errno=-22 [ 61.563583][ T1340] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.566382][ T1340] rust_binder: Error in use_page_slow: ESRCH [ 61.573220][ T1342] random: crng reseeded on system resumption [ 61.573634][ T9] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 61.580466][ T1340] rust_binder: use_range failure ESRCH [ 61.601083][ T1340] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 61.618780][ T1340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.637018][ T1340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:220 [ 61.701245][ T1347] can0: slcan on ptm0. [ 61.770978][ T9] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 9: -71 [ 61.792144][ T9] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -71 [ 61.808957][ T9] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 61.821334][ T9] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 61.842879][ T9] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71 [ 61.874173][ T9] usb 5-1: USB disconnect, device number 7 [ 61.890251][ T1347] can0 (unregistered): slcan off ptm0. [ 62.310854][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 62.310873][ T36] audit: type=1400 audit(1751540337.600:344): avc: denied { read } for pid=1387 comm="syz.6.335" path="socket:[10214]" dev="sockfs" ino=10214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.481476][ T1400] /dev/rnullb0: Can't open blockdev [ 62.930123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.931471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 62.942448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.954792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 62.966464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.978737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 62.990334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.002573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 63.014509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.026702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 67.938748][ C1] net_ratelimit: 78347 callbacks suppressed [ 67.938773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.938892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 67.944833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.957042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 67.968800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.980903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 67.992628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.005032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 68.016765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.028919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 72.948746][ C1] net_ratelimit: 80179 callbacks suppressed [ 72.948770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.948951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 72.954808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.966954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 72.978760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.990856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 73.002833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.015059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 73.026794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.038947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 77.143821][ C1] sched: DL replenish lagged too much [ 77.958780][ C1] net_ratelimit: 81624 callbacks suppressed [ 77.958803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.959080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 77.964829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.977072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 77.988924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.001051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 78.012797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.024935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 78.036628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.048909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 82.968733][ C1] net_ratelimit: 105150 callbacks suppressed [ 82.968757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.968870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 82.974899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.987088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 82.998876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.010922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 83.022746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.034799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 83.046674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.058748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 87.978742][ C1] net_ratelimit: 116128 callbacks suppressed [ 87.978766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.978794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 87.984857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.996922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 88.008799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.020844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 88.032755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.044888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 88.056713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.069313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 92.988721][ C1] net_ratelimit: 115712 callbacks suppressed [ 92.988746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.988868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 92.994837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.007355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 93.019188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.031362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 93.043164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.055304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 93.067107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.079163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 97.998757][ C1] net_ratelimit: 118348 callbacks suppressed [ 97.998781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.998973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 98.004886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.017024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 98.028799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.040882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 98.052795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.064839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 98.076681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.088834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 103.008713][ C1] net_ratelimit: 116193 callbacks suppressed [ 103.008738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.008789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 103.015494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.027643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 103.039459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.051512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 103.063326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.075550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 103.087358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.099449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 108.018738][ C1] net_ratelimit: 113314 callbacks suppressed [ 108.018763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.018925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 108.024910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.036932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 108.048786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.060816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 108.072685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.084707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 108.096569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.108734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 113.028722][ C1] net_ratelimit: 113805 callbacks suppressed [ 113.028746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.028990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 113.034857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.046984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 113.058799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.070705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 113.082678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.094880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 113.106630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.118762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 118.038774][ C1] net_ratelimit: 115201 callbacks suppressed [ 118.038797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.038944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 118.044896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.057135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 118.068960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.080840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 118.092848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.105006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 118.116741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.128843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 123.048727][ C0] net_ratelimit: 113043 callbacks suppressed [ 123.048751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 123.048771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.048842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.054869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 123.067092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.079229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 123.090893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.102989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 123.114831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.126813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 128.058721][ C1] net_ratelimit: 115970 callbacks suppressed [ 128.058744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.058876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 128.064845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.076925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 128.088777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.100758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 128.112674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.124948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 128.136678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.148745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 133.068737][ C1] net_ratelimit: 118776 callbacks suppressed [ 133.068760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.068843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 133.074837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.087149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 133.098952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.110869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 133.122943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.139028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 133.146802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.158935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 138.078740][ C1] net_ratelimit: 121390 callbacks suppressed [ 138.078763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.078895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 138.084864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.096917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 138.108796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.120731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 138.132709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.144833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 138.156618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.168745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 143.088726][ C1] net_ratelimit: 120774 callbacks suppressed [ 143.088749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.088854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 143.094958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.107211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 143.119058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.130940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 143.142952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.155117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 143.166832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.178892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 148.098702][ C1] net_ratelimit: 115791 callbacks suppressed [ 148.098726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.098875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 148.104842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.116918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 148.128815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.140698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 148.152678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.164927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 148.176639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.188899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 153.108735][ C1] net_ratelimit: 117921 callbacks suppressed [ 153.108760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.108765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 153.108831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 153.114857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.127055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 153.138814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.150946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 153.162678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.174675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 153.186641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.118737][ C1] net_ratelimit: 117143 callbacks suppressed [ 158.118761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.118787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 158.124935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.137242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 158.148992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.161010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 158.172879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.185981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 158.197955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.210470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 161.759837][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.766923][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.128690][ C1] net_ratelimit: 116225 callbacks suppressed [ 163.128714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.128716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 163.129155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 163.134810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.146878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 163.158743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.170721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 163.182656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.194890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 163.206485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.561788][ T1422] bridge_slave_0: entered allmulticast mode [ 163.819807][ T1422] bridge_slave_0: entered promiscuous mode [ 168.138683][ C1] net_ratelimit: 115591 callbacks suppressed [ 168.138707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.138759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 168.144817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.157016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 168.168765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.180758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 168.192624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.204585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 168.216594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.228643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 171.173234][ T1421] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 171.259590][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.359387][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.366527][ T1422] bridge_slave_1: entered allmulticast mode [ 171.459267][ T1422] bridge_slave_1: entered promiscuous mode [ 173.148709][ C1] net_ratelimit: 115588 callbacks suppressed [ 173.148735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.148761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 173.154856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.166894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 173.178860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.190792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 173.202768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.214949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 173.226672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.238696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 178.158732][ C1] net_ratelimit: 119716 callbacks suppressed [ 178.158757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.158783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 178.164861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.177172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 178.189066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.201178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 178.213148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.225086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 178.237038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.249563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 183.168769][ C1] net_ratelimit: 118216 callbacks suppressed [ 183.168816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.169070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 183.174942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.187106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 183.198949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.210967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 183.222945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.234839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 183.246829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.259142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 188.178678][ C1] net_ratelimit: 120633 callbacks suppressed [ 188.178703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.178905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 188.184843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.196909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 188.208780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.220700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 188.232684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.244650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 188.256602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.269075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 189.150645][ T37] INFO: task syz.2.332:1349 blocked for more than 123 seconds. [ 189.158315][ T37] Not tainted 6.12.30-syzkaller-g06ca12d7d229 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 190.939226][ T36] audit: type=1400 audit(1751540464.910:345): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1718]" dev="pipefs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 191.969970][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 192.499506][ T37] task:syz.2.332 state:D stack:0 pid:1349 tgid:1349 ppid:289 flags:0x00004004 [ 192.512819][ T37] Call Trace: [ 192.516157][ T37] [ 192.519158][ T37] __schedule+0x145b/0x1f10 [ 192.523724][ T37] ? __sched_text_start+0x10/0x10 [ 192.528817][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 192.534403][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 192.539580][ T37] ? __kasan_check_write+0x18/0x20 [ 192.544726][ T37] ? trace_contention_begin+0xc0/0xc0 [ 192.550154][ T37] schedule+0xc6/0x240 [ 192.554255][ T37] schedule_preempt_disabled+0x14/0x30 [ 192.559744][ T37] __mutex_lock+0x836/0x1b60 [ 192.564350][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 192.571153][ T37] ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10 [ 192.577584][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 192.582730][ T37] __mutex_lock_slowpath+0xe/0x20 [ 192.587765][ T37] mutex_lock+0x102/0x1c0 [ 192.592121][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 192.596978][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 192.603498][ T37] rcu_barrier+0x4d/0x530 [ 192.607843][ T37] ? __kasan_check_write+0x18/0x20 [ 192.612986][ T37] ? kvm_destroy_vcpus+0x1c0/0x250 [ 192.618124][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 192.623594][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 192.628402][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 192.633680][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 192.639368][ T37] ? __kasan_check_write+0x18/0x20 [ 192.644510][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 192.650182][ T37] kvm_put_kvm+0xb04/0x12b0 [ 192.654707][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 192.659934][ T37] kvm_vm_release+0x47/0x70 [ 192.664453][ T37] __fput+0x1fb/0xa00 [ 192.668442][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 192.674011][ T37] ____fput+0x20/0x30 [ 192.678000][ T37] task_work_run+0x1e3/0x250 [ 192.682611][ T37] ? __cfi_task_work_run+0x10/0x10 [ 192.687741][ T37] ? __kasan_check_read+0x15/0x20 [ 192.692827][ T37] resume_user_mode_work+0x36/0x50 [ 192.697949][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 192.703439][ T37] do_syscall_64+0x64/0xf0 [ 192.707865][ T37] ? clear_bhb_loop+0x50/0xa0 [ 192.712578][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 192.718485][ T37] RIP: 0033:0x7f389698e929 [ 192.722933][ T37] RSP: 002b:00007ffc1c959428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 192.731374][ T37] RAX: 0000000000000000 RBX: 00007f3896bb7ba0 RCX: 00007f389698e929 [ 192.739377][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 192.747357][ T37] RBP: 00007f3896bb7ba0 R08: 0000000000000204 R09: 0000001e1c95971f [ 192.755376][ T37] R10: 00007f3896bb7ac0 R11: 0000000000000246 R12: 000000000000f40c [ 192.763393][ T37] R13: 00007ffc1c959520 R14: ffffffffffffffff R15: 00007ffc1c959540 [ 192.771404][ T37] [ 192.860159][ T37] INFO: task syz.4.338:1402 blocked for more than 127 seconds. [ 192.867850][ T37] Not tainted 6.12.30-syzkaller-g06ca12d7d229 #0 [ 193.188724][ C1] net_ratelimit: 110722 callbacks suppressed [ 193.188749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.188903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 193.194833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.206860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 193.218838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.230734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 193.242715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.255024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 193.266601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.278695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 193.639896][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 193.648626][ T37] task:syz.4.338 state:D stack:0 pid:1402 tgid:1397 ppid:833 flags:0x00004004 [ 193.819704][ T37] Call Trace: [ 193.823057][ T37] [ 193.826005][ T37] __schedule+0x145b/0x1f10 [ 193.830577][ T37] ? __sched_text_start+0x10/0x10 [ 193.835643][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 193.840789][ T37] ? __kasan_check_write+0x18/0x20 [ 193.845913][ T37] ? trace_contention_begin+0xc0/0xc0 [ 193.851304][ T37] schedule+0xc6/0x240 [ 193.855384][ T37] schedule_preempt_disabled+0x14/0x30 [ 193.860858][ T37] __mutex_lock+0x836/0x1b60 [ 193.865464][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 193.872264][ T37] ? kvm_vm_release+0x47/0x70 [ 193.876963][ T37] ? call_rcu_hurry+0x30/0x30 [ 193.881666][ T37] ? __kasan_check_write+0x18/0x20 [ 193.886806][ T37] ? xas_clear_mark+0x1e8/0x430 [ 193.891678][ T37] __mutex_lock_slowpath+0xe/0x20 [ 193.896715][ T37] mutex_lock+0x102/0x1c0 [ 193.901063][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 193.905933][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 193.912457][ T37] rcu_barrier+0x4d/0x530 [ 193.916802][ T37] ? __kasan_check_write+0x18/0x20 [ 193.921939][ T37] ? kvm_destroy_vcpus+0x1c0/0x250 [ 193.927061][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 193.932462][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 193.937256][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 193.942410][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 193.948071][ T37] ? __kasan_check_write+0x18/0x20 [ 193.953214][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 193.958876][ T37] kvm_put_kvm+0xb04/0x12b0 [ 193.963409][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 193.968538][ T37] ? __fput+0x6ea/0xa00 [ 193.972716][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 193.977922][ T37] kvm_vm_release+0x47/0x70 [ 193.982445][ T37] __fput+0x1fb/0xa00 [ 193.986437][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 193.992006][ T37] ____fput+0x20/0x30 [ 193.995997][ T37] task_work_run+0x1e3/0x250 [ 194.000601][ T37] ? __cfi_task_work_run+0x10/0x10 [ 194.005717][ T37] ? __kasan_check_write+0x18/0x20 [ 194.010852][ T37] resume_user_mode_work+0x36/0x50 [ 194.015969][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 194.021451][ T37] do_syscall_64+0x64/0xf0 [ 194.025874][ T37] ? clear_bhb_loop+0x50/0xa0 [ 194.030572][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.036472][ T37] RIP: 0033:0x7f9d4c18e929 [ 194.040956][ T37] RSP: 002b:00007f9d4cfee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 194.049400][ T37] RAX: 0000000000000000 RBX: 00007f9d4c3b6080 RCX: 00007f9d4c18e929 [ 194.057378][ T37] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 194.065368][ T37] RBP: 00007f9d4c210b39 R08: 0000000000000000 R09: 0000000000000000 [ 194.073359][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.081349][ T37] R13: 0000000000000000 R14: 00007f9d4c3b6080 R15: 00007ffd063d3a58 [ 194.089340][ T37] [ 194.220144][ T37] NMI backtrace for cpu 0 [ 194.220176][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g06ca12d7d229 #0 9aba5d3c529198ed3462d1d46215a794785d0dd5 [ 194.220211][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.220225][ T37] Call Trace: [ 194.220233][ T37] [ 194.220241][ T37] __dump_stack+0x21/0x30 [ 194.220275][ T37] dump_stack_lvl+0x10c/0x190 [ 194.220300][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.220328][ T37] dump_stack+0x19/0x20 [ 194.220351][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 194.220382][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 194.220404][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 194.220437][ T37] ? sched_show_task+0x379/0x560 [ 194.220461][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 194.220482][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 194.220506][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 194.220530][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 194.220562][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 194.220585][ T37] watchdog+0xd8f/0xed0 [ 194.220610][ T37] ? __cfi_watchdog+0x10/0x10 [ 194.220634][ T37] ? __kasan_check_read+0x15/0x20 [ 194.220660][ T37] ? __kthread_parkme+0x138/0x180 [ 194.220689][ T37] ? schedule+0xc6/0x240 [ 194.220712][ T37] kthread+0x2c7/0x370 [ 194.220744][ T37] ? __cfi_watchdog+0x10/0x10 [ 194.220766][ T37] ? __cfi_kthread+0x10/0x10 [ 194.220797][ T37] ret_from_fork+0x64/0xa0 [ 194.220822][ T37] ? __cfi_kthread+0x10/0x10 [ 194.220853][ T37] ret_from_fork_asm+0x1a/0x30 [ 194.220883][ T37] [ 194.220891][ T37] Sending NMI from CPU 0 to CPUs 1: [ 194.421370][ C1] NMI backtrace for cpu 1 [ 194.421391][ C1] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.12.30-syzkaller-g06ca12d7d229 #0 9aba5d3c529198ed3462d1d46215a794785d0dd5 [ 194.421412][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.421424][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 194.421453][ C1] RIP: 0010:__local_bh_enable_ip+0x5/0x80 [ 194.421478][ C1] Code: cc cc cc cc 0f 0b eb e3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 6f 08 48 33 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 65 8b 05 59 29 b5 7e a9 00 00 0f 00 75 55 65 8b 05 4b 29 [ 194.421492][ C1] RSP: 0018:ffffc90000230890 EFLAGS: 00000206 [ 194.421505][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff888104a4a600 [ 194.421516][ C1] RDX: 0000000000000100 RSI: 0000000000000200 RDI: ffffffff84ee1bac [ 194.421527][ C1] RBP: ffffc90000230a98 R08: ffff888115f16000 R09: 0000000000000000 [ 194.421538][ C1] R10: ffffc900002309f0 R11: fffff52000046142 R12: ffff888115f160f0 [ 194.421550][ C1] R13: dffffc0000000000 R14: ffff888115f16040 R15: 0000000000000001 [ 194.421561][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 194.421574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.421585][ C1] CR2: 00007f6d89db5f40 CR3: 0000000109f88000 CR4: 00000000003526b0 [ 194.421600][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.421609][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.421619][ C1] Call Trace: [ 194.421624][ C1] [ 194.421631][ C1] ? ip6t_do_table+0x1305/0x14d0 [ 194.421659][ C1] ? ip6t_do_table+0x1dc/0x14d0 [ 194.421681][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 194.421703][ C1] ? ip6_mc_input+0x4f3/0x670 [ 194.421724][ C1] ? __asan_memset+0x39/0x50 [ 194.421743][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 194.421766][ C1] nf_hook_slow+0xd5/0x240 [ 194.421783][ C1] ipv6_rcv+0x1c7/0x220 [ 194.421803][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 194.421823][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 194.421842][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 194.421858][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 194.421872][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 194.421887][ C1] process_backlog+0x44b/0xae0 [ 194.421905][ C1] __napi_poll+0xd3/0x610 [ 194.421929][ C1] net_rx_action+0x584/0xce0 [ 194.421945][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 194.421959][ C1] ? sched_clock+0x44/0x60 [ 194.421976][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 194.422013][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 194.422031][ C1] handle_softirqs+0x1ae/0x630 [ 194.422052][ C1] ? wg_packet_tx_worker+0x265/0x4e0 [ 194.422075][ C1] __do_softirq+0xf/0x16 [ 194.422090][ C1] do_softirq+0xa6/0x100 [ 194.422109][ C1] [ 194.422114][ C1] [ 194.422119][ C1] ? __cfi_do_softirq+0x10/0x10 [ 194.422140][ C1] ? _raw_read_unlock_bh+0x2d/0x40 [ 194.422156][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1e0 [ 194.422179][ C1] ? wg_packet_tx_worker+0x265/0x4e0 [ 194.422201][ C1] __local_bh_enable_ip+0x74/0x80 [ 194.422220][ C1] wg_packet_tx_worker+0x354/0x4e0 [ 194.422244][ C1] process_scheduled_works+0x7d5/0x1020 [ 194.422268][ C1] worker_thread+0xc58/0x1250 [ 194.422291][ C1] kthread+0x2c7/0x370 [ 194.422313][ C1] ? __cfi_worker_thread+0x10/0x10 [ 194.422333][ C1] ? __cfi_kthread+0x10/0x10 [ 194.422354][ C1] ret_from_fork+0x64/0xa0 [ 194.422372][ C1] ? __cfi_kthread+0x10/0x10 [ 194.422399][ C1] ret_from_fork_asm+0x1a/0x30 [ 194.422421][ C1] [ 197.679335][ T1425] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 198.198718][ C1] net_ratelimit: 97798 callbacks suppressed [ 198.198745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.199072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 198.207733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.218926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 198.225636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.237625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 198.249594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.261529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0) [ 198.273499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.285992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:02:de:9f:13:e3, vlan:0)