last executing test programs: 4m5.204350723s ago: executing program 0 (id=1637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 4m5.034727276s ago: executing program 0 (id=1639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x20e, 0x0, 0x2886}]}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @none, 0x7}, 0xa) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) 4m5.015973917s ago: executing program 0 (id=1642): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000fffffffffffffffc00000040000180"], 0x54}}, 0x48002) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) (async) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) sendto$inet6(r0, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) (async) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 4m4.16490371s ago: executing program 0 (id=1659): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xc) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) keyctl$reject(0x13, r2, 0x1, 0xfffffffffffffffa, r1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 4m4.114675961s ago: executing program 0 (id=1660): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000500)={0x0, @adiantum}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) io_setup(0x4, &(0x7f0000000100)=0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x38, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) (async) r4 = socket(0x10, 0x2, 0x0) io_destroy(r1) (async) write(r4, &(0x7f0000000040), 0x0) (async) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'veth0_vlan\x00', 0x3e}) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x5da, 0x402400) r5 = socket$inet(0x2, 0xa, 0x1) recvmsg(r5, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)}, 0x0) 4m3.903290264s ago: executing program 0 (id=1663): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) fadvise64(r0, 0x7, 0x0, 0x1) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) read$FUSE(r3, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) 4m3.880679394s ago: executing program 32 (id=1663): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) fadvise64(r0, 0x7, 0x0, 0x1) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) read$FUSE(r3, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) 3m52.741790843s ago: executing program 2 (id=1880): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write(r4, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0b", 0x72) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@arm64={0xfa, 0xe0, 0xa, '\x00', 0x161e}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3m52.666485074s ago: executing program 2 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="003978003ca8682ce14299c7c1fefe6b0766d100ed0414effe"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) (async) r4 = epoll_create1(0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4081, 0xff1}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/101, 0x65}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000280)=""/79, 0x4f}], 0x8}, 0xd}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2140, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80000002}) (async) mmap(&(0x7f0000425000/0x4000)=nil, 0x4000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) (async) getdents(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 3m52.642731105s ago: executing program 2 (id=1883): r0 = socket$inet6(0xa, 0x400000000001, 0x0) eventfd2(0x6, 0x0) r1 = syz_io_uring_setup(0x10278e, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001180)={{r1}, "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"}) syz_open_dev$usbfs(0x0, 0xc36, 0x400800) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="1e4e", 0x2, 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0) dup2(r2, r2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) pipe(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x200000000622c, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) sendto$inet6(r0, &(0x7f0000000200)="66325500993385fbfeffffff9e10410353cb4fb75af647ec922d2595add8e37bdf7ba0f270f80d1767ff0054e292e2902cf762464c320af64dad21683760f2b5c1a209d519681ae7f1fdc189c231103faba693dbfe35aa58354afd276e6a823c2f1352ed39466ec53451d1a6e4cf11d164cc1c0a048b42da940c36894779a1d190400eb0df49a76b55fb6fe628bd7654d8034e62b770b89e5d976dc66f1564", 0xffffffffffffff31, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/218, 0x40, 0x0, 0x0, 0x11}, &(0x7f0000000080)=0x40) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) timer_getoverrun(r4) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r9, 0x99b33000) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) 3m51.585255141s ago: executing program 2 (id=1911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x9, 0xc, {{0x5, 0x4, 0x3, 0x17, 0x14, 0x64, 0x0, 0xc5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x2c}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000002d00)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000c80)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.457542254s ago: executing program 2 (id=1913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3m51.437359844s ago: executing program 2 (id=1916): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) (async) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x9280, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x110) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="003950323030302eaa77ac933589987aa14c000000000000002300000000"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="003950323030302eaa77ac933589987aa14c000000000000002300000000"], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="dedf23a33b5f7f04984c708c5d30206c28a8cef82116331d862136a66ca646da186095554f5b4e418c9ab322a48f0a0f10a5a0c60ce34cdbf02fcbc90af719c2a1856e698ed3bb3065aa0a2d9973dff07f31c89db8caeb9a8c32305c8c21c71b41b7b27762486e45cfcbb265869cb7803ffbae17ec391645e7832335700c7af8c0d0ea04d873412d1a526c8c1cf80633efb0501f1fea0c302561aa9b69fa34e011"], 0xb0) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="dedf23a33b5f7f04984c708c5d30206c28a8cef82116331d862136a66ca646da186095554f5b4e418c9ab322a48f0a0f10a5a0c60ce34cdbf02fcbc90af719c2a1856e698ed3bb3065aa0a2d9973dff07f31c89db8caeb9a8c32305c8c21c71b41b7b27762486e45cfcbb265869cb7803ffbae17ec391645e7832335700c7af8c0d0ea04d873412d1a526c8c1cf80633efb0501f1fea0c302561aa9b69fa34e011"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000f00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r7, 0x5401, &(0x7f0000000100)) ioctl$TCGETS(r2, 0x5401, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002f80)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r3, &(0x7f0000002f80)={0x8, {"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", 0x1000}}, 0x1006) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002f40)=ANY=[@ANYRES8=r6, @ANYRESOCT=0x0, @ANYRES8, @ANYRESOCT=r1], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @any, 0x810, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0xf, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 3m35.540307318s ago: executing program 33 (id=1916): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) (async) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x9280, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x110) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="003950323030302eaa77ac933589987aa14c000000000000002300000000"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="003950323030302eaa77ac933589987aa14c000000000000002300000000"], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="dedf23a33b5f7f04984c708c5d30206c28a8cef82116331d862136a66ca646da186095554f5b4e418c9ab322a48f0a0f10a5a0c60ce34cdbf02fcbc90af719c2a1856e698ed3bb3065aa0a2d9973dff07f31c89db8caeb9a8c32305c8c21c71b41b7b27762486e45cfcbb265869cb7803ffbae17ec391645e7832335700c7af8c0d0ea04d873412d1a526c8c1cf80633efb0501f1fea0c302561aa9b69fa34e011"], 0xb0) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="dedf23a33b5f7f04984c708c5d30206c28a8cef82116331d862136a66ca646da186095554f5b4e418c9ab322a48f0a0f10a5a0c60ce34cdbf02fcbc90af719c2a1856e698ed3bb3065aa0a2d9973dff07f31c89db8caeb9a8c32305c8c21c71b41b7b27762486e45cfcbb265869cb7803ffbae17ec391645e7832335700c7af8c0d0ea04d873412d1a526c8c1cf80633efb0501f1fea0c302561aa9b69fa34e011"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000f00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r7, 0x5401, &(0x7f0000000100)) ioctl$TCGETS(r2, 0x5401, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002f80)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r3, &(0x7f0000002f80)={0x8, {"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", 0x1000}}, 0x1006) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002f40)=ANY=[@ANYRES8=r6, @ANYRESOCT=0x0, @ANYRES8, @ANYRESOCT=r1], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @any, 0x810, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0xf, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 1m2.611683247s ago: executing program 3 (id=3486): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) read(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x9}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) unshare(0x22020600) (async) setreuid(0x0, 0xee01) (async, rerun: 32) fchdir(r1) (async, rerun: 32) readahead(r0, 0x1, 0x79844e1c) 1m2.153960765s ago: executing program 4 (id=3489): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYRES16=0x0, @ANYRES32]) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x94, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x4008004) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0xf}], 0x1, 0x10022, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x5, 0x20000800, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 1m2.057863706s ago: executing program 4 (id=3490): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, &(0x7f0000000140)=0xa7, 0x4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000580)) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r6, 0xfffffffffffffc01, 0x0) tee(r0, r6, 0x60000000000, 0x0) 1m1.706795342s ago: executing program 3 (id=3495): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs(r0, &(0x7f0000000040)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 1m1.617067753s ago: executing program 3 (id=3496): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='fdinfo/3\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000070000040", @ANYRESHEX=r1]) capset(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = getpid() (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x48000, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)=""/47, 0x2f}, {&(0x7f0000001b40)=""/4083, 0xff3}, {&(0x7f0000000ac0)=""/238, 0xee}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/245, 0xf5}, {&(0x7f0000000480)=""/51, 0x33}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x3e}], 0x2, 0x97e3f8286987426c, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000246000/0x1000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) (async) sendmsg$unix(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)="837a243fb8", 0x5}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x8000}, 0x4010001) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x91a81000) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r9, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.510260205s ago: executing program 3 (id=3498): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x501400, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r1, 0x4d75d000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x6, &(0x7f0000000000)={0x0, 0x28, 0x2, @tid=r4}, &(0x7f00000020c0)) 1m1.481553526s ago: executing program 3 (id=3500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000240)=0xe9, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000001b80)=0x7ff, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x120, 0x4) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000100), 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000180)=""/82, 0x52}], 0x5, &(0x7f0000000200)=""/37, 0x25}, 0x5}], 0x1, 0x40000000, &(0x7f0000000640)={0x0, 0x3938700}) tee(r0, r2, 0xa086, 0x2) 1m1.414611156s ago: executing program 3 (id=3501): io_setup(0x2e, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x1, &(0x7f0000000040)=0x0) io_setup(0x64, &(0x7f0000000080)=0x0) io_destroy(r2) io_getevents(r1, 0xffff, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = syz_io_uring_complete(0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f00000001c0)="4035d96edae3b797552c03cd1601a68757ff3466038f1002cbde132207e62af55d7644886094be813a7b34066f579c4d9a102cb9c21e24dbec11f7162912944d4ffbcf6df66dcfbf139f868821d0428d172c1aa128fea90e560f6d65eed75ea9890c115fd099b9c144057f33b1a7af52ead697beac39f67b25cb1964750ffb9086efef2d18f999b9b7438f78e71e8bd99d9ab5509fd13acf2a85ce9b8ecb93be0e83cd76d26ce390b57c4e305c97d9ab40f996e145eb80e42e9971cdca6b1cb4a121a9ba27ca610d782e2e7d8d3ab9432cf1623b92e5166e941490a7699a7cf22a255ed51567a66ba81e842d4e5bf8cff7ce1739", 0xf4, 0x0, 0x0, 0x2, r4}, &(0x7f0000000300)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x3, r4, &(0x7f0000000340)="546649c2ae5b50b6b3377e2ff5cfbe94274784abf88bd8e979d53d8900259effc7d5b94eab7595f036d860a22bcbde5ab05453fc2fd20e970696f9986332e282cfeaea4e636f9e860daa2d11858ef827655e4b2b8571faf86041bfd8b7d31f613e531ded1cc97471160531552b3b9a0312a0f18b13f6ece7e3842b12322cf7ed8a58969da8b8a7bb9c12834a2c327fa4", 0x90, 0x80000001}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000000440), 0x0, 0xeda, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f00000004c0)="7e2317090506f33c16fff7f68507d3648795e798eff835e71f45c92cc60574a075e81dc928b7c66cdda7ce628f2af1ae37eb8e154f5d20e1b9d67d35770af15b70b90747ffd10dc4c53e63f80d05a2dc374977b046f42e423581571dbdf837c37912a1d8caaa51982a19957c9aa6c11147aa80fffde8103e8deef8cdca367293d2b6c962857685b10308a4560eee8de5e699c75f8ce05294aedbcf0570963e851a3f2ee433f3860564552d24993208d3d1b491119b17bc29709c572dd455f59799afa50a0ea77f19469c905c8b03185d6fa7c69e1f638c8cd4bc0fab5397753369e276d2ea1b8fac383cd9d463", 0xed, 0x4, 0x0, 0x1, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x6, r3, &(0x7f0000000600)="abb2baa3ed7d", 0x6, 0x0, 0x0, 0x2, r4}]) r6 = openat(r4, &(0x7f00000006c0)='./file0\x00', 0x410080, 0x11d) io_setup(0x3f, &(0x7f0000000700)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) io_getevents(r2, 0x18000, 0x6, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000840)={r8, r9+10000000}) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000880)) io_destroy(r1) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x101, r6, &(0x7f00000008c0)="eaa37924295f650780f802f4e25c27cde46320331e532309ff8a105624e081e81315a994b4294757221f55b26877a89a2c379817c4cd4bad73e2cab4d5c95156ff40475b3294de8e68156f6798e2b138d9e33398a7bf476b63c3948df2b3d96ef1aac41a50787641f6", 0x69, 0x67, 0x0, 0x2, r4}]) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000009c0)='wg2\x00', 0x4) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000a40)={{r10, r11+10000000}, {0x0, 0x3938700}}, &(0x7f0000000a80)) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x1d1101, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) io_submit(r7, 0x5, &(0x7f0000000ec0)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x9c, r4, &(0x7f0000000ac0)="2944ac1c2102069432ffd429b7bd1a2040d99ab3b8a602c231b6fb92e4dc64f5c001effb932b0b78b67f4e1ee142d94666b88fa8295598eddb", 0x39, 0x0, 0x0, 0x0, r6}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x8, 0xfffb, r12, &(0x7f0000000b80)="3333ce6197e90bb20247773b6996424975faf0c1185b9e9837188a248c637f79ff5143349714069d813c43b4d7ad753a3eb4d7a3b92d15a73f7a3f", 0x3b, 0x4, 0x0, 0x2, r4}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f0000000c00)="7d255dd29fb701f9245b445c403034739bfd188c5e775a57d52903746b1127d227e1691211f2043673e48c725e2ca9f4b5b552a027a43a1ca029d67ad317dcac7faf94b08f34ca7c156b6f50b322c695ac080f5db5111a42c3e095e2298e99e58e06450f80fdc05639a662a58d1c3f0ff4f065c56b3c012ed2d26aedda2d0dac1ccbd518244c5bc78cfb6ffed5b6eb75eb2f5ec2d324b702e1a3c2322e71127eaa830f5553d61c7859f323b5575d2dc79f6904b5f62ad362377aa66aa81943e5225a29a88e3d6aa67576942294066d7bee3625f334a4bb5c71daacd35579a4ef66a1f871f44f0899", 0xe8, 0x8000, 0x0, 0x3, r4}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa1, r5, &(0x7f0000000d40)="5e882907beb09543ac8f7424a23a7087e0e1a117285a5a10ffdc8cce2c64531db72520f3d1839c9ad7f54a93b1258c0f170d474ad2ae86314f9097c4cbfb5e9f93a8c50b24855a384901b73e65cb215f9b9263c43113edd09142b860f513dcba29673d09838e96644f9ccfd2c85c31f6f6faf76b", 0x74, 0x2, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0xf, 0x6, r13, &(0x7f0000000e40), 0x0, 0x3, 0x0, 0x1, r4}]) write$binfmt_script(r6, &(0x7f0000000f00)={'#! ', './file0', [{0x20, '\'['}, {0x20, '/dev/zero\x00'}, {0x20, '}*'}, {0x20, '/dev/zero\x00'}, {0x20, '$z},\xe3%'}, {0x20, 'wg2\x00'}, {}, {0x20, '@-%^'}], 0xa, "dc68618e3fc2ac8dc8f59bccdddf6c25d081616617ddcf5017c75a20e939bcd12f36f1455169857ba8771321ec8176ef49718e983f216638c008e022333e4a140d2129af"}, 0x7d) io_submit(0x0, 0x1, &(0x7f0000001080)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x4, r5, &(0x7f0000000f80)="971d9e3287b154bd0ac1a20a614770f9735ecc13565d591bb81387856c52ee1974f1e8939536b67907a69732cc90c1ee0f9dfaf2dce7eabb40378ec024a69728e8efdf7b2a27ae73f23720a9c7e150d71148368640c1fd60bfe5d63c4faacec55e3b588dced5708f9dc136d08196d0196fd94797a698053d6a1e4719aa5c50b490b89f0f", 0x84, 0x43c1a84e, 0x0, 0x1}]) r14 = syz_usb_connect$cdc_ncm(0x5, 0xa1, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x1, 0x30, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ')'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xb}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xfa63, 0x8, 0x200}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x39, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x16, 0xf8, 0x4}}}}}}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x200, 0x7, 0x6, 0x8, 0x8, 0x5}, 0xf, &(0x7f00000011c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x3, 0x3}]}, 0x6, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x813}}, {0x1e, &(0x7f0000001280)=@string={0x1e, 0x3, "dac657115df7b903e9e93a9d681672389bd228a46d081ca73768772c"}}, {0x70, &(0x7f00000012c0)=@string={0x70, 0x3, "1163b856accf00da39e6183c7e1c85e76d17f2ba9fb31b10791a8a9e6a0eef94218da476394f043c774aeeeaa54d2d13233406bf2eb1bf8ddab0a0b52502d9b06161e1d7139509b412a7bcf51c04cdfd4933b7277b583702006d3a7a4f2a2d505b04ee19c79e82b596d11fe4744c"}}, {0xf8, &(0x7f0000001340)=@string={0xf8, 0x3, "a93aef1826af8ee776f49623e72088d1d52fda34abc112e2a1facfc15ca02b4c30da25187c3c6f7adbcd08e1724c0528cf117236fb846b2403192c01942f6974c74c18a58a11923cddc5ba74e53eac579f579568c43784df1b98de8e857bbf7f09e8f0a48624ec9724bca33f99cf8c26d169e8ac863f1dc409c5955a9bcd325b5c282bccd0019b908140dbd335ba51452e7958fec1bbb697ff6793d486eb0d28fcd15ae7ad2e978ba5bc147d19ede328c8d66e5add5a98b36bd1700de6ca9f28d116bec20aae65fafd3e72f205435518c64c679aeac88e45f895f34fe3c5aadc7c60e79c24a79f0a496f1a75312244770b75a7bff472"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io(r14, &(0x7f00000017c0)={0x2c, &(0x7f0000001500)={0x20, 0xc, 0xd0, {0xd0, 0x3, "1091e3c0e2e55a0554da53c3073fad45289a262563586b131333f3f0849e1d63e20d310c16dec751e62d092b70712651c43956b6819a1e0eb09e13a70a61e7c19bbcae1d12376ef2319012af2afe1284ef95c9ad3de4b8481f272af0d234dcaf716329acae076000a9a260834d1a68bf564cae7f92748484140c807704b32e914405be85f315426c30f7768fb5ee8bbe68b311b2ae4eb00876afa0019ab5eeea3e12a5418e0f484e049056ce25700eccef137e4b152055ebd38eecba29aa086fc090f7392f0d78c6f497a0986655"}}, &(0x7f0000001600)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "bd3455844221310571527e7b49f52963332930e7765d8db846c78ca05c9e393732aa28c2cf6d8cab1672d5f7125569c9f961c6c71fa2ddd699ec834d56414597a3ef94a5e7df047b09e90a185ea68a7bfd38f8621f25bbefe90c886b1bad16c558876f15c9525368837b9a9e76adc927707d1f1dd4a481bdf71b57a7f760d565e90c2a5d1e80190607454de6320cc16af887718f7a5b01c925c093907cdabd9404d1c6849c6f247e2d8c2f8cb4c57f1bbff2c96f09f0380f9aa305485dfab9cd0b9d98a054fe6cd53b4a29d4c96bc05369481612e78d55cb39df29"}}, &(0x7f0000001700)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x3, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x0, 0x35, 0x9}]}}, &(0x7f0000001740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x0, 0x7, "a58d3fc7", "05051d68"}}, &(0x7f0000001780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x96, 0x1, 0x19, 0x3ff, 0x1}}}, &(0x7f0000001c40)={0x84, &(0x7f0000001800)={0x40, 0xc, 0x4a, "b98d5f24213a00476488e9cb5b308cf8ce7b9a30f09e34604bb0bc53c8f3175e75b789439648ce672fb2f8d4dd0e46f3930ecd33e6cd51f285a3ae4ff24ec3def7738a0bcaabe298186a"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0xc3}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001900)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf0f0]}}, &(0x7f0000001980)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000019c0)={0x40, 0x9, 0x1, 0x9e}, &(0x7f0000001a00)={0x40, 0xb, 0x2, "9577"}, &(0x7f0000001a40)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001a80)={0x40, 0x13, 0x6, @random="158adb60a0df"}, &(0x7f0000001ac0)={0x40, 0x17, 0x6, @random="d914cecffef8"}, &(0x7f0000001b00)={0x40, 0x19, 0x2, "f345"}, &(0x7f0000001b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001b80)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000001bc0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000001c00)={0x40, 0x21, 0x1, 0x8}}) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) dup3(r4, r15, 0x0) 1m0.669225518s ago: executing program 4 (id=3512): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000a1c9055ba167c1eec27cfd574b886d5d6e36ea175c62d81aba7d9d58b995229ac82981a165b6c4d9254806c128016d9ba3c5af3e35ab7d7e744715a460aceb5dddd4c08ee2181d77ee9004f032af4366d7f86de4c653f6f20f49922f86afb324b3b6e42a5bb977f703a732912ee6b12331f8a9f2cdc0736243d195aeb5daa9ffaae0f396532d39ab44784a46f71b2e6f19751508630b803040b84a6ba6fcf834c237109852949517a95f5037388c06ad7424ff5b9db0e57b7c53187635d1231a8c7491b6c78aa4aaa5fa843b000eb93f1a866ef752b5ea6c8e5e", @ANYRES16=r2, @ANYBLOB="07062abd7000000000002d00000005002b000200000008002f00a96907460a0001007770616e310000000c0005000000000000000000"], 0x3c}}, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 1m0.646001619s ago: executing program 4 (id=3513): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f0000000040)="8f40000008000000000000000000000000005f0756e8888a", 0x18) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 59.222282201s ago: executing program 4 (id=3514): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x63, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000800)="08001a49a294099e0cef", 0xa}, {0x0}], 0x2}, 0x24008004) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75d000) 56.18382677s ago: executing program 1 (id=3518): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3a3}) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3a3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = syz_usb_connect$cdc_ecm(0x2, 0xeb, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x1, 0x1, 0xff, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xa, 0x24, 0x6, 0x0, 0x0, "9824b10ee5"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfff2, 0x1ff, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xcfd}, @mdlm_detail={0x4d, 0x24, 0x13, 0x12, "52ec1088176bb9e9ac989a12a77a202397448ce4f367aed3e048fb57379571471888a12c6288cbaceac91b2294d417dff1aacca0c6b6cb7c71d5b46892df93c3c95ec1b4a8525ab040"}, @mdlm={0x15, 0x24, 0x12, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0xc, 0x8}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x0, 0x2f, 0x8, 0x10, 0xe}, 0xc, &(0x7f00000003c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0xc, 0x4}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x457}}, {0x61, &(0x7f0000000680)=@string={0x61, 0x3, "4a5edbb08f55d5273f95c2ac1f69031d57a1f610f215d253954a0c1f7a7b96521dabc449514b1844de07c6c6f50886527732bb57d44fcfa8042482f793a765346006d21da10eda56dd87ae68576e7aa84ab53386e2213702033fdea33e9e05"}}, {0xaa, &(0x7f0000000700)=@string={0xaa, 0x3, "9c2b416b6bb84b3d83f6c79b97555b9431109535544763427f19632eb5662285e5d501c8d649039fe1ac63f963d58570930f93e40655881065b92347fcf8967a06b65d468d8771dc523a86d687cddc6d94f42d6a4c1d72d348587a75c82ff0a66cef11e3245a37f37a1fc08bf4bdcec767d01a55bce000cdcaa3da978ce531fe133544098816129a9f14d05be6b8acc05a63e5a2c196fd86d43c4f8c74ff9840d03da70e102c3adc"}}, {0x3e, &(0x7f0000000440)=@string={0x3e, 0x3, "6f0ccd1caa00d3e037d40502eadca90ed08b8d9acda1cab4df2279c3b208de30746194cf64e4ebd67ab69ccfb793b0d43f82b4aa5656e5cbecc14abd"}}, {0x6b, &(0x7f00000007c0)=@string={0x6b, 0x3, "b56696c9730fb9000d3e4ddfbfea84c1edb85b95d44807ab786085ba0d4372892fa15b7c8fa382a8756243d784728bab16896b9e77483cdb19fc3cd65891a8fe4321d67571f55d18339033b0377cbf0b7383f91db420f3874cb428695961105add6d3faf02a7e2c0ce"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000d80)={0x14, &(0x7f00000008c0)={0x40, 0x10, 0x58, {0x58, 0x5, "e4a8fdc10d555bf2b9052da3ba367e0b77ef88fc510a442909433e763ee4cc05c803621e7c2ceef4e15536d25d8d99b373123543e08468456a41b6f91714fa86fa54cab3b9cb021e1ae5215f5c46a1a309521f03b1e6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x1c, &(0x7f0000000dc0)={0x0, 0x11, 0xb, "487d6d22c8f6849ea98090"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x6}}) (async) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000d80)={0x14, &(0x7f00000008c0)={0x40, 0x10, 0x58, {0x58, 0x5, "e4a8fdc10d555bf2b9052da3ba367e0b77ef88fc510a442909433e763ee4cc05c803621e7c2ceef4e15536d25d8d99b373123543e08468456a41b6f91714fa86fa54cab3b9cb021e1ae5215f5c46a1a309521f03b1e6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x1c, &(0x7f0000000dc0)={0x0, 0x11, 0xb, "487d6d22c8f6849ea98090"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x6}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r8, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x639, 0x0, 0x7a31}]}) (async) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x639, 0x0, 0x7a31}]}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x9f1, 0x0, 0x3}, {0xb44, 0x0, 0x922}]}) (async) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x9f1, 0x0, 0x3}, {0xb44, 0x0, 0x922}]}) 54.142687633s ago: executing program 1 (id=3519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001140)={'pimreg\x00', 0x1fff}) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x28, 0x5, 0x1) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000002340)={0xffffffffffffffff, 0x1, 0x4000, 0x1000000000000}) close_range(r3, r4, 0x2) recvmsg$unix(r3, &(0x7f0000002300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/28, 0x1c}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/190, 0xbe}], 0x5, &(0x7f00000022c0)}, 0x40002041) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x134) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002380), 0x4c000, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r9, 0x4018aee2, &(0x7f0000000400)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000300)={0x7, 0x6}}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000023c0)=ANY=[@ANYRES64=r6]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000002f40)=""/205, 0xcd}, {&(0x7f00000007c0)=""/4077, 0xfed}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) close_range(r1, r2, 0x0) 53.522415393s ago: executing program 4 (id=3520): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async, rerun: 32) r6 = dup(r5) (rerun: 32) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x8084000, 0x2000, &(0x7f000000b000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="610f78a80f58d9ec0f060fc75e09ff29baf80c66b812e7af8066efbafc0cec263e6f2ef30f1a0966b80500000066b9b6ad00000f01d9", 0x36}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 64) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) sendmmsg$inet6(r9, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) (async) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) (async) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="049fcefd2946c3f2c3deeb710f3237dd1bcc1a9a0835ccfd5dee43679a113597f057e0f19b36fc6da47f5e77368d7b77d9e65e3dfa843cd10fdb1e5c5026f2f4a02f47f8d9976e0ce5cb338700fa5fdc60c8b8c413", 0x55}], 0x1}}], 0x1, 0x2604082c) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x7}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="440f20c03509000000440f22c067460f2202b9800000c00f3235000100000f300f381cf9b9800000c00f3235000400000f30660fd6cac4c2858e0e66b857000f00d866b80e018ee066baf80cb8c6e6418cef66bafc0c66ed", 0x58}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) 51.742621381s ago: executing program 5 (id=3521): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e1d, @multicast2}, {0x306, @remote}, 0x28, {0x2, 0x4e20, @empty}}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 51.168962961s ago: executing program 1 (id=3522): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prctl$PR_CAPBSET_READ(0x17, 0xcf) preadv(r0, &(0x7f0000000140), 0x0, 0x6, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0xd, 0x12) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x63, 0xffff, 0x7, 0x8, 0xf, 0xffffffffffffffff}) prlimit64(r4, 0xe, &(0x7f0000000000)={0x3, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x1e72, &(0x7f00000000c0)={0x0, 0x321a, 0x40, 0x3, 0x147, 0x0, r3}, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffc, 0xd, 0x0, 0x0, &(0x7f0000048000)=0x2004002, 0x300) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r7, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 49.671763965s ago: executing program 1 (id=3523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x4, 0x5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x2815}, 0x800) syz_io_uring_setup(0xcbf, &(0x7f0000000140)={0x0, 0x1b30, 0x40, 0x3, 0x4256}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 46.055929662s ago: executing program 34 (id=3501): io_setup(0x2e, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x1, &(0x7f0000000040)=0x0) io_setup(0x64, &(0x7f0000000080)=0x0) io_destroy(r2) io_getevents(r1, 0xffff, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = syz_io_uring_complete(0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f00000001c0)="4035d96edae3b797552c03cd1601a68757ff3466038f1002cbde132207e62af55d7644886094be813a7b34066f579c4d9a102cb9c21e24dbec11f7162912944d4ffbcf6df66dcfbf139f868821d0428d172c1aa128fea90e560f6d65eed75ea9890c115fd099b9c144057f33b1a7af52ead697beac39f67b25cb1964750ffb9086efef2d18f999b9b7438f78e71e8bd99d9ab5509fd13acf2a85ce9b8ecb93be0e83cd76d26ce390b57c4e305c97d9ab40f996e145eb80e42e9971cdca6b1cb4a121a9ba27ca610d782e2e7d8d3ab9432cf1623b92e5166e941490a7699a7cf22a255ed51567a66ba81e842d4e5bf8cff7ce1739", 0xf4, 0x0, 0x0, 0x2, r4}, &(0x7f0000000300)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x3, r4, &(0x7f0000000340)="546649c2ae5b50b6b3377e2ff5cfbe94274784abf88bd8e979d53d8900259effc7d5b94eab7595f036d860a22bcbde5ab05453fc2fd20e970696f9986332e282cfeaea4e636f9e860daa2d11858ef827655e4b2b8571faf86041bfd8b7d31f613e531ded1cc97471160531552b3b9a0312a0f18b13f6ece7e3842b12322cf7ed8a58969da8b8a7bb9c12834a2c327fa4", 0x90, 0x80000001}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000000440), 0x0, 0xeda, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f00000004c0)="7e2317090506f33c16fff7f68507d3648795e798eff835e71f45c92cc60574a075e81dc928b7c66cdda7ce628f2af1ae37eb8e154f5d20e1b9d67d35770af15b70b90747ffd10dc4c53e63f80d05a2dc374977b046f42e423581571dbdf837c37912a1d8caaa51982a19957c9aa6c11147aa80fffde8103e8deef8cdca367293d2b6c962857685b10308a4560eee8de5e699c75f8ce05294aedbcf0570963e851a3f2ee433f3860564552d24993208d3d1b491119b17bc29709c572dd455f59799afa50a0ea77f19469c905c8b03185d6fa7c69e1f638c8cd4bc0fab5397753369e276d2ea1b8fac383cd9d463", 0xed, 0x4, 0x0, 0x1, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x6, r3, &(0x7f0000000600)="abb2baa3ed7d", 0x6, 0x0, 0x0, 0x2, r4}]) r6 = openat(r4, &(0x7f00000006c0)='./file0\x00', 0x410080, 0x11d) io_setup(0x3f, &(0x7f0000000700)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) io_getevents(r2, 0x18000, 0x6, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000840)={r8, r9+10000000}) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000880)) io_destroy(r1) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x101, r6, &(0x7f00000008c0)="eaa37924295f650780f802f4e25c27cde46320331e532309ff8a105624e081e81315a994b4294757221f55b26877a89a2c379817c4cd4bad73e2cab4d5c95156ff40475b3294de8e68156f6798e2b138d9e33398a7bf476b63c3948df2b3d96ef1aac41a50787641f6", 0x69, 0x67, 0x0, 0x2, r4}]) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000009c0)='wg2\x00', 0x4) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000a40)={{r10, r11+10000000}, {0x0, 0x3938700}}, &(0x7f0000000a80)) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x1d1101, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) io_submit(r7, 0x5, &(0x7f0000000ec0)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x9c, r4, &(0x7f0000000ac0)="2944ac1c2102069432ffd429b7bd1a2040d99ab3b8a602c231b6fb92e4dc64f5c001effb932b0b78b67f4e1ee142d94666b88fa8295598eddb", 0x39, 0x0, 0x0, 0x0, r6}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x8, 0xfffb, r12, &(0x7f0000000b80)="3333ce6197e90bb20247773b6996424975faf0c1185b9e9837188a248c637f79ff5143349714069d813c43b4d7ad753a3eb4d7a3b92d15a73f7a3f", 0x3b, 0x4, 0x0, 0x2, r4}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f0000000c00)="7d255dd29fb701f9245b445c403034739bfd188c5e775a57d52903746b1127d227e1691211f2043673e48c725e2ca9f4b5b552a027a43a1ca029d67ad317dcac7faf94b08f34ca7c156b6f50b322c695ac080f5db5111a42c3e095e2298e99e58e06450f80fdc05639a662a58d1c3f0ff4f065c56b3c012ed2d26aedda2d0dac1ccbd518244c5bc78cfb6ffed5b6eb75eb2f5ec2d324b702e1a3c2322e71127eaa830f5553d61c7859f323b5575d2dc79f6904b5f62ad362377aa66aa81943e5225a29a88e3d6aa67576942294066d7bee3625f334a4bb5c71daacd35579a4ef66a1f871f44f0899", 0xe8, 0x8000, 0x0, 0x3, r4}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa1, r5, &(0x7f0000000d40)="5e882907beb09543ac8f7424a23a7087e0e1a117285a5a10ffdc8cce2c64531db72520f3d1839c9ad7f54a93b1258c0f170d474ad2ae86314f9097c4cbfb5e9f93a8c50b24855a384901b73e65cb215f9b9263c43113edd09142b860f513dcba29673d09838e96644f9ccfd2c85c31f6f6faf76b", 0x74, 0x2, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0xf, 0x6, r13, &(0x7f0000000e40), 0x0, 0x3, 0x0, 0x1, r4}]) write$binfmt_script(r6, &(0x7f0000000f00)={'#! ', './file0', [{0x20, '\'['}, {0x20, '/dev/zero\x00'}, {0x20, '}*'}, {0x20, '/dev/zero\x00'}, {0x20, '$z},\xe3%'}, {0x20, 'wg2\x00'}, {}, {0x20, '@-%^'}], 0xa, "dc68618e3fc2ac8dc8f59bccdddf6c25d081616617ddcf5017c75a20e939bcd12f36f1455169857ba8771321ec8176ef49718e983f216638c008e022333e4a140d2129af"}, 0x7d) io_submit(0x0, 0x1, &(0x7f0000001080)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x4, r5, &(0x7f0000000f80)="971d9e3287b154bd0ac1a20a614770f9735ecc13565d591bb81387856c52ee1974f1e8939536b67907a69732cc90c1ee0f9dfaf2dce7eabb40378ec024a69728e8efdf7b2a27ae73f23720a9c7e150d71148368640c1fd60bfe5d63c4faacec55e3b588dced5708f9dc136d08196d0196fd94797a698053d6a1e4719aa5c50b490b89f0f", 0x84, 0x43c1a84e, 0x0, 0x1}]) r14 = syz_usb_connect$cdc_ncm(0x5, 0xa1, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x1, 0x30, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ')'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xb}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xfa63, 0x8, 0x200}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x39, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x16, 0xf8, 0x4}}}}}}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x200, 0x7, 0x6, 0x8, 0x8, 0x5}, 0xf, &(0x7f00000011c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x3, 0x3}]}, 0x6, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x813}}, {0x1e, &(0x7f0000001280)=@string={0x1e, 0x3, "dac657115df7b903e9e93a9d681672389bd228a46d081ca73768772c"}}, {0x70, &(0x7f00000012c0)=@string={0x70, 0x3, "1163b856accf00da39e6183c7e1c85e76d17f2ba9fb31b10791a8a9e6a0eef94218da476394f043c774aeeeaa54d2d13233406bf2eb1bf8ddab0a0b52502d9b06161e1d7139509b412a7bcf51c04cdfd4933b7277b583702006d3a7a4f2a2d505b04ee19c79e82b596d11fe4744c"}}, {0xf8, &(0x7f0000001340)=@string={0xf8, 0x3, "a93aef1826af8ee776f49623e72088d1d52fda34abc112e2a1facfc15ca02b4c30da25187c3c6f7adbcd08e1724c0528cf117236fb846b2403192c01942f6974c74c18a58a11923cddc5ba74e53eac579f579568c43784df1b98de8e857bbf7f09e8f0a48624ec9724bca33f99cf8c26d169e8ac863f1dc409c5955a9bcd325b5c282bccd0019b908140dbd335ba51452e7958fec1bbb697ff6793d486eb0d28fcd15ae7ad2e978ba5bc147d19ede328c8d66e5add5a98b36bd1700de6ca9f28d116bec20aae65fafd3e72f205435518c64c679aeac88e45f895f34fe3c5aadc7c60e79c24a79f0a496f1a75312244770b75a7bff472"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io(r14, &(0x7f00000017c0)={0x2c, &(0x7f0000001500)={0x20, 0xc, 0xd0, {0xd0, 0x3, "1091e3c0e2e55a0554da53c3073fad45289a262563586b131333f3f0849e1d63e20d310c16dec751e62d092b70712651c43956b6819a1e0eb09e13a70a61e7c19bbcae1d12376ef2319012af2afe1284ef95c9ad3de4b8481f272af0d234dcaf716329acae076000a9a260834d1a68bf564cae7f92748484140c807704b32e914405be85f315426c30f7768fb5ee8bbe68b311b2ae4eb00876afa0019ab5eeea3e12a5418e0f484e049056ce25700eccef137e4b152055ebd38eecba29aa086fc090f7392f0d78c6f497a0986655"}}, &(0x7f0000001600)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "bd3455844221310571527e7b49f52963332930e7765d8db846c78ca05c9e393732aa28c2cf6d8cab1672d5f7125569c9f961c6c71fa2ddd699ec834d56414597a3ef94a5e7df047b09e90a185ea68a7bfd38f8621f25bbefe90c886b1bad16c558876f15c9525368837b9a9e76adc927707d1f1dd4a481bdf71b57a7f760d565e90c2a5d1e80190607454de6320cc16af887718f7a5b01c925c093907cdabd9404d1c6849c6f247e2d8c2f8cb4c57f1bbff2c96f09f0380f9aa305485dfab9cd0b9d98a054fe6cd53b4a29d4c96bc05369481612e78d55cb39df29"}}, &(0x7f0000001700)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x3, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x0, 0x35, 0x9}]}}, &(0x7f0000001740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x0, 0x7, "a58d3fc7", "05051d68"}}, &(0x7f0000001780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x96, 0x1, 0x19, 0x3ff, 0x1}}}, &(0x7f0000001c40)={0x84, &(0x7f0000001800)={0x40, 0xc, 0x4a, "b98d5f24213a00476488e9cb5b308cf8ce7b9a30f09e34604bb0bc53c8f3175e75b789439648ce672fb2f8d4dd0e46f3930ecd33e6cd51f285a3ae4ff24ec3def7738a0bcaabe298186a"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0xc3}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001900)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf0f0]}}, &(0x7f0000001980)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000019c0)={0x40, 0x9, 0x1, 0x9e}, &(0x7f0000001a00)={0x40, 0xb, 0x2, "9577"}, &(0x7f0000001a40)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001a80)={0x40, 0x13, 0x6, @random="158adb60a0df"}, &(0x7f0000001ac0)={0x40, 0x17, 0x6, @random="d914cecffef8"}, &(0x7f0000001b00)={0x40, 0x19, 0x2, "f345"}, &(0x7f0000001b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001b80)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000001bc0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000001c00)={0x40, 0x21, 0x1, 0x8}}) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) dup3(r4, r15, 0x0) 43.051329471s ago: executing program 5 (id=3525): stat(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4fea534d284fe21, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x22, 0x3f, 0x4, 0x20, 0x403, 0x7c90, 0xfe71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf4, 0x0, 0x0, 0x6b, 0xd6, 0x95}}]}}]}}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 42.691363256s ago: executing program 1 (id=3526): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x12, r1, 0x0) write$selinux_load(r0, 0x0, 0xffaf) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 40.760745027s ago: executing program 1 (id=3527): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x6}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}}, 0x20000000) lseek(r1, 0x10001, 0x0) 36.894870859s ago: executing program 35 (id=3520): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async, rerun: 32) r6 = dup(r5) (rerun: 32) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x8084000, 0x2000, &(0x7f000000b000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="610f78a80f58d9ec0f060fc75e09ff29baf80c66b812e7af8066efbafc0cec263e6f2ef30f1a0966b80500000066b9b6ad00000f01d9", 0x36}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 64) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) sendmmsg$inet6(r9, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) (async) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) (async) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="049fcefd2946c3f2c3deeb710f3237dd1bcc1a9a0835ccfd5dee43679a113597f057e0f19b36fc6da47f5e77368d7b77d9e65e3dfa843cd10fdb1e5c5026f2f4a02f47f8d9976e0ce5cb338700fa5fdc60c8b8c413", 0x55}], 0x1}}], 0x1, 0x2604082c) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x7}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="440f20c03509000000440f22c067460f2202b9800000c00f3235000100000f300f381cf9b9800000c00f3235000400000f30660fd6cac4c2858e0e66b857000f00d866b80e018ee066baf80cb8c6e6418cef66bafc0c66ed", 0x58}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) 32.160577895s ago: executing program 5 (id=3529): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10580, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000140), 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) close(r0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x8000000}, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="600200001200040025bd7000fcdbdf25210805054e224e220400000009000000ffffffff0004000008000000080000000500000009000000", @ANYRES32, @ANYRES16=r1], 0x260}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) dup3(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 24.810046542s ago: executing program 36 (id=3527): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x6}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}}, 0x20000000) lseek(r1, 0x10001, 0x0) 19.058838464s ago: executing program 5 (id=3531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "9a6ff2cf445e4afd79c9e80415b7"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xd3ee6b4fe6af634}, 0x4000800) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r1, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a1969c4b50"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2004c810}, 0x40011) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000340)={0xa, {0x3, 0x7, 0x55}}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x3c}}, 0x4040) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x158, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x620}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x783}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000008c0)={&(0x7f0000000740), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x9c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0xc5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1a8, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x963, 0x54}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x140, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x5a, 0x1, "e19c59ebdc2bb3fdfe00f69e7dd5d6174802c18b6bd2f2cdb5cdaa60edb8484c7e6e59050ef8c1c9b7a3c631bf5dcb35bdc140fc3d83b92aa8ba2af8f2aecbeb99d3c230682dc0131e00ba549a5a8fef9d42d9c2f876"}}, {0xd0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc9, 0x1, "ecc6c58f9f8b483e438ec3d5dae4f3bd9bce3370e030ba30230463c3fe3ea0c9295c9c68f3a997513dc7a0025b01e0c27dab3f261394864c66c4838d792d7eaa0e69a2b4d28d58a6c2b60ca669cb5197fcafe0b96bd7ef669a69b8e704a63ff81e5c71a80b427feaee3a53b818520cddcc3a32626959d2b4a69c3781fa56ea1298ff18ed799164af7c90f5bbad44524830e0d196b87f1fc6efc79d2ae9150993e160c2d33178e7b6a052c79ebf5ed16f3bd1e2344a64aeecaf6e7f7ade098361d4754ed58b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x96d}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x7c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004845) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r6) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x440001, 0x30, 0xc}, 0x18) r12 = openat(r11, &(0x7f0000000f00)='./file0\x00', 0x660440, 0xed) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x74, 0x3, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4000}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r9) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r13, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_IE={0x28, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x2, 0x3, 0x0, {0xc, 0xc, 0x0, 0xce, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x6}}, @mesh_id={0x72, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r14, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xb0, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x81}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xfffe}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x316}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0xb0}, 0x1, 0x0, 0x0, 0xc015}, 0x4801) getdents(r12, &(0x7f0000001380)=""/199, 0xc7) 17.269775133s ago: executing program 5 (id=3532): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.size\x00', &(0x7f0000000380)=""/233, 0xe9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 16.086405922s ago: executing program 5 (id=3533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5, 0x0, 0x2}]}) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x2, 0x10, 0x0, 0x6, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0xc, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10, 0x87}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0xffff1000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1a, 0x26, 0x1, 0x9, 0x2}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x4, 0x1]}) (async) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) 0s ago: executing program 37 (id=3533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5, 0x0, 0x2}]}) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x2, 0x10, 0x0, 0x6, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0xc, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10, 0x87}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0xffff1000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1a, 0x26, 0x1, 0x9, 0x2}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x4, 0x1]}) (async) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) kernel console output (not intermixed with test programs): 238.379317][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.379901][ T7566] rust_binder: Error while translating object. [ 238.398550][ T36] audit: type=1400 audit(1750826786.204:585): avc: denied { listen } for pid=7565 comm="syz.4.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.434952][ T7567] rust_binder: Error while translating object. [ 238.434993][ T7567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.458463][ T7566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.500028][ T7567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 238.548431][ T7566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 238.631554][ T7576] can0: slcan on ttyS3. [ 238.691232][ T7575] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 238.808081][ T7576] can0 (unregistered): slcan off ttyS3. [ 239.228376][ T516] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 239.358357][ T516] usb 6-1: device descriptor read/64, error -71 [ 239.598360][ T516] usb 6-1: device descriptor read/64, error -71 [ 239.848394][ T516] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 239.980340][ T36] audit: type=1400 audit(1750826787.804:586): avc: denied { connect } for pid=7641 comm="syz.3.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.002238][ T516] usb 6-1: device descriptor read/64, error -71 [ 240.100378][ T36] audit: type=1326 audit(1750826787.924:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7fc00000 [ 240.248924][ T7672] overlayfs: failed to clone upperpath [ 240.268354][ T516] usb 6-1: device descriptor read/64, error -71 [ 240.275018][ T7672] overlayfs: failed to resolve './file1': -2 [ 240.328778][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2425'. [ 240.379978][ T516] usb usb6-port1: attempt power cycle [ 240.768386][ T516] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 240.828527][ T516] usb 6-1: device descriptor read/8, error -71 [ 240.969989][ T516] usb 6-1: device descriptor read/8, error -71 [ 241.238360][ T516] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 241.307624][ T516] usb 6-1: device descriptor read/8, error -71 [ 241.449481][ T516] usb 6-1: device descriptor read/8, error -71 [ 241.581113][ T516] usb usb6-port1: unable to enumerate USB device [ 242.258367][ C0] net_ratelimit: 68551 callbacks suppressed [ 242.258386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.276705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 242.288860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.300984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.313114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 242.325238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 242.337351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.349522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.361781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.373847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.441424][ T7705] overlayfs: failed to resolve './file1': -2 [ 242.501179][ T36] audit: type=1400 audit(1750826790.324:588): avc: denied { listen } for pid=7706 comm="syz.5.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.085636][ T7712] binder: Bad value for 'defcontext' [ 243.206831][ T7699] overlayfs: statfs failed on './file0' [ 243.528782][ T7740] rust_binder: Error while translating object. [ 243.528823][ T7740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 243.536959][ T7741] overlayfs: failed to clone upperpath [ 243.551958][ T7740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 243.596675][ T7741] overlayfs: failed to resolve './file1': -2 [ 243.790723][ T36] audit: type=1400 audit(1750826791.614:589): avc: denied { ioctl } for pid=7766 comm="syz.1.2456" path="socket:[41497]" dev="sockfs" ino=41497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.818109][ T7769] netlink: 'syz.4.2455': attribute type 11 has an invalid length. [ 243.831136][ T7769] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 243.848357][ T7769] netlink: 3593 bytes leftover after parsing attributes in process `syz.4.2455'. [ 243.893455][ T7772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:397 [ 244.016453][ T36] audit: type=1400 audit(1750826791.834:590): avc: denied { read } for pid=7776 comm="syz.4.2459" path="socket:[41522]" dev="sockfs" ino=41522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.164621][ T7779] overlayfs: failed to resolve './file0/file0': -2 [ 244.460330][ T7793] exFAT-fs (rnullb0): invalid boot record signature [ 244.466961][ T7793] exFAT-fs (rnullb0): failed to read boot sector [ 244.485891][ T7793] exFAT-fs (rnullb0): failed to recognize exfat type [ 244.552624][ T36] audit: type=1400 audit(1750826792.374:591): avc: denied { execute } for pid=7794 comm="syz.1.2466" name="file0" dev="ramfs" ino=41563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 244.604142][ T36] audit: type=1400 audit(1750826792.374:592): avc: denied { execute_no_trans } for pid=7794 comm="syz.1.2466" path="/file0" dev="ramfs" ino=41563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 244.832329][ T7807] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 245.606729][ T7818] overlayfs: failed to clone upperpath [ 246.214737][ T7826] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 246.224481][ T7826] overlayfs: missing 'lowerdir' [ 246.604846][ T7840] overlayfs: failed to clone lowerpath [ 246.649092][ T7843] overlayfs: failed to clone upperpath [ 246.827931][ T7849] fuse: Bad value for 'fd' [ 246.926209][ T7859] binder: Unknown parameter '#ÊÏNƒQÒÈ}!÷ uâçF›£] [ 246.926209][ T7859] Òj½‹{Ödv³š©ÿ' [ 247.217723][ T7866] fuse: Unknown parameter 'ÿÿ0x0000000000000003' [ 247.268466][ C0] net_ratelimit: 81358 callbacks suppressed [ 247.268480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.286372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.298414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.310406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.322566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.334621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 247.346686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.358731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.370783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 247.382837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 248.156363][ T7884] tipc: Started in network mode [ 248.173680][ T7884] tipc: Node identity 9acce9105fce, cluster identity 4711 [ 248.191064][ T7884] tipc: Enabled bearer , priority 0 [ 248.318948][ T7884] tipc: Disabling bearer [ 248.822235][ T7898] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2505'. [ 250.179724][ T7949] SELinux: security_context_str_to_sid () failed with errno=-22 [ 250.284425][ T7951] fuse: Bad value for 'user_id' [ 250.308391][ T7951] fuse: Bad value for 'user_id' [ 250.324302][ T7951] tipc: Started in network mode [ 250.343518][ T7951] tipc: Node identity 4, cluster identity 4711 [ 250.363596][ T7951] tipc: Node number set to 4 [ 250.440452][ T7957] overlayfs: failed to clone upperpath [ 250.749180][ T7976] bpf: Bad value for 'uid' [ 250.757389][ T7975] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 250.798394][ T7975] rust_binder: Write failure EINVAL in pid:418 [ 250.941104][ T7987] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 250.968443][ T4840] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.976468][ T7987] rust_binder: Write failure EINVAL in pid:426 [ 250.976542][ T7987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:426 [ 251.385873][ T7992] futex_wake_op: syz.3.2539 tries to shift op by -1; fix this program [ 251.767096][ T8011] rust_binder: Error while translating object. [ 251.767141][ T8011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.788364][ T8011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:353 [ 252.278361][ C0] net_ratelimit: 64754 callbacks suppressed [ 252.278382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.305480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.317540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.329683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.341801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.353949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 252.366085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.378189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.390325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 252.402458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 252.416596][ T8026] sit0: entered promiscuous mode [ 252.459773][ T8026] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 252.529982][ T8026] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2551'. [ 253.028429][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.248730][ T8033] /dev/rnullb0: Can't lookup blockdev [ 253.306978][ T8037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 253.307014][ T8037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:428 [ 253.399837][ T8042] overlay: Unknown parameter 'mask' [ 254.420056][ T36] audit: type=1326 audit(1750826802.244:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 254.502252][ T8076] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2378688175 (4757376350 ns) > initial count (497734048 ns). Using initial count to start timer. [ 254.531454][ T36] audit: type=1326 audit(1750826802.264:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 254.556676][ T8082] batadv_slave_1: entered promiscuous mode [ 254.578778][ T8080] batadv_slave_1: left promiscuous mode [ 254.616892][ T36] audit: type=1326 audit(1750826802.264:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 254.686324][ T36] audit: type=1326 audit(1750826802.264:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 254.763169][ T36] audit: type=1326 audit(1750826802.264:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 254.814068][ T36] audit: type=1326 audit(1750826802.274:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f48cd5907bc code=0x7ffc0000 [ 254.862747][ T36] audit: type=1400 audit(1750826802.274:599): avc: denied { write } for pid=8075 comm="syz.3.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.909694][ T36] audit: type=1326 audit(1750826802.274:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 254.957642][ T36] audit: type=1326 audit(1750826802.274:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 255.007081][ T36] audit: type=1326 audit(1750826802.274:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f48cd58e929 code=0x7ffc0000 [ 255.789101][ T8108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8108 comm=syz.1.2580 [ 255.832206][ T8108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=8108 comm=syz.1.2580 [ 255.878360][ T8108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8108 comm=syz.1.2580 [ 256.033986][ T8113] overlayfs: failed to clone upperpath [ 256.499273][ T8149] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 256.499296][ T8149] rust_binder: Read failure Err(EFAULT) in pid:369 [ 256.522710][ T8151] tipc: Enabling of bearer rejected, failed to enable media [ 256.850563][ T8162] binder: Unknown parameter 'appraise_type' [ 257.288410][ C0] net_ratelimit: 55990 callbacks suppressed [ 257.288433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 257.306509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 257.318636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.324743][ T8186] batadv_slave_1: entered promiscuous mode [ 257.330950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.348758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.360829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.372898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.384977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.397286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.409454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 257.494197][ T8192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.494262][ T8192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.564942][ T8195] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 257.679729][ T8201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 257.687813][ T8201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:448 [ 257.825133][ T8207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 257.834638][ T8207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:454 [ 257.893666][ T8186] batadv_slave_1: left promiscuous mode [ 257.976429][ T8223] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 257.985035][ T8223] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2625'. [ 259.499038][ T8267] rust_binder: Write failure EINVAL in pid:391 [ 259.499136][ T8267] rust_binder: Read failure Err(EAGAIN) in pid:391 [ 259.835347][ T8284] can0: slcan on ttyS3. [ 259.861698][ T8288] /dev/rnullb0: Can't lookup blockdev [ 260.078577][ T8284] can0 (unregistered): slcan off ttyS3. [ 260.634543][ T8331] rust_binder: Error while translating object. [ 260.634587][ T8331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 260.649609][ T8331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 260.908380][ T31] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 261.078350][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 261.228370][ T31] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 261.388349][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 261.395428][ T31] usb usb6-port1: attempt power cycle [ 261.738383][ T31] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 261.768734][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 261.898360][ T31] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 261.930248][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 261.935879][ T31] usb usb6-port1: unable to enumerate USB device [ 262.298357][ C0] net_ratelimit: 66521 callbacks suppressed [ 262.298379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.316710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.328790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.340810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.352806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.364906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.377076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 262.389175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.401253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.413387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 262.754986][ T8364] tipc: Enabling of bearer rejected, media not registered [ 262.972047][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 263.153160][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 263.153177][ T36] audit: type=1400 audit(1750826810.974:615): avc: denied { create } for pid=8390 comm="syz.3.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 264.018350][ T306] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 264.198989][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 264.207749][ T306] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 264.218198][ T306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.229266][ T306] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.240033][ T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.249795][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.257882][ T306] usb 6-1: Product: syz [ 264.263285][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.269059][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.274579][ T306] usb 6-1: Manufacturer: syz [ 264.279407][ T306] usb 6-1: SerialNumber: syz [ 264.284156][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.295105][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.300941][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.306964][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.312855][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.318629][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.324257][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.330038][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.335638][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.341420][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.347061][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.354122][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.359862][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.365439][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.371303][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.376850][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.382737][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.388506][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.395542][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.401333][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.406974][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.412739][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.418521][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.424052][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.429910][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.435420][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.442607][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.448187][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.454580][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.460321][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.465942][ T8414] /dev/rnullb0: Can't lookup blockdev [ 264.700518][ T306] usb 6-1: 0:2 : does not exist [ 265.311188][ T8401] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.320761][ T8401] rust_binder: Write failure EFAULT in pid:402 [ 265.321001][ T36] audit: type=1400 audit(1750826813.144:616): avc: denied { map } for pid=8400 comm="syz.5.2677" path="socket:[44391]" dev="sockfs" ino=44391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 265.358832][ T306] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 265.373822][ T306] usb 6-1: USB disconnect, device number 20 [ 265.390637][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 265.731077][ T8430] overlayfs: failed to clone upperpath [ 265.886095][ T8438] tipc: New replicast peer: 255.255.255.255 [ 265.893126][ T8438] tipc: Enabled bearer , priority 10 [ 265.918724][ T8435] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 265.932647][ T8443] rust_binder: Got transaction with invalid offset. [ 265.932692][ T8443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 265.944545][ T8443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:409 [ 266.188376][ T306] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 266.341784][ T36] audit: type=1400 audit(1750826814.164:617): avc: denied { create } for pid=8453 comm="syz.1.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.388350][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 266.395285][ T306] usb 6-1: config 219 has an invalid interface number: 160 but max is 0 [ 266.403813][ T306] usb 6-1: config 219 has no interface number 0 [ 266.416615][ T306] usb 6-1: config 219 interface 160 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 266.460750][ T306] usb 6-1: config 219 interface 160 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 266.500531][ T306] usb 6-1: config 219 interface 160 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 266.535159][ T306] usb 6-1: config 219 interface 160 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 266.575460][ T306] usb 6-1: config 219 interface 160 altsetting 3 bulk endpoint 0x6 has invalid maxpacket 1024 [ 266.617293][ T306] usb 6-1: config 219 interface 160 altsetting 3 has an endpoint descriptor with address 0x78, changing to 0x8 [ 266.656011][ T306] usb 6-1: config 219 interface 160 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 266.700522][ T306] usb 6-1: config 219 interface 160 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 266.750172][ T306] usb 6-1: config 219 interface 160 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 266.798356][ T306] usb 6-1: config 219 interface 160 has no altsetting 0 [ 267.008372][ T516] tipc: Node number set to 3305302288 [ 267.308425][ C0] net_ratelimit: 82823 callbacks suppressed [ 267.308449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 267.326521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 267.338614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.350902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.363148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.375193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.387250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.399299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.411418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.423548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 268.288884][ T8512] /dev/rnullb0: Can't lookup blockdev [ 268.397742][ T36] audit: type=1400 audit(1750826816.214:618): avc: denied { create } for pid=8515 comm="syz.3.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 268.943587][ T306] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ae.0c [ 268.977233][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.009686][ T306] usb 6-1: Product: ê² çƒìªŽâ¥³æ—Šï‘¡ì±…톮ì¦é¾‘쟤⤼줩ꮇ퓺蛇呈î‘뽬ℜǭ澹ੈⰴÓ탣懅⶯ﳾ⼱ã á…²èŒ˜à£¹ë Ÿì‰î…“ï«¨é„—æ¡”å•¥ë›æ’•嶎Ὣ㓡ë˜å—‹ [ 269.098334][ T306] usb 6-1: Manufacturer:  [ 269.132252][ T306] usb 6-1: can't set config #219, error -71 [ 269.173317][ T306] usb 6-1: USB disconnect, device number 21 [ 269.454922][ T36] audit: type=1326 audit(1750826817.274:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.1.2726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f027ef8e929 code=0x0 [ 269.479015][ T8554] binder: Bad value for 'defcontext' [ 269.494572][ T8551] binder: Bad value for 'defcontext' [ 269.607498][ T8559] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 269.607522][ T8559] rust_binder: Read failure Err(EFAULT) in pid:428 [ 269.868404][ T306] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 270.028346][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 270.034746][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.045982][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.057258][ T306] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 270.066727][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.077466][ T306] usb 6-1: config 0 descriptor?? [ 270.088677][ T306] hub 6-1:0.0: USB hub found [ 270.286781][ T306] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 270.491561][ T306] usbhid 6-1:0.0: can't add hid device: -71 [ 270.509526][ T306] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 270.548822][ T306] usb 6-1: USB disconnect, device number 22 [ 270.569563][ T8577] overlayfs: unescaped trailing colons in lowerdir mount option. [ 270.609121][ T8582] can0: slcan on ttyS3. [ 270.699194][ T8581] can0 (unregistered): slcan off ttyS3. [ 270.835080][ T36] audit: type=1326 audit(1750826818.654:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.4.2741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef0778e929 code=0x0 [ 271.050550][ T36] audit: type=1326 audit(1750826818.874:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8632 comm="syz.3.2746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x0 [ 271.257896][ T8640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.257980][ T8640] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 272.318349][ C0] net_ratelimit: 82610 callbacks suppressed [ 272.318364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 272.344183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 272.356300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.368441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.380558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.392582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.404577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.416584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.428666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.440743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 277.328372][ C0] net_ratelimit: 133865 callbacks suppressed [ 277.328388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.346567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.358642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.370683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.382686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.394788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.406862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 277.418958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.431002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.443041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 282.338394][ C0] net_ratelimit: 136263 callbacks suppressed [ 282.338409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.356433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.368473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.380486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.392565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.404657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 282.416721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.428791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.440832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 282.452927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 287.348344][ C0] net_ratelimit: 135073 callbacks suppressed [ 287.348359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.366567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.378597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.390609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.402589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.414675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.426740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 287.438830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.450916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.463065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 292.358345][ C0] net_ratelimit: 136434 callbacks suppressed [ 292.358360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.376414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 292.388514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 292.400613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.412698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.424795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 292.436852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.448853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.460873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.472848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.731857][ T8645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:434 [ 294.806515][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2757'. [ 294.891071][ T36] audit: type=1326 audit(1750826842.714:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.3.2758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x0 [ 295.338392][ T516] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 295.498395][ T516] usb 6-1: Using ep0 maxpacket: 16 [ 295.504785][ T516] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 295.517205][ T516] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.529932][ T516] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.539329][ T516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.547425][ T516] usb 6-1: Product: syz [ 295.551965][ T516] usb 6-1: Manufacturer: syz [ 295.556660][ T516] usb 6-1: SerialNumber: syz [ 295.711654][ T8676] overlayfs: statfs failed on './file0' [ 295.748442][ T8703] overlayfs: failed to clone upperpath [ 295.793328][ T8712] overlayfs: failed to clone upperpath [ 295.799629][ T8712] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2770'. [ 295.809190][ T8713] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2770'. [ 295.821589][ T36] audit: type=1400 audit(1750826843.644:623): avc: denied { ioctl } for pid=8701 comm="syz.4.2768" path="socket:[30709]" dev="sockfs" ino=30709 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.968487][ T516] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 296.083296][ T8737] overlayfs: failed to clone upperpath [ 296.117315][ T8739] overlayfs: failed to clone upperpath [ 296.126331][ T8739] overlayfs: failed to clone upperpath [ 296.591715][ T8771] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 296.780241][ T8697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 296.780278][ T8697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:456 [ 296.791831][ T516] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 296.833648][ T516] usb 6-1: USB disconnect, device number 23 [ 296.855486][ T8698] udevd[8698]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 296.952829][ T8780] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 296.967273][ T8780] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 296.981739][ T8780] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 297.032192][ T8785] netlink: 'syz.3.2790': attribute type 5 has an invalid length. [ 297.040435][ T8785] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2790'. [ 297.368350][ C0] net_ratelimit: 104690 callbacks suppressed [ 297.368372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 297.370892][ T8804] tipc: New replicast peer: 255.255.255.255 [ 297.374478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.387182][ T8804] tipc: Enabled bearer , priority 10 [ 297.392568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.422695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.434767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 297.446876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.458917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.470958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.483030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.489100][ T8816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.495151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.497546][ T8816] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 297.515542][ T8816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 297.525352][ T8816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:465 [ 297.607383][ T8822] overlayfs: failed to clone upperpath [ 297.723576][ T8779] overlayfs: statfs failed on './file0' [ 297.811289][ T8831] ext2: Unknown parameter ''-}' [ 298.098772][ T8837] SELinux: security_context_str_to_sid () failed with errno=-22 [ 298.536307][ T8844] overlayfs: failed to clone upperpath [ 299.068356][ T8854] can0: slcan on ttyS3. [ 299.123976][ T8861] fuse: Unknown parameter '0x0000000000000003' [ 299.201011][ T8861] overlayfs: failed to clone upperpath [ 299.260438][ T8868] overlayfs: failed to clone upperpath [ 299.433829][ T8854] can0 (unregistered): slcan off ttyS3. [ 300.724975][ T8901] overlayfs: failed to clone upperpath [ 300.858918][ T8913] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 300.873235][ T8913] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 300.887625][ T8913] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 301.569047][ T36] audit: type=1326 audit(1750826849.394:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 301.624088][ T36] audit: type=1326 audit(1750826849.424:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 301.658035][ T8910] overlayfs: statfs failed on './file0' [ 301.671689][ T36] audit: type=1326 audit(1750826849.424:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 301.700371][ T36] audit: type=1326 audit(1750826849.424:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 301.754074][ T36] audit: type=1326 audit(1750826849.434:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 301.793993][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2834'. [ 301.823629][ T36] audit: type=1326 audit(1750826849.434:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 301.901471][ T8946] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2837'. [ 301.912669][ T36] audit: type=1326 audit(1750826849.434:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 301.937349][ T8947] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2835'. [ 301.950542][ T8946] /dev/rnullb0: Can't lookup blockdev [ 301.962974][ T8949] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2835'. [ 301.995309][ T8954] overlayfs: failed to clone upperpath [ 302.007242][ T36] audit: type=1326 audit(1750826849.434:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 302.069866][ T36] audit: type=1326 audit(1750826849.434:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 302.147379][ T8964] overlay: Unknown parameter 'uid>00000000000000049663' [ 302.159672][ T36] audit: type=1326 audit(1750826849.434:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.5.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f685518e929 code=0x7ffc0000 [ 302.261583][ T8981] overlayfs: failed to clone upperpath [ 302.319976][ T8984] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 302.378428][ C0] net_ratelimit: 66941 callbacks suppressed [ 302.378453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.396435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 302.408556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.420607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.432665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.444768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.456903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.469040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 302.481159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.493293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.519124][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2852'. [ 302.554319][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2852'. [ 302.666933][ T9001] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2854'. [ 302.687795][ T9001] 0ªî{X¹¦: renamed from gretap0 [ 302.736485][ T9001] 0ªî{X¹¦: entered allmulticast mode [ 302.931974][ T9016] overlayfs: failed to clone upperpath [ 302.948893][ T9016] overlayfs: failed to clone upperpath [ 303.298151][ T9049] overlayfs: failed to clone upperpath [ 303.386522][ T9064] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 303.395540][ T9055] cgroup: Unknown subsys name 'measure' [ 303.426432][ T9067] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 303.602706][ T9084] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 303.617044][ T9084] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 303.632753][ T9084] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 304.212652][ T9128] binder: Bad value for 'max' [ 304.379027][ T9080] overlayfs: statfs failed on './file0' [ 304.444912][ T9146] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 305.630207][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2918'. [ 306.394532][ T9172] overlayfs: statfs failed on './file0' [ 306.925659][ T9257] overlayfs: failed to clone upperpath [ 306.947186][ T9259] bridge0: port 3(veth1_macvtap) entered blocking state [ 306.957860][ T9259] bridge0: port 3(veth1_macvtap) entered disabled state [ 306.968251][ T9259] veth1_macvtap: entered allmulticast mode [ 306.982474][ T9259] veth1_macvtap: left allmulticast mode [ 307.388332][ C0] net_ratelimit: 76853 callbacks suppressed [ 307.394295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.406297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.418334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.430345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.442433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.454551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 307.466645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.478729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.490819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 307.502908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 307.564766][ T9282] overlayfs: failed to clone upperpath [ 307.781197][ T9305] overlayfs: failed to clone upperpath [ 307.788177][ T9305] overlayfs: failed to clone upperpath [ 307.852511][ T9314] overlayfs: missing 'workdir' [ 308.218957][ T31] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=31 comm=kworker/1:0 [ 308.331562][ T9329] overlayfs: failed to clone upperpath [ 308.439903][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 308.439920][ T36] audit: type=1400 audit(1750826858.268:664): avc: denied { create } for pid=9339 comm="syz.3.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 308.574506][ T9355] fuse: Bad value for 'user_id' [ 308.580626][ T9355] fuse: Bad value for 'user_id' [ 308.743599][ T36] audit: type=1326 audit(1750826858.568:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.5.2987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685518e929 code=0x0 [ 309.946935][ T9414] overlayfs: failed to clone upperpath [ 310.037157][ T36] audit: type=1400 audit(1750826859.858:666): avc: denied { lock } for pid=9430 comm="syz.3.3006" path="socket:[49002]" dev="sockfs" ino=49002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 310.370642][ T36] audit: type=1400 audit(1750826860.198:667): avc: denied { mount } for pid=9450 comm="syz.5.3012" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 310.422702][ T9455] futex_wake_op: syz.5.3014 tries to shift op by -1; fix this program [ 311.774130][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3031'. [ 312.398357][ C0] net_ratelimit: 74238 callbacks suppressed [ 312.398379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.416399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.428475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 312.440597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 312.452698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.464872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.477208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.489254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 312.501341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.513361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.334263][ T36] audit: type=1400 audit(1750826863.158:668): avc: denied { lock } for pid=9503 comm="syz.1.3034" path="socket:[49299]" dev="sockfs" ino=49299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.634562][ T36] audit: type=1400 audit(1750826863.458:669): avc: denied { map } for pid=9519 comm="syz.5.3038" path="socket:[49324]" dev="sockfs" ino=49324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.350642][ T9533] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 314.427912][ T9540] syz.5.3047: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 314.462996][ T9546] tipc: Enabling of bearer rejected, failed to enable media [ 314.481397][ T9540] CPU: 1 UID: 0 PID: 9540 Comm: syz.5.3047 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 314.481432][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.481459][ T9540] Call Trace: [ 314.481466][ T9540] [ 314.481475][ T9540] __dump_stack+0x21/0x30 [ 314.481513][ T9540] dump_stack_lvl+0x10c/0x190 [ 314.481533][ T9540] ? __cfi_dump_stack_lvl+0x10/0x10 [ 314.481555][ T9540] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 314.481584][ T9540] dump_stack+0x19/0x20 [ 314.481604][ T9540] warn_alloc+0x1bc/0x2a0 [ 314.481623][ T9540] ? do_syscall_64+0x58/0xf0 [ 314.481640][ T9540] ? __cfi_warn_alloc+0x10/0x10 [ 314.481658][ T9540] ? __get_vm_area_node+0x1dc/0x3a0 [ 314.481678][ T9540] ? packet_set_ring+0x735/0x2880 [ 314.481696][ T9540] __vmalloc_node_range_noprof+0x68e/0x1420 [ 314.481716][ T9540] ? kasan_save_track+0x3e/0x80 [ 314.481740][ T9540] ? __kasan_kmalloc+0x96/0xb0 [ 314.481764][ T9540] ? __kmalloc_noprof+0x1b1/0x450 [ 314.481789][ T9540] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 314.481810][ T9540] ? __asan_memset+0x39/0x50 [ 314.481830][ T9540] ? __alloc_pages_noprof+0xba/0x6c0 [ 314.481850][ T9540] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 314.481869][ T9540] ? packet_set_ring+0x735/0x2880 [ 314.481886][ T9540] vzalloc_noprof+0xfd/0x1d0 [ 314.481913][ T9540] ? packet_set_ring+0x735/0x2880 [ 314.481929][ T9540] ? kasan_save_alloc_info+0x40/0x50 [ 314.481949][ T9540] ? __cfi_vzalloc_noprof+0x10/0x10 [ 314.481969][ T9540] ? packet_set_ring+0x669/0x2880 [ 314.481987][ T9540] packet_set_ring+0x735/0x2880 [ 314.482005][ T9540] ? _raw_spin_lock_bh+0x90/0x120 [ 314.482031][ T9540] ? packet_mmap+0x570/0x570 [ 314.482047][ T9540] ? _raw_spin_unlock_bh+0x54/0x60 [ 314.482064][ T9540] ? lock_sock_nested+0x1f5/0x290 [ 314.482087][ T9540] ? __asan_memcpy+0x5a/0x80 [ 314.482108][ T9540] ? check_stack_object+0x12c/0x140 [ 314.482131][ T9540] ? __kasan_check_write+0x18/0x20 [ 314.482152][ T9540] ? _copy_from_user+0x8b/0xb0 [ 314.482177][ T9540] packet_setsockopt+0xc5d/0x12a0 [ 314.482204][ T9540] ? __cfi_packet_setsockopt+0x10/0x10 [ 314.482230][ T9540] ? selinux_socket_setsockopt+0x2ea/0x390 [ 314.482253][ T9540] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 314.482278][ T9540] ? do_futex+0x309/0x500 [ 314.482303][ T9540] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 314.482322][ T9540] ? security_socket_setsockopt+0x33/0xd0 [ 314.482345][ T9540] ? __cfi_packet_setsockopt+0x10/0x10 [ 314.482370][ T9540] do_sock_setsockopt+0x26d/0x400 [ 314.482390][ T9540] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 314.482412][ T9540] __x64_sys_setsockopt+0x1b8/0x250 [ 314.482432][ T9540] x64_sys_call+0x2adc/0x2ee0 [ 314.482455][ T9540] do_syscall_64+0x58/0xf0 [ 314.482471][ T9540] ? clear_bhb_loop+0x50/0xa0 [ 314.482492][ T9540] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 314.482512][ T9540] RIP: 0033:0x7f685518e929 [ 314.482534][ T9540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.482550][ T9540] RSP: 002b:00007f6856050038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 314.482572][ T9540] RAX: ffffffffffffffda RBX: 00007f68553b5fa0 RCX: 00007f685518e929 [ 314.482587][ T9540] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 314.482600][ T9540] RBP: 00007f6855210b39 R08: 000000000000001c R09: 0000000000000000 [ 314.482613][ T9540] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 314.482626][ T9540] R13: 0000000000000000 R14: 00007f68553b5fa0 R15: 00007ffeb9d4aae8 [ 314.482642][ T9540] [ 314.482650][ T9540] Mem-Info: [ 315.269215][ T9556] cgroup: subsys name conflicts with all [ 315.349411][ T9558] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 315.372929][ T9558] overlayfs: failed to resolve './file0': -2 [ 315.428369][ T9540] active_anon:7204 inactive_anon:5 isolated_anon:0 [ 315.428369][ T9540] active_file:22105 inactive_file:19121 isolated_file:0 [ 315.428369][ T9540] unevictable:16315 dirty:38 writeback:0 [ 315.428369][ T9540] slab_reclaimable:4968 slab_unreclaimable:78779 [ 315.428369][ T9540] mapped:28962 shmem:1604 pagetables:1298 [ 315.428369][ T9540] sec_pagetables:0 bounce:0 [ 315.428369][ T9540] kernel_misc_reclaimable:0 [ 315.428369][ T9540] free:1468500 free_pcp:1615 free_cma:0 [ 315.579020][ T9540] Node 0 active_anon:28716kB inactive_anon:20kB active_file:88420kB inactive_file:76484kB unevictable:65260kB isolated(anon):0kB isolated(file):0kB mapped:115848kB dirty:152kB writeback:0kB shmem:6416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5628kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no [ 315.625244][ T9564] overlay: Unknown parameter 'subj_user' [ 315.668335][ T9540] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:5808kB local_pcp:5740kB free_cma:0kB [ 315.738336][ T9540] lowmem_reserve[]: 0 3921 3921 [ 315.753365][ T9540] Normal free:2914496kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28716kB inactive_anon:20kB active_file:88420kB inactive_file:76484kB unevictable:65260kB writepending:152kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:476kB local_pcp:124kB free_cma:0kB [ 315.815180][ T9540] lowmem_reserve[]: 0 0 0 [ 315.825244][ T9540] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 315.868380][ T9540] Normal: 376*4kB (UME) 637*8kB (UME) 889*16kB (UME) 644*32kB (UME) 1097*64kB (UME) 771*128kB (UME) 357*256kB (UME) 153*512kB (UME) 89*1024kB (UME) 61*2048kB (UME) 566*4096kB (UM) = 2914456kB [ 315.982950][ T9540] 61995 total pagecache pages [ 315.987672][ T9540] 4 pages in swap cache [ 316.062723][ T36] audit: type=1400 audit(1750826866.732:670): avc: denied { nlmsg_read } for pid=9568 comm="syz.1.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 316.078395][ T9540] Free swap = 124268kB [ 316.130045][ T9574] overlayfs: failed to resolve './file0/file0': -2 [ 316.139313][ T9574] overlayfs: failed to clone upperpath [ 316.150247][ T9540] Total swap = 124996kB [ 316.161774][ T9540] 2097051 pages RAM [ 316.268375][ T9540] 0 pages HighMem/MovableOnly [ 316.284145][ T9540] 351516 pages reserved [ 316.294580][ T9540] 0 pages cma reserved [ 316.310336][ T9540] Memory allocations: [ 316.326863][ T9540] 0 B 0 init/main.c:1370 func:do_initcalls [ 316.348100][ T9540] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 316.374292][ T9540] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 316.389519][ T9540] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 316.405630][ T9540] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 316.422408][ T9540] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 316.440445][ T9540] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 316.459711][ T9540] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 316.492704][ T9540] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 316.513237][ T9540] 0 B 0 init/initramfs.c:101 func:find_link [ 316.831724][ T36] audit: type=1326 audit(1750826867.642:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.3.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x7fc00000 [ 316.868801][ T9585] overlayfs: failed to clone upperpath [ 317.408470][ C0] net_ratelimit: 60654 callbacks suppressed [ 317.408493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.426444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 317.438538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.450602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.462646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.474691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.486784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.498863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 317.510963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.523065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.550156][ T9597] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 317.566119][ T9597] SELinux: failed to load policy [ 317.665409][ T36] audit: type=1400 audit(1750826868.482:672): avc: denied { mounton } for pid=9601 comm="syz.3.3069" path="/330/file0" dev="tmpfs" ino=1894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 317.723197][ T36] audit: type=1400 audit(1750826868.542:673): avc: denied { map } for pid=9615 comm="syz.4.3075" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 318.239431][ T9635] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3080'. [ 318.276485][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3080'. [ 318.304903][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 318.354415][ T36] audit: type=1400 audit(1750826869.162:674): avc: denied { append } for pid=9642 comm="syz.4.3082" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 318.633428][ T36] audit: type=1400 audit(1750826869.452:675): avc: denied { audit_write } for pid=9657 comm="syz.3.3088" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 319.699172][ T9683] 9pnet_fd: Insufficient options for proto=fd [ 320.701160][ T9700] overlayfs: failed to resolve './file1': -2 [ 320.724248][ T9700] overlayfs: failed to resolve './file1/file0': -20 [ 320.891713][ T9729] futex_wake_op: syz.1.3114 tries to shift op by -1; fix this program [ 320.991816][ T36] audit: type=1326 audit(1750826871.812:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.133406][ T36] audit: type=1326 audit(1750826871.832:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.193288][ T36] audit: type=1326 audit(1750826871.832:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.243633][ T36] audit: type=1326 audit(1750826871.842:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.290114][ T36] audit: type=1326 audit(1750826871.852:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.339413][ T36] audit: type=1326 audit(1750826871.852:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.427949][ T36] audit: type=1326 audit(1750826871.852:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.503012][ T36] audit: type=1326 audit(1750826871.852:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.573137][ T36] audit: type=1326 audit(1750826871.852:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.639331][ T36] audit: type=1326 audit(1750826871.852:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f027ef8e929 code=0x7ffc0000 [ 321.804720][ T9785] netlink: 'syz.3.3136': attribute type 4 has an invalid length. [ 321.843654][ T9788] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 322.418398][ C0] net_ratelimit: 73315 callbacks suppressed [ 322.418413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.436409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.448451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.460637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.472636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 322.484684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.496668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.508633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.520632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.532696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.694666][ T9819] >: renamed from veth0_vlan (while UP) [ 323.579454][ T9837] veth1_virt_wifi: entered allmulticast mode [ 324.570578][ T9876] overlayfs: failed to clone upperpath [ 324.617832][ T9880] fuse: Unknown parameter '0x00000000000000030xffffffffffffffffÿ00000000000000000000' [ 325.141091][ T9913] overlayfs: failed to clone upperpath [ 325.191188][ T9916] netlink: 'syz.1.3182': attribute type 4 has an invalid length. [ 326.364934][ T9992] 9pnet_fd: Insufficient options for proto=fd [ 326.413890][ T9997] fuse: Unknown parameter '0x0000000000000003' [ 326.417257][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3208'. [ 327.033137][T10056] fuse: Bad value for 'group_id' [ 327.038278][T10056] fuse: Bad value for 'group_id' [ 327.057467][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 327.057485][ T36] audit: type=1326 audit(1750826877.872:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.5.3229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685518e929 code=0x0 [ 327.203799][ T36] audit: type=1326 audit(1750826878.022:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.3.3231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48cd58e929 code=0x0 [ 327.312424][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 327.428394][ C0] net_ratelimit: 87784 callbacks suppressed [ 327.428417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.446692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.458774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 327.470918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.482975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.495040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.507129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.519275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.531447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 327.543594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.491386][ T36] audit: type=1400 audit(1750826880.302:720): avc: denied { write } for pid=10114 comm="syz.3.3248" name="ptmx" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 329.554879][T10120] /dev/rnullb0: Can't lookup blockdev [ 329.622227][ T36] audit: type=1400 audit(1750826880.302:721): avc: denied { open } for pid=10114 comm="syz.3.3248" path="/dev/ptmx" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 330.752028][T10142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3258'. [ 330.816351][ T4847] tipc: Subscription rejected, illegal request [ 331.458946][T10191] overlayfs: failed to clone upperpath [ 331.516289][T10195] bpf: Bad value for 'mode' [ 331.590484][ T36] audit: type=1400 audit(1750826882.412:722): avc: denied { create } for pid=10200 comm="syz.5.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 332.438332][ C0] net_ratelimit: 62964 callbacks suppressed [ 332.438355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.456455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.468472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.480739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.492752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 332.504834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.516845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.528850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.540865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.552976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.515063][T10280] bpf: Bad value for 'mode' [ 335.534785][T10282] overlayfs: failed to clone upperpath [ 335.708772][T10293] overlayfs: missing 'lowerdir' [ 335.825247][T10297] binder: Unknown parameter '00000000000000000000' [ 337.048951][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3326'. [ 337.448474][ C0] net_ratelimit: 82105 callbacks suppressed [ 337.448498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.466475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 337.478580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.490601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.502622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.514654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.526766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.538897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 337.551009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.563125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.298447][T10360] binder: Bad value for 'max' [ 339.311593][ T36] audit: type=1326 audit(1750826890.132:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.3.3340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48cd58e929 code=0x0 [ 339.450709][ T4847] tipc: Subscription rejected, illegal request [ 340.007569][ T36] audit: type=1400 audit(1750826890.822:724): avc: denied { watch watch_reads } for pid=10403 comm="syz.4.3353" path="/253/file0" dev="tmpfs" ino=1500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 340.104079][T10421] binder: Bad value for 'stats' [ 340.122749][T10423] binder: Unknown parameter ' *š /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.240467][ T37] task:syz.3.3501 state:D stack:0 pid:10839 tgid:10831 ppid:6247 flags:0x00004000 [ 493.272683][ T37] Call Trace: [ 493.276011][ T37] [ 493.278975][ T37] __schedule+0x145b/0x1f10 [ 493.283492][ T37] ? __sched_text_start+0x10/0x10 [ 493.288628][ T37] ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10 [ 493.295331][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 493.300482][ T37] schedule+0xc6/0x240 [ 493.304555][ T37] schedule_timeout+0xb2/0x3a0 [ 493.309354][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 493.314738][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 493.320317][ T37] ? __percpu_ref_switch_mode+0x345/0x5f0 [ 493.326045][ T37] wait_for_common+0x359/0x630 [ 493.330838][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 493.336757][ T37] ? wait_for_completion+0x40/0x40 [ 493.342030][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 493.347864][ T37] ? percpu_ref_kill_and_confirm+0xf4/0x220 [ 493.353856][ T37] ? kill_ioctx+0x2b0/0x3d0 [ 493.358394][ T37] wait_for_completion+0x1c/0x40 [ 493.363342][ T37] exit_aio+0x2df/0x3b0 [ 493.367513][ T37] ? __cfi_exit_aio+0x10/0x10 [ 493.372242][ T37] ? uprobe_clear_state+0x2cd/0x340 [ 493.377504][ T37] __mmput+0x30/0x320 [ 493.381527][ T37] ? mmput+0x4d/0x170 [ 493.385518][ T37] mmput+0x55/0x170 [ 493.389352][ T37] do_exit+0x910/0x2630 [ 493.393523][ T37] ? __cfi_do_exit+0x10/0x10 [ 493.397348][ T36] audit: type=1400 audit(1750827044.212:736): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2899]" dev="pipefs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 493.398115][ T37] ? futex_wake+0x5fb/0x900 [ 493.425531][ T37] ? futex_setup_timer+0xb4/0xd0 [ 493.430520][ T37] ? __kasan_check_write+0x18/0x20 [ 493.435658][ T37] ? _raw_spin_lock_irq+0x8d/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.440805][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 493.446364][ T37] do_group_exit+0x22a/0x300 [ 493.450986][ T37] ? __kasan_check_write+0x18/0x20 [ 493.456113][ T37] get_signal+0x139d/0x14f0 [ 493.460662][ T37] ? percpu_ref_kill_and_confirm+0xf4/0x220 [ 493.466594][ T37] arch_do_signal_or_restart+0x96/0x720 [ 493.472213][ T37] ? wait_for_completion+0x1c/0x40 [ 493.477345][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 493.483550][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 493.489060][ T37] do_syscall_64+0x64/0xf0 [ 493.493493][ T37] ? clear_bhb_loop+0x50/0xa0 [ 493.498187][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 493.504135][ T37] RIP: 0033:0x7f48cd58e929 [ 493.508576][ T37] RSP: 002b:00007f48cbbb50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 493.517002][ T37] RAX: fffffffffffffe00 RBX: 00007f48cd7b6168 RCX: 00007f48cd58e929 [ 493.525009][ T37] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f48cd7b6168 [ 493.533016][ T37] RBP: 00007f48cd7b6160 R08: 0000000000000000 R09: 0000000000000000 [ 493.541031][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48cd7b616c [ 493.549045][ T37] R13: 0000000000000000 R14: 00007ffcb7ad5c30 R15: 00007ffcb7ad5d18 [ 493.557033][ T37] [ 493.631774][ T37] INFO: task syz.4.3520:10889 blocked for more than 123 seconds. [ 494.119661][ T37] Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 [ 494.126551][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.142165][ T37] task:syz.4.3520 state:D stack:0 pid:10889 tgid:10888 ppid:5169 flags:0x00004002 [ 494.152417][ T37] Call Trace: [ 494.155703][ T37] [ 494.158672][ T37] __schedule+0x145b/0x1f10 [ 494.163190][ T37] ? __sched_text_start+0x10/0x10 [ 494.168220][ T37] ? __kasan_check_write+0x18/0x20 [ 494.173378][ T37] ? llist_add_batch+0x109/0x1e0 [ 494.178359][ T37] schedule+0xc6/0x240 [ 494.182444][ T37] schedule_timeout+0xb2/0x3a0 [ 494.187233][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 494.192651][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 494.198212][ T37] ? generic_exec_single+0x201/0x500 [ 494.203534][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 494.209237][ T37] wait_for_common+0x359/0x630 [ 494.214019][ T37] ? wait_for_completion+0x40/0x40 [ 494.219157][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 494.225667][ T37] wait_for_completion+0x1c/0x40 [ 494.230633][ T37] rcu_barrier+0x415/0x530 [ 494.235062][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 494.240490][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 494.245269][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 494.250415][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 494.256061][ T37] ? __kasan_check_write+0x18/0x20 [ 494.261219][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 494.266862][ T37] ? free_pages+0x86/0x90 [ 494.271237][ T37] kvm_put_kvm+0xb04/0x12b0 [ 494.275753][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 494.280897][ T37] ? __fput+0x6ea/0xa00 [ 494.285059][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 494.290282][ T37] kvm_vm_release+0x47/0x70 [ 494.294795][ T37] __fput+0x1fb/0xa00 [ 494.298803][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 494.304367][ T37] ____fput+0x20/0x30 [ 494.308387][ T37] task_work_run+0x1e0/0x250 [ 494.312989][ T37] ? __cfi_task_work_run+0x10/0x10 [ 494.318107][ T37] ? __kasan_check_write+0x18/0x20 [ 494.323252][ T37] do_exit+0x9b4/0x2630 [ 494.327420][ T37] ? ioctl_has_perm+0x1aa/0x4d0 [ 494.332318][ T37] ? ioctl_has_perm+0x3e0/0x4d0 [ 494.337184][ T37] ? __cfi_do_exit+0x10/0x10 [ 494.341804][ T37] ? __kasan_check_write+0x18/0x20 [ 494.346926][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 494.352074][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 494.357636][ T37] do_group_exit+0x22a/0x300 [ 494.362255][ T37] ? __kasan_check_write+0x18/0x20 [ 494.367378][ T37] get_signal+0x139d/0x14f0 [ 494.371920][ T37] arch_do_signal_or_restart+0x96/0x720 [ 494.377539][ T37] ? __fget_files+0x2c5/0x340 [ 494.382254][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 494.388448][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 494.393320][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 494.398810][ T37] do_syscall_64+0x64/0xf0 [ 494.403231][ T37] ? clear_bhb_loop+0x50/0xa0 [ 494.407911][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 494.413836][ T37] RIP: 0033:0x7fef0778e52b [ 494.418259][ T37] RSP: 002b:00007fef08662490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.426708][ T37] RAX: 0000000000000000 RBX: 00007fef08662be0 RCX: 00007fef0778e52b [ 494.434714][ T37] RDX: 00007fef08662be0 RSI: 000000004020ae46 RDI: 0000000000000088 [ 494.442717][ T37] RBP: 0000000000000088 R08: 0000000000000001 R09: 0000000000000042 [ 494.450726][ T37] R10: 0000000000000088 R11: 0000000000000246 R12: 0000000000000001 [ 494.458747][ T37] R13: 0000200000001000 R14: 0000200000000000 R15: 00000000fec00000 [ 494.466734][ T37] [ 494.541321][ T37] NMI backtrace for cpu 0 [ 494.541345][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 494.541374][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.541386][ T37] Call Trace: [ 494.541393][ T37] [ 494.541402][ T37] __dump_stack+0x21/0x30 [ 494.541428][ T37] dump_stack_lvl+0x10c/0x190 [ 494.541450][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 494.541472][ T37] dump_stack+0x19/0x20 [ 494.541503][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 494.541529][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 494.541548][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 494.541573][ T37] ? sched_show_task+0x379/0x560 [ 494.541593][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 494.541610][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.541631][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.541651][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 494.541677][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 494.541697][ T37] watchdog+0xd8f/0xed0 [ 494.541718][ T37] ? __cfi_watchdog+0x10/0x10 [ 494.541737][ T37] ? __kasan_check_read+0x15/0x20 [ 494.541758][ T37] ? __kthread_parkme+0x138/0x180 [ 494.541780][ T37] ? schedule+0xc6/0x240 [ 494.541796][ T37] kthread+0x2ca/0x370 [ 494.541818][ T37] ? __cfi_watchdog+0x10/0x10 [ 494.541836][ T37] ? __cfi_kthread+0x10/0x10 [ 494.541858][ T37] ret_from_fork+0x64/0xa0 [ 494.541877][ T37] ? __cfi_kthread+0x10/0x10 [ 494.541899][ T37] ret_from_fork_asm+0x1a/0x30 [ 494.541921][ T37] [ 494.541928][ T37] Sending NMI from CPU 0 to CPUs 1: [ 494.733884][ C1] NMI backtrace for cpu 1 [ 494.733899][ C1] CPU: 1 UID: 0 PID: 318 Comm: kworker/1:3 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 494.733921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.733930][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 494.733957][ C1] RIP: 0010:__find_rr_leaf+0x18e/0x790 [ 494.733975][ C1] Code: 0f 85 9f 02 00 00 48 89 5c 24 78 8b 1b 89 de 81 e6 00 00 40 00 31 ff e8 b0 14 a5 fc 89 d8 25 00 00 40 00 75 07 e8 62 10 a5 fc 58 4d 8d 66 30 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 [ 494.733988][ C1] RSP: 0018:ffffc9000022fd00 EFLAGS: 00000246 [ 494.734000][ C1] RAX: ffffffff84e0904e RBX: 0000000000000001 RCX: ffff88810b390000 [ 494.734012][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.734020][ C1] RBP: ffffc9000022fe58 R08: ffffc9000022ff80 R09: ffffc9000022ff90 [ 494.734040][ C1] R10: ffffc900002300f0 R11: fffff52000046022 R12: 0000000000000100 [ 494.734050][ C1] R13: dffffc0000000000 R14: ffff88811e6cc400 R15: 1ffff11023cd988c [ 494.734062][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 494.734074][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.734085][ C1] CR2: 00005628657eab98 CR3: 000000010bb5e000 CR4: 00000000003526b0 [ 494.734099][ C1] Call Trace: [ 494.734103][ C1] [ 494.734112][ C1] ? rt6_check_expired+0x250/0x250 [ 494.734127][ C1] ? stack_depot_save+0x12/0x20 [ 494.734144][ C1] ? save_stack+0x11c/0x1f0 [ 494.734157][ C1] ? free_contig_range+0x270/0x270 [ 494.734173][ C1] ? __reset_page_owner+0x450/0x450 [ 494.734186][ C1] ? prep_new_page+0x1c/0x120 [ 494.734199][ C1] fib6_table_lookup+0x2c5/0x9b0 [ 494.734220][ C1] ? __cfi_fib6_table_lookup+0x10/0x10 [ 494.734236][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 494.734257][ C1] ? enqueue_to_backlog+0x786/0xbf0 [ 494.734279][ C1] ip6_pol_route+0x167/0x12c0 [ 494.734296][ C1] ? netif_rx_internal+0xab/0x340 [ 494.734312][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 494.734329][ C1] ? dev_forward_skb+0x80/0x80 [ 494.734345][ C1] ? __dev_forward_skb2+0x4ab/0x770 [ 494.734361][ C1] ? __netif_rx+0x30/0x230 [ 494.734379][ C1] ? veth_xmit+0x4b7/0x820 [ 494.734397][ C1] ip6_pol_route_input+0x5a/0x80 [ 494.734414][ C1] fib6_rule_lookup+0x4cc/0x6b0 [ 494.734429][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 494.734447][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 494.734468][ C1] ? ip6t_do_table+0x1dc/0x14d0 [ 494.734488][ C1] ip6_route_input+0x59f/0x8d0 [ 494.734505][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 494.734523][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 494.734543][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 494.734557][ C1] ip6_rcv_finish+0x15a/0x3c0 [ 494.734574][ C1] ipv6_rcv+0xed/0x220 [ 494.734591][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 494.734606][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 494.734620][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 494.734637][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 494.734650][ C1] netif_receive_skb+0x147/0x7b0 [ 494.734670][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 494.734688][ C1] ? br_flood+0x67e/0x730 [ 494.734701][ C1] br_pass_frame_up+0x126/0x1c0 [ 494.734717][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 494.734732][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 494.734749][ C1] br_handle_frame+0x5a6/0xba0 [ 494.734762][ C1] ? __cfi_ip6_input+0x10/0x10 [ 494.734779][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 494.734793][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 494.734812][ C1] ? ipv6_chk_mcast_addr+0x3be/0x3e0 [ 494.734826][ C1] ? ip6_mc_input+0x35a/0x670 [ 494.734843][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 494.734861][ C1] ? qdisc_run_end+0x120/0x120 [ 494.734879][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 494.734895][ C1] ? ip6_rcv_finish+0x341/0x3c0 [ 494.734912][ C1] ? ipv6_rcv+0xed/0x220 [ 494.734928][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 494.734945][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 494.734961][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 494.734980][ C1] ? check_preempt_wakeup_fair+0x886/0xae0 [ 494.734998][ C1] process_backlog+0x3e5/0xae0 [ 494.735013][ C1] ? __kasan_check_read+0x15/0x20 [ 494.735030][ C1] __napi_poll+0xd0/0x610 [ 494.735049][ C1] net_rx_action+0x584/0xce0 [ 494.735063][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 494.735076][ C1] ? sched_clock+0x44/0x60 [ 494.735092][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 494.735109][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 494.735125][ C1] handle_softirqs+0x1ae/0x630 [ 494.735144][ C1] __do_softirq+0xf/0x16 [ 494.735157][ C1] do_softirq+0xa6/0x100 [ 494.735173][ C1] [ 494.735178][ C1] [ 494.735183][ C1] ? __cfi_do_softirq+0x10/0x10 [ 494.735199][ C1] ? __cfi_do_softirq+0x10/0x10 [ 494.735216][ C1] __local_bh_enable_ip+0x74/0x80 [ 494.735233][ C1] _raw_read_unlock_bh+0x2d/0x40 [ 494.735245][ C1] wg_socket_send_skb_to_peer+0x176/0x1e0 [ 494.735266][ C1] wg_packet_tx_worker+0x1d2/0x4e0 [ 494.735285][ C1] process_scheduled_works+0x7d2/0x1020 [ 494.735306][ C1] worker_thread+0xc58/0x1250 [ 494.735326][ C1] kthread+0x2ca/0x370 [ 494.735345][ C1] ? __cfi_worker_thread+0x10/0x10 [ 494.735361][ C1] ? __cfi_kthread+0x10/0x10 [ 494.735379][ C1] ret_from_fork+0x64/0xa0 [ 494.735395][ C1] ? __cfi_kthread+0x10/0x10 [ 494.735413][ C1] ret_from_fork_asm+0x1a/0x30 [ 494.735432][ C1] [ 497.768371][ C1] net_ratelimit: 123645 callbacks suppressed [ 497.768392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.768433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.774503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.786387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.798277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.810509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.822256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.834119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 497.845968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.857932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.778368][ C1] net_ratelimit: 153377 callbacks suppressed [ 502.778390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.778517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.784470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.796501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.808400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.820490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.832209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.844186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5b:e9:fe:3c:ea, vlan:0) [ 502.856086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.867930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)