last executing test programs: 26m42.63575621s ago: executing program 32 (id=95): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x12, r0, 0x4d75d000) 26m6.28050022s ago: executing program 33 (id=582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000120001000000000000000002ac1414000000000000000000000000000000000000003300"], 0x48}}, 0x4014) 23m55.053595565s ago: executing program 34 (id=3221): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x0, 0x2, 0xeeee3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x2a, 0x0, 0x0, 0x0) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000e80)={{0x3, 0x1, 0x80000001, 0x200, 0x1ff, 0x8001}, 0x366, [0x1, 0x8, 0x1, 0xf, 0x3, 0x3, 0x18, 0x5, 0x5, 0x8, 0xfe05, 0x9, 0x8000, 0x401, 0x388f1ec9, 0x1, 0x9, 0x0, 0x100, 0x10001, 0x8001, 0x58, 0x4, 0x1000000, 0x7fff, 0xe, 0x4, 0x7, 0xfffffffb, 0x2, 0x80000001, 0x4, 0x9, 0x80000000, 0xe3, 0x6, 0x6, 0x1, 0x7, 0x98, 0x3, 0x6, 0xd, 0x8, 0x5, 0x4, 0x401, 0x1, 0x7, 0x1bdc, 0xfffffff1, 0xfffffffe, 0xfa7, 0xfffff159, 0x4, 0x6, 0x4, 0x5, 0x2, 0x8, 0x2, 0xfffffffc, 0x7, 0x4635, 0x40000000, 0x9, 0x1674, 0x9, 0x2c0, 0x7fffffff, 0x80000001, 0x128, 0x2, 0x9, 0x6, 0x6, 0x9, 0x1, 0x9c0, 0xffff, 0xe, 0xffffb3f0, 0x35, 0x6137e80c, 0x400, 0x3, 0x7, 0x2, 0x5, 0xd, 0x2, 0x2, 0x1, 0x9, 0x60d, 0x9, 0x80, 0x6, 0xe82, 0x10000, 0x6, 0x7, 0x6, 0x9, 0xfffffff5, 0x0, 0x4, 0xc01, 0x9, 0x315, 0x4, 0x1, 0xd, 0x3, 0x3, 0x10, 0xa1b, 0x400, 0x7, 0x2, 0x9, 0x6, 0x3, 0x400, 0x8, 0x7, 0x400, 0x3, 0x1f3, 0x9, 0x6, 0xf, 0x10001, 0x8000, 0x8, 0x700000, 0x4, 0x1, 0x800, 0x80, 0x4, 0x7, 0x6, 0x4, 0x0, 0x10000, 0x1000, 0x3, 0xfba, 0x1, 0x6, 0x6, 0x9, 0x3, 0x7, 0x6, 0x2, 0x3, 0xabf, 0x8f, 0x1b, 0x5, 0x7, 0x4, 0xb, 0x1, 0x2, 0x4, 0x8, 0x46a2c4bf, 0x4, 0x3, 0xc, 0x3, 0x401, 0x6, 0x2, 0xfffffffb, 0x1, 0x101, 0x8, 0x1, 0x4, 0x7, 0x1ff, 0x7, 0xffffffff, 0x2bbe, 0x2, 0xfffffffa, 0x7f, 0x5, 0x2, 0x6c0, 0x0, 0x7, 0xc, 0x8, 0x6, 0x2a, 0x52, 0x3, 0x7, 0x81, 0x5, 0x9, 0x2, 0x8, 0x9, 0x3e, 0x0, 0x5, 0x8, 0x2, 0x5, 0xffff53e0, 0x2, 0x1, 0x8, 0x200, 0xfffffff7, 0x2, 0x40, 0x9, 0x10001, 0x6, 0x6, 0x7, 0x1, 0x0, 0x80000000, 0x17, 0x2, 0x0, 0x2d100000, 0x900000, 0xa2f0, 0x80000001, 0x8, 0x9, 0x1ffc333, 0x1ff, 0x10000, 0x8, 0x8, 0xf, 0x1, 0x5, 0x0, 0x9, 0x22587501, 0x30000, 0x1, 0x4, 0xa55, 0x1, 0x2, 0x88bc, 0x5, 0x2, 0x8, 0xec, 0x89, 0x6, 0x15, 0x7, 0x9483, 0x1ff, 0x8, 0x8, 0x6, 0xfffffff7, 0xffff, 0x3, 0x10001, 0x8, 0x2, 0x1209064c, 0x0, 0x8, 0x1000, 0x1, 0x8, 0xa, 0x10000, 0x2, 0x31f3, 0x80000000, 0xffffffff, 0x0, 0x17eb, 0x80, 0x6, 0xd, 0x1, 0xff, 0x8, 0xffff, 0x4, 0x2, 0xfffffffb, 0xf, 0x6, 0x1, 0x7f, 0x1, 0x7, 0xffff8000, 0x8, 0x8, 0x5, 0xf, 0x400, 0x81, 0x6, 0x2, 0xd, 0x3, 0x0, 0x7, 0x0, 0xfff, 0xbae2, 0x7ff, 0x8, 0x7, 0x1, 0x7ff, 0x5257, 0xfff, 0x9, 0x800, 0x0, 0x3, 0x2, 0x2, 0x1, 0x4, 0x7fffffff, 0x27f, 0xa, 0x8001, 0x8, 0x81, 0x1a, 0x9, 0x6, 0xd88, 0x6, 0x5cca, 0x9e, 0xa, 0x5, 0x8, 0x7ff, 0x8e3, 0x10001, 0x7ff, 0x6, 0xe, 0x3, 0xfffffffc, 0x3, 0x9, 0xb, 0x0, 0xf4, 0x8001, 0x7, 0x2, 0x1, 0x20a, 0xfffffff8, 0x1000, 0x9, 0x1ff, 0x800, 0x5, 0xfba, 0xffffffff, 0xfffffffa, 0xfffffffe, 0x3, 0x8, 0x8, 0x8770, 0x2, 0x1, 0xbf7, 0x3, 0x7f, 0x7, 0x9b96, 0x3, 0x3a95d6a, 0xdc3, 0x0, 0x7fffffff, 0xb425, 0x2, 0x2, 0x2, 0x10, 0xfba, 0x0, 0x0, 0x8, 0x8001, 0x3, 0x8bdf, 0xffffffff, 0x5, 0x3, 0x2, 0x1, 0x2, 0x5, 0x5, 0x4a, 0x40, 0x62900000, 0x1, 0x3, 0x1, 0x6, 0x0, 0xfd4, 0x100, 0x3ff, 0x7fffffff, 0x1c, 0xffff, 0x1, 0x1, 0x2, 0x1, 0x9, 0x8, 0x6, 0xd1d, 0x401, 0x6, 0x4dd, 0x6dd, 0x8000, 0x4000, 0x1, 0x4, 0xffffffff, 0x2, 0x5, 0x5, 0x4, 0xfffffffc, 0x4, 0x6f4e, 0x7fffffff, 0x8, 0x200, 0x1, 0x9, 0x9, 0x9, 0xcf23, 0x5, 0x1, 0x8001, 0x4, 0x64, 0x0, 0x5, 0x8, 0x9, 0x7fff, 0x2000000, 0x8, 0x6, 0x7fffffff, 0x8, 0x1, 0x2, 0x1ff, 0x671c5d51, 0x200, 0x8, 0x2, 0x10, 0x8, 0x3, 0x7, 0xfffffff4, 0x1000, 0xffff, 0x20000000, 0x6, 0x4, 0xb, 0xe7, 0x40, 0x3, 0x2, 0xfffff801, 0x8, 0xffff2cdf, 0x5, 0x7, 0x6, 0x3c, 0x3, 0x9, 0x8, 0x4, 0x5, 0x8, 0xa, 0x6, 0x2, 0xc297, 0x200, 0xffffffff, 0x3, 0x1, 0x3, 0x7, 0x6, 0x3, 0x7fff, 0xfffffffe, 0xa55, 0x4, 0x6, 0x2, 0x1, 0xfffffeff, 0x7f, 0x800, 0xd4, 0x6a8f, 0x3, 0x280000, 0x504d3b18, 0x4, 0xced8, 0x0, 0xe, 0xc, 0x4, 0xe, 0x5, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x3, 0x7, 0xf9, 0x34d09b87, 0x0, 0xf, 0x0, 0x1c00, 0x7fffffff, 0x7fff, 0x1000, 0x7, 0x3ff, 0x2, 0x1, 0x9, 0x4, 0x9, 0x1, 0x9, 0x4000, 0x4c, 0xffffffff, 0x5, 0xe, 0x8001, 0x271f49de, 0x9, 0x5, 0x0, 0x1, 0x1, 0xff, 0x9, 0x5, 0x8, 0x8, 0x1ff, 0xe1f1, 0x3e000000, 0x38f6, 0x401, 0xfe, 0x0, 0x8, 0x6, 0xd7a, 0xc, 0x8, 0x4, 0x40, 0x1f, 0x3, 0x7398, 0x0, 0xdd3, 0x6511800, 0x4, 0x68, 0x4, 0x8, 0x6, 0x3, 0x8001, 0xfffffff9, 0x1, 0x7fff, 0xff, 0x7, 0xf, 0x1, 0x0, 0x3a8, 0x5, 0x4, 0x4, 0x7, 0x5a83, 0x8001, 0x553e, 0xfffffff9, 0x200, 0x8, 0xb2f, 0x7, 0x0, 0x1, 0xfb, 0x9, 0x5, 0x5, 0x5, 0x2, 0x8, 0xff, 0xfffffff8, 0x8, 0x6, 0x800, 0x8, 0x5, 0x0, 0xb, 0x10000, 0x5, 0xc0e, 0x1000, 0x400, 0x0, 0x2, 0x54b, 0x5, 0x1, 0x0, 0x4, 0x6, 0x3b7e, 0xff, 0x3, 0x4, 0x0, 0x0, 0x1ff, 0x1, 0x8, 0x8001, 0x8, 0x0, 0x0, 0x6, 0x4, 0x76, 0x5, 0x81, 0x200, 0x7db, 0xc2e, 0x3b, 0x9, 0x8, 0x0, 0x0, 0x800, 0x6, 0x3, 0x3, 0x10000, 0x3ff, 0xc39, 0x4, 0x5a, 0xc4, 0xffff8000, 0x3, 0x7, 0x53, 0x7, 0x7fff, 0x56d, 0x8, 0xc, 0xc, 0xc, 0x0, 0x80000001, 0x355, 0xaa, 0x800, 0x3e, 0x4, 0xff7e, 0x1ff, 0x8000, 0xffffffff, 0x0, 0x80000000, 0xf3, 0xfffffffb, 0x7, 0x5, 0x7fff, 0x2, 0xfffffffb, 0x5, 0x1, 0xb, 0x6, 0x200, 0x8, 0xffffc4e8, 0x4, 0x4, 0x4, 0x8, 0x13, 0x7, 0xfffffeff, 0x8, 0xfffff02c, 0x1ff, 0xff, 0xf, 0xeea2, 0x3, 0x2, 0x81, 0x3ff, 0x0, 0x36, 0xfffffffd, 0xffb2, 0x6, 0x9, 0x1, 0x800, 0x6, 0x0, 0x5, 0x2, 0xffff, 0x7, 0x7, 0x8, 0xfffffffa, 0x8000, 0x6, 0x2, 0xb, 0x3, 0x843d, 0x1, 0x10, 0x80000001, 0x2, 0x6, 0x8, 0x7, 0x1, 0x6, 0x0, 0xfffffffe, 0xffffffff, 0x7, 0xf, 0x2, 0x1, 0xbafd, 0x1, 0x674, 0x4, 0x0, 0x9, 0x9, 0x7, 0x6, 0x7e9f, 0x1000, 0x1, 0x5, 0x9, 0x10000, 0x1000, 0x68e1, 0x7, 0x8, 0x0, 0x4, 0x8, 0x0, 0x5, 0x3, 0x2, 0x6, 0x8, 0x2, 0xfffffffe, 0x18, 0x3, 0x6, 0x7b0, 0x54e, 0xfffffffd, 0x3, 0x90, 0x6, 0x7, 0x3, 0xd, 0x71c, 0x9, 0xfffffffe, 0x5, 0x101, 0x3, 0x3, 0x3, 0x80000000, 0x6, 0x7f, 0x9, 0x5950, 0x0, 0x7ff, 0x7, 0xa351c94, 0xffffffc0, 0x6, 0x71, 0x4, 0xffffffb1, 0x800, 0x10001, 0x7ff, 0x37ad, 0xd, 0x9, 0x2, 0x8, 0x9, 0x3, 0x8, 0x5, 0x0, 0xfffffc01, 0x5, 0x8, 0x4, 0x9d6e, 0x8, 0x4, 0xffffff68, 0x8, 0xffff, 0x3, 0x5, 0x16e, 0x78a, 0x0, 0x3a43c91d, 0x0, 0x4, 0x4, 0xfffffd1b, 0x66b, 0x0, 0xcb, 0x2, 0x88800000, 0x5, 0x2, 0x7, 0xc, 0x9, 0x7, 0x7594, 0x1, 0xffff, 0x0, 0x400, 0x7, 0xb, 0x9, 0x7, 0x6, 0x2, 0x1, 0x4b3, 0x6, 0x3ff, 0xb4, 0x9, 0x80, 0xfffffff7, 0x6ce7, 0x4, 0x7fff, 0xb096, 0x0, 0x1000, 0xfffffff8, 0x8cfb, 0x6, 0x5, 0x2, 0x2, 0x10000, 0xff, 0x3, 0x7, 0x1, 0x1, 0x6, 0xaf, 0x3, 0x188, 0x400, 0x5, 0xc8, 0x40, 0xd, 0x2, 0x7fff, 0x0, 0x7, 0x400, 0x1000, 0x7de, 0x7a, 0x6, 0xd07a, 0x4, 0xaf, 0x10, 0xe, 0x2, 0x10, 0xa, 0x80000000, 0x4, 0x2, 0x70000000, 0x1, 0x120054e, 0x2bd5, 0x800, 0xc, 0x9, 0x1ff, 0x10, 0x4, 0x8, 0xfffffffa, 0xcb4, 0x5, 0x5, 0x4063, 0xc70, 0x7fffffff, 0x3, 0x9, 0x5, 0x401, 0x3, 0x7fffffff, 0x8, 0x1, 0x2, 0x4, 0xab62, 0x8, 0xa5, 0xfffffff9, 0xd, 0x7, 0x7, 0x40, 0x1, 0x2, 0x80000001, 0x0, 0x2, 0x88, 0x9, 0xc, 0xa9, 0x4, 0xb8a, 0x4, 0x5, 0xff]}) 23m3.922680539s ago: executing program 35 (id=4144): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540), 0x40001b6, 0x4054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x2, 0xad, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x4, 0x1}, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) syz_clone(0x66a03a80, 0x0, 0x33, 0x0, 0x0, 0x0) mlock(&(0x7f0000787000/0x7000)=nil, 0x7000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 21m44.310110646s ago: executing program 36 (id=4895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000080000000d) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000000000)) unshare(0x62040200) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) r5 = syz_usb_connect$uac1(0x4, 0x102, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0xa, 0x40, 0xcf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x0, "1e30bc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7f, 0x2, 0xfd, 0x4, "dc997ab1a9199ddcc0"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x4, "e5b1d12e19"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0x1, "9f173029500ef189fa"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0x6, 'aP'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfe, 0x8, "", "e7"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xabc8, 0xe, 0x5, "e29301121599"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x4, 0xa, {0x7, 0x25, 0x1, 0x40, 0x5, 0x9023}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x6, 0x3f}, @as_header={0x7, 0x24, 0x1, 0x2, 0x1f, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x8, "ddbefa04e0f4"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfc5, 0x5, 0xd, "f686"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1000, 0x7, 0xf4, "b5f0758078d3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4, 0xb2}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x6, 0x3, 0xc0, 0x20, 0xdb}, 0xc2, &(0x7f0000000340)={0x5, 0xf, 0xc2, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xb, 0x4, 0x1, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "2c9d077dd42bdc02e300dc62f5587ae2"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4637bc567ede8f780941403059b8cb81"}, @generic={0x6f, 0x10, 0xa, "eb3e9034c72d5c86592d80c0e7c4a825774c65b6a96be41e0d1b740e3d8d067b06d0c6a0430176ee883c67e2542dca95481cd6a6803a3da06c039b6293b85a2405a023c3012d9dee286f6453c11c7d32b83c912c3856b26b9788ca98dd21d9caff7d9f1ef2f6996dba748599"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "3212b876caadf69d2aadc31d208c2b0a"}]}, 0x1, [{0x24, &(0x7f0000000440)=@string={0x24, 0x3, "150141386620c33e904e1f42bda26d9b4c940fc5f61b5b0bbe727c8ec7ba2576dc0d"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x0, 0xb4, {0xb4, 0x6, "ace84f89f9fe69806c3be94f571ab2e65db2e9bedecaa0f1eb38bbe556a6e8c05e828e21e8dfb530eff0bda35994ce142a883b532727d61cf77e0c2c19c88e2dc23c212336da43f6ca6773b04fdec4790688b3ec2af51b388d70a5db68031765f776c3df0b068df46fccb0bdd80a4f9bcb7625f37065ba3e6eb05f08a85a77c712912893bec606f8ce51b019e763a86c8788ebcfd964586384c48cf57b159568a22c0a30a046779645937b53cff918700ef1"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000640)={0x40, 0xd, 0x8b, "f62d55dd1331c5da2d29b51394b0e545cb99134a4ee632120cc9d4eba066aa70af16b20310b73d1a410f9b5f44456dedb32e33fb97f8862c9677db933e953a15cf6439215890c26b983638b65198347bb7c92ba3e241995d50e4049aac470edf95370515f52ea0e9f5e7763fa6a94b3cd78ad00b5abe94e14fec571a540ecb9dca772b3c1a124c441fbba7"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000780)={0x20, 0x81, 0x1, "16"}, &(0x7f00000007c0)={0x20, 0x82, 0x2, "06f7"}, &(0x7f0000000800)={0x20, 0x83, 0x3, "9b34e3"}, &(0x7f0000000840)={0x20, 0x84, 0x1, "87"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "d42c2c"}}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x40842, 0x10c, 0x8}, 0x18) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f00000000c0)={0x24, @none={0x0, 0x2}}, 0x14) openat(r6, &(0x7f0000000080)='./file0\x00', 0x400000, 0xc4) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 20m33.496697962s ago: executing program 37 (id=6244): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2a40, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x1, 0xc1}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000f, 0x10, r0, 0x0) 18m45.825590808s ago: executing program 38 (id=7367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3}) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) (async) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$char_usb(r6, &(0x7f0000000400)="6c81", 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b43d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00060900000009"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x100, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000040), 0x82, 0xa000) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$HIDIOCGRAWPHYS(r7, 0x80404805, &(0x7f0000000100)) (async) ioctl$HIDIOCGRAWPHYS(r7, 0x80404805, &(0x7f0000000100)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x8, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000000c0)=0x8, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) eventfd(0x2) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, 0x0) close(0x3) 16m52.092651104s ago: executing program 7 (id=8609): write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m52.054547834s ago: executing program 7 (id=8610): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r6) accept4(r5, &(0x7f0000000280)=@xdp, &(0x7f0000000200)=0x80, 0x80800) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r7 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = dup(r8) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000000), 0x0, 0xffffffee, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000001180)=ANY=[@ANYBLOB="b4060000", @ANYRES16=r10, @ANYBLOB="00002abd7000fddbdf2539000e0008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x6b4}}, 0x4008840) unshare(0x44040200) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) r13 = socket(0x1e, 0x1, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') setsockopt$packet_tx_ring(r13, 0x10f, 0x85, &(0x7f0000000240)=@req3={0x4, 0x0, 0x0, 0x5, 0x3, 0x10000004}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 16m52.020988925s ago: executing program 39 (id=8610): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r6) accept4(r5, &(0x7f0000000280)=@xdp, &(0x7f0000000200)=0x80, 0x80800) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r7 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = dup(r8) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000000), 0x0, 0xffffffee, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000001180)=ANY=[@ANYBLOB="b4060000", @ANYRES16=r10, @ANYBLOB="00002abd7000fddbdf2539000e0008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x6b4}}, 0x4008840) unshare(0x44040200) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) r13 = socket(0x1e, 0x1, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') setsockopt$packet_tx_ring(r13, 0x10f, 0x85, &(0x7f0000000240)=@req3={0x4, 0x0, 0x0, 0x5, 0x3, 0x10000004}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 15m32.304573114s ago: executing program 40 (id=9633): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001"], 0x17c}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=r4], 0xb0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000100)={0x2, 0xf9}, 0x2) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 12m5.837871043s ago: executing program 41 (id=11670): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="f400000002010102000000000000000005000009400004803c00038008000340000000940564010002000000080002400000000d0800034000000006050001006a00000008000340000200070800024000000006"], 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x7, 0x1, 0x0, 0x8, 0x0, 0x3, 0xd, 0x9, 0x2c, 0x3, 0x6, 0x0, 0xf3, 0x3, 0x4, 0x0, 0x8, 0xcb, '\x00', 0xb, 0x22280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m28.893054098s ago: executing program 42 (id=13168): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000080)) r5 = memfd_secret(0x80000) ftruncate(r5, 0x1) ftruncate(r5, 0x2) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000) 8m5.807535013s ago: executing program 43 (id=13231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0x240}], 0x1) 7m48.444806141s ago: executing program 9 (id=13451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40000) 7m48.293031843s ago: executing program 9 (id=13453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7f00) 7m48.136076676s ago: executing program 9 (id=13455): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mremap(&(0x7f00006d7000/0x4000)=nil, 0x4000, 0xc000, 0x3, &(0x7f0000378000/0xc000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) mlockall(0x7) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002140)='/proc/slabinfo\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x4, 0x0, 0x10, 0xa, 0x2, 0xd, 0x5}}) creat(&(0x7f0000000300)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 7m47.668746293s ago: executing program 9 (id=13458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x5, 0x8000000, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r2, 0xae80, 0x80100) 7m47.480693425s ago: executing program 9 (id=13461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0xffffffff, @private0, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)='g', 0x1}, {&(0x7f0000000340)="80", 0x1}], 0x2}}], 0x1, 0x4000c800) sendto$inet6(r3, &(0x7f0000000840)="2a9a", 0x2, 0x3b00, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="9348c10d69f1", 0x6}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000000)="13d4dd3588", 0x5}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000240)="e56827a1f28eaab24d1fbe40ebfcab61342da041757d000000000000aa07b8a97c2b740fb249719ac770b8cde33e6f963fece15a74db63e3587505f69db300977c3adb885a80e1c8910bc83775af730dc32b98a3ca7e7a05d272205671c892ef48ee7c", 0x63}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109027c0002010080000904000001020d00000524060001000006241a0000000c241b07000700910105000000241402000900052423020308241c09000908000905810300040100000904010000020d0000d327010102020d0000090582020002000000090503020002000000"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000480)='veth0_to_team\x00', 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000400)=0x400, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m45.959992538s ago: executing program 9 (id=13470): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) copy_file_range(r2, 0x0, r3, &(0x7f0000000080)=0x1, 0x9, 0x0) unshare(0x24020400) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) cachestat(r4, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x580, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10ffffffe00001"}, 0x28) readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 7m29.838078048s ago: executing program 44 (id=13470): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) copy_file_range(r2, 0x0, r3, &(0x7f0000000080)=0x1, 0x9, 0x0) unshare(0x24020400) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) cachestat(r4, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x580, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10ffffffe00001"}, 0x28) readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 6m22.741264368s ago: executing program 3 (id=14291): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x40, 0x1, 0x3, 0x55, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x66, 0x0, 0x7, 0x2f, 0x0, @local, @local}}}}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480), 0x119, 0x0, &(0x7f00000003c0)="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"}) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x7005, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000280)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "d56d9847bfcb49e2", "16549f18408d640d012ebcc31bd9870b", "bcd58d40", "4f5b22bc20c62b22"}, 0x28) sendto$inet6(r7, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r7, 0x0, 0xfdef) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140), 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 6m21.740124983s ago: executing program 3 (id=14306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5, 0x0, 0x20c}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="9348c10d69f1", 0x6}, {&(0x7f0000000c80)='a', 0xfffffcf1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000000)="13d4dd3588", 0x5}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0xfffffffffffffed2, &(0x7f0000000300)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000240)="e56827a1f28eaab24d1fbe40ebfcab61342da041757d000000000000aa07b8a97c2b740fb249719ac770b8cde33e6f963fece15a74db63e3587505f69db300977c3adb885a80e1c8910bc83775af730dc32b98a3ca7e7a05d272205671c892ef48ee7c", 0x63}, {&(0x7f0000001040)="96", 0xffffffffffffffb2}], 0x3}}], 0x4, 0x4048841) 6m21.640198555s ago: executing program 3 (id=14308): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002d00010000000000fbdbdf251d0109004864be0d744487d29b4ce70c1f5aceb57f0525577c8fb33da0cfef54f8815b470ba0695cabbd945e9cfc8bdbd3dd6a2ffbfb83982c4c7477e0bca3640b2a52813137d8b070f5fc5f4c68aee999"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) setns(r1, 0x24020000) mkdir(0x0, 0x108) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x80900, 0x0) ptrace$setsig(0x4203, r3, 0xd, &(0x7f0000000000)={0x16, 0xfffff324, 0x2}) chdir(&(0x7f00000002c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x40) 6m21.635730964s ago: executing program 3 (id=14309): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fremovexattr(r0, 0x0) 6m21.565117505s ago: executing program 3 (id=14311): ioprio_set$pid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/oops_count', 0x84400, 0x85) r1 = syz_open_pts(0xffffffffffffffff, 0xaca2c9e81bc6b6fc) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x3ff, 0x3, 0x8}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 6m21.412842788s ago: executing program 3 (id=14313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x8a, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x37}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 6m21.313212749s ago: executing program 45 (id=14313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x8a, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x37}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 6m19.722315703s ago: executing program 7 (id=14314): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(r1) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000001c0)={{}, {r4, r5+60000000}}, &(0x7f0000000200)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000400)={0x0, 0x0}) 6m19.612690015s ago: executing program 7 (id=14328): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fremovexattr(r0, 0x0) 6m19.548184085s ago: executing program 7 (id=14330): r0 = fsopen(&(0x7f00000001c0)='tmpfs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) ftruncate(r2, 0xffff) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 6m19.480175576s ago: executing program 7 (id=14332): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x1000, 0x105000, 0xfffffffe}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe80be"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}, {@access_uid}]}}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 6m19.395849178s ago: executing program 46 (id=14332): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x1000, 0x105000, 0xfffffffe}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe80be"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}, {@access_uid}]}}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 5m42.210890422s ago: executing program 8 (id=14854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000240)="262e460faef8b91e0200000f320f22128f09b891ed66b85c000f00d866ba410066edc4827d59544ce966b813008ee836f30f6f32c421f81313", 0x39}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c9141, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x1, 0x4, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="260fae4e00c4c39d7b1cab000f20d835080000000f22d8b8060000000f23d00f21f835100000070f23f80f01cb66b815008ee066660f38dd92f8ffffffb9e4090000b87d470000ba000000000f302e0f01d1c4c2e1aab0be12f002", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5m40.553638607s ago: executing program 8 (id=14874): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x2000000}]) 5m40.406192899s ago: executing program 8 (id=14876): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r0, 0xb87a2000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000240)={0xa9, "48f11a5178fbe4a7f9d9d1bc2079d3a7c691e63f10f29b67c5f926208887914d92c66ee515a6729e752174b87128972de2cae406451d839e3dcca384afd0fbb760ebd67b7d1238e20efc90c4391ae1f49b18e7400178379cd824a276a55de4113746a3fc6ad344be53bf13f453ed4bca80994d008f20e989b28c69eb07f58f21eba887fa8a5a5efd86dbb63ee7c38fbeba9bd9e1453858f22940bf55027b785b2ab5d66ce933d7d5c0"}) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000200), 0x4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24080}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$sock_bt_hci(r6, 0x400448cc, &(0x7f0000000340)) 5m40.256864261s ago: executing program 8 (id=14877): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'\x00', &(0x7f0000000000)=@ethtool_eeprom={0x4f, 0x0, 0x2, 0x3, "705cf5"}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x191) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 5m40.112583213s ago: executing program 8 (id=14878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = syz_clone(0x848011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000103}]}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = getpgrp(0xffffffffffffffff) syz_pidfd_open(r6, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=@v1={0x1000000, [{0x80, 0x8}]}, 0xc, 0x2) listen(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[{0x18, 0x1, 0x1, 'b'}], 0x18}}], 0x2, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r8, 0x0, 0x0, 0xc0000) syz_usb_connect(0x3, 0x75, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m39.458549233s ago: executing program 8 (id=14891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x300, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xa}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 5m23.308256084s ago: executing program 47 (id=14891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x300, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xa}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3m32.14073786s ago: executing program 4 (id=16425): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f00003f2000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/55, 0x37, 0x0, &(0x7f0000000100)=""/103, 0x67}, &(0x7f00000001c0)=0x40) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f00008cb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3, 0x0, &(0x7f0000000300)=""/187, 0xbb}, &(0x7f0000000400)=0x40) getpeername$tipc(r0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m32.021317072s ago: executing program 4 (id=16427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xb4, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x12a8b27}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5698}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x271}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4a900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000130101c01e925f17cf1a000000000700000000000000"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000280)={0xf, 0x2, 0x800}) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000400)={0xb6, 0x0, 0x9}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x33}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3m30.992034057s ago: executing program 4 (id=16431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00060900000009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x82, 0xa000) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3m30.404693096s ago: executing program 4 (id=16437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="594b41a7ce73", 0x6, 0xffffffffffffffff) keyctl$revoke(0x3, r3) keyctl$read(0xb, r3, &(0x7f0000002a80)=""/110, 0x6e) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x40040) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf2507000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010325bd7000000000000000000000007ffd00"/56, @ANYRES32=0x0, @ANYBLOB="0000000080000000fffffff000000000080003001100001e"], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8002, 0x0) preadv2(r7, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) 3m30.339602177s ago: executing program 4 (id=16439): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa8200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000100)=0xfffffff3, 0x4) 3m30.12770855s ago: executing program 4 (id=16441): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x10, r0, 0x8bfb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000040)=0xeb5, r1, &(0x7f0000000080)=0x6, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x100, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x10, r0, 0x8bfb000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) splice(r0, &(0x7f0000000040)=0xeb5, r1, &(0x7f0000000080)=0x6, 0x2, 0x1) (async) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x100, 0x4) (async) 3m30.079224181s ago: executing program 48 (id=16441): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x10, r0, 0x8bfb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000040)=0xeb5, r1, &(0x7f0000000080)=0x6, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x100, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x10, r0, 0x8bfb000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) splice(r0, &(0x7f0000000040)=0xeb5, r1, &(0x7f0000000080)=0x6, 0x2, 0x1) (async) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x100, 0x4) (async) 3m0.830267246s ago: executing program 1 (id=16672): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 3m0.688687518s ago: executing program 1 (id=16673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async, rerun: 32) close(0x3) flistxattr(r4, &(0x7f00000020c0)=""/14, 0xe) (async, rerun: 64) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f00000001c0)) (rerun: 64) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000eeffffff8f0200"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x13, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 3m0.59540666s ago: executing program 1 (id=16675): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 3m0.56421793s ago: executing program 1 (id=16676): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141423000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000002000000000000000000000000000000feffffff020004009600000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x24004040}, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ftruncate(0xffffffffffffffff, 0x2008002) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000040)={&(0x7f0000000140)=""/156, 0x9c}) (async) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 3m0.488771171s ago: executing program 1 (id=16677): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x7, 0x7, 0x81, 0x6, 0x10000000000, 0x9, 0x40001001, 0x8000000000800001, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0xa], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3m0.457545792s ago: executing program 1 (id=16680): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='syscall\x00') read$FUSE(r0, &(0x7f0000003b40)={0x2020}, 0x2020) 3m0.389271333s ago: executing program 49 (id=16680): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='syscall\x00') read$FUSE(r0, &(0x7f0000003b40)={0x2020}, 0x2020) 47.800764868s ago: executing program 5 (id=17935): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x20) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x208481) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='msdos\x00', 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) open$dir(&(0x7f0000000180)='./bus\x00', 0x101000, 0x8) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) open(&(0x7f0000000140)='./file0\x00', 0xcc200, 0x40) sendto$packet(r2, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x1, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) getxattr(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=@known='com.apple.system.Security\x00', &(0x7f0000000440)=""/156, 0x9c) open$dir(&(0x7f0000003580)='./file0\x00', 0x40, 0x9) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@xino_on}]}) chdir(&(0x7f0000001180)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'macsec0\x00', {0x2, 0x0, @initdev}}) 47.207507027s ago: executing program 5 (id=17940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0xc}, 0x1c) sendmmsg$unix(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x583}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000205"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:etc_mail_t:s0\x00', 0x20, 0x2) setpriority(0x1, 0x0, 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x64, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4"}) 45.416596344s ago: executing program 5 (id=17945): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x1, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'veth1_to_bridge\x00', {}, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="a72ecc290e00000a0000000000"], &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xb2c}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000cb70000003ea0fea1eca4cdc8a54c825d9bdd7461e76307b3e5fb9777959ad27183cba4029b429f4e55e004e481bf1ecab1c1a81c5fe7f0d1f8d8ac64269ef6291b4a881378da0332705d9d8d2d625e6da39265273ee40f082e449c4f07eb168c78a9638ad43ca6bb8f4b1ad806000088d27af1a25812423b29ad7045ee95ab8b3b4eaa6fa1943b2e8659e7960600000000000000acf572c12e278fca15e0b5f4789e196f4051df056ad56ad57092947fded31d98b78041dfb9a8b9e989ce0e7539300f97f86a1ec38b46e55292ce6621fb093aa95dd283b2b591648b26bff716e91b63a4cabc057fb5d9f973b2a1247078f39c9d0af4aa004e00000000009bf5f4c18c6e2380ef108ce0914c77345d7cbbc75f47a40a30a066d12c04c632241c715dc2c929bec52fd46954d11011d7f90f4747e15444f3661ef5fba86738cb43b782c3a56ba1c27667e962a275ecd2dd3cda4f27b710fbdafd5448e2f4c6a48dbc5921"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2f}, &(0x7f0000000340), 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000800)=ANY=[@ANYBLOB="92665da00000626398d8c701007c044ce5b16bd64859b51368ec19feb4"], &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2f, 0x1, {0x22, 0xc8d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0x9d, "eaa253aa415cc7cd0c539b19b7742c99cf50c169b5f0f3a4ee7ac94513f330bad925e1b0469a8f7afc09bcba23fbb08b4ea9cf783791c99e01da51da867342cedf6e53c67b093a57e891423ba272e7263a7612202d9820b6e20ea928e567a0262cc5d7d405da15aa0dc9c6bf7079260eba788e853ff23f4ed5045ef681b16ac7a045931dfc9a249ec5d8a21e3b421311f82c481f3bab0b031d82433089"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x80}}) close(r1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0x800000be, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x1}}) unshare(0x24060400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 43.842816367s ago: executing program 5 (id=17956): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001800), 0x101, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r3}) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=0x4de29874ece63cdf) writev(r0, &(0x7f0000000200)=[{&(0x7f0000001840)="960480c72a", 0x5}, {&(0x7f0000001880)}], 0x2) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x181801, 0x0) r5 = accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="62745bcfb2e2b8e8c273a700"]) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000180)=""/60, 0x3c, 0x8, 0x587}) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x81, 0x2, 0x6}}]}}}]}}]}}, 0x0) clock_gettime(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a04430002fb18000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x400141042, 0xa0) 40.264779381s ago: executing program 5 (id=17983): socket$netlink(0x10, 0x3, 0x13) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000540)={0x40, 0xa, 0x2, {0x2, 0x1}}, 0x0}, &(0x7f0000000740)={0x1c, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x7, 0x4, "f8128080"}, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000256000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x7, "f0a23923263408"}, &(0x7f0000000200)=0x2f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x105, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 35.386709433s ago: executing program 6 (id=18001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x17b, 0x0, 0xffffffffffffffff}]}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r4, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000000180)=""/191, 0xbf}, {&(0x7f0000000240)=""/46, 0x2e}], 0x3, 0xd, 0x0) (async) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000300)={'\x00', 0x5, 0x7, 0x81, 0x0, 0x4, 0xeeee0000, 0x2000, '\x00', 0x7}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 35.325253624s ago: executing program 2 (id=18002): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x15) r3 = dup(r2) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e21, 0xffffffff, @mcast1}, 0x1c) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) creat(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002003, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)={0x24, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x10, 0xd7, 0x0, 0x1, [@nested={0xc, 0xbe, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x4008000) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c1753ac1e000100007188ffffffff0000cd09ac141422fffffffa00000000f85c9d7478589b98d38d4ad8"], 0x30}, 0x4000014) close(0x3) getpgid(r4) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="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"], 0x138) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000004500), 0x10000a0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r9, r0, 0x0, 0x80000000) 35.224833176s ago: executing program 6 (id=18003): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) getresuid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)) 35.155481987s ago: executing program 6 (id=18004): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fsopen(&(0x7f0000000000)='nsfs\x00', 0xb8eb480e928a2ccc) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) utimes(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={{r3, r4/1000+10000}, {r5, r6/1000+60000}}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "957968d3c0f443e972b9d723b2865bed4fb32162005aa91192e61d4668d960da62c8486e30f4b269944aa86d0fc98dc32a905b1437ea3628b522a4cb4389b610", 0x20}, 0x48, r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r8, r9, 0x0, 0x2af) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0x1f, [0x100, 0x4, 0xfffffffffffffc00, 0x2, 0x3, 0x6], 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/31}, &(0x7f00000002c0)=0x78) add_key$user(0x0, 0x0, 0x0, 0x0, r7) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, &(0x7f0000000080)=0xc) close_range(r0, 0xffffffffffffffff, 0x0) 34.9094229s ago: executing program 2 (id=18005): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000001380)="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", 0x587, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 34.812685742s ago: executing program 6 (id=18006): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'veth1_to_bridge\x00', {}, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="a72ecc290e00000a0000000000"], &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xb2c}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2f}, &(0x7f0000000340), 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="402aaf000000af107ac0c35e03043f1f641a302c36c59056f24171ca8d0d504c21d132349261722605b49677161cd80501bfdf98ccb07c6fdf791ae23ce6e70551c787bb42d29f47b544eda450d8ac63d12450d554c33fda06ddfdb0b1e49b22844718d1d3af0f3daba965063037085092d44f283122b2555b64468f6567c5cb14dc5542a3a7bc25eaf1295d6d5330a92c24024c96736ba9123606da37e68223bded421a5bfef1a961ef9065d3aa1b0dfe7ecfcfe3caba6ba80f5efe01fc754e9c5d8761856aab9fe3bb8db31da3fb622feaa5e030a063497a4b087fd52335197af7aad88b19ec596122968991d0eb182dc9c1103bcc7df9ee3f15c8dc5e560b44a76b4adc435dd694b2eea6b07c603dc2beca6e266188926a0acdce75afa5"], &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000800)=ANY=[@ANYBLOB="92665da00000626398d8c701007c044ce5b16bd64859b51368ec19feb4"], &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2f, 0x1, {0x22, 0xc8d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0x9d, "eaa253aa415cc7cd0c539b19b7742c99cf50c169b5f0f3a4ee7ac94513f330bad925e1b0469a8f7afc09bcba23fbb08b4ea9cf783791c99e01da51da867342cedf6e53c67b093a57e891423ba272e7263a7612202d9820b6e20ea928e567a0262cc5d7d405da15aa0dc9c6bf7079260eba788e853ff23f4ed5045ef681b16ac7a045931dfc9a249ec5d8a21e3b421311f82c481f3bab0b031d82433089"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x80}}) close(r1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0x800000be, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x1}}) unshare(0x24060400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 34.755068382s ago: executing program 2 (id=18007): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001800), 0x101, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="8528c6"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00'}, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x20, 0x1, 0x1, 0x2a4d, 0x0, 0x34, 0x0}) writev(r0, &(0x7f0000002a40)=[{&(0x7f0000001840)="960480c72a", 0x5}, {&(0x7f0000001880)}], 0x2) 34.418439298s ago: executing program 0 (id=18008): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_clone3(&(0x7f0000002b40)={0x2004000, &(0x7f0000000340), &(0x7f0000001880)=0x0, &(0x7f00000018c0), {0x33}, &(0x7f0000001ac0)=""/72, 0x48, &(0x7f0000001b40)=""/4096, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r0}}, 0x58) syz_open_procfs(r1, &(0x7f00000042c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xffba}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x34, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x3, 0x800, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x3, 0xffffffff, 0x7, 0x5, 0x4, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x200001, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0xcf1, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2af, 0xff, 0x3, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0x8, 0x4, 0x9, 0x3, 0xd, 0xffff8001, 0x6, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xb, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x80001000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x1, 0x80a2ed, 0x4, 0x29], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x0, 0xb9, 0xce7, 0x1ff, 0xf0f6, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x4, 0x4, 0xcc, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x0, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair(0x25, 0x5, 0x80, &(0x7f0000000b80)) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000000380)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x30, r8}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, r8}, 0x14) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="20002abd7000fbdbdf251000000008000300", @ANYRES32=r8, @ANYBLOB="ae739a0945e59bf8ba4e85be32d8839ee1deeec8078f204695076a4e5112e01221ca4c58f7de9f30d423cd7ca4cf39ef880f962ff14f682c09f7d0adf7dca026a06f0a0102ff1e41ecae38172aa73f5b45619b0242dc28"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4080) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x28, 0x2, 0xf) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) sendfile(r0, r11, 0x0, 0x3d9d) 34.316022699s ago: executing program 5 (id=17986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="67e1610f01c826ffac7d0066b9800000c00f326635010000000f300f972e0048f083abb20000baa100ed0f01dfba610066b80000000066ef0f01c9", 0x3b}], 0x1, 0x10, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[], 0x32600) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x4000000e) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r5, 0x2000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 34.236806151s ago: executing program 0 (id=18009): futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 34.150047152s ago: executing program 0 (id=18010): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) lsm_set_self_attr(0x65, &(0x7f0000000080)=ANY=[], 0x20, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x110) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x8, 0x0, 0x0, 0x8001, 0x1, 0x2, 0x9, 0x8, 0xa, 0x7, 0x7, 0x0, 0x7fff, 0x2, 0x1, 0x2, 0x4, 0x6, '\x00', 0x8, 0x1ff}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0x800, 0xff, 0xfffffffffffffff7, 0x3e00000000000003, 0x10003, 0x80000046a9, 0x9, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000782000/0x2000)=nil, 0x2000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 34.106581922s ago: executing program 2 (id=18011): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) getresuid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)) 33.980478764s ago: executing program 6 (id=18012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x4ae2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x0, 0x10, 0x80}]}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) fallocate(r1, 0x0, 0x0, 0x400001) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) fremovexattr(r1, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 33.958563564s ago: executing program 2 (id=18013): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$packet(0x11, 0x3, 0x300) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffe}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.819369527s ago: executing program 0 (id=18014): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c000}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 33.720466228s ago: executing program 6 (id=18015): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x2010, r0, 0x45809000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x20) bind$can_raw(r2, &(0x7f00000000c0), 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e21, 0x7, @private0, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000200)="00a69c6c03", 0x5}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) rt_sigaction(0x2f, &(0x7f0000000100)={&(0x7f0000000040)="f2410f59b0f4e219f88f4828ce2a94410f423866400f5f0c068fa978cb30c4c1105419c443791dfc720ffd1245f64e506166470f2d12", 0x80000001, &(0x7f0000000080)="f243ad0f18c3c4e271a96d710ff96ca606c4e191fac3660f38348c6fd9a722f62e263e3e430f38052fc4c2dda70b67f22e43287b59c421fd702b19", {[0x74323a62]}}, &(0x7f00000001c0)={&(0x7f0000000140)="0ff94e0c36ded9c442fdb9e96666450ff98200000080c421c459ef0f619cb938768400d9f6c442c5aea1000810ff673454c4e37d063e4a", 0x0, &(0x7f0000000300)="8fe978c622c40279309d00000080c4012bc00930f04380b7ecf00000fc42ff30c4437bf043d00e41da0f59ca90d0ebdefaa20978e0b7c103327ed6"}, 0x8, &(0x7f0000000180)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) unshare(0x64000600) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)=ANY=[], 0x590) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x110) move_mount(r6, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x40) fstat(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) setfsuid(r7) 33.718338828s ago: executing program 0 (id=18016): r0 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4, 0x400, 0x3, 0x8, 0x8988, 0x0}) syz_clone3(&(0x7f0000000280)={0x20000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x5}, &(0x7f00000000c0)=""/162, 0xa2, &(0x7f0000000180)=""/38, &(0x7f0000000240)=[r0, r1, 0x0], 0x3}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x2, 0x6, 0x9, 0xffffff56}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x1ff, 0x1, 0x7b, 0x8}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f00000004c0)={0x1428, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x11a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2564}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "be26edaab7d09517ff59a6ede5d7a2210c5fd7e788ef29db670ec6899bb2a3b1550e9843596b47dac76e827e0ea8680f6853662e0fe0476bb19772197a8da502266c43a0868b4c919f1562ab95a3e18280df83df2913049a2f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x10, 0x4, "f0624edf3c394b488736d142"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x89\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\x8b\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}$/)]#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7a, 0x5, "e446d0de8e2ec4b25a482d3f15bcf41f5dd6a0ce286a1835f938743b9a309fc501b0376d944b267cd698201475076a98a1fa8999de6f8a039c8354c4704f2d67bcff691153843e9fed47c2c20cc99473c3934bfd63a0523fddcf0edd18e322e260a1a0b96b99ccd17ece2e9ee690795b40c4a839799e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xdb, 0x5, "293e097f1e9467859a372e80385ea5e0349049a76ec2ef1bc25f404c4a8bcf4e45e0206471d70b516fc01ca67fd3e20334850831c65a70203295f5cfd02b468e4ea6a3365347a332bcaba51439f99fea9fd723771e8c987a5fa939174782395d8446b279e2294aef053a4ef64846d9e88fc85a4ddd19c1846239e240c88c6c1cd4eda9d1aed57bcbaeaeac7139b06d3dc3d8015812d4c9f0ae156dd44a2f53dbdc11d9244cea269f5e72c701d3cf70d19deebbfd8e2d20d4c64496e7470e359cf396801ad7fbcdfc00ed544bbfa18a107f352313d6e753"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x22, 0x5, "df4f8eacd1f6fcc171830684ef1ebcf0a0aeb829dade454d0e4c379c9365"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&$/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$!:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\*\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d21}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6737}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',.]\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}]}]}]}]}, 0x1428}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000001980), 0x711, 0x80100) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000019c0)={{&(0x7f0000ff2000/0xb000)=nil, 0xb000}, 0x1}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x200000, 0x4, 0xf}, 0x18) symlinkat(&(0x7f0000001a00)='./file0\x00', r7, &(0x7f0000001ac0)='./file0\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x400c847) r10 = syz_create_resource$binfmt(&(0x7f0000001c80)='./file1\x00') execveat$binfmt(r7, r10, &(0x7f0000001e00)={[&(0x7f0000001cc0)=']\x00', &(0x7f0000001d00)='\'])]^+}\"!n:}*\\/%+\x00', &(0x7f0000001d40)='nl80211\x00', &(0x7f0000001d80)='\x00', &(0x7f0000001dc0)='))\'\\^\x00']}, &(0x7f0000001e80)={[&(0x7f0000001e40)='%\\+.*\x00']}, 0x800) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000001f00)={0x1, &(0x7f0000001ec0)=[{0x81, 0x2, 0x2, 0x800}]}) read$FUSE(r3, &(0x7f0000001f40)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)={0x6c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x2) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000040c0)={'full', 0x20, 0xfffffffffffffffd, 0x20, 0x38}, 0x2f) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000004100), 0x82, 0x0) ioctl$BLKRESETZONE(r11, 0x40101283, &(0x7f0000004140)={0x2b9, 0x9c4}) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004180)='/sys/power/disk', 0x200000, 0x192) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000041c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r12, 0xc0c89425, &(0x7f00000045c0)={"5551a5883a6fa83b993f0576e6f6a7cc", r13, 0x0, {0x64b, 0xfffffffd}, {0x7, 0x2}, 0x8000, [0x10, 0x5, 0x0, 0x7, 0x10000, 0x0, 0x9, 0xfffffffffffffff8, 0x10001, 0x6e6, 0x3ff, 0xffffffff00000001, 0x8, 0x1000, 0x4, 0x8000]}) 28.801871962s ago: executing program 0 (id=18017): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60e41, 0x0) futex(&(0x7f0000000000)=0x2, 0xa, 0x1, 0x0, 0x0, 0x2) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0xfdef}, {0x0, 0xff95}], 0x2) 26.2043699s ago: executing program 2 (id=18018): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x2) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="411ffa94", 0x4}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) (async, rerun: 32) accept(r3, 0x0, 0x0) getdents(r1, &(0x7f00000003c0)=""/4135, 0x1027) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9c, 0x0, &(0x7f0000000440)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x2a}, @fda={0x66646185, 0x5, 0x0, 0xe}, @fda={0x66646185, 0x7, 0x0, 0x38}}, &(0x7f0000000040)={0x0, 0x20, 0x40}}}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x7, 0x0, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/83, 0x53, 0x1, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/176, 0xb0, 0x0, 0x3d}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}], 0x75, 0x0, &(0x7f0000000500)="dee8bcc1ca1e54dc93b745dc8b6dae2d5a4050dc398722dff3da2b4d8db3d7f3d8f3ee553f52b80cfff36517d80f065f1feead4fe88b892bc7f12a154f3e060f9a60e9ed5187a46f8de0f9aa075efada57134b3ef6fa929c12a4f6b8166af320c1a628db7067bb97ecfa213dc452a86532cbaa659d"}) (rerun: 64) 17.573825609s ago: executing program 50 (id=17986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="67e1610f01c826ffac7d0066b9800000c00f326635010000000f300f972e0048f083abb20000baa100ed0f01dfba610066b80000000066ef0f01c9", 0x3b}], 0x1, 0x10, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[], 0x32600) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x4000000e) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r5, 0x2000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.05980338s ago: executing program 51 (id=18017): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60e41, 0x0) futex(&(0x7f0000000000)=0x2, 0xa, 0x1, 0x0, 0x0, 0x2) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0xfdef}, {0x0, 0xff95}], 0x2) 362.672655ms ago: executing program 52 (id=18018): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x2) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="411ffa94", 0x4}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) (async, rerun: 32) accept(r3, 0x0, 0x0) getdents(r1, &(0x7f00000003c0)=""/4135, 0x1027) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9c, 0x0, &(0x7f0000000440)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x2a}, @fda={0x66646185, 0x5, 0x0, 0xe}, @fda={0x66646185, 0x7, 0x0, 0x38}}, &(0x7f0000000040)={0x0, 0x20, 0x40}}}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x7, 0x0, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/83, 0x53, 0x1, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/176, 0xb0, 0x0, 0x3d}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}], 0x75, 0x0, &(0x7f0000000500)="dee8bcc1ca1e54dc93b745dc8b6dae2d5a4050dc398722dff3da2b4d8db3d7f3d8f3ee553f52b80cfff36517d80f065f1feead4fe88b892bc7f12a154f3e060f9a60e9ed5187a46f8de0f9aa075efada57134b3ef6fa929c12a4f6b8166af320c1a628db7067bb97ecfa213dc452a86532cbaa659d"}) (rerun: 64) 0s ago: executing program 53 (id=18015): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x2010, r0, 0x45809000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x20) bind$can_raw(r2, &(0x7f00000000c0), 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e21, 0x7, @private0, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000200)="00a69c6c03", 0x5}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) rt_sigaction(0x2f, &(0x7f0000000100)={&(0x7f0000000040)="f2410f59b0f4e219f88f4828ce2a94410f423866400f5f0c068fa978cb30c4c1105419c443791dfc720ffd1245f64e506166470f2d12", 0x80000001, &(0x7f0000000080)="f243ad0f18c3c4e271a96d710ff96ca606c4e191fac3660f38348c6fd9a722f62e263e3e430f38052fc4c2dda70b67f22e43287b59c421fd702b19", {[0x74323a62]}}, &(0x7f00000001c0)={&(0x7f0000000140)="0ff94e0c36ded9c442fdb9e96666450ff98200000080c421c459ef0f619cb938768400d9f6c442c5aea1000810ff673454c4e37d063e4a", 0x0, &(0x7f0000000300)="8fe978c622c40279309d00000080c4012bc00930f04380b7ecf00000fc42ff30c4437bf043d00e41da0f59ca90d0ebdefaa20978e0b7c103327ed6"}, 0x8, &(0x7f0000000180)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) unshare(0x64000600) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)=ANY=[], 0x590) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x110) move_mount(r6, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x40) fstat(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) setfsuid(r7) kernel console output (not intermixed with test programs): 3372036854771712 [ 1571.671622][T16259] total_cache 312647680 [ 1571.675891][T16259] total_rss 122880 [ 1571.679665][T16259] total_rss_huge 0 [ 1571.685948][T16259] total_shmem 312647680 [ 1571.690146][T16259] total_mapped_file 0 [ 1571.701116][T16259] total_dirty 0 [ 1571.705420][T16259] total_writeback 0 [ 1571.709428][T16259] total_workingset_refault_anon 20 [ 1571.716005][T16259] total_workingset_refault_file 0 [ 1571.721314][T16259] total_swap 127959040 [ 1571.726908][T16259] total_swapcached 36864 [ 1571.731366][T16259] total_pgpgin 607067 [ 1571.736744][T16259] total_pgpgout 533257 [ 1571.740989][T16259] total_pgfault 284409 [ 1571.748138][T16259] total_pgmajfault 2091 [ 1571.753512][T16259] total_inactive_anon 301797376 [ 1571.760257][T16259] total_active_anon 9641984 [ 1571.765093][T16259] total_inactive_file 0 [ 1571.770723][T16259] total_active_file 0 [ 1571.774742][T16259] total_unevictable 0 [ 1571.780635][T16259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17686,pid=16220,uid=0 [ 1571.798951][T16259] Memory cgroup out of memory: Killed process 16220 (syz.0.17686) total-vm:90096kB, anon-rss:920kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 1571.962653][T16710] tipc: Started in network mode [ 1571.971505][T16710] tipc: Node identity , cluster identity 4711 [ 1571.982310][T16710] tipc: Failed to obtain node identity [ 1572.009920][T16710] tipc: Enabling of bearer rejected, failed to enable media [ 1572.267955][T16721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.298219][T16721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.332018][T16721] overlayfs: failed to resolve '/ ': -2 [ 1572.589799][T16730] pim6reg1: entered promiscuous mode [ 1572.595151][T16730] pim6reg1: entered allmulticast mode [ 1572.691493][ T36] kauditd_printk_skb: 114 callbacks suppressed [ 1572.691512][ T36] audit: type=1400 audit(2000000068.869:177815): avc: denied { create } for pid=16734 comm="syz.2.17873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1572.762950][T16212] syz.0.17686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1572.767516][ T36] audit: type=1400 audit(2000000068.897:177816): avc: denied { create } for pid=16734 comm="syz.2.17873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1572.822918][T16212] CPU: 1 UID: 0 PID: 16212 Comm: syz.0.17686 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 1572.822957][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1572.822973][T16212] Call Trace: [ 1572.822981][T16212] [ 1572.822991][T16212] __dump_stack+0x21/0x30 [ 1572.823024][T16212] dump_stack_lvl+0x10c/0x190 [ 1572.823051][T16212] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1572.823078][T16212] ? ___ratelimit+0x3f7/0x5a0 [ 1572.823104][T16212] dump_stack+0x19/0x20 [ 1572.823129][T16212] dump_header+0xd7/0x490 [ 1572.823162][T16212] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 1572.823187][T16212] oom_kill_process+0x4c0/0x7e0 [ 1572.823208][T16212] ? sched_clock_cpu+0x75/0x400 [ 1572.823236][T16212] out_of_memory+0x7ee/0xbd0 [ 1572.823257][T16212] ? __cfi_out_of_memory+0x10/0x10 [ 1572.823278][T16212] ? mutex_lock_killable+0x92/0x1c0 [ 1572.823307][T16212] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1572.823339][T16212] mem_cgroup_out_of_memory+0x279/0x350 [ 1572.823370][T16212] ? drain_obj_stock+0xed0/0xed0 [ 1572.823402][T16212] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 1572.823433][T16212] try_charge_memcg+0x8f7/0xde0 [ 1572.823460][T16212] ? __cfi_try_charge_memcg+0x10/0x10 [ 1572.823485][T16212] ? __alloc_pages_noprof+0x30d/0x6c0 [ 1572.823511][T16212] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1572.823535][T16212] ? __folio_batch_add_and_move+0x2ab/0x370 [ 1572.823572][T16212] __mem_cgroup_charge+0xf6/0x410 [ 1572.823599][T16212] ? __kasan_check_write+0x18/0x20 [ 1572.823628][T16212] ? _raw_spin_lock+0x8c/0x120 [ 1572.823649][T16212] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1572.823676][T16212] shmem_alloc_and_add_folio+0x86d/0x1050 [ 1572.823715][T16212] ? put_swap_device+0x130/0x130 [ 1572.823750][T16212] ? shmem_huge_global_enabled+0x2da/0x360 [ 1572.823784][T16212] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 1572.823817][T16212] ? __kasan_check_write+0x18/0x20 [ 1572.823844][T16212] ? _raw_spin_lock+0x8c/0x120 [ 1572.823866][T16212] shmem_get_folio_gfp+0x5f0/0x1380 [ 1572.823902][T16212] ? shmem_get_folio+0xc0/0xc0 [ 1572.823933][T16212] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 1572.823959][T16212] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 1572.823986][T16212] ? inode_to_bdi+0x6d/0x100 [ 1572.824011][T16212] shmem_write_begin+0xf4/0x270 [ 1572.824046][T16212] generic_perform_write+0x330/0x960 [ 1572.824076][T16212] ? __cfi_generic_perform_write+0x10/0x10 [ 1572.824102][T16212] ? down_write+0xe9/0x2a0 [ 1572.824131][T16212] ? mnt_get_write_access_file+0x1af/0x3b0 [ 1572.824156][T16212] ? mnt_put_write_access_file+0xc2/0x100 [ 1572.824180][T16212] ? file_update_time+0x1ef/0x220 [ 1572.824205][T16212] shmem_file_write_iter+0x105/0x130 [ 1572.824229][T16212] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1572.824254][T16212] __kernel_write_iter+0x395/0x830 [ 1572.824283][T16212] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1572.824308][T16212] ? __cfi___kernel_write_iter+0x10/0x10 [ 1572.824337][T16212] ? get_dump_page+0x160/0x220 [ 1572.824359][T16212] ? __asan_memset+0x39/0x50 [ 1572.824386][T16212] ? iov_iter_bvec+0xc0/0x180 [ 1572.824420][T16212] dump_user_range+0xb06/0xdf0 [ 1572.824450][T16212] ? __cfi_dump_emit+0x10/0x10 [ 1572.824478][T16212] ? __cfi_dump_user_range+0x10/0x10 [ 1572.824506][T16212] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 1572.824537][T16212] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 1572.824587][T16212] elf_core_dump+0x2cd9/0x3810 [ 1572.824626][T16212] ? __cfi_elf_core_dump+0x10/0x10 [ 1572.824668][T16212] ? dump_interrupted+0xf0/0xf0 [ 1572.824700][T16212] ? filp_open+0x182/0x1d0 [ 1572.824724][T16212] ? 0xffffffffff600000 [ 1572.824742][T16212] ? freezing_slow_path+0x113/0x160 [ 1572.824769][T16212] do_coredump+0x1bfa/0x2bd0 [ 1572.824801][T16212] ? __cfi_do_coredump+0x10/0x10 [ 1572.824827][T16212] ? asm_exc_page_fault+0x2b/0x30 [ 1572.824861][T16212] ? __kasan_slab_free+0x6a/0x80 [ 1572.824894][T16212] ? kmem_cache_free+0x1c1/0x4c0 [ 1572.824924][T16212] get_signal+0x11fd/0x14f0 [ 1572.824953][T16212] arch_do_signal_or_restart+0x96/0x720 [ 1572.824984][T16212] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1572.825019][T16212] irqentry_exit_to_user_mode+0x4e/0xb0 [ 1572.825051][T16212] irqentry_exit+0x16/0x60 [ 1572.825080][T16212] exc_page_fault+0x66/0xc0 [ 1572.825109][T16212] asm_exc_page_fault+0x2b/0x30 [ 1572.825133][T16212] RIP: 0033:0x7f1d0358e931 [ 1572.825152][T16212] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1572.825172][T16212] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 1572.825194][T16212] RAX: 0000000000000000 RBX: 00007f1d037b6080 RCX: 00007f1d0358e929 [ 1572.825212][T16212] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 1572.825228][T16212] RBP: 00007f1d03610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1572.825244][T16212] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1572.825259][T16212] R13: 0000000000000001 R14: 00007f1d037b6080 R15: 00007ffc75e90a88 [ 1572.825279][T16212] [ 1573.310835][ T36] audit: type=1400 audit(2000000068.915:177817): avc: denied { getopt } for pid=16734 comm="syz.2.17873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1573.402068][T16212] memory: usage 307200kB, limit 307200kB, failcnt 35640 [ 1573.409072][T16212] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 1573.417019][T16212] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1573.423926][T16212] Memory cgroup stats for /syz0: [ 1573.424072][T16212] cache 314437632 [ 1573.432799][T16212] rss 122880 [ 1573.436064][T16212] rss_huge 0 [ 1573.439292][T16212] shmem 314437632 [ 1573.442941][T16212] mapped_file 0 [ 1573.446437][T16212] dirty 0 [ 1573.449393][T16212] writeback 0 [ 1573.452696][T16212] workingset_refault_anon 20 [ 1573.457328][T16212] workingset_refault_file 0 [ 1573.461861][T16212] swap 127967232 [ 1573.465436][T16212] swapcached 28672 [ 1573.469174][T16212] pgpgin 607509 [ 1573.472650][T16212] pgpgout 533264 [ 1573.476229][T16212] pgfault 284454 [ 1573.479804][T16212] pgmajfault 2091 [ 1573.483453][T16212] inactive_anon 293531648 [ 1573.487873][T16212] active_anon 21041152 [ 1573.491964][T16212] inactive_file 0 [ 1573.495615][T16212] active_file 0 [ 1573.499125][T16212] unevictable 0 [ 1573.502598][T16212] hierarchical_memory_limit 314572800 [ 1573.507998][T16212] hierarchical_memsw_limit 9223372036854771712 [ 1573.514203][T16212] total_cache 314437632 [ 1573.518387][T16212] total_rss 122880 [ 1573.522202][T16212] total_rss_huge 0 [ 1573.525972][T16212] total_shmem 314437632 [ 1573.530165][T16212] total_mapped_file 0 [ 1573.534169][T16212] total_dirty 0 [ 1573.537638][T16212] total_writeback 0 [ 1573.541486][T16212] total_workingset_refault_anon 20 [ 1573.546613][T16212] total_workingset_refault_file 0 [ 1573.551681][T16212] total_swap 127967232 [ 1573.555775][T16212] total_swapcached 28672 [ 1573.560031][T16212] total_pgpgin 607509 [ 1573.564064][T16212] total_pgpgout 533264 [ 1573.568145][T16212] total_pgfault 284454 [ 1573.572623][T16212] total_pgmajfault 2091 [ 1573.576805][T16212] total_inactive_anon 293531648 [ 1573.581673][T16212] total_active_anon 21041152 [ 1573.586349][T16212] total_inactive_file 0 [ 1573.590525][T16212] total_active_file 0 [ 1573.594537][T16212] total_unevictable 0 [ 1573.598532][T16212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17686,pid=16227,uid=0 [ 1573.613610][T16212] Memory cgroup out of memory: Killed process 16227 (syz.0.17686) total-vm:90096kB, anon-rss:944kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 1573.649977][T16261] syz.0.17686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1573.796684][T16261] CPU: 1 UID: 0 PID: 16261 Comm: syz.0.17686 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 1573.796731][T16261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1573.796746][T16261] Call Trace: [ 1573.796754][T16261] [ 1573.796763][T16261] __dump_stack+0x21/0x30 [ 1573.796796][T16261] dump_stack_lvl+0x10c/0x190 [ 1573.796823][T16261] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1573.796850][T16261] ? ___ratelimit+0x3f7/0x5a0 [ 1573.796878][T16261] dump_stack+0x19/0x20 [ 1573.796904][T16261] dump_header+0xd7/0x490 [ 1573.796938][T16261] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 1573.796963][T16261] oom_kill_process+0x4c0/0x7e0 [ 1573.796984][T16261] ? sched_clock_cpu+0x75/0x400 [ 1573.797011][T16261] out_of_memory+0x7ee/0xbd0 [ 1573.797033][T16261] ? __cfi_out_of_memory+0x10/0x10 [ 1573.797054][T16261] ? mutex_lock_killable+0x104/0x1c0 [ 1573.797082][T16261] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1573.797113][T16261] mem_cgroup_out_of_memory+0x279/0x350 [ 1573.797144][T16261] ? drain_obj_stock+0xed0/0xed0 [ 1573.797176][T16261] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 1573.797206][T16261] try_charge_memcg+0x8f7/0xde0 [ 1573.797233][T16261] ? __cfi_try_charge_memcg+0x10/0x10 [ 1573.797258][T16261] ? __alloc_pages_noprof+0x30d/0x6c0 [ 1573.797284][T16261] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1573.797307][T16261] ? __folio_batch_add_and_move+0x2ab/0x370 [ 1573.797331][T16261] __mem_cgroup_charge+0xf6/0x410 [ 1573.797358][T16261] ? __kasan_check_write+0x18/0x20 [ 1573.797385][T16261] ? _raw_spin_lock+0x8c/0x120 [ 1573.797406][T16261] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1573.797436][T16261] shmem_alloc_and_add_folio+0x86d/0x1050 [ 1573.797473][T16261] ? put_swap_device+0x130/0x130 [ 1573.797510][T16261] ? shmem_huge_global_enabled+0x2da/0x360 [ 1573.797544][T16261] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 1573.797577][T16261] ? __kasan_check_write+0x18/0x20 [ 1573.797604][T16261] ? _raw_spin_lock+0x8c/0x120 [ 1573.797625][T16261] shmem_get_folio_gfp+0x5f0/0x1380 [ 1573.797661][T16261] ? shmem_get_folio+0xc0/0xc0 [ 1573.797692][T16261] ? follow_page_pte+0xa5c/0xb90 [ 1573.797716][T16261] ? inode_to_bdi+0x6d/0x100 [ 1573.797748][T16261] shmem_write_begin+0xf4/0x270 [ 1573.797783][T16261] generic_perform_write+0x330/0x960 [ 1573.797812][T16261] ? __cfi_generic_perform_write+0x10/0x10 [ 1573.797839][T16261] ? down_write+0xe9/0x2a0 [ 1573.797870][T16261] ? file_update_time+0xa3/0x220 [ 1573.797895][T16261] shmem_file_write_iter+0x105/0x130 [ 1573.797920][T16261] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1573.797945][T16261] __kernel_write_iter+0x395/0x830 [ 1573.797974][T16261] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1573.797999][T16261] ? __cfi___kernel_write_iter+0x10/0x10 [ 1573.798027][T16261] ? get_dump_page+0x160/0x220 [ 1573.798049][T16261] ? __asan_memset+0x39/0x50 [ 1573.798076][T16261] ? iov_iter_bvec+0xc0/0x180 [ 1573.798109][T16261] dump_user_range+0xb06/0xdf0 [ 1573.798139][T16261] ? __cfi_dump_emit+0x10/0x10 [ 1573.798167][T16261] ? __cfi_dump_user_range+0x10/0x10 [ 1573.798196][T16261] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 1573.798227][T16261] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 1573.798258][T16261] elf_core_dump+0x2cd9/0x3810 [ 1573.798296][T16261] ? __cfi_elf_core_dump+0x10/0x10 [ 1573.798339][T16261] ? dump_interrupted+0xf0/0xf0 [ 1573.798366][T16261] ? filp_open+0x182/0x1d0 [ 1573.798389][T16261] ? 0xffffffffff600000 [ 1573.798406][T16261] ? freezing_slow_path+0x113/0x160 [ 1573.798434][T16261] do_coredump+0x1bfa/0x2bd0 [ 1573.798465][T16261] ? __cfi_do_coredump+0x10/0x10 [ 1573.798490][T16261] ? asm_exc_page_fault+0x2b/0x30 [ 1573.798525][T16261] ? __kasan_slab_free+0x6a/0x80 [ 1573.798557][T16261] ? kmem_cache_free+0x1c1/0x4c0 [ 1573.798588][T16261] get_signal+0x11fd/0x14f0 [ 1573.798616][T16261] arch_do_signal_or_restart+0x96/0x720 [ 1573.798648][T16261] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1573.798683][T16261] irqentry_exit_to_user_mode+0x4e/0xb0 [ 1573.798715][T16261] irqentry_exit+0x16/0x60 [ 1573.798757][T16261] exc_page_fault+0x66/0xc0 [ 1573.798786][T16261] asm_exc_page_fault+0x2b/0x30 [ 1573.798810][T16261] RIP: 0033:0x7f1d0358e931 [ 1573.798829][T16261] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1573.798848][T16261] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 1573.798870][T16261] RAX: 0000000000000000 RBX: 00007f1d037b6080 RCX: 00007f1d0358e929 [ 1573.798888][T16261] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 1573.798904][T16261] RBP: 00007f1d03610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1573.798918][T16261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1573.798933][T16261] R13: 0000000000000001 R14: 00007f1d037b6080 R15: 00007ffc75e90a88 [ 1573.798952][T16261] [ 1573.798962][T16261] memory: usage 271324kB, limit 307200kB, failcnt 35687 [ 1574.336726][T16743] overlayfs: failed to clone upperpath [ 1574.342361][ T36] audit: type=1400 audit(2000000070.393:177818): avc: denied { create } for pid=16736 comm="syz.6.17874" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1574.365419][ T36] audit: type=1400 audit(2000000070.393:177819): avc: denied { ioctl } for pid=16736 comm="syz.6.17874" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=367720 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1574.415020][ T36] audit: type=1400 audit(2000000070.393:177820): avc: denied { ioctl } for pid=16736 comm="syz.6.17874" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=367720 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1574.441991][ T36] audit: type=1400 audit(2000000070.412:177821): avc: denied { mounton } for pid=16742 comm="syz.2.17877" path="/271/file0" dev="tmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1574.470069][ T36] audit: type=1400 audit(2000000070.468:177822): avc: denied { name_bind } for pid=16742 comm="syz.2.17877" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1574.496993][ T36] audit: type=1400 audit(2000000070.468:177823): avc: denied { node_bind } for pid=16742 comm="syz.2.17877" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1574.684011][ C0] net_ratelimit: 27108 callbacks suppressed [ 1574.684038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.702133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.714444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.726645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.738940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.751108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.763404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.775587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.787886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.800067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1574.878716][T16261] memory+swap: usage 367508kB, limit 9007199254740988kB, failcnt 0 [ 1574.885396][ T36] audit: type=1400 audit(2000000070.917:177824): avc: denied { read write } for pid=9618 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1575.032332][T16261] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1575.058584][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17878'. [ 1575.113228][T16747] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 1575.154275][T16261] Memory cgroup stats for /syz0: [ 1575.192137][T16261] cache 252551168 [ 1575.549844][T16261] rss 94208 [ 1575.600508][T16261] rss_huge 0 [ 1575.774336][T16261] shmem 252551168 [ 1575.778032][T16261] mapped_file 0 [ 1575.981065][T16261] dirty 0 [ 1575.984113][T16261] writeback 0 [ 1575.987421][T16261] workingset_refault_anon 21 [ 1576.062705][T16761] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1576.101996][T16261] workingset_refault_file 0 [ 1576.106729][T16761] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1576.205519][T16261] swap 118439936 [ 1576.230775][T16261] swapcached 32768 [ 1576.278163][T16261] pgpgin 608603 [ 1576.387850][T16261] pgpgout 549473 [ 1576.391455][T16261] pgfault 284529 [ 1576.536912][T16261] pgmajfault 2092 [ 1576.540602][T16261] inactive_anon 231755776 [ 1576.633906][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.682637][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.779307][T16261] active_anon 20475904 [ 1576.783464][T16261] inactive_file 0 [ 1576.787114][T16261] active_file 0 [ 1576.891039][T16261] unevictable 0 [ 1576.894551][T16261] hierarchical_memory_limit 314572800 [ 1576.997002][T16261] hierarchical_memsw_limit 9223372036854771712 [ 1577.003209][T16261] total_cache 252551168 [ 1577.090817][T16261] total_rss 94208 [ 1577.094521][T16261] total_rss_huge 0 [ 1577.098258][T16261] total_shmem 252551168 [ 1577.239499][T16261] total_mapped_file 0 [ 1577.243542][T16261] total_dirty 0 [ 1577.247022][T16261] total_writeback 0 [ 1577.315841][T16261] total_workingset_refault_anon 21 [ 1577.321019][T16261] total_workingset_refault_file 0 [ 1577.472354][T16261] total_swap 118439936 [ 1577.495539][T16261] total_swapcached 32768 [ 1577.499830][T16261] total_pgpgin 608603 [ 1577.650004][T16261] total_pgpgout 549473 [ 1577.741748][T16261] total_pgfault 284529 [ 1577.745887][T16261] total_pgmajfault 2092 [ 1577.750059][T16261] total_inactive_anon 231755776 [ 1577.920954][T16796] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1577.975373][T16261] total_active_anon 20475904 [ 1578.066072][T16261] total_inactive_file 0 [ 1578.131219][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 1578.131239][ T36] audit: type=1326 audit(2000000073.957:177922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.0.17889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0358e929 code=0x7fc00000 [ 1578.199083][T16799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.233454][ T36] audit: type=1400 audit(2000000074.013:177923): avc: denied { read write } for pid=16798 comm="syz.5.17898" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1578.277159][T16261] total_active_file 0 [ 1578.281198][T16261] total_unevictable 0 [ 1578.285198][T16261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17686,pid=16224,uid=0 [ 1578.305169][T16799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.404203][ T36] audit: type=1400 audit(2000000074.013:177924): avc: denied { read write open } for pid=16798 comm="syz.5.17898" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1578.484519][T16261] Memory cgroup out of memory: Killed process 16224 (syz.0.17686) total-vm:90096kB, anon-rss:944kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 1578.523073][ T36] audit: type=1400 audit(2000000074.013:177925): avc: denied { read write } for pid=16798 comm="syz.5.17898" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1578.586342][ T36] audit: type=1400 audit(2000000074.013:177926): avc: denied { read write open } for pid=16798 comm="syz.5.17898" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1578.622079][ T36] audit: type=1400 audit(2000000074.013:177927): avc: denied { ioctl } for pid=16798 comm="syz.5.17898" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1578.669607][ T36] audit: type=1400 audit(2000000074.013:177928): avc: denied { ioctl } for pid=16798 comm="syz.5.17898" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1578.735626][ T36] audit: type=1400 audit(2000000074.257:177929): avc: denied { execute } for pid=16807 comm="syz.2.17903" name="file1" dev="tmpfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1578.781482][ T36] audit: type=1400 audit(2000000074.257:177930): avc: denied { execute_no_trans } for pid=16807 comm="syz.2.17903" path="/276/file1" dev="tmpfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1578.821208][ T36] audit: type=1400 audit(2000000074.313:177931): avc: denied { ioctl } for pid=16798 comm="syz.5.17898" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.053655][T16243] syz.0.17686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1579.186555][T16820] overlay: ./file0 is not a directory [ 1579.217214][T16823] rust_binder: Write failure EINVAL in pid:1683 [ 1579.241002][T16243] CPU: 1 UID: 0 PID: 16243 Comm: syz.0.17686 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 1579.241044][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1579.241059][T16243] Call Trace: [ 1579.241078][T16243] [ 1579.241088][T16243] __dump_stack+0x21/0x30 [ 1579.241122][T16243] dump_stack_lvl+0x10c/0x190 [ 1579.241149][T16243] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1579.241176][T16243] ? ___ratelimit+0x3f7/0x5a0 [ 1579.241203][T16243] dump_stack+0x19/0x20 [ 1579.241229][T16243] dump_header+0xd7/0x490 [ 1579.241263][T16243] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 1579.241289][T16243] oom_kill_process+0x4c0/0x7e0 [ 1579.241310][T16243] ? sched_clock_cpu+0x75/0x400 [ 1579.241338][T16243] out_of_memory+0x7ee/0xbd0 [ 1579.241359][T16243] ? __cfi_out_of_memory+0x10/0x10 [ 1579.241381][T16243] ? mutex_lock_killable+0x92/0x1c0 [ 1579.241410][T16243] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1579.241441][T16243] mem_cgroup_out_of_memory+0x279/0x350 [ 1579.241473][T16243] ? drain_obj_stock+0xed0/0xed0 [ 1579.241505][T16243] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 1579.241535][T16243] try_charge_memcg+0x8f7/0xde0 [ 1579.241562][T16243] ? __cfi_try_charge_memcg+0x10/0x10 [ 1579.241587][T16243] ? __alloc_pages_noprof+0x30d/0x6c0 [ 1579.241613][T16243] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1579.241637][T16243] ? __folio_batch_add_and_move+0x2ab/0x370 [ 1579.241661][T16243] __mem_cgroup_charge+0xf6/0x410 [ 1579.241688][T16243] ? __kasan_check_write+0x18/0x20 [ 1579.241715][T16243] ? _raw_spin_lock+0x8c/0x120 [ 1579.241736][T16243] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1579.241767][T16243] shmem_alloc_and_add_folio+0x86d/0x1050 [ 1579.241804][T16243] ? put_swap_device+0x130/0x130 [ 1579.241838][T16243] ? shmem_huge_global_enabled+0x2da/0x360 [ 1579.241873][T16243] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 1579.241905][T16243] ? __kasan_check_write+0x18/0x20 [ 1579.241933][T16243] ? _raw_spin_lock+0x8c/0x120 [ 1579.241955][T16243] shmem_get_folio_gfp+0x5f0/0x1380 [ 1579.241989][T16243] ? shmem_get_folio+0xc0/0xc0 [ 1579.242020][T16243] ? follow_page_pte+0xa5c/0xb90 [ 1579.242058][T16243] ? inode_to_bdi+0x6d/0x100 [ 1579.242090][T16243] shmem_write_begin+0xf4/0x270 [ 1579.242126][T16243] generic_perform_write+0x330/0x960 [ 1579.242155][T16243] ? __cfi_generic_perform_write+0x10/0x10 [ 1579.242182][T16243] ? down_write+0xe9/0x2a0 [ 1579.242212][T16243] ? file_update_time+0xa3/0x220 [ 1579.242237][T16243] shmem_file_write_iter+0x105/0x130 [ 1579.242261][T16243] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1579.242286][T16243] __kernel_write_iter+0x395/0x830 [ 1579.242314][T16243] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1579.242339][T16243] ? __cfi___kernel_write_iter+0x10/0x10 [ 1579.242368][T16243] ? get_dump_page+0x160/0x220 [ 1579.242390][T16243] ? __asan_memset+0x39/0x50 [ 1579.242417][T16243] ? iov_iter_bvec+0xc0/0x180 [ 1579.242451][T16243] dump_user_range+0xb06/0xdf0 [ 1579.242481][T16243] ? __cfi_dump_emit+0x10/0x10 [ 1579.242509][T16243] ? __cfi_dump_user_range+0x10/0x10 [ 1579.242537][T16243] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 1579.242567][T16243] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 1579.242599][T16243] elf_core_dump+0x2cd9/0x3810 [ 1579.242632][T16243] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 1579.242666][T16243] ? __cfi_elf_core_dump+0x10/0x10 [ 1579.242708][T16243] ? dump_interrupted+0xf0/0xf0 [ 1579.242735][T16243] ? filp_open+0x182/0x1d0 [ 1579.242758][T16243] ? 0xffffffffff600000 [ 1579.242776][T16243] ? freezing_slow_path+0x113/0x160 [ 1579.242803][T16243] do_coredump+0x1bfa/0x2bd0 [ 1579.242833][T16243] ? __cfi_do_coredump+0x10/0x10 [ 1579.242859][T16243] ? asm_exc_page_fault+0x2b/0x30 [ 1579.242894][T16243] ? __kasan_slab_free+0x6a/0x80 [ 1579.242925][T16243] ? kmem_cache_free+0x1c1/0x4c0 [ 1579.242961][T16243] get_signal+0x11fd/0x14f0 [ 1579.242989][T16243] arch_do_signal_or_restart+0x96/0x720 [ 1579.243020][T16243] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1579.243055][T16243] irqentry_exit_to_user_mode+0x4e/0xb0 [ 1579.243093][T16243] irqentry_exit+0x16/0x60 [ 1579.243121][T16243] exc_page_fault+0x66/0xc0 [ 1579.243151][T16243] asm_exc_page_fault+0x2b/0x30 [ 1579.243175][T16243] RIP: 0033:0x7f1d0358e931 [ 1579.243194][T16243] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1579.243214][T16243] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 1579.243236][T16243] RAX: 0000000000000000 RBX: 00007f1d037b6080 RCX: 00007f1d0358e929 [ 1579.243253][T16243] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 1579.243269][T16243] RBP: 00007f1d03610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1579.243285][T16243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1579.243299][T16243] R13: 0000000000000001 R14: 00007f1d037b6080 R15: 00007ffc75e90a88 [ 1579.243319][T16243] [ 1580.020394][T16243] memory: usage 272120kB, limit 307200kB, failcnt 37557 [ 1580.039849][ C0] net_ratelimit: 30011 callbacks suppressed [ 1580.039864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.058070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.070270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.082647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.094866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.107226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.119410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.131744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.143896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.156300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.287416][T16243] memory+swap: usage 390936kB, limit 9007199254740988kB, failcnt 0 [ 1580.336717][T16243] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1580.362668][T16243] Memory cgroup stats for /syz0: [ 1580.362831][T16243] cache 272248832 [ 1580.421248][T16243] rss 118784 [ 1580.432736][T16243] rss_huge 0 [ 1580.485693][T16243] shmem 272248832 [ 1580.517518][T16243] mapped_file 0 [ 1580.540777][T16243] dirty 0 [ 1580.551141][T16243] writeback 0 [ 1580.560515][T16243] workingset_refault_anon 31 [ 1580.575710][T16243] workingset_refault_file 0 [ 1580.585905][T16243] swap 127938560 [ 1580.592950][T16243] swapcached 57344 [ 1580.610592][T16243] pgpgin 627757 [ 1580.623915][T16243] pgpgout 563810 [ 1580.647165][T16243] pgfault 285250 [ 1580.659902][T16243] pgmajfault 2100 [ 1580.675713][T16243] inactive_anon 264335360 [ 1580.680100][T16243] active_anon 7901184 [ 1580.696847][T16243] inactive_file 0 [ 1580.704111][T16243] active_file 0 [ 1580.714191][T16243] unevictable 0 [ 1580.717696][T16243] hierarchical_memory_limit 314572800 [ 1580.734753][T16243] hierarchical_memsw_limit 9223372036854771712 [ 1580.746255][T16243] total_cache 272248832 [ 1580.750462][T16243] total_rss 118784 [ 1580.775793][T16243] total_rss_huge 0 [ 1580.780486][T16243] total_shmem 272248832 [ 1580.786565][T16243] total_mapped_file 0 [ 1580.797357][T16243] total_dirty 0 [ 1580.808118][T16243] total_writeback 0 [ 1580.812237][T16243] total_workingset_refault_anon 31 [ 1580.839012][T16243] total_workingset_refault_file 0 [ 1580.852379][T16243] total_swap 127938560 [ 1580.863880][T16243] total_swapcached 57344 [ 1580.874502][T16243] total_pgpgin 627757 [ 1580.883119][T16243] total_pgpgout 563810 [ 1580.902859][T16243] total_pgfault 285250 [ 1580.927761][T16243] total_pgmajfault 2100 [ 1580.949010][T16243] total_inactive_anon 264335360 [ 1580.972991][T16243] total_active_anon 7901184 [ 1580.994569][T16243] total_inactive_file 0 [ 1581.021707][T16243] total_active_file 0 [ 1581.039799][T16243] total_unevictable 0 [ 1581.057396][T16243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17686,pid=16212,uid=0 [ 1581.100876][T16243] Memory cgroup out of memory: OOM victim 16212 (syz.0.17686) is already exiting. Skip killing the task [ 1582.034090][T16861] /dev/loop0: Can't lookup blockdev [ 1582.041983][T16860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.042135][T16860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.375303][T16867] overlayfs: failed to clone lowerpath [ 1582.804870][T16877] netlink: 104 bytes leftover after parsing attributes in process `syz.5.17925'. [ 1583.280579][T16892] /dev/nullb0: Can't lookup blockdev [ 1583.483053][ T36] kauditd_printk_skb: 176 callbacks suppressed [ 1583.483074][ T36] audit: type=1400 audit(2000000078.971:178108): avc: denied { mounton } for pid=16881 comm="syz.0.17921" path="/339/bus" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1583.483640][T16891] /dev/loop0: Can't lookup blockdev [ 1583.510581][ T36] audit: type=1400 audit(2000000078.971:178109): avc: denied { read write } for pid=9618 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1583.623147][ T36] audit: type=1400 audit(2000000079.018:178110): avc: denied { read write open } for pid=9618 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1583.719084][ T36] audit: type=1400 audit(2000000079.018:178111): avc: denied { ioctl } for pid=9618 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1583.819089][ T36] audit: type=1400 audit(2000000079.083:178112): avc: denied { create } for pid=16903 comm="syz.5.17933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1583.899268][ T36] audit: type=1400 audit(2000000079.093:178113): avc: denied { read } for pid=16903 comm="syz.5.17933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1584.016773][ T36] audit: type=1400 audit(2000000079.093:178114): avc: denied { mounton } for pid=16903 comm="syz.5.17933" path="/593/bus" dev="tmpfs" ino=3262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1584.112981][ T36] audit: type=1400 audit(2000000079.093:178115): avc: denied { ioctl } for pid=16903 comm="syz.5.17933" path="socket:[368136]" dev="sockfs" ino=368136 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1584.179015][T16916] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1584.209255][ T36] audit: type=1400 audit(2000000079.093:178116): avc: denied { create } for pid=16903 comm="syz.5.17933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1584.230955][T16916] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1584.237840][T16914] /dev/rnullb0: Can't lookup blockdev [ 1584.267986][ T36] audit: type=1400 audit(2000000079.149:178117): avc: denied { read write } for pid=9618 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.352884][T16259] syz.0.17686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1584.604399][T16259] CPU: 1 UID: 0 PID: 16259 Comm: syz.0.17686 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 1584.604440][T16259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1584.604455][T16259] Call Trace: [ 1584.604464][T16259] [ 1584.604473][T16259] __dump_stack+0x21/0x30 [ 1584.604507][T16259] dump_stack_lvl+0x10c/0x190 [ 1584.604534][T16259] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1584.604561][T16259] ? ___ratelimit+0x3f7/0x5a0 [ 1584.604588][T16259] dump_stack+0x19/0x20 [ 1584.604614][T16259] dump_header+0xd7/0x490 [ 1584.604648][T16259] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 1584.604673][T16259] oom_kill_process+0x4c0/0x7e0 [ 1584.604706][T16259] ? sched_clock_cpu+0x75/0x400 [ 1584.604739][T16259] out_of_memory+0x7ee/0xbd0 [ 1584.604761][T16259] ? __cfi_out_of_memory+0x10/0x10 [ 1584.604782][T16259] ? mutex_lock_killable+0x92/0x1c0 [ 1584.604815][T16259] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1584.604847][T16259] mem_cgroup_out_of_memory+0x279/0x350 [ 1584.604878][T16259] ? drain_obj_stock+0xed0/0xed0 [ 1584.604909][T16259] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 1584.604940][T16259] try_charge_memcg+0x8f7/0xde0 [ 1584.604972][T16259] ? __cfi_try_charge_memcg+0x10/0x10 [ 1584.604997][T16259] ? __alloc_pages_noprof+0x30d/0x6c0 [ 1584.605021][T16259] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1584.605044][T16259] ? __folio_batch_add_and_move+0x2ab/0x370 [ 1584.605067][T16259] __mem_cgroup_charge+0xf6/0x410 [ 1584.605099][T16259] ? __kasan_check_write+0x18/0x20 [ 1584.605127][T16259] ? _raw_spin_lock+0x8c/0x120 [ 1584.605147][T16259] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1584.605177][T16259] shmem_alloc_and_add_folio+0x86d/0x1050 [ 1584.605221][T16259] ? put_swap_device+0x130/0x130 [ 1584.605255][T16259] ? shmem_huge_global_enabled+0x2da/0x360 [ 1584.605289][T16259] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 1584.605323][T16259] ? __kasan_check_write+0x18/0x20 [ 1584.605349][T16259] ? _raw_spin_lock+0x8c/0x120 [ 1584.605371][T16259] shmem_get_folio_gfp+0x5f0/0x1380 [ 1584.605407][T16259] ? shmem_get_folio+0xc0/0xc0 [ 1584.605437][T16259] ? follow_page_pte+0xa5c/0xb90 [ 1584.605460][T16259] ? inode_to_bdi+0x6d/0x100 [ 1584.605486][T16259] shmem_write_begin+0xf4/0x270 [ 1584.605520][T16259] generic_perform_write+0x330/0x960 [ 1584.605550][T16259] ? __cfi_generic_perform_write+0x10/0x10 [ 1584.605576][T16259] ? down_write+0xe9/0x2a0 [ 1584.605606][T16259] ? file_update_time+0xa3/0x220 [ 1584.605631][T16259] shmem_file_write_iter+0x105/0x130 [ 1584.605655][T16259] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1584.605679][T16259] __kernel_write_iter+0x395/0x830 [ 1584.605707][T16259] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1584.605739][T16259] ? __cfi___kernel_write_iter+0x10/0x10 [ 1584.605768][T16259] ? get_dump_page+0x160/0x220 [ 1584.605790][T16259] ? __asan_memset+0x39/0x50 [ 1584.605817][T16259] ? iov_iter_bvec+0xc0/0x180 [ 1584.605855][T16259] dump_user_range+0xb06/0xdf0 [ 1584.605885][T16259] ? __cfi_dump_emit+0x10/0x10 [ 1584.605912][T16259] ? __cfi_dump_user_range+0x10/0x10 [ 1584.605941][T16259] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 1584.605977][T16259] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 1584.606009][T16259] elf_core_dump+0x2cd9/0x3810 [ 1584.606046][T16259] ? __cfi_elf_core_dump+0x10/0x10 [ 1584.606092][T16259] ? dump_interrupted+0xf0/0xf0 [ 1584.606119][T16259] ? filp_open+0x182/0x1d0 [ 1584.606142][T16259] ? 0xffffffffff600000 [ 1584.606159][T16259] ? freezing_slow_path+0x113/0x160 [ 1584.606187][T16259] do_coredump+0x1bfa/0x2bd0 [ 1584.606217][T16259] ? __cfi_do_coredump+0x10/0x10 [ 1584.606243][T16259] ? asm_exc_page_fault+0x2b/0x30 [ 1584.606278][T16259] ? __kasan_slab_free+0x6a/0x80 [ 1584.606311][T16259] ? kmem_cache_free+0x1c1/0x4c0 [ 1584.606341][T16259] get_signal+0x11fd/0x14f0 [ 1584.606369][T16259] arch_do_signal_or_restart+0x96/0x720 [ 1584.606400][T16259] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1584.606435][T16259] irqentry_exit_to_user_mode+0x4e/0xb0 [ 1584.606465][T16259] irqentry_exit+0x16/0x60 [ 1584.606494][T16259] exc_page_fault+0x66/0xc0 [ 1584.606522][T16259] asm_exc_page_fault+0x2b/0x30 [ 1584.606546][T16259] RIP: 0033:0x7f1d0358e931 [ 1584.606565][T16259] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1584.606585][T16259] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 1584.606607][T16259] RAX: 0000000000000000 RBX: 00007f1d037b6080 RCX: 00007f1d0358e929 [ 1584.606623][T16259] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 1584.606638][T16259] RBP: 00007f1d03610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1584.606653][T16259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1584.606667][T16259] R13: 0000000000000001 R14: 00007f1d037b6080 R15: 00007ffc75e90a88 [ 1584.606686][T16259] [ 1585.396010][ C0] net_ratelimit: 29255 callbacks suppressed [ 1585.396036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.414145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.426434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.438636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.450935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.463101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.475436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.487584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.499990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.512191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.651096][T16927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.699090][T16927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.797270][T16259] memory: usage 307200kB, limit 307200kB, failcnt 43727 [ 1585.808071][T16259] memory+swap: usage 432048kB, limit 9007199254740988kB, failcnt 0 [ 1585.826905][T16259] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1585.844773][T16259] Memory cgroup stats for /syz0: [ 1585.844992][T16259] cache 314146816 [ 1585.858259][T16259] rss 294912 [ 1585.866846][T16259] rss_huge 0 [ 1585.876976][T16259] shmem 314146816 [ 1585.888551][T16259] mapped_file 0 [ 1585.893241][T16259] dirty 0 [ 1585.898888][T16259] writeback 0 [ 1585.909225][T16259] workingset_refault_anon 74 [ 1585.919006][T16259] workingset_refault_file 0 [ 1585.923589][T16259] swap 127844352 [ 1585.938094][T16259] swapcached 147456 [ 1585.945645][T16259] pgpgin 668823 [ 1585.953832][T16259] pgpgout 594578 [ 1585.957425][T16259] pgfault 287351 [ 1585.970763][T16259] pgmajfault 2127 [ 1585.983864][T16259] inactive_anon 146235392 [ 1586.016963][T16259] active_anon 168337408 [ 1586.021242][T16259] inactive_file 0 [ 1586.024898][T16259] active_file 0 [ 1586.056697][T16259] unevictable 0 [ 1586.060394][T16259] hierarchical_memory_limit 314572800 [ 1586.065964][T16259] hierarchical_memsw_limit 9223372036854771712 [ 1586.087215][T16259] total_cache 314146816 [ 1586.097978][T16259] total_rss 294912 [ 1586.108032][T16259] total_rss_huge 0 [ 1586.117252][T16259] total_shmem 314146816 [ 1586.122005][T16259] total_mapped_file 0 [ 1586.127631][T16259] total_dirty 0 [ 1586.131425][T16259] total_writeback 0 [ 1586.136415][T16259] total_workingset_refault_anon 74 [ 1586.141659][T16259] total_workingset_refault_file 0 [ 1586.147612][T16259] total_swap 127844352 [ 1586.153203][T16259] total_swapcached 147456 [ 1586.160043][T16259] total_pgpgin 668823 [ 1586.164275][T16259] total_pgpgout 594578 [ 1586.171135][T16259] total_pgfault 287351 [ 1586.175622][T16259] total_pgmajfault 2127 [ 1586.180950][T16259] total_inactive_anon 146235392 [ 1586.185980][T16259] total_active_anon 168337408 [ 1586.192044][T16259] total_inactive_file 0 [ 1586.197058][T16259] total_active_file 0 [ 1586.202706][T16259] total_unevictable 0 [ 1586.209199][T16259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17686,pid=16226,uid=0 [ 1586.236123][T16259] Memory cgroup out of memory: Killed process 16226 (syz.0.17686) total-vm:90096kB, anon-rss:944kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 1586.293072][T16251] syz.0.17686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1586.337745][T23127] tipc: Left network mode [ 1586.348615][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.0.17686 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 1586.348654][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1586.348669][T16251] Call Trace: [ 1586.348677][T16251] [ 1586.348686][T16251] __dump_stack+0x21/0x30 [ 1586.348719][T16251] dump_stack_lvl+0x10c/0x190 [ 1586.348746][T16251] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1586.348772][T16251] ? ___ratelimit+0x3f7/0x5a0 [ 1586.348800][T16251] dump_stack+0x19/0x20 [ 1586.348825][T16251] dump_header+0xd7/0x490 [ 1586.348865][T16251] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 1586.348889][T16251] oom_kill_process+0x4c0/0x7e0 [ 1586.348910][T16251] ? sched_clock_cpu+0x75/0x400 [ 1586.348938][T16251] out_of_memory+0x7ee/0xbd0 [ 1586.348958][T16251] ? __cfi_out_of_memory+0x10/0x10 [ 1586.348979][T16251] ? mutex_lock_killable+0x104/0x1c0 [ 1586.349008][T16251] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1586.349039][T16251] mem_cgroup_out_of_memory+0x279/0x350 [ 1586.349070][T16251] ? drain_obj_stock+0xed0/0xed0 [ 1586.349102][T16251] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 1586.349132][T16251] try_charge_memcg+0x8f7/0xde0 [ 1586.349158][T16251] ? __cfi_try_charge_memcg+0x10/0x10 [ 1586.349183][T16251] ? __alloc_pages_noprof+0x30d/0x6c0 [ 1586.349208][T16251] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1586.349234][T16251] __mem_cgroup_charge+0xf6/0x410 [ 1586.349262][T16251] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1586.349292][T16251] shmem_alloc_and_add_folio+0x86d/0x1050 [ 1586.349330][T16251] ? put_swap_device+0x130/0x130 [ 1586.349364][T16251] ? shmem_huge_global_enabled+0x2da/0x360 [ 1586.349398][T16251] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 1586.349430][T16251] ? __kasan_check_write+0x18/0x20 [ 1586.349457][T16251] ? _raw_spin_lock+0x8c/0x120 [ 1586.349478][T16251] shmem_get_folio_gfp+0x5f0/0x1380 [ 1586.349513][T16251] ? shmem_get_folio+0xc0/0xc0 [ 1586.349543][T16251] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 1586.349570][T16251] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 1586.349596][T16251] ? inode_to_bdi+0x6d/0x100 [ 1586.349623][T16251] shmem_write_begin+0xf4/0x270 [ 1586.349657][T16251] generic_perform_write+0x330/0x960 [ 1586.349687][T16251] ? __cfi_generic_perform_write+0x10/0x10 [ 1586.349713][T16251] ? down_write+0xe9/0x2a0 [ 1586.349742][T16251] ? mnt_get_write_access_file+0x1af/0x3b0 [ 1586.349766][T16251] ? mnt_put_write_access_file+0xc2/0x100 [ 1586.349790][T16251] ? file_update_time+0x1ef/0x220 [ 1586.349815][T16251] shmem_file_write_iter+0x105/0x130 [ 1586.349839][T16251] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1586.349871][T16251] __kernel_write_iter+0x395/0x830 [ 1586.349900][T16251] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1586.349925][T16251] ? __cfi___kernel_write_iter+0x10/0x10 [ 1586.349953][T16251] ? get_dump_page+0x160/0x220 [ 1586.349976][T16251] ? __asan_memset+0x39/0x50 [ 1586.350002][T16251] ? iov_iter_bvec+0xc0/0x180 [ 1586.350035][T16251] dump_user_range+0xb06/0xdf0 [ 1586.350066][T16251] ? __cfi_dump_emit+0x10/0x10 [ 1586.350093][T16251] ? __cfi_dump_user_range+0x10/0x10 [ 1586.350122][T16251] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 1586.350152][T16251] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 1586.350183][T16251] elf_core_dump+0x2cd9/0x3810 [ 1586.350221][T16251] ? __cfi_elf_core_dump+0x10/0x10 [ 1586.350263][T16251] ? dump_interrupted+0xf0/0xf0 [ 1586.350289][T16251] ? filp_open+0x182/0x1d0 [ 1586.350311][T16251] ? 0xffffffffff600000 [ 1586.350328][T16251] ? freezing_slow_path+0x113/0x160 [ 1586.350355][T16251] do_coredump+0x1bfa/0x2bd0 [ 1586.350386][T16251] ? __cfi_do_coredump+0x10/0x10 [ 1586.350411][T16251] ? asm_exc_page_fault+0x2b/0x30 [ 1586.350445][T16251] ? __kasan_slab_free+0x6a/0x80 [ 1586.350478][T16251] ? kmem_cache_free+0x1c1/0x4c0 [ 1586.350508][T16251] get_signal+0x11fd/0x14f0 [ 1586.350536][T16251] arch_do_signal_or_restart+0x96/0x720 [ 1586.350567][T16251] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1586.350600][T16251] irqentry_exit_to_user_mode+0x4e/0xb0 [ 1586.350631][T16251] irqentry_exit+0x16/0x60 [ 1586.350660][T16251] exc_page_fault+0x66/0xc0 [ 1586.350689][T16251] asm_exc_page_fault+0x2b/0x30 [ 1586.350713][T16251] RIP: 0033:0x7f1d0358e931 [ 1586.350732][T16251] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1586.350752][T16251] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 1586.350773][T16251] RAX: 0000000000000000 RBX: 00007f1d037b6080 RCX: 00007f1d0358e929 [ 1586.350790][T16251] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 1586.350806][T16251] RBP: 00007f1d03610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1586.350820][T16251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1586.350834][T16251] R13: 0000000000000001 R14: 00007f1d037b6080 R15: 00007ffc75e90a88 [ 1586.350859][T16251] [ 1586.350868][T16251] memory: usage 307200kB, limit 307200kB, failcnt 43878 [ 1586.449983][T16940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.887056][T16251] memory+swap: usage 413576kB, limit 9007199254740988kB, failcnt 0 [ 1586.910303][T16251] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1586.968754][T16251] Memory cgroup stats for /syz0: [ 1586.968917][T16251] cache 306585600 [ 1586.977538][T16251] rss 290816 [ 1587.061723][T16251] rss_huge 0 [ 1587.065174][T23127] veth0_vlan: left promiscuous mode [ 1587.149104][T16251] shmem 306585600 [ 1587.152793][T16251] mapped_file 0 [ 1587.156270][T16251] dirty 0 [ 1587.159241][T16251] writeback 0 [ 1587.202762][T16940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.257806][T16251] workingset_refault_anon 74 [ 1587.331411][T16251] workingset_refault_file 0 [ 1587.394844][T16251] swap 113573888 [ 1587.455160][T16251] swapcached 147456 [ 1587.459045][T16251] pgpgin 669996 [ 1587.473588][T16251] pgpgout 597567 [ 1587.516877][T16251] pgfault 287425 [ 1587.520487][T16251] pgmajfault 2127 [ 1587.566049][T16251] inactive_anon 144924672 [ 1587.570521][T16251] active_anon 162082816 [ 1587.591464][T16251] inactive_file 0 [ 1587.595207][T16251] active_file 0 [ 1587.622143][T16251] unevictable 0 [ 1587.625684][T16251] hierarchical_memory_limit 314572800 [ 1587.652638][T16251] hierarchical_memsw_limit 9223372036854771712 [ 1587.691995][T16251] total_cache 306585600 [ 1587.715709][T16251] total_rss 290816 [ 1587.735005][T16251] total_rss_huge 0 [ 1587.754223][T16251] total_shmem 306585600 [ 1587.763015][T16958] overlayfs: failed to clone upperpath [ 1587.779588][T16251] total_mapped_file 0 [ 1587.808858][T16251] total_dirty 0 [ 1587.870571][T16251] total_writeback 0 [ 1587.874444][T16251] total_workingset_refault_anon 74 [ 1587.941834][T16251] total_workingset_refault_file 0 [ 1587.946918][T16251] total_swap 113573888 [ 1588.069618][T16251] total_swapcached 147456 [ 1588.135495][T16251] total_pgpgin 669996 [ 1588.166582][T16251] total_pgpgout 597567 [ 1588.170710][T16251] total_pgfault 287425 [ 1588.177706][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.177854][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.231963][T16965] netlink: 2885 bytes leftover after parsing attributes in process `syz.5.17956'. [ 1588.284503][T16251] total_pgmajfault 2127 [ 1588.288729][T16251] total_inactive_anon 144924672 [ 1588.327755][T16251] total_active_anon 162082816 [ 1588.344171][T16251] total_inactive_file 0 [ 1588.360007][T16251] total_active_file 0 [ 1588.378360][T16251] total_unevictable 0 [ 1588.411978][T16251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17686,pid=16260,uid=0 [ 1588.499912][T16251] Memory cgroup out of memory: Killed process 16260 (syz.0.17686) total-vm:90096kB, anon-rss:944kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 1589.534299][ T36] kauditd_printk_skb: 182 callbacks suppressed [ 1589.534319][ T36] audit: type=1400 audit(2000000084.630:178300): avc: denied { create } for pid=16996 comm="syz.6.17966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1589.573499][T16998] netlink: 148 bytes leftover after parsing attributes in process `syz.6.17966'. [ 1589.599139][ T36] audit: type=1400 audit(2000000084.658:178301): avc: denied { create } for pid=16996 comm="syz.6.17966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1589.661437][ T36] audit: type=1400 audit(2000000084.658:178302): avc: denied { write } for pid=16996 comm="syz.6.17966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1589.724022][ T36] audit: type=1400 audit(2000000084.658:178303): avc: denied { nlmsg_write } for pid=16996 comm="syz.6.17966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1589.819191][ T36] audit: type=1400 audit(2000000084.892:178304): avc: denied { create } for pid=17000 comm="syz.6.17968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1589.875287][ T36] audit: type=1400 audit(2000000084.892:178305): avc: denied { setopt } for pid=17000 comm="syz.6.17968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1589.939409][ T36] audit: type=1400 audit(2000000084.892:178306): avc: denied { create } for pid=17000 comm="syz.6.17968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1590.108554][ T36] audit: type=1400 audit(2000000085.163:178307): avc: denied { create } for pid=17003 comm="syz.0.17969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1590.265680][ T36] audit: type=1400 audit(2000000085.313:178308): avc: denied { create } for pid=17010 comm="syz.2.17970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1590.324149][ T36] audit: type=1400 audit(2000000085.332:178309): avc: denied { create } for pid=17010 comm="syz.2.17970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1590.751834][ C0] net_ratelimit: 32397 callbacks suppressed [ 1590.751860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.759896][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17976'. [ 1590.770220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.791067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.803443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.809592][T17023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17976'. [ 1590.815648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.836924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.842378][T17023] netlink: 'syz.2.17976': attribute type 6 has an invalid length. [ 1590.849141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.869168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.880819][T17023] netlink: 'syz.2.17976': attribute type 5 has an invalid length. [ 1590.881389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.899531][T17023] netlink: 'syz.2.17976': attribute type 4 has an invalid length. [ 1590.901388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.642935][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.692831][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.326401][T16235] syz.0.17686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1592.527670][T16235] CPU: 1 UID: 0 PID: 16235 Comm: syz.0.17686 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 1592.527712][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1592.527727][T16235] Call Trace: [ 1592.527736][T16235] [ 1592.527746][T16235] __dump_stack+0x21/0x30 [ 1592.527779][T16235] dump_stack_lvl+0x10c/0x190 [ 1592.527807][T16235] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1592.527834][T16235] ? ___ratelimit+0x3f7/0x5a0 [ 1592.527861][T16235] dump_stack+0x19/0x20 [ 1592.527887][T16235] dump_header+0xd7/0x490 [ 1592.527922][T16235] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 1592.527948][T16235] oom_kill_process+0x4c0/0x7e0 [ 1592.527969][T16235] ? sched_clock_cpu+0x75/0x400 [ 1592.527997][T16235] out_of_memory+0x7ee/0xbd0 [ 1592.528019][T16235] ? __cfi_out_of_memory+0x10/0x10 [ 1592.528040][T16235] ? mutex_lock_killable+0x92/0x1c0 [ 1592.528070][T16235] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1592.528102][T16235] mem_cgroup_out_of_memory+0x279/0x350 [ 1592.528163][T16235] ? drain_obj_stock+0xed0/0xed0 [ 1592.528196][T16235] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 1592.528227][T16235] try_charge_memcg+0x8f7/0xde0 [ 1592.528254][T16235] ? __cfi_try_charge_memcg+0x10/0x10 [ 1592.528280][T16235] ? __alloc_pages_noprof+0x30d/0x6c0 [ 1592.528305][T16235] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1592.528329][T16235] ? __folio_batch_add_and_move+0x2ab/0x370 [ 1592.528354][T16235] __mem_cgroup_charge+0xf6/0x410 [ 1592.528382][T16235] ? __kasan_check_write+0x18/0x20 [ 1592.528410][T16235] ? _raw_spin_lock+0x8c/0x120 [ 1592.528439][T16235] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1592.528470][T16235] shmem_alloc_and_add_folio+0x86d/0x1050 [ 1592.528509][T16235] ? put_swap_device+0x130/0x130 [ 1592.528545][T16235] ? shmem_huge_global_enabled+0x2da/0x360 [ 1592.528579][T16235] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 1592.528612][T16235] ? __kasan_check_write+0x18/0x20 [ 1592.528637][T16235] ? _raw_spin_lock+0x8c/0x120 [ 1592.528655][T16235] shmem_get_folio_gfp+0x5f0/0x1380 [ 1592.528685][T16235] ? shmem_get_folio+0xc0/0xc0 [ 1592.528717][T16235] ? follow_page_pte+0xa5c/0xb90 [ 1592.528739][T16235] ? inode_to_bdi+0x6d/0x100 [ 1592.528763][T16235] shmem_write_begin+0xf4/0x270 [ 1592.528794][T16235] generic_perform_write+0x330/0x960 [ 1592.528822][T16235] ? __cfi_generic_perform_write+0x10/0x10 [ 1592.528847][T16235] ? down_write+0xe9/0x2a0 [ 1592.528877][T16235] ? file_update_time+0xa3/0x220 [ 1592.528901][T16235] shmem_file_write_iter+0x105/0x130 [ 1592.528926][T16235] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1592.528949][T16235] __kernel_write_iter+0x395/0x830 [ 1592.528977][T16235] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1592.529001][T16235] ? __cfi___kernel_write_iter+0x10/0x10 [ 1592.529028][T16235] ? get_dump_page+0x160/0x220 [ 1592.529051][T16235] ? __asan_memset+0x39/0x50 [ 1592.529076][T16235] ? iov_iter_bvec+0xc0/0x180 [ 1592.529111][T16235] dump_user_range+0xb06/0xdf0 [ 1592.529141][T16235] ? __cfi_dump_emit+0x10/0x10 [ 1592.529168][T16235] ? __cfi_dump_user_range+0x10/0x10 [ 1592.529197][T16235] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 1592.529226][T16235] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 1592.529258][T16235] elf_core_dump+0x2cd9/0x3810 [ 1592.529296][T16235] ? __cfi_elf_core_dump+0x10/0x10 [ 1592.529338][T16235] ? dump_interrupted+0xf0/0xf0 [ 1592.529365][T16235] ? filp_open+0x182/0x1d0 [ 1592.529387][T16235] ? 0xffffffffff600000 [ 1592.529405][T16235] ? freezing_slow_path+0x113/0x160 [ 1592.529440][T16235] do_coredump+0x1bfa/0x2bd0 [ 1592.529471][T16235] ? __cfi_do_coredump+0x10/0x10 [ 1592.529497][T16235] ? asm_exc_page_fault+0x2b/0x30 [ 1592.529532][T16235] ? __kasan_slab_free+0x6a/0x80 [ 1592.529563][T16235] ? kmem_cache_free+0x1c1/0x4c0 [ 1592.529593][T16235] get_signal+0x11fd/0x14f0 [ 1592.529621][T16235] arch_do_signal_or_restart+0x96/0x720 [ 1592.529653][T16235] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1592.529688][T16235] irqentry_exit_to_user_mode+0x4e/0xb0 [ 1592.529719][T16235] irqentry_exit+0x16/0x60 [ 1592.529748][T16235] exc_page_fault+0x66/0xc0 [ 1592.529776][T16235] asm_exc_page_fault+0x2b/0x30 [ 1592.529801][T16235] RIP: 0033:0x7f1d0358e931 [ 1592.529820][T16235] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1592.529841][T16235] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 1592.529864][T16235] RAX: 0000000000000000 RBX: 00007f1d037b6080 RCX: 00007f1d0358e929 [ 1592.529881][T16235] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 1592.529898][T16235] RBP: 00007f1d03610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1592.529913][T16235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1592.529927][T16235] R13: 0000000000000001 R14: 00007f1d037b6080 R15: 00007ffc75e90a88 [ 1592.529947][T16235] [ 1593.094213][T16235] memory: usage 299076kB, limit 307200kB, failcnt 50419 [ 1593.101215][T16235] memory+swap: usage 423876kB, limit 9007199254740988kB, failcnt 0 [ 1593.109216][T16235] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1593.116421][T16235] Memory cgroup stats for /syz0: [ 1593.116577][T16235] cache 305844224 [ 1593.125222][T16235] rss 192512 [ 1593.128437][T16235] rss_huge 0 [ 1593.131650][T16235] shmem 305844224 [ 1593.135304][T16235] mapped_file 0 [ 1593.139510][T16235] dirty 0 [ 1593.159490][T16235] writeback 0 [ 1593.162888][T16235] workingset_refault_anon 99 [ 1593.167581][T16235] workingset_refault_file 0 [ 1593.326712][ T66] usb 6-1: USB disconnect, device number 14 [ 1593.448710][T16235] swap 127791104 [ 1593.452319][T16235] swapcached 200704 [ 1593.514834][T16235] pgpgin 721549 [ 1593.518359][T16235] pgpgout 649358 [ 1593.549623][T16235] pgfault 289097 [ 1593.563781][T16235] pgmajfault 2151 [ 1593.576751][T16235] inactive_anon 237539328 [ 1593.590395][T16235] active_anon 68620288 [ 1593.605388][T16235] inactive_file 0 [ 1593.614900][T16235] active_file 0 [ 1593.632751][T16235] unevictable 0 [ 1593.648117][T16235] hierarchical_memory_limit 314572800 [ 1593.667560][T16235] hierarchical_memsw_limit 9223372036854771712 [ 1593.685666][T16235] total_cache 305844224 [ 1593.697631][T16235] total_rss 192512 [ 1593.707200][T16235] total_rss_huge 0 [ 1593.715810][T16235] total_shmem 305844224 [ 1593.725384][T16235] total_mapped_file 0 [ 1593.734050][T16235] total_dirty 0 [ 1593.742356][T16235] total_writeback 0 [ 1593.750874][T16235] total_workingset_refault_anon 99 [ 1593.762616][T16235] total_workingset_refault_file 0 [ 1593.774184][T16235] total_swap 127791104 [ 1593.784038][T16235] total_swapcached 200704 [ 1593.793354][T16235] total_pgpgin 721549 [ 1593.804357][T16235] total_pgpgout 649358 [ 1593.815500][T16235] total_pgfault 289097 [ 1593.824097][T16235] total_pgmajfault 2151 [ 1593.834125][T16235] total_inactive_anon 237539328 [ 1593.844880][T16235] total_active_anon 68620288 [ 1593.855620][T16235] total_inactive_file 0 [ 1593.863919][T16235] total_active_file 0 [ 1593.873492][T16235] total_unevictable 0 [ 1593.882230][T16235] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17686,pid=16217,uid=0 [ 1593.916313][T16235] Memory cgroup out of memory: Killed process 16217 (syz.0.17686) total-vm:90096kB, anon-rss:944kB, file-rss:58496kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 1594.466919][ T13] bridge_slave_1: left allmulticast mode [ 1594.478477][ T13] bridge_slave_1: left promiscuous mode [ 1594.491216][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.515288][ T13] bridge_slave_0: left allmulticast mode [ 1594.525647][ T13] bridge_slave_0: left promiscuous mode [ 1594.531407][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.718858][ T13] tipc: Left network mode [ 1594.912527][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 1594.912547][ T36] audit: type=1400 audit(2000000089.663:178381): avc: denied { create } for pid=17074 comm="syz.6.17994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1594.981366][ T13] veth1_macvtap: left promiscuous mode [ 1595.000903][ T13] veth0_vlan: left promiscuous mode [ 1595.031581][ T36] audit: type=1400 audit(2000000089.775:178382): avc: denied { relabelfrom } for pid=17070 comm="syz.2.17993" name="" dev="pipefs" ino=368577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1595.206521][ T36] audit: type=1400 audit(2000000089.934:178383): avc: denied { name_bind } for pid=17082 comm="syz.2.17995" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1595.289980][ T36] audit: type=1400 audit(2000000089.953:178384): avc: denied { node_bind } for pid=17082 comm="syz.2.17995" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1595.346862][T17077] 8021q: VLANs not supported on wg1 [ 1595.387551][ T36] audit: type=1400 audit(2000000089.953:178385): avc: denied { name_bind } for pid=17082 comm="syz.2.17995" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1595.453913][ T36] audit: type=1400 audit(2000000089.962:178386): avc: denied { node_bind } for pid=17082 comm="syz.2.17995" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1595.502026][ T36] audit: type=1400 audit(2000000089.971:178387): avc: denied { create } for pid=17082 comm="syz.2.17995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.533441][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.541252][ T36] audit: type=1400 audit(2000000089.971:178388): avc: denied { bind } for pid=17082 comm="syz.2.17995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.541292][ T36] audit: type=1400 audit(2000000089.981:178389): avc: denied { listen } for pid=17082 comm="syz.2.17995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.541322][ T36] audit: type=1400 audit(2000000089.981:178390): avc: denied { create } for pid=17082 comm="syz.2.17995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.667465][T17055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.680280][T17055] bridge_slave_0: entered allmulticast mode [ 1595.693321][T17055] bridge_slave_0: entered promiscuous mode [ 1595.709500][T17055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.727633][T17055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.755119][T17055] bridge_slave_1: entered allmulticast mode [ 1595.772537][T17055] bridge_slave_1: entered promiscuous mode [ 1596.107877][ C0] net_ratelimit: 29355 callbacks suppressed [ 1596.107924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.126041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.138340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.150518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.162831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.175104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.187424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.199598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.211881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.224074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.257897][ T1907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.265033][ T1907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.293771][ T1907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.300930][ T1907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.769201][T17055] veth0_vlan: entered promiscuous mode [ 1596.805882][T17104] overlayfs: failed to clone upperpath [ 1596.843236][T17104] overlayfs: failed to clone lowerpath [ 1596.935082][T17055] veth1_macvtap: entered promiscuous mode [ 1597.411893][T17113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17113 comm=syz.0.18008 [ 1597.447935][T17113] tipc: Enabling of bearer rejected, failed to enable media [ 1601.463859][ C1] net_ratelimit: 71146 callbacks suppressed [ 1601.463884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.464090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.469930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.482067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.494143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.506309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.518013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.529983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.542157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.554230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1603.976105][ C1] sched: DL replenish lagged too much [ 1606.819897][ C1] net_ratelimit: 92305 callbacks suppressed [ 1606.819921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.819961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.825974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.837976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.850070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.862108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.873797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.885755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.897858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.909919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.175884][ C1] net_ratelimit: 92820 callbacks suppressed [ 1612.175908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.176039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.182041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.194064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.206138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.218256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.229949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.241877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.254036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.266035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.531830][ C1] net_ratelimit: 92391 callbacks suppressed [ 1617.531855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.532041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.537908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.549946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.562022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.574075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.585776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.597754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.609825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1617.621873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.887825][ C1] net_ratelimit: 93455 callbacks suppressed [ 1622.887850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.888118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.893908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.905916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.917986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.930032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.941884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.953699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.965762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.978032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.243798][ C1] net_ratelimit: 92986 callbacks suppressed [ 1628.243822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.243851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.249919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.262213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.274021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.286122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.298094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.310342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.322598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1628.333905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.468842][ T36] kauditd_printk_skb: 196 callbacks suppressed [ 1631.468864][ T36] audit: type=1400 audit(2000000123.851:178587): avc: denied { execmem } for pid=17142 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1631.608222][T30452] usb 3-1: USB disconnect, device number 122 [ 1632.143413][ T36] audit: type=1400 audit(2000000123.898:178588): avc: denied { execmem } for pid=17144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1633.599786][ C1] net_ratelimit: 89369 callbacks suppressed [ 1633.599810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.599950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.605887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.617883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.629974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.642013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.653738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.665709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.677771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.690122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1637.181921][ T36] audit: type=1400 audit(2000000123.973:178589): avc: denied { execmem } for pid=17145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1638.955792][ C0] net_ratelimit: 92295 callbacks suppressed [ 1638.955817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1638.955905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1638.962088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1638.973775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1638.985753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1638.997832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.009916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.021639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.033657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.045727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.358404][ T36] audit: type=1400 audit(2000000132.158:178590): avc: denied { execmem } for pid=17146 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1642.956223][ T888] usb 7-1: USB disconnect, device number 86 [ 1644.311811][ C1] net_ratelimit: 92008 callbacks suppressed [ 1644.311837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.311924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.317938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.329791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.341843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.354047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.365768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.377579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.389603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.401860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.970018][ T36] audit: type=1400 audit(2000000137.340:178591): avc: denied { read } for pid=17148 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1646.767333][ T36] audit: type=1400 audit(2000000137.808:178592): avc: denied { read open } for pid=17148 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1649.667771][ C1] net_ratelimit: 91733 callbacks suppressed [ 1649.667795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.667855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.673896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.685733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.697757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.709950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.721706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.733517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.745533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.757703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.014384][ T36] audit: type=1400 audit(2000000137.882:178593): avc: denied { mounton } for pid=17148 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1654.812426][ T36] audit: type=1400 audit(2000000137.892:178594): avc: denied { read } for pid=17149 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1654.934468][ T36] audit: type=1400 audit(2000000137.892:178595): avc: denied { read open } for pid=17149 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1655.023810][ C1] net_ratelimit: 92967 callbacks suppressed [ 1655.023832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.024009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.029940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.041976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.054077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.066095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.077785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.089750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.101829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.113872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.169663][ T36] audit: type=1400 audit(2000000137.892:178596): avc: denied { mounton } for pid=17149 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1655.336733][ T36] audit: type=1400 audit(2000000138.041:178597): avc: denied { read } for pid=17150 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1655.432258][ T36] audit: type=1400 audit(2000000138.041:178598): avc: denied { read open } for pid=17150 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1655.518383][ T36] audit: type=1400 audit(2000000138.041:178599): avc: denied { mounton } for pid=17150 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1655.583707][ T36] audit: type=1400 audit(2000000138.051:178600): avc: denied { sys_module } for pid=17148 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1655.608798][ T36] audit: type=1400 audit(2000000138.238:178601): avc: denied { sys_module } for pid=17149 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1655.645391][ T36] audit: type=1400 audit(2000000138.341:178602): avc: denied { sys_module } for pid=17150 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1655.698750][ T36] audit: type=1400 audit(2000000145.787:178603): avc: denied { read } for pid=17152 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1660.379819][ C1] net_ratelimit: 95731 callbacks suppressed [ 1660.379843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.380005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.385884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.397902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.409977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1660.422926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.433928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.445877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.457887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1660.470168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.735819][ C1] net_ratelimit: 98788 callbacks suppressed [ 1665.735844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1665.735992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.741924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.753895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.765930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.778146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.789892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1665.801693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.813731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1665.826120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.091785][ C1] net_ratelimit: 98741 callbacks suppressed [ 1671.091810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1671.092081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.097888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.109873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.121907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.134647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.145894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1671.157764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.169845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.182017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.447802][ C1] net_ratelimit: 103325 callbacks suppressed [ 1676.447826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.447871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.453977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.465961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.478218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1676.490164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.502163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.514360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.526068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.538030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.803743][ C0] net_ratelimit: 106652 callbacks suppressed [ 1681.803768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.803776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.803896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1681.809899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1681.821865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.833986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.845769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.857616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.869689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1681.881624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1687.159747][ C1] net_ratelimit: 106627 callbacks suppressed [ 1687.159771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1687.159830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.165957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.177955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.190058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.201984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1687.213966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1687.226060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.237751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.249718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.515780][ C1] net_ratelimit: 110673 callbacks suppressed [ 1692.515806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.525985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.534028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1692.546025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.558049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.569924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1692.581917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.593930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.605760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1692.617623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.165293][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 1693.165313][ T36] audit: type=1400 audit(2000000181.566:178607): avc: denied { execmem } for pid=17153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1694.644734][ T36] audit: type=1400 audit(2000000182.931:178608): avc: denied { read } for pid=17154 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1694.709420][ T36] audit: type=1400 audit(2000000182.969:178609): avc: denied { read open } for pid=17154 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1694.926228][ T36] audit: type=1400 audit(2000000183.212:178610): avc: denied { mounton } for pid=17154 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1695.260766][ T36] audit: type=1400 audit(2000000183.521:178611): avc: denied { sys_module } for pid=17154 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1696.010433][ T36] audit: type=1400 audit(2000000184.222:178612): avc: denied { execmem } for pid=17155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1697.871811][ C1] net_ratelimit: 102480 callbacks suppressed [ 1697.871836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1697.871902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.877985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.890096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.901996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.913983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.926039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1697.937887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1697.949797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.961933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.012738][ T36] audit: type=1400 audit(2000000186.093:178613): avc: denied { execmem } for pid=17156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1698.130331][ T36] audit: type=1400 audit(2000000186.205:178614): avc: denied { read } for pid=17157 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1698.280185][ T36] audit: type=1400 audit(2000000186.205:178615): avc: denied { read open } for pid=17157 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1698.375268][ T36] audit: type=1400 audit(2000000186.205:178616): avc: denied { mounton } for pid=17157 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1703.227745][ C0] net_ratelimit: 113604 callbacks suppressed [ 1703.227770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.227817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1703.233935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.245867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.258041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.269880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.282022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.294029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1703.305868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1703.317786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.668244][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 1703.668267][ T36] audit: type=1400 audit(2000000191.312:178622): avc: denied { execmem } for pid=17159 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1703.882693][ T36] audit: type=1400 audit(2000000191.593:178623): avc: denied { read } for pid=17160 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1703.969769][ T36] audit: type=1400 audit(2000000191.612:178624): avc: denied { read open } for pid=17160 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1704.031316][ T36] audit: type=1400 audit(2000000191.612:178625): avc: denied { mounton } for pid=17160 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1704.073082][ T36] audit: type=1400 audit(2000000191.631:178626): avc: denied { sys_module } for pid=17160 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1708.583753][ C1] net_ratelimit: 109299 callbacks suppressed [ 1708.583777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.583968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.590012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1708.601833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.613875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.625850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1708.637777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.649869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.661709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1708.673579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.939745][ C0] net_ratelimit: 105814 callbacks suppressed [ 1713.939771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.939862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.946189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.957934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.970305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.982377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1713.994199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1714.006123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.018231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.030023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.295732][ C0] net_ratelimit: 106034 callbacks suppressed [ 1719.295757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.295760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1719.295852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.301874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.313949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.325930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1719.338043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1719.359567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.361733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.373679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.651767][ C1] net_ratelimit: 106216 callbacks suppressed [ 1724.651791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1724.651926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.657960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.669926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.681979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.693969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1724.706023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1724.717904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.729724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.741712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.007715][ C0] net_ratelimit: 105414 callbacks suppressed [ 1730.007740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.007751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.007828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.013917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1730.025889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1730.037988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.049824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.061779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.073744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.085882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.363743][ C1] net_ratelimit: 105946 callbacks suppressed [ 1735.363770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.363926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.370019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1735.381823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.393862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.405829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1735.417775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.429827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.441708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1735.453570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.719708][ C1] net_ratelimit: 105175 callbacks suppressed [ 1740.719732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.719914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.725938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1740.737796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.749845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.761781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1740.773677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.785851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.797798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1740.809650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.075694][ C0] net_ratelimit: 105608 callbacks suppressed [ 1746.075718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1746.075740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.081952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.093791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.105810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.117747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1746.129842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.141620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.153578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1746.165692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1751.431701][ C1] net_ratelimit: 105471 callbacks suppressed [ 1751.431724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1751.431837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1751.437933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1751.449777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1751.461826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1751.473824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1751.485714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1751.497778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1751.509662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1751.521522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.787822][ C1] net_ratelimit: 105453 callbacks suppressed [ 1756.787846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1756.788000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.793987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.806006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.817911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.830147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.841962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1756.853777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.865802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1756.877762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1757.545613][ T36] audit: type=1400 audit(2000000241.777:178627): avc: denied { execmem } for pid=17161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1759.259606][ T36] audit: type=1400 audit(2000000243.377:178628): avc: denied { read } for pid=17162 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1759.332093][ T36] audit: type=1400 audit(2000000243.377:178629): avc: denied { read open } for pid=17162 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1759.719541][ T36] audit: type=1400 audit(2000000243.826:178630): avc: denied { mounton } for pid=17162 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1759.971876][ T36] audit: type=1400 audit(2000000244.050:178631): avc: denied { sys_module } for pid=17162 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1761.076678][ T36] audit: type=1400 audit(2000000245.079:178632): avc: denied { execmem } for pid=17163 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1762.143722][ C1] net_ratelimit: 96049 callbacks suppressed [ 1762.143748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1762.143878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.149802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.161804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.173813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.185809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1762.197736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1762.209752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.221572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.233591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1763.689762][ T36] audit: type=1400 audit(2000000247.530:178633): avc: denied { execmem } for pid=17164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1764.274707][ T36] audit: type=1400 audit(2000000248.082:178634): avc: denied { read } for pid=17165 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1764.443610][ T36] audit: type=1400 audit(2000000248.110:178635): avc: denied { read open } for pid=17165 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1764.540420][ T36] audit: type=1400 audit(2000000248.110:178636): avc: denied { mounton } for pid=17165 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1764.764930][ T36] audit: type=1400 audit(2000000248.129:178637): avc: denied { sys_module } for pid=17165 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1764.861100][ T36] audit: type=1400 audit(2000000248.624:178638): avc: denied { read } for pid=17166 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1764.945040][ T36] audit: type=1400 audit(2000000248.624:178639): avc: denied { read open } for pid=17166 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1764.998533][ T36] audit: type=1400 audit(2000000248.624:178640): avc: denied { mounton } for pid=17166 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1765.053279][ T36] audit: type=1400 audit(2000000248.662:178641): avc: denied { sys_module } for pid=17166 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1767.499675][ C0] net_ratelimit: 99287 callbacks suppressed [ 1767.499699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.499715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1767.505776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.517879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.529820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1767.541787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.553862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.565738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1767.577616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.589543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1768.549198][ T36] audit: type=1400 audit(2000000252.067:178642): avc: denied { execmem } for pid=17167 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1770.025072][ T37] INFO: task syz.2.16793:13732 blocked for more than 122 seconds. [ 1770.098770][ T37] Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 [ 1770.105685][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1770.152934][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1770.152957][ T36] audit: type=1400 audit(2000000253.573:178647): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2693]" dev="pipefs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1770.441161][ T37] task:syz.2.16793 state:D stack:0 pid:13732 tgid:13732 ppid:13366 flags:0x00004006 [ 1770.537659][ T37] Call Trace: [ 1770.541004][ T37] [ 1770.543975][ T37] __schedule+0x145b/0x1f10 [ 1770.571536][ T36] audit: type=1400 audit(2000000253.573:178648): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2693]" dev="pipefs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1770.655604][ T37] ? __sched_text_start+0x10/0x10 [ 1770.660721][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 1770.697261][ T37] ? __kasan_check_write+0x18/0x20 [ 1770.702453][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1770.923941][ T36] audit: type=1400 audit(2000000253.573:178649): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2693]" dev="pipefs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1770.989814][ T37] schedule+0xc6/0x240 [ 1770.993952][ T37] synchronize_rcu_expedited+0x4ee/0x7b0 [ 1771.018266][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 1771.024501][ T37] ? kasan_save_free_info+0x4a/0x60 [ 1771.040154][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 1771.046298][ T37] ? get_signal+0x139d/0x14f0 [ 1771.071360][ T37] ? arch_do_signal_or_restart+0x96/0x720 [ 1771.077170][ T37] ? __kasan_check_write+0x18/0x20 [ 1771.092710][ T37] ? shrink_dentry_list+0x4c7/0x4f0 [ 1771.097992][ T37] ? __kasan_check_write+0x18/0x20 [ 1771.125312][ T37] namespace_unlock+0x1ec/0x3d0 [ 1771.130236][ T37] ? umount_tree+0xf08/0xf70 [ 1771.148552][ T37] ? umount_tree+0xf70/0xf70 [ 1771.153210][ T37] ? __detach_mounts+0x610/0x610 [ 1771.179118][ T37] put_mnt_ns+0xad/0xf0 [ 1771.183356][ T37] free_nsproxy+0x52/0x290 [ 1771.200369][ T37] exit_task_namespaces+0x99/0xe0 [ 1771.205597][ T37] do_exit+0x9af/0x2630 [ 1771.225088][ T37] ? __sched_text_start+0x10/0x10 [ 1771.242120][ T37] ? __cfi_do_exit+0x10/0x10 [ 1771.246790][ T37] ? __kasan_check_write+0x18/0x20 [ 1771.265079][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1771.270256][ T37] ? __kasan_check_read+0x15/0x20 [ 1771.296532][ T37] ? cgroup_update_frozen+0x160/0x990 [ 1771.301996][ T37] do_group_exit+0x22a/0x300 [ 1771.318010][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 1771.323381][ T37] get_signal+0x139d/0x14f0 [ 1771.348600][ T37] arch_do_signal_or_restart+0x96/0x720 [ 1771.354228][ T37] ? common_nsleep+0x93/0xb0 [ 1771.371443][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1771.377674][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 1771.510556][ T37] ? __kasan_check_read+0x15/0x20 [ 1771.515684][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1771.536694][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 1771.564013][ T37] do_syscall_64+0x64/0xf0 [ 1771.568598][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1771.584646][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1771.590613][ T37] RIP: 0033:0x7f58f33c11e5 [ 1771.607265][ T37] RSP: 002b:00007f58f41dcf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1771.627603][ T37] RAX: fffffffffffffdfc RBX: 00007f58f35b5fa0 RCX: 00007f58f33c11e5 [ 1771.635667][ T37] RDX: 00007f58f41dcfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1771.669987][ T37] RBP: 00007f58f3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1771.678028][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1771.703474][ T37] R13: 0000000000000001 R14: 00007f58f35b5fa0 R15: 00007ffcd3ad0f08 [ 1771.723441][ T37] [ 1771.726514][ T37] INFO: task syz.6.16885:14008 blocked for more than 124 seconds. [ 1771.756153][ T37] Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 [ 1771.763055][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1771.799223][ T37] task:syz.6.16885 state:D stack:0 pid:14008 tgid:14008 ppid:12661 flags:0x00004006 [ 1771.819225][ T37] Call Trace: [ 1771.822565][ T37] [ 1771.825519][ T37] __schedule+0x145b/0x1f10 [ 1771.844133][ T37] ? __sched_text_start+0x10/0x10 [ 1771.849228][ T37] ? stack_depot_save_flags+0x38/0x800 [ 1771.873316][ T37] ? __kasan_check_write+0x18/0x20 [ 1771.878504][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 1771.906074][ T37] ? __kasan_check_write+0x18/0x20 [ 1771.911264][ T37] ? trace_contention_begin+0xc0/0xc0 [ 1771.927101][ T37] schedule+0xc6/0x240 [ 1771.931237][ T37] schedule_preempt_disabled+0x14/0x30 [ 1771.950228][ T37] __mutex_lock+0x836/0x1b60 [ 1771.954895][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 1771.981395][ T37] ? locks_remove_file+0x346/0x1000 [ 1771.986673][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 1772.011691][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 1772.017233][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 1772.036021][ T37] ? __asan_memset+0x39/0x50 [ 1772.040700][ T37] ? __fsnotify_parent+0x217/0x5c0 [ 1772.066588][ T37] __mutex_lock_slowpath+0xe/0x20 [ 1772.071784][ T37] mutex_lock+0x102/0x1c0 [ 1772.099010][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 1772.104024][ T37] ? call_rcu+0x14/0x20 [ 1772.130183][ T37] rtnl_lock+0x19/0x20 [ 1772.134325][ T37] tun_chr_close+0x41/0x150 [ 1772.153071][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 1772.158253][ T37] __fput+0x1fe/0xa00 [ 1772.172635][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1772.178262][ T37] ____fput+0x20/0x30 [ 1772.197160][ T37] task_work_run+0x1e3/0x250 [ 1772.201831][ T37] ? __cfi_task_work_run+0x10/0x10 [ 1772.225815][ T37] ? free_nsproxy+0x223/0x290 [ 1772.230839][ T37] do_exit+0x9b4/0x2630 [ 1772.249535][ T37] ? __sched_text_start+0x10/0x10 [ 1772.254659][ T37] ? __cfi_do_exit+0x10/0x10 [ 1772.267702][ T37] ? __kasan_check_write+0x18/0x20 [ 1772.272893][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1772.292361][ T37] ? __kasan_check_read+0x15/0x20 [ 1772.297458][ T37] ? cgroup_update_frozen+0x160/0x990 [ 1772.321602][ T37] do_group_exit+0x22a/0x300 [ 1772.326279][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 1772.354425][ T37] get_signal+0x139d/0x14f0 [ 1772.359010][ T37] arch_do_signal_or_restart+0x96/0x720 [ 1772.377794][ T37] ? common_nsleep+0x93/0xb0 [ 1772.382463][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1772.399768][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 1772.405579][ T37] ? __kasan_check_read+0x15/0x20 [ 1772.428354][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1772.434503][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 1772.461171][ T37] do_syscall_64+0x64/0xf0 [ 1772.465659][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1772.484056][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1772.490021][ T37] RIP: 0033:0x7f8c8c9c11e5 [ 1772.515763][ T37] RSP: 002b:00007f8c8d798f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1772.528472][ T37] RAX: fffffffffffffdfc RBX: 00007f8c8cbb5fa0 RCX: 00007f8c8c9c11e5 [ 1772.549651][ T37] RDX: 00007f8c8d798fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1772.578094][ T37] RBP: 00007f8c8ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1772.586131][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1772.611056][ T37] R13: 0000000000000000 R14: 00007f8c8cbb5fa0 R15: 00007fffcb1917d8 [ 1772.619102][ T37] [ 1772.642083][ T37] INFO: task syz.6.16895:14037 blocked for more than 125 seconds. [ 1772.649976][ T37] Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 [ 1772.674432][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1772.683159][ T37] task:syz.6.16895 state:D stack:0 pid:14037 tgid:14037 ppid:12661 flags:0x00004006 [ 1772.716866][ T37] Call Trace: [ 1772.720208][ T37] [ 1772.723168][ T37] __schedule+0x145b/0x1f10 [ 1772.749166][ T37] ? __sched_text_start+0x10/0x10 [ 1772.754353][ T37] ? stack_depot_save_flags+0x38/0x800 [ 1772.823963][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 1772.829148][ T37] ? __kasan_check_write+0x18/0x20 [ 1772.846550][ T37] ? trace_contention_begin+0xc0/0xc0 [ 1772.851996][ T37] schedule+0xc6/0x240 [ 1772.856142][ C1] net_ratelimit: 95584 callbacks suppressed [ 1772.856160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.856239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.856358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1772.856447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.856500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.856530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.856613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.856662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1772.856759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.856839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1773.166571][ T37] schedule_preempt_disabled+0x14/0x30 [ 1773.172125][ T37] __mutex_lock+0x836/0x1b60 [ 1773.187542][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 1773.194387][ T37] ? locks_remove_file+0x346/0x1000 [ 1773.220722][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 1773.226964][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 1773.252674][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 1773.257879][ T37] ? __asan_memset+0x39/0x50 [ 1773.276389][ T37] ? __fsnotify_parent+0x217/0x5c0 [ 1773.281572][ T37] __mutex_lock_slowpath+0xe/0x20 [ 1773.305674][ T37] mutex_lock+0x102/0x1c0 [ 1773.310088][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 1773.327664][ T37] ? call_rcu+0x14/0x20 [ 1773.331894][ T37] rtnl_lock+0x19/0x20 [ 1773.335994][ T37] tun_chr_close+0x41/0x150 [ 1773.353532][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 1773.369493][ T37] __fput+0x1fe/0xa00 [ 1773.373548][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1773.391556][ T37] ____fput+0x20/0x30 [ 1773.395604][ T37] task_work_run+0x1e3/0x250 [ 1773.414781][ T37] ? __cfi_task_work_run+0x10/0x10 [ 1773.419970][ T37] ? free_nsproxy+0x223/0x290 [ 1773.443868][ T37] do_exit+0x9b4/0x2630 [ 1773.448099][ T37] ? __sched_text_start+0x10/0x10 [ 1773.453296][ T37] ? __cfi_do_exit+0x10/0x10 [ 1773.648726][ T37] ? __kasan_check_write+0x18/0x20 [ 1773.653920][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1773.680941][ T37] ? __kasan_check_read+0x15/0x20 [ 1773.686040][ T37] ? cgroup_update_frozen+0x160/0x990 [ 1773.704060][ T37] do_group_exit+0x22a/0x300 [ 1773.708723][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 1773.733239][ T37] get_signal+0x139d/0x14f0 [ 1773.737819][ T37] arch_do_signal_or_restart+0x96/0x720 [ 1773.755910][ T37] ? common_nsleep+0x93/0xb0 [ 1773.760570][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1773.775081][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 1773.780876][ T37] ? __kasan_check_read+0x15/0x20 [ 1773.807550][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1773.813695][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 1773.840464][ T37] do_syscall_64+0x64/0xf0 [ 1773.844952][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1773.862174][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1773.868230][ T37] RIP: 0033:0x7f8c8c9c11e5 [ 1773.886570][ T37] RSP: 002b:00007f8c8d798f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1773.914986][ T37] RAX: fffffffffffffdfc RBX: 00007f8c8cbb5fa0 RCX: 00007f8c8c9c11e5 [ 1773.923025][ T37] RDX: 00007f8c8d798fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1773.947813][ T37] RBP: 00007f8c8ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1773.955847][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1773.990732][ T37] R13: 0000000000000000 R14: 00007f8c8cbb5fa0 R15: 00007fffcb1917d8 [ 1773.998791][ T37] [ 1774.023011][ T37] INFO: task syz.2.17205:14904 blocked for more than 126 seconds. [ 1774.035266][ T37] Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 [ 1774.054330][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1774.076449][ T37] task:syz.2.17205 state:D stack:0 pid:14904 tgid:14904 ppid:13366 flags:0x00004006 [ 1774.107395][ T37] Call Trace: [ 1774.110733][ T37] [ 1774.113687][ T37] __schedule+0x145b/0x1f10 [ 1774.183300][ T37] ? __sched_text_start+0x10/0x10 [ 1774.188404][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 1774.204776][ T37] ? __kasan_check_write+0x18/0x20 [ 1774.209966][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1774.235003][ T37] schedule+0xc6/0x240 [ 1774.239142][ T37] synchronize_rcu_expedited+0x4ee/0x7b0 [ 1774.258664][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 1774.279430][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 1774.285580][ T37] ? locks_remove_file+0x346/0x1000 [ 1774.301951][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 1774.307493][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 1774.331986][ T37] ? __kasan_check_read+0x15/0x20 [ 1774.337093][ T37] synchronize_net+0x2c/0x40 [ 1774.355481][ T37] __tun_detach+0x774/0x1460 [ 1774.360155][ T37] ? __kasan_check_write+0x18/0x20 [ 1774.386322][ T37] ? mutex_lock+0x92/0x1c0 [ 1774.390817][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 1774.399707][ T37] tun_chr_close+0x93/0x150 [ 1774.404268][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 1774.429023][ T37] __fput+0x1fe/0xa00 [ 1774.433078][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1774.451069][ T37] ____fput+0x20/0x30 [ 1774.455117][ T37] task_work_run+0x1e3/0x250 [ 1774.481070][ T37] ? __cfi_task_work_run+0x10/0x10 [ 1774.486255][ T37] ? free_nsproxy+0x223/0x290 [ 1774.504720][ T37] do_exit+0x9b4/0x2630 [ 1774.508959][ T37] ? __sched_text_start+0x10/0x10 [ 1774.527741][ T37] ? __cfi_do_exit+0x10/0x10 [ 1774.532408][ T37] ? __kasan_check_write+0x18/0x20 [ 1774.556485][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1774.561671][ T37] ? __kasan_check_read+0x15/0x20 [ 1774.587924][ T37] ? cgroup_update_frozen+0x160/0x990 [ 1774.593383][ T37] do_group_exit+0x22a/0x300 [ 1774.609378][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 1774.614740][ T37] get_signal+0x139d/0x14f0 [ 1774.631866][ T37] arch_do_signal_or_restart+0x96/0x720 [ 1774.637497][ T37] ? common_nsleep+0x93/0xb0 [ 1774.656126][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1774.674559][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 1774.680356][ T37] ? __kasan_check_read+0x15/0x20 [ 1774.705601][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1774.711751][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 1774.737645][ T37] do_syscall_64+0x64/0xf0 [ 1774.742130][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1774.746844][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1774.772433][ T37] RIP: 0033:0x7f58f33c11e5 [ 1774.776912][ T37] RSP: 002b:00007f58f41dcf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1774.801970][ T37] RAX: fffffffffffffdfc RBX: 00007f58f35b5fa0 RCX: 00007f58f33c11e5 [ 1774.810014][ T37] RDX: 00007f58f41dcfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1775.006230][ T37] RBP: 00007f58f3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1775.014275][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1775.048900][ T37] R13: 0000000000000000 R14: 00007f58f35b5fa0 R15: 00007ffcd3ad0f08 [ 1775.056962][ T37] [ 1775.069256][ T37] INFO: task syz.2.17229:14946 blocked for more than 127 seconds. [ 1775.077115][ T37] Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 [ 1775.102967][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1775.123792][ T37] task:syz.2.17229 state:D stack:0 pid:14946 tgid:14946 ppid:13366 flags:0x00004006 [ 1775.156033][ T37] Call Trace: [ 1775.159376][ T37] [ 1775.162330][ T37] __schedule+0x145b/0x1f10 [ 1775.188157][ T37] ? __sched_text_start+0x10/0x10 [ 1775.193259][ T37] ? stack_depot_save_flags+0x38/0x800 [ 1775.209891][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 1775.215077][ T37] ? __kasan_check_write+0x18/0x20 [ 1775.240692][ T37] ? trace_contention_begin+0xc0/0xc0 [ 1775.246138][ T37] schedule+0xc6/0x240 [ 1775.260683][ T37] schedule_preempt_disabled+0x14/0x30 [ 1775.282751][ T37] __mutex_lock+0x836/0x1b60 [ 1775.287419][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 1775.306988][ T37] ? locks_remove_file+0x346/0x1000 [ 1775.312271][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 1775.337476][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 1775.343016][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 1775.358574][ T37] ? __asan_memset+0x39/0x50 [ 1775.363239][ T37] ? __fsnotify_parent+0x217/0x5c0 [ 1775.389530][ T37] __mutex_lock_slowpath+0xe/0x20 [ 1775.394627][ T37] mutex_lock+0x102/0x1c0 [ 1775.398995][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 1775.423728][ T37] ? call_rcu+0x14/0x20 [ 1775.427963][ T37] rtnl_lock+0x19/0x20 [ 1775.444592][ T37] tun_chr_close+0x41/0x150 [ 1775.449163][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 1775.464707][ T37] __fput+0x1fe/0xa00 [ 1775.468760][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1775.488184][ T37] ____fput+0x20/0x30 [ 1775.492231][ T37] task_work_run+0x1e3/0x250 [ 1775.620763][ T37] ? __cfi_task_work_run+0x10/0x10 [ 1775.639760][ T37] ? free_nsproxy+0x223/0x290 [ 1775.644505][ T37] do_exit+0x9b4/0x2630 [ 1775.660389][ T37] ? __sched_text_start+0x10/0x10 [ 1775.665512][ T37] ? __cfi_do_exit+0x10/0x10 [ 1775.689382][ T37] ? __kasan_check_write+0x18/0x20 [ 1775.694575][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1775.721036][ T37] ? __kasan_check_read+0x15/0x20 [ 1775.726137][ T37] ? cgroup_update_frozen+0x160/0x990 [ 1775.744982][ T37] do_group_exit+0x22a/0x300 [ 1775.749656][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 1775.764794][ T37] get_signal+0x139d/0x14f0 [ 1775.769383][ T37] arch_do_signal_or_restart+0x96/0x720 [ 1775.796346][ T37] ? common_nsleep+0x93/0xb0 [ 1775.801020][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1775.820022][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 1775.825825][ T37] ? __kasan_check_read+0x15/0x20 [ 1775.851545][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1775.857708][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 1775.881841][ T37] do_syscall_64+0x64/0xf0 [ 1775.886345][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1775.891074][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1775.909974][ T37] RIP: 0033:0x7f58f33c11e5 [ 1775.936056][ T37] RSP: 002b:00007f58f41dcf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1775.958420][ T37] RAX: fffffffffffffdfc RBX: 00007f58f35b5fa0 RCX: 00007f58f33c11e5 [ 1775.977580][ T37] RDX: 00007f58f41dcfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1775.985621][ T37] RBP: 00007f58f3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1776.011945][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1776.033374][ T37] R13: 0000000000000000 R14: 00007f58f35b5fa0 R15: 00007ffcd3ad0f08 [ 1776.053794][ T37] [ 1776.056887][ T37] INFO: task syz.0.17714:16309 blocked for more than 128 seconds. [ 1776.075055][ T37] Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 [ 1776.081956][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1776.117425][ T37] task:syz.0.17714 state:D stack:0 pid:16309 tgid:16309 ppid:11611 flags:0x00004006 [ 1776.149365][ T37] Call Trace: [ 1776.152710][ T37] [ 1776.155672][ T37] __schedule+0x145b/0x1f10 [ 1776.173055][ T37] ? __sched_text_start+0x10/0x10 [ 1776.178158][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 1776.304025][ T37] ? __kasan_check_write+0x18/0x20 [ 1776.314749][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1776.334293][ T37] schedule+0xc6/0x240 [ 1776.338442][ T37] synchronize_rcu_expedited+0x4ee/0x7b0 [ 1776.363146][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 1776.369397][ T37] ? kasan_save_free_info+0x4a/0x60 [ 1776.394921][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 1776.401073][ T37] ? get_signal+0x139d/0x14f0 [ 1776.416235][ T37] ? arch_do_signal_or_restart+0x96/0x720 [ 1776.422047][ T37] ? __kasan_check_write+0x18/0x20 [ 1776.448464][ T37] ? shrink_dentry_list+0x4c7/0x4f0 [ 1776.453748][ T37] ? __kasan_check_write+0x18/0x20 [ 1776.470244][ T37] namespace_unlock+0x1ec/0x3d0 [ 1776.475176][ T37] ? umount_tree+0xf08/0xf70 [ 1776.493689][ T37] ? umount_tree+0xf70/0xf70 [ 1776.498367][ T37] ? __detach_mounts+0x610/0x610 [ 1776.524541][ T37] put_mnt_ns+0xad/0xf0 [ 1776.528796][ T37] free_nsproxy+0x52/0x290 [ 1776.546313][ T37] exit_task_namespaces+0x99/0xe0 [ 1776.551415][ T37] do_exit+0x9af/0x2630 [ 1776.566184][ T37] ? __sched_text_start+0x10/0x10 [ 1776.571284][ T37] ? __cfi_do_exit+0x10/0x10 [ 1776.597917][ T37] ? __kasan_check_write+0x18/0x20 [ 1776.603116][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1776.621168][ T37] ? __kasan_check_read+0x15/0x20 [ 1776.626271][ T37] ? cgroup_update_frozen+0x160/0x990 [ 1776.641985][ T37] do_group_exit+0x22a/0x300 [ 1776.646654][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 1776.667518][ T37] get_signal+0x139d/0x14f0 [ 1776.684224][ T37] arch_do_signal_or_restart+0x96/0x720 [ 1776.689867][ T37] ? common_nsleep+0x93/0xb0 [ 1776.715660][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1776.721901][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 1776.738224][ T37] ? __kasan_check_read+0x15/0x20 [ 1776.743333][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1776.770492][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 1776.776046][ T37] do_syscall_64+0x64/0xf0 [ 1776.801401][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1776.806160][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1776.833261][ T37] RIP: 0033:0x7f1d035c11e5 [ 1776.837746][ T37] RSP: 002b:00007f1d043edf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1776.857655][ T37] RAX: fffffffffffffdfc RBX: 00007f1d037b5fa0 RCX: 00007f1d035c11e5 [ 1776.998583][ T37] RDX: 00007f1d043edfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1777.025989][ T37] RBP: 00007f1d03610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1777.034040][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1778.211668][ C0] net_ratelimit: 93746 callbacks suppressed [ 1778.211692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.211723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.217756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1778.229777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.241846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.253715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:27:0f:e7:d8:2d, vlan:0) [ 1778.265632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.277487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.289699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.301516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.522754][ T37] R13: 0000000000000000 R14: 00007f1d037b5fa0 R15: 00007ffc75e90a88 [ 1778.530806][ T37] [ 1778.970739][ T37] INFO: task syz.5.17986:17114 blocked for more than 131 seconds. [ 1778.978621][ T37] Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 [ 1779.003324][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1779.012055][ T37] task:syz.5.17986 state:D stack:0 pid:17114 tgid:17114 ppid:17055 flags:0x00004006 [ 1779.045680][ T37] Call Trace: [ 1779.049026][ T37] [ 1779.051986][ T37] __schedule+0x145b/0x1f10 [ 1779.077762][ T37] ? __sched_text_start+0x10/0x10 [ 1779.082864][ T37] ? stack_depot_save_flags+0x38/0x800 [ 1779.103553][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 1779.108737][ T37] ? __kasan_check_write+0x18/0x20 [ 1779.132632][ T37] ? trace_contention_begin+0xc0/0xc0 [ 1779.138082][ T37] schedule+0xc6/0x240 [ 1779.154739][ T37] schedule_preempt_disabled+0x14/0x30 [ 1779.160276][ T37] __mutex_lock+0x836/0x1b60 [ 1779.186711][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 1779.193568][ T37] ? locks_remove_file+0x346/0x1000 [ 1779.212066][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 1779.228217][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 1779.233750][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 1779.379150][ T37] ? __asan_memset+0x39/0x50 [ 1779.383822][ T37] ? __fsnotify_parent+0x217/0x5c0 [ 1779.409289][ T37] __mutex_lock_slowpath+0xe/0x20 [ 1779.414405][ T37] mutex_lock+0x102/0x1c0 [ 1779.418788][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 1779.441240][ T37] ? call_rcu+0x14/0x20 [ 1779.445475][ T37] rtnl_lock+0x19/0x20 [ 1779.449585][ T37] tun_chr_close+0x41/0x150 [ 1779.474897][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 1779.480086][ T37] __fput+0x1fe/0xa00 [ 1779.487981][ T37] ? call_rcu+0x14/0x20 [ 1779.492207][ T37] ____fput+0x20/0x30 [ 1779.517633][ T37] task_work_run+0x1e3/0x250 [ 1779.522307][ T37] ? __cfi_task_work_run+0x10/0x10 [ 1779.560124][ T37] ? free_nsproxy+0x223/0x290 [ 1779.564887][ T37] do_exit+0x9b4/0x2630 [ 1779.581518][ T37] ? swake_up_one_online_ipi+0x30/0x30 [ 1779.587052][ T37] ? __cfi_do_exit+0x10/0x10 [ 1779.710154][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 1779.716406][ T37] ? __kasan_check_write+0x18/0x20 [ 1779.747869][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 1779.762787][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1779.768406][ T37] do_group_exit+0x22a/0x300 [ 1779.808472][ T37] ? __kasan_check_write+0x18/0x20 [ 1779.813661][ T37] get_signal+0x139d/0x14f0 [ 1779.859531][ T37] arch_do_signal_or_restart+0x96/0x720 [ 1779.865155][ T37] ? blkcg_maybe_throttle_current+0x16c/0xb40 [ 1779.891534][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1779.897780][ T37] ? __kasan_check_write+0x18/0x20 [ 1779.913703][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 1779.919242][ T37] do_syscall_64+0x64/0xf0 [ 1779.944815][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1779.949574][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1779.967818][ T37] RIP: 0033:0x7f46c5b8e929 [ 1779.972315][ T37] RSP: 002b:00007ffc6040eb18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1779.998978][ T37] RAX: 0000000000000000 RBX: 00007f46c5db7ba0 RCX: 00007f46c5b8e929