last executing test programs: 4m0.399827322s ago: executing program 3 (id=54): getegid() (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000200)={0xafbcb7ab, {{0x2, 0x4e22, @empty}}}, 0x88) (async) r3 = inotify_init1(0x80800) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r3, r4, 0x80000) fgetxattr(r4, &(0x7f0000000b00)=@known='system.posix_acl_default\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 4m0.235939114s ago: executing program 3 (id=56): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x98}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x60}}, 0x4008014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x9) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x220000, 0x0) r4 = dup(r2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x2}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x80000000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000100)={0x8, {{0xa, 0x4e23, 0xa209, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}}, {{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}}}, 0x108) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0xfffffffc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1201, 0x3}, @flat=@handle={0x73682a85, 0x10a, 0x200001}, @flat=@weak_binder={0x77622a85, 0x0, 0x4000001}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m0.235593844s ago: executing program 3 (id=57): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) exit(0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x50, 0x0, &(0x7f00000002c0)="1b4136b3afee9ac7aab81bc4695409282b94a1845b9322f0374c9ce7963e312ead1eaac5a87f8990154f237edfb6d6f382652d73142fbf9db07359292cf4bbc29b64addd9e550a4f9cc99b5e4d4c9c09"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x2000044) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x3, 0xd7a, 0x8, 0x9, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x19980330, r4}, &(0x7f0000000100)={0x9, 0x80000001, 0x0, 0x200, 0x8, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 3m59.352533207s ago: executing program 3 (id=68): setreuid(0x0, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',uname=#,noxattr,\x00']) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) (async) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000502, r6, &(0x7f0000000280)) 3m59.350268227s ago: executing program 3 (id=69): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async, rerun: 32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) (async, rerun: 32) ptrace$cont(0x20, r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r2, 0x0, 0x12, 0x4000800, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @local, 0x8}, 0x1c) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x902a, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="62583e33cfe8a7631d601145126e8ac52a44f82f58d4648bb2f32687b476fe296760ef21ba0b702ec75a19a41b3d7ca12b15f64d7b8a40a6bc6adb0220eefb8c1240ba2faf2928f8d5c92fc888d106202d6442545514817d9a6da0e4bbf8388588a8e6293d7c974f6504f68da6ca3ff0e1d9b408fc5fb6dde0238f2f81e577a5d5320ee8b4fdc92b62ec977525e7c8a8901be5050759e5d8788f179ffd2c56b061487ca281e7aba22778a5ee935f327ad66cc0d49c04a091a367828b951abedb7170e1e65582c7793b7bd3ea76efc862116f0004e7d6a7f146694f747563a48cb2b53b817cbd4679022c4f1269b9cfe136e772"]) 3m59.297736638s ago: executing program 3 (id=70): r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000800)='.dead\x00', 0x0, 0xfffffffffffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000001, 0x12, r3, 0x925d5000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x10000, &(0x7f0000000200)='\x00') ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$VT_GETSTATE(r7, 0x5603, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pimreg1\x00', 0xe00}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) read$FUSE(r8, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m44.034259888s ago: executing program 32 (id=70): r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000800)='.dead\x00', 0x0, 0xfffffffffffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000001, 0x12, r3, 0x925d5000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x10000, &(0x7f0000000200)='\x00') ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$VT_GETSTATE(r7, 0x5603, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pimreg1\x00', 0xe00}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) read$FUSE(r8, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m35.165770898s ago: executing program 0 (id=2850): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000002900000043000000fe800000000000000000000000000030", @ANYRES32=0x0, @ANYBLOB="1600001dcdb78eb700"], 0x28}}], 0x1, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='exfat\x00', 0x52000, &(0x7f0000000180)='ocfs2_dlmfs\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000180), &(0x7f0000000080)=0xfffffffffffffeeb) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x200000, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/101) 1m35.165360908s ago: executing program 0 (id=2851): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004000a004e2000000401000000006d5a00000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r4], 0x21c}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0xa7, 0x0, 0xd}]}) read$FUSE(r0, &(0x7f0000001cc0)={0x2020}, 0x2020) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 1m35.097612949s ago: executing program 0 (id=2852): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000002d80)=""/254, 0xfe}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0x0, &(0x7f0000000100)="8ca6373bd70e14934e09dfa04b892905b38fec16cd20000000000000000000f7d800005a63950ebcce5a0f973d4d909b9b31b9eaa704f9420859d4aa02b165c2e4e0f4ebce8fe327649233ed95a476a46db82534e023e71c") syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x80, 0x4) 1m35.073559469s ago: executing program 0 (id=2853): r0 = socket(0xf, 0x800, 0x4da) fallocate(r0, 0x2c, 0xd, 0x475c) r1 = accept$nfc_llcp(r0, 0x0, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000040)=0x2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)) pidfd_send_signal(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x18, 0xf, 0x7}, 0x0) r3 = fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='%]\x00', &(0x7f00000001c0)=']-\x00', 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000200)={'\x00', @ifru_ivalue=0x7}}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x5, 0x6a6, [0x0, 0x2000000002c0, 0x2000000005cc, 0x200000000898], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x46, 0x7210, 'ip6tnl0\x00', 'batadv_slave_1\x00', 'ipvlan0\x00', 'syzkaller0\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0xff, 0xff], 0xce, 0x12e, 0x15e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x308, 0x6002, 0x9, @broadcast, 0xffffffff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, [0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff], 0xe2, 0x40}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfff9}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x66}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x0, 0x0, 0x2315, 'nicvf0\x00', 'nr0\x00', 'macvtap0\x00', 'team_slave_0\x00', @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0x136, 0x17e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @empty, [0xff, 0xff, 0xffffff00, 0xff000000], [0xffffff00, 0xff], 0x4, 0x29, 0x1, 0x8, 0x4e22, 0x4e24, 0x4e22, 0x4e24}}}], [@common=@log={'log\x00', 0x28, {{0x6a, "2abd85e7282dd30157d91abf4e7a03a2fd7d8ec37d8fe6077790bc884f07", 0x2}}}], @common=@ERROR={'ERROR\x00', 0x20, {"2ad9a5cd88842bccff0c469a1a6a7d46a2271576bde4119eae0e4c1cddfb"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0xa, 0x6005, 'team0\x00', 'syzkaller1\x00', 'veth1\x00', 'gretap0\x00', @random="63412151e209", [0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0xff], 0xee, 0xee, 0x166, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0xfffffffffffffffd, {0x7fffffffffffffff}}}}, @time={{'time\x00', 0x0, 0x18}, {{0x7968, 0x80000000, 0x14fbc, 0x140e2, 0x1, 0xfe, 0x3}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xe, 0x6, 0x0, 0x0, "1aa1bbded5d2726221bc81b941fb15bddd88d9726db3be1022b36ec31db54a67cab98971007314ba6bcbdb281a01b6ca823d2f4a02bc4a224b7b42c51ba0fdb0"}}}}, {0x9, 0xc, 0x8884, 'batadv_slave_0\x00', 'team_slave_1\x00', 'caif0\x00', 'wg0\x00', @multicast, [], @random="e54c46fd1f13", [0xff, 0xff, 0xff, 0xff, 0x7f, 0xff], 0x106, 0x106, 0x136, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="fad55e44ff5f", 0x1}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x308, 0x8100, 0x4, @private=0xa010101, 0xff000000, @multicast2, 0xff000000, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0x7f, 0xff, 0xff, 0xff], 0x38, 0x24}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x0, 0x50, 0x201, 'wg2\x00', 'virt_wifi0\x00', 'virt_wifi0\x00', 'veth1_macvtap\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}]}, 0x71e) lseek(r3, 0x8001, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b00)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/57, 0x39, 0x0, &(0x7f0000000a40)=""/136, 0x88}, &(0x7f0000000b40)=0x40) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000b80)=@routing={0x5c, 0x6, 0x2, 0x80, 0x0, [@remote, @empty, @dev={0xfe, 0x80, '\x00', 0x11}]}, 0x38) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @multicast1, @initdev}, &(0x7f0000000c00)=0xc) r4 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000c40)={0x7, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c80)) bind$bt_hci(r0, &(0x7f0000000e80)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000ec0)={{&(0x7f0000ff7000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x9442c50b5f0e4101, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r0, 0x0, r6) r8 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r7, &(0x7f0000000f40)={r8, r0, 0x6}) socket(0xf, 0x800, 0x8) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000f80)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x1, 0x4, 0x44d, 0x8, 0xbcb, 0x7fffffff}, {0x7, 0x9, 0x0, 0x1, 0xfffffffffffffffc, 0x2}], ['\x00', '\x00']}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) gettid() sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4885}, 0x80) 1m35.072537079s ago: executing program 0 (id=2854): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x1e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, 0xffffffffffffffff, 0x147a5000) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r4, &(0x7f00000002c0)='logon\x00', 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xea, 0xf7, 0x2, 0x6, 0x401, 0x2, 0x9, 'syz1\x00'}) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x116b, &(0x7f00000001c0)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x49, 0x0, &(0x7f0000000000)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000140), 0x12) r7 = getpid() syz_pidfd_open(r7, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@binder={0x73622a85, 0x101, 0x1}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m34.99775049s ago: executing program 0 (id=2855): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x80, 0x4) 1m19.997314896s ago: executing program 33 (id=2855): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x80, 0x4) 1m10.214204353s ago: executing program 1 (id=3126): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x62040200) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) accept$unix(r3, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000000000000a00000200000005ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e2100000001fe800000000000000000000000000010ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000096fe88000000000000000000000000010100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000000070000000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000007fc020000000000000000000000000001ff0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000013ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22fffffff7fc0000000000000000000000000000000500"/1040], 0x410) bind$can_raw(r1, &(0x7f00000000c0), 0x10) 1m10.134270854s ago: executing program 5 (id=3127): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x20, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0xfe}]}]}, 0x20}], 0x1}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) r3 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) sendfile(r2, r2, 0x0, 0x800000007) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000000000000000000000a00020077"], 0x28}}, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) 1m10.133209694s ago: executing program 2 (id=3128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xd5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4800) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) capset(0x0, &(0x7f0000000200)={0x7ff, 0x0, 0x9, 0x5, 0x1, 0x5}) syz_usb_connect$uac1(0x2, 0xb4, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x4, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x81}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0xf2, 0x0, 0xd, 0xcc, 0x36}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x4, 'N '}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x73, 0x3, 0x6, 0xef, "dd7d1e"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xba, 0x4, 0x5, 0x1, "f005"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xe, 0x4, 0x6, 0x9, "874ee674c95932"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x55, 0x1afb, 0x4, "3234f4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xff, 0x2, 0x2, {0x7, 0x25, 0x1, 0x2, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x5, 0x9, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa}}}}}}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000007c0)=0x7fff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, 0x0) ioctl$int_in(r2, 0x5421, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'veth0_vlan\x00', 0x620}) capset(0x0, 0x0) r4 = signalfd4(r1, &(0x7f0000000c00)={[0x2]}, 0x8, 0x800) r5 = signalfd4(r1, &(0x7f0000000c40)={[0x9]}, 0x8, 0x0) getpgid(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000d40)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x3}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000d80)) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000e00)=0x90) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000002bc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b80)={&(0x7f0000000ec0)={0xa88, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x22}}}}, [@NL80211_ATTR_TID_CONFIG={0x650, 0x11d, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf74, 0x8001, 0x40, 0x7ff, 0x1, 0xc6a, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9d2, 0x4, 0x800, 0x7, 0x7, 0x9, 0x200, 0x2]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x4}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x9}, {0x1}, {0x4, 0x4}, {0x7, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x5}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x1, 0x7}, {0x1}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x3}, {0x2, 0x7}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x1, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x18}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x5}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x1f}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x36, 0x1, 0x36, 0x6c, 0x36, 0x18, 0x60, 0x60, 0x1b, 0x3, 0x24, 0x24, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x2}, {0x0, 0x7}, {0x5}, {0x6, 0x9}, {0x0, 0x2}, {0x2, 0x5}, {0x2, 0x3}, {0x1}, {0x6, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb69, 0x6ca7, 0x81, 0x2, 0x7, 0xf954, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x3}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x5}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x99c, 0x6, 0x6, 0x9, 0xfffd, 0x1, 0xc0]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x5, 0x0, 0xfffc, 0x8, 0x0, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x8, 0x7ff, 0x80, 0x9f, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa57, 0x8, 0x3, 0xf3dc, 0x4, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x9, 0x30, 0x2, 0x0, 0x1, 0x3, 0x18, 0x5, 0x18, 0x5, 0x9, 0x6c, 0x30, 0x3, 0x9, 0x16, 0xb, 0x60, 0x5, 0x10, 0x16, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x62b, 0xe, 0x437, 0x1, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x9, 0xa, 0x2, 0xfff9, 0x7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x48, 0x60, 0x2, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x401, 0x3c7, 0xc, 0x80, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x324, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xa, 0x4, 0x9eb, 0x33a, 0xff, 0x5, 0xa4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x200, 0x3, 0x4, 0x88c9, 0x8, 0x80, 0x8]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0xa}, {0x7}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x1}, {0x1, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x4}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0xfff, 0x0, 0x8, 0x2, 0x7, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x30, 0x20, 0x1b, 0x60, 0x16, 0x60, 0x12, 0x12, 0xb, 0x1b, 0x6c, 0x9, 0x3b, 0x6c, 0x30, 0x3, 0x48, 0x28, 0x60, 0x12, 0x5, 0xb, 0xb, 0x18, 0x60, 0x60, 0x895f5c6a1c763187, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x5, 0x0, 0x7ff, 0x5a8, 0x0, 0x7, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x60, 0x1b]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x5, 0xc, 0x207, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x5, 0xb000, 0x4, 0x5, 0x6, 0x89f]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x6c, 0x48, 0x16, 0x1b, 0x6, 0x18, 0xc, 0x1b, 0x1b, 0x9, 0x18, 0x7b, 0xb, 0x1, 0x12, 0x1b, 0x16, 0x0, 0x1b, 0x18, 0x0, 0x0, 0x6, 0x4, 0x48, 0x24, 0x12, 0x6c, 0xe0b32dc0041b75dc]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x16, 0x0, 0x18, 0x2, 0x30, 0x0, 0x22, 0x48, 0x12, 0x6c, 0x5, 0x5, 0x2, 0x1f, 0x2, 0x16, 0x0, 0x3, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x0, 0xc, 0x24, 0x16, 0x24, 0x18, 0x3c, 0xb, 0x5, 0x30, 0x2, 0x48, 0x6, 0xc, 0x24, 0x30, 0x6, 0x1b, 0x6c, 0x12, 0x4, 0x5, 0xc, 0x12, 0x12, 0x16, 0x9, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x7, 0x3, 0x401, 0xff80, 0xf170, 0x54]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3ff, 0x5, 0x0, 0x8, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x4, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x6, 0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x3}, {0x6, 0x8}, {0x2, 0x8}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe00, 0x5, 0x1, 0x7, 0x1, 0x426, 0xfff, 0x7]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x1}, {0x6, 0x2}, {0x3, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x5, 0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {}, {0x6, 0x1}, {0x4, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x9}, {0x1, 0x2}, {0x6, 0x9}, {0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x7, 0x0, 0x408, 0x8, 0x2, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x32c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff6e87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x24}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x4}, {0x7, 0x4}, {0x5, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x9}, {0x5, 0x5}, {0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x1}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x5, 0x30, 0x6, 0x1b, 0x1b, 0x3, 0x5, 0xc, 0x6, 0x12, 0x12, 0x48, 0xb, 0x6, 0x31, 0x6, 0x77, 0x4, 0x9, 0x1, 0x48, 0x1a, 0x5c, 0x9, 0x16, 0x4, 0x18, 0x4b, 0x2, 0xb]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x9, 0x5, 0xb, 0x24, 0x24, 0x3, 0x12, 0x1b, 0x16, 0x24, 0xc, 0x1b, 0x12, 0x60, 0xc, 0x18, 0x18, 0xb, 0xb, 0xb, 0x30, 0x60, 0x5, 0x24, 0x3, 0x6, 0x1, 0x6c, 0x36, 0x24, 0xc]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0x5}, {0x4, 0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0x2}, {0x1, 0x6}, {0x1}, {0x3, 0x3}, {0x3, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x6}, {0x2, 0x4}, {0x7, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x2}, {0x3}, {0x6}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x5}, {}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x3, 0x9}, {0x3, 0x6}, {}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x5}, {0x6}, {0x5, 0x9}, {0x3, 0x5}, {0x4, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x8}, {0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x3, 0x3}, {0x5, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x6, 0x7f, 0x118, 0x7, 0xe05, 0xa, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7e93, 0x7f, 0x0, 0x3, 0x200, 0x6, 0xd3e4]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x30, 0x30, 0x5, 0x18, 0x0, 0x5, 0x24, 0x12, 0x6, 0x60, 0x3, 0x36, 0x3, 0x9, 0xc, 0x9, 0xc, 0x0, 0x6c, 0x48, 0x6, 0x3, 0x12, 0x4, 0xc, 0x9, 0x6, 0x18, 0x1b, 0x6, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x1ff, 0x3, 0xf0, 0xa5, 0x5, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0xb4f, 0x1, 0x5, 0x9, 0x0, 0x8, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xca67, 0x1, 0x2, 0x7fff, 0x8000, 0x3, 0x1, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6c, 0x24, 0x36, 0x1b, 0x48, 0x1, 0x48, 0x12, 0x1, 0x12, 0x60, 0x9, 0x6c, 0x3]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x18, 0x48, 0x9, 0x3, 0x4, 0x1b, 0x3a, 0x6c, 0xc, 0x16, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b3d, 0x81, 0xc125, 0x37, 0x3, 0x0, 0x7, 0x400]}}]}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9e16, 0x9, 0x9, 0xa0b, 0x84a0, 0xf001, 0xfffa, 0x1a]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x401, 0x7ff, 0x7, 0x6, 0x9, 0x6]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0x8, 0x8001, 0xc, 0x0, 0x8000, 0x3ea4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8001, 0x0, 0x1ee0, 0x4, 0x9, 0x2]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x3}, {0x0, 0x2}, {0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0xa}, {0x4, 0x8}, {0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x1, 0x4}, {0x3}, {0x5, 0x8}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0xa}, {0x7, 0xa}, {}, {0x7, 0x5}, {0x5}, {0x5, 0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd4, 0x1, 0xffff, 0x7, 0x5, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xac}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x4}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xa88}, 0x1, 0x0, 0x0, 0x2000c001}, 0x8001) 1m9.978698937s ago: executing program 1 (id=3129): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = getpid() (async) r4 = getuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$inet(0x2, 0x2, 0x1) fspick(0xffffffffffffffff, 0x0, 0xccdd3aaf1369b769) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001afb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0xffff95a9, 0x40, 0xd898}}) (async) r10 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4000) (async) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000380)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmmsg$unix(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="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", 0x1000}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r1, r6, 0xffffffffffffffff, r1, r8, r9, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0xb0, 0x24040010}}], 0x1, 0x2) 1m9.913322318s ago: executing program 1 (id=3130): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1b, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1b, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x800) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) 1m9.864764199s ago: executing program 1 (id=3133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b8011"], 0x24}], 0x1}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000005c0)={0x4}) close_range(r1, 0xffffffffffffffff, 0x0) 1m9.864370359s ago: executing program 5 (id=3134): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r8 = epoll_create(0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x80088a02, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000140)) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) fcntl$dupfd(r1, 0x0, r1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r11, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x12, r11, 0x93dcf000) statx(r11, &(0x7f0000001280)='./file0\x00', 0x1000, 0x20, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xf8, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f000022f000/0x2000)=nil, 0x2000, 0x3000001, 0x10, 0xffffffffffffffff, 0x2000) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) close(r11) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1m9.78564572s ago: executing program 1 (id=3135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x2, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1108, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 1m9.74999527s ago: executing program 5 (id=3136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/132, 0x84, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m9.652600762s ago: executing program 4 (id=3138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, 0x0) sendmmsg$sock(r3, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4e) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, 0x0) (async) sendmmsg$sock(r3, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0) (async) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m9.613052752s ago: executing program 5 (id=3139): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0x101, 0x3656, 0x3, 0xbca, 0x2, [0xf, 0xfffffff5, 0xfffffff9, 0x6]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xa095000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "8b95db559c738470641d744b3ffe0b8a117542b2efd081b3aae05a83cd40a070accac00d3a1f164c58910704f40e30ff0acd0deb22de6be56cf9c7eb546a67366a0467b20fb14c6fe3912e2ed4bccfe34452ce50b476e6f9eb274af8a5eeac05c2929236e6b8764bfc10edbb5ba658e078b7817002c1ebe9f6c542c266"}}, &(0x7f0000000780)=ANY=[@ANYBLOB="000f05000000050f050000c7b089e3774a035cfc5b11cbaf2ca092f80fb7681830d2b41ddb9e43fdce28743e5817aa71216a7104f6eee22f585e41a97e5d850b978f581e47"], &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x0, 0x71, "dc6765af", "98588602"}}, 0x0}, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "d454"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x2}, 0x0, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x9}, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, &(0x7f00000002c0)={0x20, 0x6, 0xa7, {0xa7, 0xc, "1b54768d91b9f6377dc0a1ee7059ab9c730e26f7ee8d394e4f559e082353e0bb0f137d14c522c6d88591ae4248b377121b32c90753b55a3f61bba26819b2682b8720eb4c514e461160e99235d833ef2bb5099e85c035d18f5920ddab9502118c696d0460f5539cfd7a55c882d5dd36cafe3292b5e61ab2506397c0aa17e701aac86c36c067fdd8c1e49c32470a0ad0c553e42e8f8466f2f1644274bc88e976a08e896f5569"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="00dc0000000038051b"], &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1d, 0x1, {0x22, 0xaa3}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="4015dc00000090ed795614a9ff5c9541185d895be4cb9d4a9259b1a2f452e8b6a159247b71c5357613b81b21aea26ebba87f86b251550c857b027fda78165464fb06006722a2799867d6c96addc57e9f6fdf7862c49d1495e3a9db01f0cf7809bbd045d2a6b252c1e45be964f26a46ef369be8b0f9f89803f309f1ea2a22a32c6186d2d27f00d0c7f6b988e3b0135220ec8cb847c85b06e553beb67e38dd584b03a0fc13fcb472eab44129147c6c9147c358067c026d65861058f172c4b5c2f7fc230dd10115291d2b1f6457b8491aef7373568c1d65c47193"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x1, 0x5c, "6ac2730aede66fd009ff1dd0752551bb9b643b37e0dcb4dfcbb4c6e3f81b789d69fdef9eb61f3b52e3e8e6c50f0eb354b291c8566de2b1aa9ffe1e710bddc27a1b24ee53e0c75adeddd46dd6acc102d7c2a4a9cd2709ce7d3526eb87"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x9}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) futex(&(0x7f0000000500), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x25000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1800008, 0x32, r1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000011b80)={0x2020}, 0x2020) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000780)=ANY=[]) 1m9.481066584s ago: executing program 4 (id=3140): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000380)) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x5, 0x0, &(0x7f0000000180)) (async) listen(r1, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4002010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xca}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) (async) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) (async) close(r3) (async) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c00c0c4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) close_range(r5, r5, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r6, 0x511, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4404c}, 0x0) 1m9.480275214s ago: executing program 2 (id=3141): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)={0x20, 0x7, 0x2, {{0x13, './binderfs/binder1\x00'}, 0x7}}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.217766698s ago: executing program 4 (id=3142): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fadvise64(r0, 0x3, 0x0, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) read$FUSE(r0, &(0x7f0000004380)={0x2020}, 0x2020) 1m9.217533658s ago: executing program 2 (id=3143): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x11, r0, 0x147a5000) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x24, 0x0, &(0x7f00000000c0)) 1m9.209068649s ago: executing program 4 (id=3144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "145aa359352e4de0", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "d80f59276094db31"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x223, &(0x7f0000000400)=""/40) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffc53, 0x0, &(0x7f0000000340)=[@enter_looper, @increfs], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x147) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x250, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x198, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x0, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x20}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x95}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xa0d5}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x100}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 1m9.206284099s ago: executing program 2 (id=3145): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 1m9.008775281s ago: executing program 2 (id=3146): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)) 1m9.007349841s ago: executing program 4 (id=3147): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) sendfile(r1, r0, 0x0, 0x400000000003895) accept(r1, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80) 1m8.090216196s ago: executing program 5 (id=3148): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)="099c8c0df3efc1627acf4edd25c62b6ce81feaa20248124ec8fedfe944c67c79319405acce2c7b530523850276e01ff94db0959a4b647307e88f4ad3", 0x3c) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x1) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187014, &(0x7f00000000c0)) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8b22, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0xa, 0x0, &(0x7f0000000100)) close_range(r1, 0xffffffffffffffff, 0x0) 1m6.540590469s ago: executing program 1 (id=3149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f000003f000/0x2000)=nil, 0x2000, 0xb635773f07ebbeef, 0x20010, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000200)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r3) close_range(r0, r1, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 1m6.278967882s ago: executing program 4 (id=3150): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000000)=ANY=[@ANYRES8]) 1m0.658289467s ago: executing program 2 (id=3151): ioprio_set$pid(0x2, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x4000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)=@ethtool_cmd={0x3a, 0x6, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x2, 0x45, [0x101, 0x1]}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x2) shutdown(r6, 0x0) accept(r6, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000440)=0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'p'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) io_submit(r8, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x30000) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) ioctl$BLKRRPART(r10, 0x125f, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 1m0.398224971s ago: executing program 5 (id=3152): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="fa6c19552bde7f1b27d0850b3c10617f2f63") seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x1, 0x8717, 0x1, 0x5, {{0x1c, 0x4, 0x0, 0x8, 0x70, 0x266, 0x0, 0x6, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x3, 0xf4}, @timestamp_prespec={0x44, 0x4, 0xa9, 0x3, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x2b, 0x1, 0x0, [{@private=0xa010100, 0x3}, {@private=0xa010102, 0x72d}, {@remote, 0xb50d63be}, {@local, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}]}, @rr={0x7, 0x1b, 0x70, [@multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1, @empty, @loopback]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000d0000000900000006000000030000000500000009000000a56a0000000000000000000000000040b2e680616d95178478eb314f32e96066cbf2ab55f1f49d353cbae145b6c8f00fa900094ea82157028ba5eb3d7df131774c1043e9ac9cabbebfefb5a52ec7707ee30b8c8f25606914d77dffe83e2303710d83c127d417"]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000000000100000000000000014100000018001704000000000000005974683a76"], 0x34}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) recvmmsg$unix(r9, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) getsockopt(r6, 0xff, 0x10, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000180)=0xf) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) bind$tipc(r9, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 45.421041867s ago: executing program 34 (id=3149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f000003f000/0x2000)=nil, 0x2000, 0xb635773f07ebbeef, 0x20010, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000200)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r3) close_range(r0, r1, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 25.045106913s ago: executing program 35 (id=3150): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000000)=ANY=[@ANYRES8]) 2.095849099s ago: executing program 36 (id=3152): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="fa6c19552bde7f1b27d0850b3c10617f2f63") seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x1, 0x8717, 0x1, 0x5, {{0x1c, 0x4, 0x0, 0x8, 0x70, 0x266, 0x0, 0x6, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x3, 0xf4}, @timestamp_prespec={0x44, 0x4, 0xa9, 0x3, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x2b, 0x1, 0x0, [{@private=0xa010100, 0x3}, {@private=0xa010102, 0x72d}, {@remote, 0xb50d63be}, {@local, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}]}, @rr={0x7, 0x1b, 0x70, [@multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1, @empty, @loopback]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000d0000000900000006000000030000000500000009000000a56a0000000000000000000000000040b2e680616d95178478eb314f32e96066cbf2ab55f1f49d353cbae145b6c8f00fa900094ea82157028ba5eb3d7df131774c1043e9ac9cabbebfefb5a52ec7707ee30b8c8f25606914d77dffe83e2303710d83c127d417"]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000000000100000000000000014100000018001704000000000000005974683a76"], 0x34}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) recvmmsg$unix(r9, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) getsockopt(r6, 0xff, 0x10, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000180)=0xf) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) bind$tipc(r9, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 0s ago: executing program 37 (id=3151): ioprio_set$pid(0x2, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x4000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)=@ethtool_cmd={0x3a, 0x6, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x2, 0x45, [0x101, 0x1]}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x2) shutdown(r6, 0x0) accept(r6, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000440)=0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'p'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) io_submit(r8, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x30000) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) ioctl$BLKRRPART(r10, 0x125f, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) kernel console output (not intermixed with test programs): } for pid=7366 comm="syz.1.2433" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 142.425761][ T36] audit: type=1400 audit(1752351562.072:53490): avc: denied { setopt } for pid=7368 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.449751][ T36] audit: type=1400 audit(1752351562.072:53491): avc: denied { connect } for pid=7368 comm="syz.1.2434" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.475121][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.475153][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.484294][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.490606][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.503210][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.503245][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.503407][ T7373] rust_binder: Error in use_page_slow: ESRCH [ 142.509768][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.522257][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.528578][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.535149][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.541522][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.541681][ T7373] rust_binder: use_range failure ESRCH [ 142.548127][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.560454][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.566436][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.575627][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.577727][ T7373] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 142.584970][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.596504][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.606934][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.609475][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.616249][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.623149][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.623865][ T7373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 142.633153][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.645844][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.652038][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.652344][ T7373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:79 [ 142.658793][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.675132][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.680369][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.689967][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.693440][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.712912][ T36] audit: type=1400 audit(1752351562.362:53492): avc: denied { write } for pid=7381 comm="syz.4.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.751311][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.751340][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.760267][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.767301][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.774164][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.784037][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.790796][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.808305][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.815020][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.822084][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.829177][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.835772][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.843941][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.850688][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.857391][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.874732][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.881446][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.888426][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.895851][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.902633][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.909410][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.916013][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.922725][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.929741][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.936725][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.943427][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.956698][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.963289][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.976573][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.985211][ T36] audit: type=1326 audit(1752351562.632:53493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7394 comm="syz.4.2444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88358e929 code=0x0 [ 142.991041][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.015252][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.022069][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.028794][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.035334][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.042128][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.064913][ T36] audit: type=1400 audit(1752351562.712:53494): avc: denied { ioctl } for pid=7397 comm="syz.1.2445" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.547219][ T36] audit: type=1400 audit(1752351563.202:53495): avc: denied { remount } for pid=7420 comm="syz.2.2451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.601726][ T7428] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 143.601726][ T36] audit: type=1400 audit(1752351563.252:53496): avc: denied { transfer } for pid=7427 comm="syz.2.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 143.631831][ T7428] rust_binder: Error while translating object. [ 143.631874][ T7428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.638195][ T7428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 143.663261][ T306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 143.684778][ T306] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.754057][ T7436] rust_binder: 7436: no such ref 3 [ 143.771593][ T7439] FAT-fs (rnullb0): bogus number of reserved sectors [ 143.778551][ T7439] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 143.856592][ T36] audit: type=1400 audit(1752351563.502:53497): avc: denied { mount } for pid=7445 comm="syz.2.2460" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.914654][ T7457] rust_binder: Error while translating object. [ 143.914705][ T7457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.921024][ T7457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 144.061264][ T7468] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2465'. [ 144.080437][ T7468] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2465'. [ 144.090239][ T7468] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 144.386686][ T2334] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.536676][ T2334] usb 1-1: Using ep0 maxpacket: 32 [ 144.543111][ T2334] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 144.551441][ T2334] usb 1-1: config 0 has no interface number 0 [ 144.557712][ T2334] usb 1-1: config 0 interface 213 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.568989][ T2334] usb 1-1: config 0 interface 213 has no altsetting 0 [ 144.577611][ T2334] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=1d.85 [ 144.587250][ T2334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.595353][ T2334] usb 1-1: Product: syz [ 144.599924][ T2334] usb 1-1: Manufacturer: syz [ 144.604626][ T2334] usb 1-1: SerialNumber: syz [ 144.610348][ T2334] usb 1-1: config 0 descriptor?? [ 144.915805][ T2334] usb 1-1: USB disconnect, device number 9 [ 144.983936][ T7495] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 145.104555][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2485'. [ 145.127214][ T7520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2485'. [ 145.136649][ T7520] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2485'. [ 145.148380][ T7520] netlink: 'syz.2.2485': attribute type 6 has an invalid length. [ 145.156630][ T7520] netlink: 'syz.2.2485': attribute type 5 has an invalid length. [ 145.164379][ T7520] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2485'. [ 145.175285][ T7520] __vm_enough_memory: pid: 7520, comm: syz.2.2485, bytes: 1152922604118523904 not enough memory for the allocation [ 145.189402][ T7522] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 145.440982][ T7531] binder: Unknown parameter 'maxile0' [ 145.786653][ T2334] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 145.832521][ T7569] netlink: 'syz.4.2501': attribute type 13 has an invalid length. [ 145.876274][ T7579] overlayfs: failed to clone upperpath [ 145.893394][ T7581] netlink: 'syz.4.2505': attribute type 25 has an invalid length. [ 145.951053][ T2334] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.963522][ T2334] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 145.971600][ T2334] usb 1-1: can't read configurations, error -71 [ 146.568667][ T7620] rust_binder: Error while translating object. [ 146.568711][ T7620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.575170][ T7620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 146.623421][ T7625] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2520'. [ 147.016702][ T2334] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.021504][ T7628] rust_binder: Write failure EFAULT in pid:103 [ 147.166668][ T2334] usb 1-1: Using ep0 maxpacket: 32 [ 148.049444][ T7644] 9pnet_fd: Insufficient options for proto=fd [ 149.608472][ T2334] usb 1-1: string descriptor 0 read error: -71 [ 149.617224][ T2334] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.626466][ T2334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.646046][ T2334] usb 1-1: can't set config #1, error -71 [ 149.661769][ T2334] usb 1-1: USB disconnect, device number 11 [ 149.838875][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.846041][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.853678][ T7678] bridge_slave_0: entered allmulticast mode [ 149.860379][ T7678] bridge_slave_0: entered promiscuous mode [ 149.867241][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.874324][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.886767][ T7678] bridge_slave_1: entered allmulticast mode [ 149.893518][ T7678] bridge_slave_1: entered promiscuous mode [ 149.958600][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 149.958618][ T36] audit: type=1400 audit(1752351569.612:53516): avc: denied { getopt } for pid=7682 comm="syz.0.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.997431][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.004712][ T7678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.012105][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.019174][ T7678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.043243][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.051252][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.061726][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.068844][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.078440][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.085617][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.120425][ T7678] veth0_vlan: entered promiscuous mode [ 150.136076][ T7678] veth1_macvtap: entered promiscuous mode [ 150.170205][ T7699] exFAT-fs (rnullb0): invalid boot record signature [ 150.176936][ T7699] exFAT-fs (rnullb0): failed to read boot sector [ 150.183402][ T7699] exFAT-fs (rnullb0): failed to recognize exfat type [ 150.276713][ T306] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 150.402274][ T7709] rust_binder: Write failure EINVAL in pid:122 [ 150.416952][ T306] usb 1-1: device descriptor read/64, error -71 [ 150.442489][ T7715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128 [ 150.486683][ T45] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 150.657803][ T45] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24929, setting to 64 [ 150.668957][ T45] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 150.678074][ T306] usb 1-1: device descriptor read/64, error -71 [ 150.684512][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.693523][ T7704] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 150.696661][ T64] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.856701][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 150.863070][ T64] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.874111][ T64] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.887117][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.893912][ T64] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 150.903257][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.911348][ T36] audit: type=1400 audit(1752351570.552:53517): avc: denied { execute } for pid=7700 comm="syz.4.2548" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.911968][ T45] usb 5-1: string descriptor 0 read error: -71 [ 150.938548][ T64] usb 3-1: config 0 descriptor?? [ 150.941183][ T306] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 150.958878][ T45] usb 5-1: USB disconnect, device number 10 [ 151.076735][ T306] usb 1-1: device descriptor read/64, error -71 [ 151.089472][ T36] audit: type=1400 audit(1752351570.742:53518): avc: denied { mount } for pid=7725 comm="syz.1.2556" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 151.316740][ T306] usb 1-1: device descriptor read/64, error -71 [ 151.354173][ T64] usbhid 3-1:0.0: can't add hid device: -71 [ 151.361290][ T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.371684][ T64] usb 3-1: USB disconnect, device number 9 [ 151.426782][ T306] usb usb1-port1: attempt power cycle [ 151.496685][ T36] audit: type=1400 audit(1752351571.142:53519): avc: denied { read } for pid=7756 comm="syz.4.2567" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.530984][ T36] audit: type=1400 audit(1752351571.142:53520): avc: denied { open } for pid=7756 comm="syz.4.2567" path="/2/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.563220][ T36] audit: type=1400 audit(1752351571.142:53521): avc: denied { bind } for pid=7756 comm="syz.4.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.585110][ T36] audit: type=1400 audit(1752351571.142:53522): avc: denied { write } for pid=7756 comm="syz.4.2567" path="socket:[25638]" dev="sockfs" ino=25638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.615713][ T36] audit: type=1400 audit(1752351571.142:53523): avc: denied { ioctl } for pid=7756 comm="syz.4.2567" path="socket:[25638]" dev="sockfs" ino=25638 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.641559][ T36] audit: type=1400 audit(1752351571.152:53524): avc: denied { unmount } for pid=7678 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 151.786830][ T306] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 151.808107][ T306] usb 1-1: device descriptor read/8, error -71 [ 151.939501][ T306] usb 1-1: device descriptor read/8, error -71 [ 152.002910][ T7795] tipc: Started in network mode [ 152.020082][ T7795] tipc: Node identity b2bedc7ec38b, cluster identity 4711 [ 152.046959][ T7795] tipc: Enabled bearer , priority 10 [ 152.072145][ T7796] tipc: Enabling of bearer rejected, already enabled [ 152.095418][ T36] audit: type=1400 audit(1752351571.742:53525): avc: denied { read } for pid=7797 comm="syz.2.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.159614][ T7795] tipc: Resetting bearer [ 152.177596][ T306] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 152.193130][ T7795] SELinux: policydb magic number 0x500 does not match expected magic number 0xf97cff8c [ 152.207043][ T7795] SELinux: failed to load policy [ 152.212421][ T306] usb 1-1: device descriptor read/8, error -71 [ 152.247159][ T7793] tipc: Resetting bearer [ 152.265363][ T7793] tipc: Disabling bearer [ 152.300540][ T7803] binder: Bad value for 'max' [ 152.339636][ T7806] overlay: ./bus is not a directory [ 152.340631][ T7808] overlayfs: failed to clone upperpath [ 152.357705][ T306] usb 1-1: device descriptor read/8, error -71 [ 152.367155][ T7806] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2582'. [ 152.383837][ T7806] binder: Unknown parameter 'contextÀà­s½d3€.„ò7щ' [ 152.466834][ T306] usb usb1-port1: unable to enumerate USB device [ 152.490838][ T7838] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 152.543835][ T7850] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 152.696727][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 152.850838][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.859893][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 152.867578][ T45] usb 3-1: can't read configurations, error -71 [ 153.146766][ T7872] 9pnet_fd: Insufficient options for proto=fd [ 153.426661][ T64] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 153.479993][ T7887] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2605'. [ 153.513604][ T495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 153.552521][ T495] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.597526][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.620737][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.630092][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.646908][ T64] usb 1-1: Product: syz [ 153.651174][ T64] usb 1-1: Manufacturer: syz [ 153.662578][ T64] usb 1-1: SerialNumber: syz [ 153.742439][ T7909] can0: slcan on ttyS3. [ 153.784912][ T7909] can0 (unregistered): slcan off ttyS3. [ 154.086669][ T45] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 154.240201][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.250470][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 154.258476][ T45] usb 3-1: can't read configurations, error -71 [ 154.511885][ T7945] overlayfs: failed to clone upperpath [ 154.526079][ T7947] rust_binder: Error in use_page_slow: ESRCH [ 154.526101][ T7947] rust_binder: use_range failure ESRCH [ 154.530403][ T7948] rust_binder: Error in use_page_slow: ESRCH [ 154.532461][ T7947] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 154.538061][ T7948] rust_binder: use_range failure ESRCH [ 154.544114][ T7947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 154.551863][ T7948] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 154.557620][ T7947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:52 [ 154.566737][ T7948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 154.578270][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'. [ 154.583540][ T7948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:52 [ 154.677435][ T64] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 154.692901][ T64] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 154.700720][ T64] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 155.086896][ T64] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 155.094698][ T64] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 155.232498][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 155.232519][ T36] audit: type=1400 audit(1752351574.882:53548): avc: denied { append } for pid=7962 comm="syz.2.2619" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.293307][ T45] usb 1-1: USB disconnect, device number 16 [ 155.308927][ T45] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 155.320491][ T36] audit: type=1400 audit(1752351574.972:53549): avc: denied { create } for pid=7970 comm="syz.1.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.627878][ T8002] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 155.658360][ T8002] SELinux: Context system_u:object_r:zero_device_t:s0 is not valid (left unmapped). [ 155.668097][ T36] audit: type=1400 audit(1752351575.322:53550): avc: denied { relabelto } for pid=7998 comm="syz.4.2625" name="file0" dev="ramfs" ino=25490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:zero_device_t:s0" [ 155.695141][ T36] audit: type=1400 audit(1752351575.322:53551): avc: denied { associate } for pid=7998 comm="syz.4.2625" name="file0" dev="ramfs" ino=25490 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:zero_device_t:s0" [ 155.738175][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2626'. [ 155.754221][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2626'. [ 155.780876][ T36] audit: type=1400 audit(1752351575.432:53552): avc: denied { create } for pid=8008 comm="syz.4.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.889048][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.897857][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.904791][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.911995][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.918808][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.925645][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.932640][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.939530][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 155.946681][ T8020] tmpfs: Unknown parameter '00000000000000000000000' [ 156.066702][ T422] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 156.216774][ T422] usb 1-1: Using ep0 maxpacket: 16 [ 156.223148][ T422] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.234100][ T422] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.243903][ T422] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.250544][ T422] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 156.259664][ T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.268251][ T422] usb 1-1: config 0 descriptor?? [ 156.432820][ T8030] fuse: Unknown parameter 'grmup_id' [ 156.561818][ T8039] overlayfs: failed to resolve './file1/file0': -2 [ 156.661647][ T8040] overlay: ./bus is not a directory [ 156.677855][ T422] holtek_kbd 0003:04D9:A055.0005: item fetching failed at offset 0/4 [ 156.686295][ T422] holtek_kbd 0003:04D9:A055.0005: probe with driver holtek_kbd failed with error -22 [ 156.881049][ T367] usb 1-1: USB disconnect, device number 17 [ 156.892358][ T36] audit: type=1400 audit(1752351576.532:53553): avc: denied { mount } for pid=8012 comm="syz.0.2628" name="/" dev="pstore" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 156.966739][ T8068] netlink: 'syz.1.2647': attribute type 15 has an invalid length. [ 157.226698][ T64] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.356695][ T64] usb 3-1: device descriptor read/64, error -71 [ 157.394458][ T36] audit: type=1400 audit(1752351577.042:53554): avc: denied { unmount } for pid=7032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 157.426201][ T36] audit: type=1400 audit(1752351577.072:53555): avc: denied { append } for pid=8082 comm="syz.0.2653" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.450120][ T36] audit: type=1400 audit(1752351577.072:53556): avc: denied { open } for pid=8082 comm="syz.0.2653" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.474252][ T36] audit: type=1400 audit(1752351577.072:53557): avc: denied { ioctl } for pid=8082 comm="syz.0.2653" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.522842][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.533777][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.542875][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.551878][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.560944][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.569919][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.578945][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.587887][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.596908][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.606291][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.608760][ T8096] fuse: Bad value for 'rootmode' [ 157.615526][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.620517][ T8097] fuse: Bad value for 'rootmode' [ 157.629160][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.642920][ T64] usb 3-1: device descriptor read/64, error -71 [ 157.648682][ T8101] overlayfs: failed to resolve './file1/file0': -2 [ 157.649846][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.666824][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.676931][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.685954][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.694869][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.703744][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.712665][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.721981][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.730905][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.739815][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.748734][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.757626][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.767009][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.775999][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.784875][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.793842][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.803495][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.812401][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.821289][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.830140][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.839165][ T8086] SELinux: security_context_str_to_sid (systeй ‰:ÿß) failed with errno=-22 [ 157.896666][ T64] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.026652][ T64] usb 3-1: device descriptor read/64, error -71 [ 158.266672][ T64] usb 3-1: device descriptor read/64, error -71 [ 158.288634][ T8126] netlink: 'syz.1.2667': attribute type 16 has an invalid length. [ 158.309205][ T8131] binder: Bad value for 'max' [ 158.386723][ T64] usb usb3-port1: attempt power cycle [ 158.656674][ T422] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 158.736669][ T64] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 158.757829][ T64] usb 3-1: device descriptor read/8, error -71 [ 158.807811][ T422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.820267][ T422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.829376][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.837427][ T422] usb 1-1: Product: syz [ 158.841593][ T422] usb 1-1: Manufacturer: syz [ 158.846176][ T422] usb 1-1: SerialNumber: syz [ 158.887990][ T64] usb 3-1: device descriptor read/8, error -71 [ 159.126670][ T64] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.147825][ T64] usb 3-1: device descriptor read/8, error -71 [ 159.277804][ T64] usb 3-1: device descriptor read/8, error -71 [ 159.320793][ T8151] overlay: ./file0 is not a directory [ 159.386776][ T64] usb usb3-port1: unable to enumerate USB device [ 159.855582][ T422] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 159.862083][ T422] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 159.869589][ T422] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 160.256154][ T422] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 160.263026][ T422] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 160.460808][ T8141] overlayfs: failed to resolve './file1/file0': -2 [ 160.468210][ T45] usb 1-1: USB disconnect, device number 18 [ 160.474366][ T45] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 161.135304][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 161.135323][ T36] audit: type=1400 audit(1752351580.782:53564): avc: denied { accept } for pid=8214 comm="syz.4.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.272941][ T36] audit: type=1400 audit(1752351580.922:53565): avc: denied { wake_alarm } for pid=8222 comm="syz.1.2690" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.646411][ T8227] overlayfs: failed to resolve './file1/file0': -2 [ 161.850011][ T8229] rust_binder: Error while translating object. [ 161.850041][ T8229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 161.856279][ T8229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:193 [ 161.934414][ T36] audit: type=1326 audit(1752351581.582:53566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.1.2697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8e929 code=0x0 [ 162.068086][ T36] audit: type=1400 audit(1752351581.722:53567): avc: denied { mounton } for pid=8244 comm="syz.2.2698" path="/syzcgroup/unified/syz2" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 162.068459][ T8247] rust_binder: 8245 RLIMIT_NICE not set [ 162.108730][ T8249] devpts: called with bogus options [ 162.132302][ T8251] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 162.132341][ T8251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 162.140520][ T8251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:204 [ 162.294293][ T36] audit: type=1400 audit(1752351581.942:53568): avc: denied { mounton } for pid=8259 comm="syz.2.2704" path="/syzcgroup/unified/syz2" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 162.406322][ T36] audit: type=1400 audit(1752351582.052:53569): avc: denied { append } for pid=8265 comm="syz.2.2706" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.585239][ T8279] rust_binder: Error while translating object. [ 162.585267][ T8279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 162.591675][ T8279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145 [ 162.666673][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 162.763136][ T8284] overlayfs: failed to resolve './file1/file0': -2 [ 162.827879][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.838129][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 162.851145][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.860230][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.868774][ T9] usb 3-1: config 0 descriptor?? [ 162.875204][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 163.074838][ T8266] netlink: 'syz.2.2706': attribute type 27 has an invalid length. [ 163.084245][ T9] usb 3-1: USB disconnect, device number 18 [ 163.412907][ T36] audit: type=1400 audit(1752351583.062:53570): avc: denied { create } for pid=8292 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.609712][ T36] audit: type=1400 audit(1752351583.262:53571): avc: denied { accept } for pid=8297 comm="syz.0.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.844336][ T8309] overlayfs: failed to resolve './file1/file0': -2 [ 164.370021][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 164.768266][ T36] audit: type=1400 audit(1752351584.422:53572): avc: denied { create } for pid=8321 comm="syz.0.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 164.897596][ T8326] overlayfs: failed to clone lowerpath [ 164.920808][ T36] audit: type=1400 audit(1752351584.572:53573): avc: denied { setopt } for pid=8323 comm="syz.0.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.216649][ T64] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.388003][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.412472][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.423860][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.440805][ T64] usb 1-1: Product: syz [ 165.449407][ T64] usb 1-1: Manufacturer: syz [ 165.458403][ T64] usb 1-1: SerialNumber: syz [ 166.221835][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 166.221876][ T36] audit: type=1400 audit(1752351585.872:53575): avc: denied { read } for pid=8398 comm="syz.2.2747" name="/" dev="configfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.231512][ T8399] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 166.250227][ T8399] rust_binder: Read failure Err(EFAULT) in pid:241 [ 166.257261][ T36] audit: type=1400 audit(1752351585.882:53576): avc: denied { open } for pid=8398 comm="syz.2.2747" path="/" dev="configfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.307417][ T36] audit: type=1400 audit(1752351585.962:53577): avc: denied { read } for pid=8400 comm="syz.2.2748" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.330680][ T36] audit: type=1400 audit(1752351585.982:53578): avc: denied { open } for pid=8400 comm="syz.2.2748" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.384753][ T36] audit: type=1400 audit(1752351586.032:53579): avc: denied { ioctl } for pid=8400 comm="syz.2.2748" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.473971][ T36] audit: type=1400 audit(1752351586.122:53580): avc: denied { ioctl } for pid=8405 comm="syz.4.2749" path="socket:[27858]" dev="sockfs" ino=27858 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 166.506714][ T64] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 166.513185][ T64] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 166.520961][ T64] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 166.712949][ T36] audit: type=1400 audit(1752351586.362:53581): avc: denied { accept } for pid=8418 comm="syz.4.2753" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.746721][ T8419] raw_sendmsg: syz.4.2753 forgot to set AF_INET. Fix it! [ 166.757697][ T36] audit: type=1400 audit(1752351586.412:53582): avc: denied { accept } for pid=8418 comm="syz.4.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.778298][ T8419] vlan0: entered allmulticast mode [ 166.783621][ T8419] veth0_vlan: entered allmulticast mode [ 166.790844][ T36] audit: type=1400 audit(1752351586.442:53583): avc: denied { bind } for pid=8418 comm="syz.4.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.899334][ T64] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 166.906110][ T64] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 167.103961][ T8339] overlayfs: failed to resolve './file1/file0': -2 [ 167.119545][ T45] usb 1-1: USB disconnect, device number 19 [ 167.129630][ T45] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 167.485244][ T8484] 9pnet_fd: Insufficient options for proto=fd [ 167.500907][ T36] audit: type=1400 audit(1752351587.152:53584): avc: denied { execute } for pid=8485 comm="syz.1.2766" name="file0" dev="ramfs" ino=27239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 167.586679][ T422] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.643460][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 167.670495][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 167.689746][ T6900] udevd[6900]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 167.746707][ T422] usb 3-1: Using ep0 maxpacket: 16 [ 167.757670][ T422] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 167.765964][ T422] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.786659][ T422] usb 3-1: config 0 has no interface number 0 [ 167.794259][ T422] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 167.803588][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.812010][ T422] usb 3-1: Product: syz [ 167.816450][ T422] usb 3-1: Manufacturer: syz [ 167.826627][ T422] usb 3-1: SerialNumber: syz [ 167.832092][ T422] usb 3-1: config 0 descriptor?? [ 167.838523][ T422] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 167.844898][ T422] usb 3-1: No valid video chain found. [ 168.043247][ T367] usb 3-1: USB disconnect, device number 19 [ 168.056685][ T64] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 168.105441][ T8508] SELinux: security_context_str_to_sid () failed with errno=-22 [ 168.186686][ T64] usb 1-1: device descriptor read/64, error -71 [ 168.409388][ T8521] overlayfs: failed to resolve './file1/file0': -2 [ 168.416662][ T367] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.426693][ T64] usb 1-1: device descriptor read/64, error -71 [ 168.546773][ T367] usb 3-1: device descriptor read/64, error -71 [ 168.666680][ T64] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 168.786664][ T367] usb 3-1: device descriptor read/64, error -71 [ 168.796670][ T64] usb 1-1: device descriptor read/64, error -71 [ 169.026701][ T367] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 169.046713][ T64] usb 1-1: device descriptor read/64, error -71 [ 169.156652][ T367] usb 3-1: device descriptor read/64, error -71 [ 169.167021][ T64] usb usb1-port1: attempt power cycle [ 169.396639][ T367] usb 3-1: device descriptor read/64, error -71 [ 169.516639][ T64] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 169.524444][ T367] usb usb3-port1: attempt power cycle [ 169.567521][ T64] usb 1-1: device descriptor read/8, error -71 [ 169.707775][ T64] usb 1-1: device descriptor read/8, error -71 [ 169.876692][ T367] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 169.897703][ T367] usb 3-1: device descriptor read/8, error -71 [ 169.946699][ T64] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 169.968334][ T64] usb 1-1: device descriptor read/8, error -71 [ 170.027849][ T367] usb 3-1: device descriptor read/8, error -71 [ 170.097958][ T64] usb 1-1: device descriptor read/8, error -71 [ 170.206872][ T64] usb usb1-port1: unable to enumerate USB device [ 170.266698][ T367] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 170.288039][ T367] usb 3-1: device descriptor read/8, error -71 [ 170.335396][ T8559] overlayfs: failed to resolve './file1/file0': -2 [ 170.417838][ T367] usb 3-1: device descriptor read/8, error -71 [ 170.526914][ T367] usb usb3-port1: unable to enumerate USB device [ 171.039073][ T8581] 9pnet: Could not find request transport: o=0x0000000000000008 [ 171.526659][ T64] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 171.584509][ T8607] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2807'. [ 171.594596][ T8607] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2807'. [ 171.604474][ T8607] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 171.677936][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.690420][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.699599][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.707749][ T64] usb 3-1: Product: syz [ 171.712189][ T64] usb 3-1: Manufacturer: syz [ 171.716901][ T64] usb 3-1: SerialNumber: syz [ 171.741643][ T8618] overlayfs: failed to clone upperpath [ 171.849640][ T8625] netlink: 'syz.4.2813': attribute type 4 has an invalid length. [ 171.857527][ T8625] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2813'. [ 172.429835][ T8654] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2821'. [ 172.447850][ T8654] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2821'. [ 172.456880][ T8654] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 172.553850][ T8658] rust_binder: Error while translating object. [ 172.553902][ T8658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 172.560336][ T8658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 172.582327][ T8660] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 172.727650][ T64] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 172.734446][ T64] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 172.742021][ T64] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 173.051873][ T367] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 173.067296][ T367] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.087610][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 173.087631][ T36] audit: type=1400 audit(1752351592.742:53590): avc: denied { create } for pid=8697 comm="syz.4.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 173.130879][ T64] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 173.143197][ T64] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 173.256452][ T36] audit: type=1400 audit(1752351592.902:53591): avc: denied { read } for pid=8714 comm="syz.0.2837" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.291821][ T36] audit: type=1400 audit(1752351592.942:53592): avc: denied { listen } for pid=8718 comm="syz.0.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.333742][ T8592] overlayfs: failed to resolve './file1/file0': -2 [ 173.341345][ T306] usb 3-1: USB disconnect, device number 24 [ 173.347610][ T306] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 173.856546][ T36] audit: type=1400 audit(1752351593.502:53593): avc: denied { read } for pid=8738 comm="syz.2.2839" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 173.880826][ T36] audit: type=1400 audit(1752351593.502:53594): avc: denied { open } for pid=8738 comm="syz.2.2839" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 174.003080][ T36] audit: type=1400 audit(1752351593.652:53595): avc: denied { watch watch_reads } for pid=8750 comm="syz.2.2844" path="/84/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 174.154085][ T8768] netlink: 'syz.0.2851': attribute type 8 has an invalid length. [ 174.278811][ T8775] rust_binder: Error while translating object. [ 174.278840][ T8775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.285164][ T8775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 174.300198][ T36] audit: type=1400 audit(1752351593.952:53596): avc: denied { unmount } for pid=7032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 175.881650][ T36] audit: type=1400 audit(1752351595.532:53597): avc: denied { accept } for pid=8794 comm="syz.4.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 175.921561][ T8800] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2863'. [ 175.946714][ T8800] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2863'. [ 175.955638][ T8800] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 176.068096][ T36] audit: type=1400 audit(1752351595.722:53598): avc: denied { bind } for pid=8801 comm="syz.4.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.869764][ T36] audit: type=1326 audit(1752351596.522:53599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.2869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7029b8e929 code=0x0 [ 177.072864][ T8821] incfs: Options parsing error. -22 [ 177.078293][ T8821] incfs: mount failed -22 [ 177.666654][ T495] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 177.717741][ T8836] bond_slave_0: entered allmulticast mode [ 177.737643][ T8836] fuse: Bad value for 'fd' [ 177.829111][ T495] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.847771][ T495] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.857261][ T495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.866424][ T495] usb 3-1: Product: syz [ 177.872999][ T495] usb 3-1: Manufacturer: syz [ 177.878106][ T495] usb 3-1: SerialNumber: syz [ 178.502367][ T8862] overlayfs: failed to clone upperpath [ 178.525057][ T8864] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2887'. [ 178.537283][ T8864] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2887'. [ 178.546322][ T8864] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 178.891692][ T495] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 178.905794][ T495] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 178.916234][ T495] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 179.292395][ T495] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 179.308475][ T495] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 179.505013][ T495] usb 3-1: USB disconnect, device number 25 [ 179.518554][ T495] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 180.391924][ T8934] netlink: 'syz.1.2902': attribute type 15 has an invalid length. [ 181.574930][ T8960] netlink: 4520 bytes leftover after parsing attributes in process `syz.4.2911'. [ 181.584575][ T8960] tipc: New replicast peer: 172.30.0.1 [ 181.590545][ T8960] tipc: Enabled bearer , priority 10 [ 181.767337][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 181.767354][ T36] audit: type=1400 audit(1752351601.422:53602): avc: denied { create } for pid=8965 comm="syz.2.2914" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.813130][ T36] audit: type=1400 audit(1752351601.442:53603): avc: denied { read } for pid=8965 comm="syz.2.2914" name="file0" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.836368][ T36] audit: type=1400 audit(1752351601.442:53604): avc: denied { open } for pid=8965 comm="syz.2.2914" path="/93/file0" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.859687][ T36] audit: type=1400 audit(1752351601.442:53605): avc: denied { ioctl } for pid=8965 comm="syz.2.2914" path="/93/file0" dev="tmpfs" ino=527 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.884434][ T36] audit: type=1400 audit(1752351601.462:53606): avc: denied { unlink } for pid=7073 comm="syz-executor" name="file0" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.235808][ T36] audit: type=1400 audit(1752351601.882:53607): avc: denied { map } for pid=8984 comm="syz.2.2918" path="socket:[29154]" dev="sockfs" ino=29154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.385136][ T36] audit: type=1326 audit(1752351602.032:53608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.1.2921" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e27b8e929 code=0x0 [ 182.411464][ T8998] fuse: Bad value for 'group_id' [ 182.416492][ T8998] fuse: Bad value for 'group_id' [ 182.422536][ T36] audit: type=1400 audit(1752351602.062:53609): avc: denied { mounton } for pid=8997 comm="syz.2.2922" path="/99/file0" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.686343][ T9019] netlink: 'syz.4.2930': attribute type 11 has an invalid length. [ 182.716655][ T495] tipc: Node number set to 1899355262 [ 183.035220][ T9023] overlayfs: failed to clone upperpath [ 183.266923][ T9052] bridge0: port 3(veth0_to_bridge) entered blocking state [ 183.275688][ T36] audit: type=1400 audit(1752351602.922:53610): avc: denied { read } for pid=9051 comm="syz.4.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.295545][ T9052] bridge0: port 3(veth0_to_bridge) entered disabled state [ 183.303241][ T9052] veth0_to_bridge: entered allmulticast mode [ 183.310092][ T9052] veth0_to_bridge: entered promiscuous mode [ 183.316539][ T9052] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.329179][ T9052] bridge0: port 3(veth0_to_bridge) entered blocking state [ 183.336344][ T9052] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 183.918974][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 184.063334][ T9068] x_tables: unsorted underflow at hook 4 [ 184.977095][ T9088] vcan0: entered allmulticast mode [ 184.986754][ T9088] vcan0: left allmulticast mode [ 185.195172][ T9098] netlink: 'syz.4.2957': attribute type 4 has an invalid length. [ 185.220175][ T9100] fuse: Bad value for 'fd' [ 185.389836][ T36] audit: type=1400 audit(1752351605.042:53611): avc: denied { write } for pid=9103 comm="syz.2.2960" name="/" dev="configfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.517616][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=9109 comm=syz.2.2962 [ 185.761275][ T9126] overlayfs: failed to clone upperpath [ 186.145902][ T9153] fuse: Bad value for 'user_id' [ 186.150883][ T9153] fuse: Bad value for 'user_id' [ 187.245861][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 187.245882][ T36] audit: type=1400 audit(1752351606.892:53614): avc: denied { ioctl } for pid=9189 comm="syz.2.2991" path="socket:[29387]" dev="sockfs" ino=29387 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.378915][ T9219] overlayfs: failed to clone upperpath [ 188.448035][ T36] audit: type=1400 audit(1752351608.102:53615): avc: denied { map } for pid=9221 comm="syz.2.3004" path="socket:[30246]" dev="sockfs" ino=30246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 189.480686][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.487791][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.495403][ T9235] bridge_slave_0: entered allmulticast mode [ 189.501775][ T9235] bridge_slave_0: entered promiscuous mode [ 189.508185][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.515214][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.522475][ T9235] bridge_slave_1: entered allmulticast mode [ 189.528681][ T9235] bridge_slave_1: entered promiscuous mode [ 189.552209][ T46] bridge_slave_1: left allmulticast mode [ 189.557952][ T46] bridge_slave_1: left promiscuous mode [ 189.563557][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.571320][ T46] bridge_slave_0: left allmulticast mode [ 189.577096][ T46] bridge_slave_0: left promiscuous mode [ 189.585727][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.697633][ T46] veth1_macvtap: left promiscuous mode [ 189.704091][ T46] veth0_vlan: left promiscuous mode [ 189.758643][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.765742][ T9235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.773039][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.780104][ T9235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.803555][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.811673][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.821974][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.829326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.838709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.845789][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.872060][ T9235] veth0_vlan: entered promiscuous mode [ 189.883113][ T9235] veth1_macvtap: entered promiscuous mode [ 189.949495][ T36] audit: type=1326 audit(1752351609.602:53616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9258 comm="syz.5.3016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc30ad8e929 code=0x0 [ 190.231767][ T36] audit: type=1400 audit(1752351609.882:53617): avc: denied { accept } for pid=9265 comm="syz.2.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.258442][ T9269] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 190.840122][ T9289] fuse: Bad value for 'user_id' [ 190.845049][ T9289] fuse: Bad value for 'user_id' [ 191.127967][ T36] audit: type=1326 audit(1752351610.782:53618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9274 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8e929 code=0x7fc00000 [ 191.734642][ T36] audit: type=1400 audit(1752351611.382:53619): avc: denied { ioctl } for pid=9318 comm="syz.5.3039" path="socket:[30795]" dev="sockfs" ino=30795 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 191.759449][ T36] audit: type=1400 audit(1752351611.382:53620): avc: denied { read } for pid=9318 comm="syz.5.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 191.918774][ T36] audit: type=1400 audit(1752351611.572:53621): avc: denied { append } for pid=9323 comm="syz.5.3041" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.930821][ T9255] udevd[9255]: symlink '../../loop9' '/dev/disk/by-diskseq/54.tmp-b7:9' failed: Read-only file system [ 191.946234][ T9324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 191.960056][ T9325] udevd[9325]: symlink '../../loop5' '/dev/disk/by-diskseq/55.tmp-b7:5' failed: Read-only file system [ 191.991740][ T9325] udevd[9325]: symlink '../../loop5' '/dev/disk/by-diskseq/55.tmp-b7:5' failed: Read-only file system [ 191.992695][ T9255] udevd[9255]: symlink '../../loop9' '/dev/disk/by-diskseq/54.tmp-b7:9' failed: Read-only file system [ 192.006923][ T9325] udevd[9325]: symlink '../../loop5' '/dev/disk/by-diskseq/55.tmp-b7:5' failed: Read-only file system [ 192.029558][ T9332] /dev/md0: Can't lookup blockdev [ 192.031768][ T9325] udevd[9325]: symlink '../../loop9' '/dev/disk/by-diskseq/54.tmp-b7:9' failed: Read-only file system [ 192.049535][ T9325] udevd[9325]: symlink '../../loop9' '/dev/disk/by-diskseq/54.tmp-b7:9' failed: Read-only file system [ 192.066891][ T9255] udevd[9255]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 192.206441][ T36] audit: type=1400 audit(1752351611.852:53622): avc: denied { write } for pid=9339 comm="syz.1.3046" name="file0" dev="tmpfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.232228][ T9343] FAT-fs (rnullb0): bogus number of reserved sectors [ 192.239085][ T9343] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 192.256429][ T36] audit: type=1400 audit(1752351611.902:53623): avc: denied { map } for pid=9344 comm="syz.1.3047" path="socket:[30439]" dev="sockfs" ino=30439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.936316][ T36] audit: type=1400 audit(1752351612.582:53624): avc: denied { create } for pid=9373 comm="syz.1.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 192.956949][ T36] audit: type=1326 audit(1752351612.602:53625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.1.3058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e27b8e929 code=0x0 [ 193.488668][ T12] bridge_slave_1: left allmulticast mode [ 193.494372][ T12] bridge_slave_1: left promiscuous mode [ 193.500152][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.507947][ T12] bridge_slave_0: left allmulticast mode [ 193.513779][ T12] bridge_slave_0: left promiscuous mode [ 193.519653][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.970116][ T9407] 9pnet_fd: Insufficient options for proto=fd [ 193.997172][ T9413] fuse: Invalid rootmode [ 194.022494][ T36] audit: type=1326 audit(1752351613.672:53626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.2.3073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f709ff8e929 code=0x0 [ 194.472624][ T36] audit: type=1400 audit(1752351614.122:53627): avc: denied { write } for pid=9423 comm="syz.1.3076" path="socket:[30519]" dev="sockfs" ino=30519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.170266][ T9325] udevd[9325]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 195.189390][ T9325] udevd[9325]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 195.190211][ T9450] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 195.200587][ T9450] rust_binder: Error while translating object. [ 195.213129][ T9450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.219484][ T9450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 195.250373][ T9452] __vm_enough_memory: pid: 9452, comm: syz.5.3086, bytes: 1152922604118523904 not enough memory for the allocation [ 195.820007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.832168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.844870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.857372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.869587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.881825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.894032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.906321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.918442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.930514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.113492][ T36] audit: type=1400 audit(1752351615.762:53628): avc: denied { write } for pid=9470 comm="syz.1.3094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 196.165713][ T36] audit: type=1400 audit(1752351615.812:53629): avc: denied { setopt } for pid=9474 comm="syz.1.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.481965][ T36] audit: type=1400 audit(1752351616.132:53630): avc: denied { nlmsg_tty_audit } for pid=9484 comm="syz.4.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 196.511263][ T422] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 196.535574][ T36] audit: type=1400 audit(1752351616.152:53631): avc: denied { bind } for pid=9484 comm="syz.4.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.677796][ T422] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.691272][ T422] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.701966][ T422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.710246][ T422] usb 6-1: Product: syz [ 196.714603][ T422] usb 6-1: Manufacturer: syz [ 196.719483][ T422] usb 6-1: SerialNumber: syz [ 197.043605][ T9496] /dev/loop0: Can't lookup blockdev [ 197.050559][ T9496] /dev/loop0: Can't lookup blockdev [ 197.128590][ T9504] tipc: Started in network mode [ 197.133539][ T9504] tipc: Node identity 7f000001, cluster identity 4711 [ 197.149756][ T9504] tipc: Enabled bearer , priority 10 [ 197.747837][ T422] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 197.759890][ T422] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 197.785373][ T422] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 197.836259][ T9531] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3114'. [ 197.937448][ T9533] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 197.962873][ T9533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7939 sclass=netlink_route_socket pid=9533 comm=syz.2.3117 [ 198.154944][ T422] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 198.175130][ T422] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 198.268517][ T422] tipc: Node number set to 2130706433 [ 198.365909][ T422] usb 6-1: USB disconnect, device number 2 [ 198.383184][ T422] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 198.850730][ T9565] overlay: Unknown parameter 'euid<00000000000000016384' [ 198.881368][ T9481] udevd[9481]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 198.942803][ T9568] overlayfs: failed to clone lowerpath [ 198.960707][ T36] audit: type=1400 audit(1752351618.592:53632): avc: denied { getattr } for pid=9566 comm="syz.5.3123" name="/" dev="incremental-fs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.067437][ T9481] udevd[9481]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 199.188641][ T9481] udevd[9481]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 199.221551][ T36] audit: type=1400 audit(1752351618.872:53633): avc: denied { accept } for pid=9583 comm="syz.1.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.481659][ T9605] netlink: 'syz.1.3133': attribute type 27 has an invalid length. [ 199.489842][ T9606] 9pnet: Could not find request transport: fd rfdno= võÞCJ¬PÜŽ|± [ 199.505079][ T9481] udevd[9481]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 199.531078][ T9607] 9pnet: Could not find request transport: fd rfdno= võÞCJ¬PÜŽ|± [ 199.558430][ T36] audit: type=1400 audit(1752351619.212:53634): avc: denied { setattr } for pid=9603 comm="syz.4.3132" name="" dev="pipefs" ino=32012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 199.610324][ T9481] udevd[9481]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 199.627089][ T9613] overlayfs: upper fs does not support tmpfile. [ 199.643795][ T36] audit: type=1400 audit(1752351619.272:53635): avc: denied { write } for pid=9611 comm="syz.5.3136" name="/" dev="incremental-fs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.669050][ T9613] overlayfs: upper fs does not support tmpfile. [ 199.703877][ T36] audit: type=1400 audit(1752351619.272:53636): avc: denied { add_name } for pid=9611 comm="syz.5.3136" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.734449][ T9481] udevd[9481]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 199.871052][ T36] audit: type=1400 audit(1752351619.272:53637): avc: denied { create } for pid=9611 comm="syz.5.3136" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 200.098532][ T36] audit: type=1400 audit(1752351619.272:53638): avc: denied { associate } for pid=9611 comm="syz.5.3136" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 200.147192][ T9639] overlayfs: failed to clone upperpath [ 200.155211][ T36] audit: type=1400 audit(1752351619.282:53639): avc: denied { setattr } for pid=9611 comm="syz.5.3136" name="work" dev="incremental-fs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.181061][ T9639] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3144'. [ 200.200227][ T36] audit: type=1400 audit(1752351619.322:53640): avc: denied { remove_name } for pid=9611 comm="syz.5.3136" name="work" dev="incremental-fs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.246441][ T36] audit: type=1400 audit(1752351619.322:53641): avc: denied { rmdir } for pid=9611 comm="syz.5.3136" name="work" dev="incremental-fs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.826650][ C1] net_ratelimit: 88088 callbacks suppressed [ 200.826673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.826716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.832640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.844728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.856567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.868448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.880629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.892845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.904704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.916673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.106595][ C0] sched: DL replenish lagged too much [ 201.389429][ T9481] udevd[9481]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 205.836607][ C0] net_ratelimit: 155898 callbacks suppressed [ 205.836630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.836636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.836696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.842701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.854735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.866735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.878677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.890650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.902637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.914652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.846613][ C1] net_ratelimit: 163678 callbacks suppressed [ 210.846638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.846663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.852708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.864881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.876844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.888909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.900782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.912748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 210.924599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.936757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.856617][ C0] net_ratelimit: 171031 callbacks suppressed [ 215.856641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.856672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.862724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.874797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.887090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.898945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.910890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 215.922844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.934848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.947096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.866594][ C0] net_ratelimit: 156214 callbacks suppressed [ 220.866617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.866629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.866677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.872705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 220.884605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.896748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.908794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.920882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.932897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.944886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.876611][ C1] net_ratelimit: 157054 callbacks suppressed [ 225.876633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.876645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.876726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 225.882732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.894613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.906499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.918496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.930458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.942471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.954444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.886622][ C0] net_ratelimit: 159070 callbacks suppressed [ 230.886646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.886734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.892731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.904758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.917008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.929071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.940969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.952858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.964809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.976867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.896605][ C0] net_ratelimit: 154116 callbacks suppressed [ 235.896628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.896639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.896709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.902699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.914597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.926618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 235.938675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.950548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.962543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.974532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.906651][ C0] net_ratelimit: 152283 callbacks suppressed [ 240.906674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.906781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.912740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.924825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.936830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 240.948862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.960832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.972999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.984887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.997197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.916586][ C0] net_ratelimit: 155971 callbacks suppressed [ 245.916609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.916649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.922710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.934607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.946506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.958555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.970371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 245.982235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.994206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.006368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.926584][ C1] net_ratelimit: 155547 callbacks suppressed [ 250.926607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.926635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.932679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.944764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.956807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.969130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.981026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.992877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.004758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.016744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 255.936591][ C1] net_ratelimit: 158456 callbacks suppressed [ 255.936614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.936667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 255.942686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.954964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.966947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.979204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.991170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.003142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.015104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.027254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.946598][ C1] net_ratelimit: 158600 callbacks suppressed [ 260.946621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.946634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.946696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.952696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.964796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 260.976672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.988730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.000913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.013095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.025026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.956608][ C1] net_ratelimit: 154406 callbacks suppressed [ 265.956632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.956672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 265.962726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.974812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.986769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.998784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.010833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.022793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.034774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.046862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.864450][ T9652] udevd[9652]: symlink '../../loop5' '/dev/disk/by-diskseq/56.tmp-b7:5' failed: Read-only file system [ 270.966590][ C0] net_ratelimit: 144940 callbacks suppressed [ 270.966614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.966624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.966683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.972754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 270.984732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.996744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.008784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.020787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.036652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.044667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.976608][ C1] net_ratelimit: 163901 callbacks suppressed [ 275.976633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.976658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.982703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.994733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.006976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.018972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 276.030856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.042742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 276.054713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.066617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.986586][ C1] net_ratelimit: 160740 callbacks suppressed [ 280.986610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.986642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 280.992868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.004865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.017070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.028849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.040792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.052864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.064832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.076954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.996579][ C0] net_ratelimit: 152514 callbacks suppressed [ 285.996602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.996694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.002695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.014586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.026609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.038458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.050488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.062431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.074496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.086375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.006586][ C1] net_ratelimit: 154259 callbacks suppressed [ 291.006612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.006651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.012709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.024665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.036637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.048621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.060870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.072857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.084926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.096674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.016563][ C1] net_ratelimit: 155914 callbacks suppressed [ 296.016586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.016625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 296.022666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.034652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.046709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.058712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.070666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.082691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.094742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.106659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.026613][ C0] net_ratelimit: 155700 callbacks suppressed [ 301.026638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.026799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.032700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.044894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.056898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.068758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.080766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 301.092729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.104607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 301.116690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.036566][ C1] net_ratelimit: 145813 callbacks suppressed [ 306.036590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.036595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.036670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.042872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.054662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.066587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.078542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.090495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.102593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 306.114646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.046560][ C1] net_ratelimit: 156529 callbacks suppressed [ 311.046584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.046591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 311.046653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.052729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.064770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.076735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.088729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.100616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.112626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.124484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.056553][ C0] net_ratelimit: 156051 callbacks suppressed [ 316.056578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.056795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.062737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.074705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.086740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 316.098577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.110573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 316.122641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.134519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.146508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.066576][ C1] net_ratelimit: 154097 callbacks suppressed [ 321.066600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.066640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.072657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.084678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.096693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.108564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.120603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.132606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.144427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.156508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.076572][ C1] net_ratelimit: 153221 callbacks suppressed [ 326.076595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.076635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.082653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.094671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.106563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.118600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.131093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.143077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.154944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.167441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.086562][ C0] net_ratelimit: 146506 callbacks suppressed [ 331.086588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.086609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.092672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 331.104613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.116707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 331.136670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.140667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.152628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.164623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.176578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.096600][ C0] net_ratelimit: 151655 callbacks suppressed [ 336.096624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.096760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.102708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.114706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.126793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.138683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.150746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 336.162582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.174535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 336.186503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.106555][ C1] net_ratelimit: 156330 callbacks suppressed [ 341.106579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.106644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.112758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.124762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.136740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.148743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.161249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.173113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.185100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.197177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.116565][ C1] net_ratelimit: 155437 callbacks suppressed [ 346.116588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.116610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.122655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.134841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 346.146803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.158789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 346.170809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.182781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.194847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.206803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.126573][ C1] net_ratelimit: 153188 callbacks suppressed [ 351.126596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.126629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.133099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.145201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.157170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.169173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.181149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.193052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.204924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.216980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.136551][ C1] net_ratelimit: 153849 callbacks suppressed [ 356.136577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.136602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.142658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.154745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 356.167437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.179573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 356.191775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.203900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.215919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.228105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.146544][ C1] net_ratelimit: 155986 callbacks suppressed [ 361.146569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.146613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.152665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.164580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.177034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.189073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.201064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.213042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.225026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.237005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.156534][ C1] net_ratelimit: 145979 callbacks suppressed [ 366.156561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.156585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.162635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.174598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.186645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.198547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.210528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.222425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.234851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.246670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.166574][ C0] net_ratelimit: 156169 callbacks suppressed [ 371.166598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.166701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.172666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.184695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.196705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.208744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.220871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 371.232783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.244726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 371.256718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.176534][ C1] net_ratelimit: 156343 callbacks suppressed [ 376.176559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.176564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.176639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.182644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.194634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.206619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.218692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.230980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.242794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 376.254609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.186533][ C0] net_ratelimit: 156501 callbacks suppressed [ 381.186555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.186585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.192874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.204870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.216770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.228747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.240953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.252750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.264738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.276639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.196526][ C0] net_ratelimit: 156156 callbacks suppressed [ 386.196551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.196578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.202640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.214543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.226440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.238324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.250360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.262170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.274274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.286285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.206547][ C0] net_ratelimit: 154266 callbacks suppressed [ 391.206570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.206602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.212670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.224744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.236749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.253391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.260909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.272744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.284739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.296630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.997279][ T37] INFO: task kworker/0:0:9 blocked for more than 122 seconds. [ 392.004795][ T37] Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 [ 392.078575][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.131657][ T37] task:kworker/0:0 state:D stack:0 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 392.217653][ T37] Workqueue: events key_garbage_collector [ 392.223446][ T37] Call Trace: [ 392.297501][ T37] [ 392.300494][ T37] __schedule+0x132b/0x1e00 [ 392.305027][ T37] ? __sched_text_start+0x10/0x10 [ 392.393200][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 392.433464][ T37] ? wake_up_process+0x14/0x20 [ 392.456389][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 392.513436][ T37] schedule+0xc6/0x240 [ 392.677247][ T37] synchronize_rcu_expedited+0x6b0/0x7b0 [ 392.682963][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 392.718419][ T37] ? __kasan_check_write+0x18/0x20 [ 392.723592][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 392.786793][ T37] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 392.792156][ T37] ? __kasan_check_write+0x18/0x20 [ 392.838535][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 392.843712][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 392.963541][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 393.007119][ T37] ? pm_relax+0xd6/0x100 [ 393.011423][ T37] ? virtqueue_kick+0x3a1/0x5a0 [ 393.016386][ T37] synchronize_rcu+0x77/0x2e0 [ 393.258479][ T37] ? __cfi_synchronize_rcu+0x10/0x10 [ 393.263838][ T37] ? __kasan_check_write+0x18/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 393.426684][ T36] audit: type=1400 audit(1752351813.072:53642): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2374]" dev="pipefs" ino=2374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 393.452019][ T37] key_garbage_collector+0x88f/0xa00 [ 393.568622][ T37] process_scheduled_works+0x7d5/0x1020 [ 393.574256][ T37] worker_thread+0xc58/0x1250 [ 393.628532][ T37] kthread+0x2c7/0x370 [ 393.632674][ T37] ? __cfi_worker_thread+0x10/0x10 [ 393.707215][ T37] ? __cfi_kthread+0x10/0x10 [ 393.711877][ T37] ret_from_fork+0x64/0xa0 [ 393.716319][ T37] ? __cfi_kthread+0x10/0x10 [ 393.878508][ T37] ret_from_fork_asm+0x1a/0x30 [ 393.883363][ T37] [ 393.886421][ T37] INFO: task kworker/u8:0:12 blocked for more than 124 seconds. [ 394.098537][ T37] Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 [ 394.105468][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.178478][ T37] task:kworker/u8:0 state:D stack:0 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 394.228447][ T37] Workqueue: netns cleanup_net [ 394.233289][ T37] Call Trace: [ 394.268523][ T37] [ 394.271512][ T37] __schedule+0x132b/0x1e00 [ 394.276051][ T37] ? __sched_text_start+0x10/0x10 [ 394.359650][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 394.365184][ T37] ? kasan_save_track+0x4f/0x80 [ 394.397078][ T37] ? kthread_data+0x54/0xc0 [ 394.401650][ T37] ? wq_worker_sleeping+0x69/0x260 [ 394.417288][ T37] schedule+0xc6/0x240 [ 394.421409][ T37] synchronize_rcu_expedited+0x4ee/0x7b0 [ 394.447495][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 394.453803][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 394.536841][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 394.542099][ T37] ? _raw_spin_unlock+0x45/0x60 [ 394.567119][ T37] ? __dev_remove_pack+0x22f/0x390 [ 394.572299][ T37] ? __cfi___dev_remove_pack+0x10/0x10 [ 394.589566][ T37] ? __kasan_check_read+0x15/0x20 [ 394.594637][ T37] dev_remove_pack+0x37/0x50 [ 394.608072][ T37] tipc_detach_loopback+0x93/0x170 [ 394.613420][ T37] tipc_exit_net+0x79/0x150 [ 394.636770][ T37] cleanup_net+0x6aa/0xc70 [ 394.641266][ T37] ? __cfi_cleanup_net+0x10/0x10 [ 394.657221][ T37] ? kick_pool+0xb9/0x550 [ 394.661621][ T37] process_scheduled_works+0x7d5/0x1020 [ 394.677730][ T37] worker_thread+0xc58/0x1250 [ 394.682483][ T37] kthread+0x2c7/0x370 [ 394.696865][ T37] ? __cfi_worker_thread+0x10/0x10 [ 394.702035][ T37] ? __cfi_kthread+0x10/0x10 [ 394.727017][ T37] ret_from_fork+0x64/0xa0 [ 394.731500][ T37] ? __cfi_kthread+0x10/0x10 [ 394.736107][ T37] ret_from_fork_asm+0x1a/0x30 [ 394.757780][ T37] [ 394.760872][ T37] INFO: task kworker/u8:1:13 blocked for more than 125 seconds. [ 394.777241][ T37] Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 [ 394.927445][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.936169][ T37] task:kworker/u8:1 state:D stack:0 pid:13 tgid:13 ppid:2 flags:0x00004000 [ 394.976730][ T37] Workqueue: ipv6_addrconf addrconf_verify_work [ 394.983046][ T37] Call Trace: [ 394.986346][ T37] [ 395.007625][ T37] __schedule+0x132b/0x1e00 [ 395.012273][ T37] ? __sched_text_start+0x10/0x10 [ 395.067546][ T37] ? mutex_spin_on_owner+0x2e9/0x470 [ 395.072890][ T37] ? kthread_data+0x54/0xc0 [ 395.089330][ T37] ? wq_worker_sleeping+0x69/0x260 [ 395.094482][ T37] ? trace_contention_begin+0xc0/0xc0 [ 395.161225][ T37] ? __kasan_check_write+0x18/0x20 [ 395.166479][ T37] schedule+0xc6/0x240 [ 395.180979][ T37] schedule_preempt_disabled+0x14/0x30 [ 395.196871][ T37] __mutex_lock+0x81e/0x1b50 [ 395.201513][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 395.226948][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 395.232816][ T37] ? mutex_unlock+0xdc/0x240 [ 395.247818][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 395.252915][ T37] ? __cfi_do_softirq+0x10/0x10 [ 395.267949][ T37] ? __kasan_check_write+0x18/0x20 [ 395.273121][ T37] ? __kasan_check_write+0x18/0x20 [ 395.296580][ T37] __mutex_lock_slowpath+0xe/0x20 [ 395.301660][ T37] mutex_lock+0x102/0x1c0 [ 395.306132][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 395.328032][ T37] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 395.333465][ T37] rtnl_lock+0x19/0x20 [ 395.347711][ T37] addrconf_verify_work+0x1d/0x50 [ 395.352831][ T37] process_scheduled_works+0x7d5/0x1020 [ 395.377002][ T37] worker_thread+0xc58/0x1250 [ 395.381746][ T37] kthread+0x2c7/0x370 [ 395.385832][ T37] ? __cfi_worker_thread+0x10/0x10 [ 395.429939][ T37] ? __cfi_kthread+0x10/0x10 [ 395.434585][ T37] ret_from_fork+0x64/0xa0 [ 395.447701][ T37] ? __cfi_kthread+0x10/0x10 [ 395.452340][ T37] ret_from_fork_asm+0x1a/0x30 [ 395.477304][ T37] [ 395.480372][ T37] INFO: task kworker/u8:2:46 blocked for more than 126 seconds. [ 395.498218][ T37] Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 [ 395.505102][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.536741][ T37] task:kworker/u8:2 state:D stack:0 pid:46 tgid:46 ppid:2 flags:0x00004000 [ 395.557208][ T37] Workqueue: events_unbound linkwatch_event [ 395.563148][ T37] Call Trace: [ 395.566442][ T37] [ 395.606920][ T37] __schedule+0x132b/0x1e00 [ 395.611752][ T37] ? __sched_text_start+0x10/0x10 [ 395.629264][ T37] ? kthread_data+0x54/0xc0 [ 395.633843][ T37] ? wq_worker_sleeping+0x69/0x260 [ 395.651299][ T37] ? trace_contention_begin+0xc0/0xc0 [ 395.668598][ T37] ? calc_wheel_index+0x1a7/0x8e0 [ 395.673680][ T37] schedule+0xc6/0x240 [ 395.697127][ T37] schedule_preempt_disabled+0x14/0x30 [ 395.702674][ T37] __mutex_lock+0x81e/0x1b50 [ 395.717806][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 395.724640][ T37] ? __kasan_check_write+0x18/0x20 [ 395.746964][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 395.752828][ T37] ? __mod_timer+0x8ba/0xd60 [ 395.767380][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 395.772987][ T37] ? add_timer_global+0x84/0xb0 [ 395.796649][ T37] ? __queue_delayed_work+0x1b0/0x240 [ 395.802075][ T37] __mutex_lock_slowpath+0xe/0x20 [ 395.817619][ T37] mutex_lock+0x102/0x1c0 [ 395.822271][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 395.839046][ T37] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 395.844491][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 395.867652][ T37] ? kick_pool+0xb9/0x550 [ 395.872031][ T37] rtnl_lock+0x19/0x20 [ 395.876295][ T37] linkwatch_event+0x12/0x60 [ 395.897862][ T37] process_scheduled_works+0x7d5/0x1020 [ 395.903488][ T37] worker_thread+0xc58/0x1250 [ 395.926679][ T37] kthread+0x2c7/0x370 [ 395.930797][ T37] ? __cfi_worker_thread+0x10/0x10 [ 395.935954][ T37] ? __cfi_kthread+0x10/0x10 [ 395.957660][ T37] ret_from_fork+0x64/0xa0 [ 395.962221][ T37] ? __cfi_kthread+0x10/0x10 [ 395.977377][ T37] ret_from_fork_asm+0x1a/0x30 [ 395.982203][ T37] [ 395.985267][ T37] INFO: task syz.1.2600:7873 blocked for more than 126 seconds. [ 396.017311][ T37] Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 [ 396.024388][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.048223][ T37] task:syz.1.2600 state:D stack:0 pid:7873 tgid:7873 ppid:6822 flags:0x00004006 [ 396.076899][ T37] Call Trace: [ 396.080406][ T37] [ 396.083358][ T37] __schedule+0x132b/0x1e00 [ 396.106613][ T37] ? __sched_text_start+0x10/0x10 [ 396.111691][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 396.127691][ T37] ? __kasan_check_write+0x18/0x20 [ 396.133031][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 396.150762][ T37] schedule+0xc6/0x240 [ 396.154911][ T37] synchronize_rcu_expedited+0x4ee/0x7b0 [ 396.196951][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 396.203167][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 396.216535][ C0] net_ratelimit: 132947 callbacks suppressed [ 396.216557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.216752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.222644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.234546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.246557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.258467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.270574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.282463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.294354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 396.306220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.345163][ T37] ? __cfi_queue_work_on+0x10/0x10 [ 396.352294][ T37] ? __kasan_check_read+0x15/0x20 [ 396.359381][ T37] unregister_netdevice_many_notify+0x84f/0x1bd0 [ 396.365741][ T37] ? kick_pool+0x3d8/0x550 [ 396.372105][ T37] ? __queue_work+0xb5d/0x1120 [ 396.379089][ T37] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 396.385948][ T37] ? __queue_delayed_work+0x18e/0x240 [ 396.393670][ T37] ? queue_delayed_work_on+0x163/0x1e0 [ 396.401298][ T37] ? __kasan_check_read+0x15/0x20 [ 396.406360][ T37] unregister_netdevice_queue+0x339/0x380 [ 396.419221][ T37] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 396.425516][ T37] ? linkwatch_fire_event+0x1fb/0x260 [ 396.432954][ T37] __tun_detach+0xca1/0x1460 [ 396.439686][ T37] tun_chr_close+0x93/0x150 [ 396.444239][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 396.451829][ T37] __fput+0x1fb/0xa00 [ 396.455845][ T37] ? call_rcu+0x14/0x20 [ 396.461964][ T37] ____fput+0x20/0x30 [ 396.465968][ T37] task_work_run+0x1e3/0x250 [ 396.472794][ T37] ? __cfi_task_work_run+0x10/0x10 [ 396.481570][ T37] ? free_nsproxy+0x223/0x290 [ 396.486304][ T37] do_exit+0x9b4/0x2630 [ 396.492562][ T37] ? __sched_text_start+0x10/0x10 [ 396.499765][ T37] ? __cfi_do_exit+0x10/0x10 [ 396.504401][ T37] ? __kasan_check_write+0x18/0x20 [ 396.526985][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 396.532174][ T37] ? __kasan_check_read+0x15/0x20 [ 396.547776][ T37] ? cgroup_update_frozen+0x160/0x990 [ 396.553222][ T37] do_group_exit+0x22a/0x300 [ 396.568070][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 396.573409][ T37] get_signal+0x139d/0x14f0 [ 396.597113][ T37] arch_do_signal_or_restart+0x96/0x720 [ 396.602734][ T37] ? common_nsleep+0x93/0xb0 [ 396.636634][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 396.642852][ T37] ? __se_sys_clock_nanosleep+0x300/0x390 [ 396.658847][ T37] ? __kasan_check_read+0x15/0x20 [ 396.663924][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 396.686943][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 396.692460][ T37] do_syscall_64+0x64/0xf0 [ 396.717531][ T37] ? clear_bhb_loop+0x50/0xa0 [ 396.722290][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 396.736858][ T37] RIP: 0033:0x7f6e27bc11e5 [ 396.741331][ T37] RSP: 002b:00007f6e2892ef80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 396.766799][ T37] RAX: fffffffffffffdfc RBX: 00007f6e27db5fa0 RCX: 00007f6e27bc11e5 [ 396.775087][ T37] RDX: 00007f6e2892efc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.806737][ T37] RBP: 00007f6e27c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 396.814766][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 396.839593][ T37] R13: 0000000000000000 R14: 00007f6e27db5fa0 R15: 00007fff3cc1ae78 [ 396.858107][ T37] [ 396.861175][ T37] INFO: task syz.4.2732:8344 blocked for more than 127 seconds. [ 396.887715][ T37] Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 [ 396.894618][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.917008][ T37] task:syz.4.2732 state:D stack:0 pid:8344 tgid:8344 ppid:7678 flags:0x00004006 [ 396.947512][ T37] Call Trace: [ 396.950831][ T37] [ 396.953784][ T37] __schedule+0x132b/0x1e00 [ 396.968540][ T37] ? __sched_text_start+0x10/0x10 [ 396.973615][ T37] ? stack_depot_save_flags+0x38/0x800 [ 396.997390][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 397.002564][ T37] ? __kasan_check_write+0x18/0x20 [ 397.169613][ T37] ? trace_contention_begin+0xc0/0xc0 [ 397.175049][ T37] schedule+0xc6/0x240 [ 397.197937][ T37] schedule_preempt_disabled+0x14/0x30 [ 397.203451][ T37] __mutex_lock+0x81e/0x1b50 [ 397.216988][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 397.223832][ T37] ? locks_remove_file+0x346/0x1000 [ 397.247739][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 397.254489][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 397.277245][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 397.282432][ T37] ? __asan_memset+0x39/0x50 [ 397.307592][ T37] ? __fsnotify_parent+0x217/0x5c0 [ 397.312853][ T37] __mutex_lock_slowpath+0xe/0x20 [ 397.327985][ T37] mutex_lock+0x102/0x1c0 [ 397.332485][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 397.347737][ T37] ? call_rcu+0x14/0x20 [ 397.351944][ T37] rtnl_lock+0x19/0x20 [ 397.356043][ T37] tun_chr_close+0x41/0x150 [ 397.377564][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 397.382729][ T37] __fput+0x1fb/0xa00 [ 397.407068][ T37] ? call_rcu+0x14/0x20 [ 397.411282][ T37] ____fput+0x20/0x30 [ 397.415284][ T37] task_work_run+0x1e3/0x250 [ 397.428621][ T37] ? __cfi_task_work_run+0x10/0x10 [ 397.433780][ T37] ? free_nsproxy+0x223/0x290 [ 397.457131][ T37] do_exit+0x9b4/0x2630 [ 397.461337][ T37] ? __sched_text_start+0x10/0x10 [ 397.466390][ T37] ? __cfi_do_exit+0x10/0x10 [ 397.488063][ T37] ? __kasan_check_write+0x18/0x20 [ 397.493232][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 397.518156][ T37] ? __kasan_check_read+0x15/0x20 [ 397.523245][ T37] ? cgroup_update_frozen+0x160/0x990 [ 397.530779][ T37] do_group_exit+0x22a/0x300 [ 397.535660][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 397.556668][ T37] get_signal+0x139d/0x14f0 [ 397.561341][ T37] arch_do_signal_or_restart+0x96/0x720 [ 397.587573][ T37] ? common_nsleep+0x93/0xb0 [ 397.592243][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 397.608319][ T37] ? __se_sys_clock_nanosleep+0x300/0x390 [ 397.614115][ T37] ? __kasan_check_read+0x15/0x20 [ 397.637735][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 397.643865][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 397.772028][ T37] do_syscall_64+0x64/0xf0 [ 397.786806][ T37] ? clear_bhb_loop+0x50/0xa0 [ 397.809987][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 397.820105][ T37] RIP: 0033:0x7f7029bc11e5 [ 397.824562][ T37] RSP: 002b:00007f702aa81f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 397.857197][ T37] RAX: fffffffffffffdfc RBX: 00007f7029db5fa0 RCX: 00007f7029bc11e5 [ 397.865411][ T37] RDX: 00007f702aa81fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.897406][ T37] RBP: 00007f7029c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 397.905436][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 397.930399][ T37] R13: 0000000000000000 R14: 00007f7029db5fa0 R15: 00007ffe85ef0ee8 [ 397.957581][ T37] [ 397.960756][ T37] INFO: task syz-executor:9235 blocked for more than 128 seconds. [ 397.977630][ T37] Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 [ 397.984524][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.016792][ T37] task:syz-executor state:D stack:0 pid:9235 tgid:9235 ppid:1 flags:0x00004006 [ 398.037439][ T37] Call Trace: [ 398.040854][ T37] [ 398.043808][ T37] __schedule+0x132b/0x1e00 [ 398.077803][ T37] ? __sched_text_start+0x10/0x10 [ 398.082955][ T37] ? kernel_text_address+0xa9/0xe0 [ 398.106816][ T37] ? __kasan_check_write+0x18/0x20 [ 398.112010][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 398.127702][ T37] ? __kasan_check_write+0x18/0x20 [ 398.132876][ T37] ? trace_contention_begin+0xc0/0xc0 [ 398.156975][ T37] schedule+0xc6/0x240 [ 398.161113][ T37] schedule_preempt_disabled+0x14/0x30 [ 398.176789][ T37] __mutex_lock+0x81e/0x1b50 [ 398.181456][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 398.207161][ T37] ? stack_depot_save_flags+0x38/0x800 [ 398.212705][ T37] ? kernel_text_address+0xa9/0xe0 [ 398.236829][ T37] ? kasan_save_track+0x3e/0x80 [ 398.241747][ T37] ? kasan_save_free_info+0x4a/0x60 [ 398.257172][ T37] ? __kasan_slab_free+0x5f/0x80 [ 398.262256][ T37] ? kfree+0x158/0x440 [ 398.266345][ T37] ? umount_tree+0xdf0/0xf70 [ 398.288064][ T37] ? put_mnt_ns+0x96/0xf0 [ 398.292552][ T37] ? free_nsproxy+0x52/0x290 [ 398.472134][ T37] ? exit_task_namespaces+0x99/0xe0 [ 398.487617][ T37] ? do_exit+0x9af/0x2630 [ 398.492084][ T37] ? do_group_exit+0x22a/0x300 [ 398.507492][ T37] __mutex_lock_slowpath+0xe/0x20 [ 398.512588][ T37] mutex_lock+0x102/0x1c0 [ 398.537421][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 398.542333][ T37] synchronize_rcu_expedited+0x288/0x7b0 [ 398.558334][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 398.564551][ T37] ? __kasan_slab_free+0x6a/0x80 [ 398.586617][ T37] ? kfree+0x158/0x440 [ 398.590848][ T37] ? __put_mountpoint+0x1c8/0x230 [ 398.596080][ T37] ? shrink_dentry_list+0x4c7/0x4f0 [ 398.618073][ T37] ? __kasan_check_write+0x18/0x20 [ 398.623336][ T37] namespace_unlock+0x1ec/0x3d0 [ 398.637003][ T37] ? umount_tree+0xf08/0xf70 [ 398.641657][ T37] ? umount_tree+0xf70/0xf70 [ 398.646372][ T37] ? __detach_mounts+0x610/0x610 [ 398.669717][ T37] put_mnt_ns+0xad/0xf0 [ 398.673943][ T37] free_nsproxy+0x52/0x290 [ 398.697007][ T37] exit_task_namespaces+0x99/0xe0 [ 398.702102][ T37] do_exit+0x9af/0x2630 [ 398.706279][ T37] ? avc_has_perm+0x144/0x220 [ 398.727705][ T37] ? __cfi_do_exit+0x10/0x10 [ 398.732448][ T37] ? __kasan_check_write+0x18/0x20 [ 398.747967][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 398.753131][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 398.777367][ T37] do_group_exit+0x22a/0x300 [ 398.782023][ T37] ? __kasan_check_write+0x18/0x20 [ 398.797533][ T37] get_signal+0x139d/0x14f0 [ 398.802177][ T37] arch_do_signal_or_restart+0x96/0x720 [ 398.819568][ T37] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 398.825170][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 398.848031][ T37] ? __kasan_check_read+0x15/0x20 [ 398.853112][ T37] ? __x64_sys_setsockopt+0x1d6/0x250 [ 398.877104][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 398.882810][ T37] do_syscall_64+0x64/0xf0 [ 398.897743][ T37] ? clear_bhb_loop+0x50/0xa0 [ 398.902483][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 398.918546][ T37] RIP: 0033:0x7fc30ad9081a [ 398.923001][ T37] RSP: 002b:00007ffcd8322b68 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 398.947056][ T37] RAX: 0000000000000000 RBX: 00007ffcd8322bf0 RCX: 00007fc30ad9081a [ 398.955079][ T37] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 398.987908][ T37] RBP: 0000000000000003 R08: 0000000000000558 R09: 0079746972756365 [ 398.995934][ T37] R10: 00007fc30af81a60 R11: 0000000000000206 R12: 00007fc30af81a00 [ 399.019269][ T37] R13: 00007ffcd8322b8c R14: 0000000000000000 R15: 00007fc30af82e40 [ 399.037623][ T37] [ 399.040700][ T37] NMI backtrace for cpu 1 [ 399.040715][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 399.040745][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/19/2025 [ 399.040765][ T37] Call Trace: [ 399.040772][ T37] [ 399.040779][ T37] __dump_stack+0x21/0x30 [ 399.040808][ T37] dump_stack_lvl+0x10c/0x190 [ 399.040832][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 399.040858][ T37] dump_stack+0x19/0x20 [ 399.040880][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 399.040902][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 399.040924][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 399.040945][ T37] ? sched_show_task+0x379/0x560 [ 399.040967][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 399.040988][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 399.041010][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 399.041033][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 399.041055][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 399.041077][ T37] watchdog+0xd8f/0xed0 [ 399.041102][ T37] ? __cfi_watchdog+0x10/0x10 [ 399.041124][ T37] ? __kasan_check_read+0x15/0x20 [ 399.041149][ T37] ? __kthread_parkme+0x138/0x180 [ 399.041176][ T37] ? schedule+0xc6/0x240 [ 399.041199][ T37] kthread+0x2c7/0x370 [ 399.041217][ T37] ? __cfi_watchdog+0x10/0x10 [ 399.041239][ T37] ? __cfi_kthread+0x10/0x10 [ 399.041256][ T37] ret_from_fork+0x64/0xa0 [ 399.041281][ T37] ? __cfi_kthread+0x10/0x10 [ 399.041299][ T37] ret_from_fork_asm+0x1a/0x30 [ 399.041328][ T37] [ 399.041336][ T37] Sending NMI from CPU 1 to CPUs 0: [ 399.238436][ C0] NMI backtrace for cpu 0 [ 399.238454][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 399.238478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/19/2025 [ 399.238489][ C0] Workqueue: mld mld_query_work [ 399.238513][ C0] RIP: 0010:update_stack_state+0x207/0x4b0 [ 399.238533][ C0] Code: 75 17 48 8b 8d 78 ff ff ff 4c 39 f9 0f 97 c0 4c 39 f1 0f 96 c1 84 c8 75 6e 49 bd 00 00 00 00 00 fc ff df 48 8b 85 68 ff ff ff <42> 80 3c 28 00 48 8b 9d 58 ff ff ff 74 08 48 89 df e8 23 ae 97 00 [ 399.238548][ C0] RSP: 0018:ffffc90000007418 EFLAGS: 00000297 [ 399.238561][ C0] RAX: 1ffff92000000eb0 RBX: ffffc90000007568 RCX: 1ffff92000000e01 [ 399.238574][ C0] RDX: ffffc900000a7ae8 RSI: 1ffff92000000eae RDI: ffffc900000075c0 [ 399.238586][ C0] RBP: ffffc900000074d8 R08: ffffc90000007630 R09: ffffc90000007628 [ 399.238598][ C0] R10: 000000000000000e R11: ffffffff81740900 R12: ffffc90000007568 [ 399.238609][ C0] R13: dffffc0000000000 R14: ffffc90000008000 R15: ffffc90000000000 [ 399.238622][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 399.238636][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.238648][ C0] CR2: 0000559140335b90 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 399.238664][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.238674][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.238685][ C0] Call Trace: [ 399.238691][ C0] [ 399.238700][ C0] unwind_next_frame+0x3c2/0x750 [ 399.238716][ C0] ? __kernel_text_address+0x11/0x40 [ 399.238740][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 399.238760][ C0] arch_stack_walk+0x139/0x170 [ 399.238781][ C0] ? do_softirq+0xa6/0x100 [ 399.238800][ C0] stack_trace_save+0x9d/0xe0 [ 399.238817][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 399.238835][ C0] ? netif_receive_skb+0x161/0x7b0 [ 399.238853][ C0] kasan_save_track+0x3e/0x80 [ 399.238872][ C0] ? kasan_save_track+0x3e/0x80 [ 399.238891][ C0] ? kasan_save_free_info+0x4a/0x60 [ 399.238908][ C0] ? __kasan_slab_free+0x5f/0x80 [ 399.238928][ C0] ? kmem_cache_free+0x1c1/0x510 [ 399.238946][ C0] ? __kfree_skb+0x18f/0x210 [ 399.238962][ C0] ? sk_skb_reason_drop+0xd8/0x310 [ 399.238978][ C0] ? ip6_mc_input+0x4f3/0x670 [ 399.239000][ C0] ? ip6_rcv_finish+0x344/0x3c0 [ 399.239020][ C0] ? ipv6_rcv+0xed/0x220 [ 399.239039][ C0] ? process_backlog+0x44b/0xae0 [ 399.239055][ C0] ? __napi_poll+0xd0/0x610 [ 399.239069][ C0] ? net_rx_action+0x584/0xce0 [ 399.239084][ C0] ? handle_softirqs+0x1ae/0x630 [ 399.239103][ C0] ? __do_softirq+0xf/0x16 [ 399.239120][ C0] ? do_softirq+0xa6/0x100 [ 399.239142][ C0] kasan_save_free_info+0x4a/0x60 [ 399.239159][ C0] __kasan_slab_free+0x5f/0x80 [ 399.239179][ C0] kmem_cache_free+0x1c1/0x510 [ 399.239197][ C0] ? __kfree_skb+0x18f/0x210 [ 399.239213][ C0] __kfree_skb+0x18f/0x210 [ 399.239227][ C0] ? ip6_mc_input+0x4f3/0x670 [ 399.239248][ C0] sk_skb_reason_drop+0xd8/0x310 [ 399.239264][ C0] ip6_mc_input+0x4f3/0x670 [ 399.239285][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 399.239306][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 399.239323][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 399.239344][ C0] ip6_rcv_finish+0x344/0x3c0 [ 399.239364][ C0] ipv6_rcv+0xed/0x220 [ 399.239385][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 399.239405][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 399.239425][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 399.239442][ C0] process_backlog+0x44b/0xae0 [ 399.239460][ C0] __napi_poll+0xd0/0x610 [ 399.239475][ C0] net_rx_action+0x584/0xce0 [ 399.239492][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 399.239507][ C0] ? sched_clock+0x44/0x60 [ 399.239523][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 399.239541][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 399.239564][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 399.239582][ C0] handle_softirqs+0x1ae/0x630 [ 399.239602][ C0] __do_softirq+0xf/0x16 [ 399.239618][ C0] do_softirq+0xa6/0x100 [ 399.239636][ C0] [ 399.239642][ C0] [ 399.239647][ C0] ? __cfi_do_softirq+0x10/0x10 [ 399.239665][ C0] ? _raw_spin_lock_bh+0x90/0x120 [ 399.239681][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 399.239696][ C0] ? __kfree_skb+0x18f/0x210 [ 399.239711][ C0] __local_bh_enable_ip+0x74/0x80 [ 399.239737][ C0] _raw_spin_unlock_bh+0x54/0x60 [ 399.239752][ C0] mld_query_work+0x951/0x2c10 [ 399.239770][ C0] ? __kasan_check_write+0x18/0x20 [ 399.239787][ C0] ? __pwq_activate_work+0x308/0x410 [ 399.239808][ C0] ? __cfi_mld_query_work+0x10/0x10 [ 399.239824][ C0] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 399.239844][ C0] ? round_jiffies_relative+0xd9/0x100 [ 399.239863][ C0] ? kick_pool+0xb9/0x550 [ 399.239878][ C0] process_scheduled_works+0x7d5/0x1020 [ 399.239900][ C0] worker_thread+0xc58/0x1250 [ 399.239922][ C0] kthread+0x2c7/0x370 [ 399.239934][ C0] ? __cfi_worker_thread+0x10/0x10 [ 399.239953][ C0] ? __cfi_kthread+0x10/0x10 [ 399.239966][ C0] ret_from_fork+0x64/0xa0 [ 399.239983][ C0] ? __cfi_kthread+0x10/0x10 [ 399.239997][ C0] ret_from_fork_asm+0x1a/0x30 [ 399.240018][ C0] [ 401.226741][ C0] net_ratelimit: 138949 callbacks suppressed [ 401.226764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.226825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.232850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 401.244853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.244902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.256896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:10:d0:6b:8b:c5, vlan:0) [ 401.269047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.281013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.293065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.305022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)