last executing test programs: 1m28.372225963s ago: executing program 2 (id=5208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) (async) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x50, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c0000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff9976}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000) (async) flock(r1, 0xd6c7271cbc839afd) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r8, &(0x7f00000000c0)='.pending_reads\x00', 0xae40, 0x130) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x3, 0x6}) (async) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de20000040"]) (async) r10 = fcntl$dupfd(r0, 0x0, r0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0) sendmsg$TIPC_NL_BEARER_GET(r10, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x18, r11, 0x21, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4050) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1101, 0x1}) 1m28.292308759s ago: executing program 2 (id=5209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x67a83000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() rt_sigqueueinfo(r1, 0x41, &(0x7f0000000080)={0x9, 0x2, 0x4}) prlimit64(r1, 0xe, &(0x7f0000000100)={0x80000095, 0x240000000008b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000001880)="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", 0x337}], 0x1}}], 0x1, 0x4004050) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000019680)=ANY=[@ANYBLOB="74020000", @ANYRES16=r5, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = timerfd_create(0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) r8 = socket(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_gettime(r9, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r10, 0x29, 0x11, 0x0, &(0x7f0000000040)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1m27.453319587s ago: executing program 2 (id=5215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r5, r7, 0xfffffffffffffc01, 0x0) tee(r5, r7, 0x60000000000, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000009b000040"]) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES64=r3, @ANYRES64=r1]) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001080)={0x0, 0xa, 0xfffffffffffffffd, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000000b00)={0x1b, 0x2, {0x9, @struct={0x92, 0xff}, 0x0, 0x2a, 0xe1e3, 0x5, 0x1, 0x3, 0x4a7, @usage=0x6, 0x81, 0x9, [0xd97, 0x200, 0x7, 0x9, 0xc, 0x2]}, {0x8, @usage=0x101, r11, 0x7, 0x1, 0x5f, 0x100000000, 0x40, 0x44, @usage=0x58d, 0xfffffe00, 0xedf, [0x0, 0xa, 0x80000000, 0x6, 0x7, 0x2]}, {0x8, @usage=0xffffffffffffffff, r12, 0xf74, 0x6, 0x8, 0x401, 0x0, 0x0, @usage=0x100000001, 0x80000000, 0x2, [0xd2, 0xfffffffffffff7be, 0x2, 0xfffffffffffffff9, 0x3, 0x1]}, {0x3, 0x8, 0x7}}) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r14 = dup3(r13, r0, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$PPPIOCSACTIVE(r14, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0xc742, 0x0, 0x1, 0x1}, {0x5, 0xb6, 0xc, 0x7}]}) ioctl$KVM_SET_CPUID(r14, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0000000000000019000080feffffff02000000090000000500000000000000010000c00800000001000000090000000100000000000000070000007015000009000000010000000400000000000000000000c00400000001000000210000000104000000000000010000006f0a00008100000002000000f8ffffff00000000000000c00400001008000000ff070000080000000000000000000040ff07000089000000020000000c030000000000000b0000000500000005000000790b00000300000000000000070000800100000073680000faffffffff0600000000000002000000400200005c420f0000df00000300000000000000"]) 1m27.068647798s ago: executing program 2 (id=5220): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x1000004, &(0x7f00000000c0)='fuse\x00') r2 = userfaultfd(0x80801) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000600"], 0x48}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f0000000200)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x1c, r8, 0x1, 0x1}, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000472000/0x400000)=nil) 1m26.698081398s ago: executing program 2 (id=5224): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x44000) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) madvise(&(0x7f0000b75000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f00008ec000/0x2000)=nil, 0x2000, 0x4) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000d, 0x80010, r5, 0x4052c000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r7, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @remote}, {0x1}, 0x2e, {0x2, 0x4e22, @empty}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x100, 0x4000) ioctl$BLKROGET(r8, 0x125e, &(0x7f0000000140)) 1m26.316036379s ago: executing program 2 (id=5226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{}, {0x94}]}) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x8, 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0xd, 0x17, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m26.202061068s ago: executing program 32 (id=5226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{}, {0x94}]}) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x8, 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0xd, 0x17, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 39.04584239s ago: executing program 3 (id=5908): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80600, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000006c0)={0xfffffff3, 0x8000, 0x16b03850, 0x7fff, 0x6, "96ec62643c4e81ecb474a28ee051d969a0bfa6", 0x4, 0x5}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) sysinfo(&(0x7f0000000140)=""/4096) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 38.975701536s ago: executing program 3 (id=5909): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 38.828246318s ago: executing program 3 (id=5910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r1, 0x403) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004881) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x5, 0x2, 0x3, 0x7f, 0x0, 0x20000000, 0x6, 0x5f, 0x1, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x5, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x8001, 0xd, 0x1, 0x0, 0xffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x8, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0xa0000000, 0xb, 0x4, 0xa, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x80, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d6, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x1, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x7fffffff, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x800, 0x9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x3, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x10, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x7c00000000000000, 0x4000, 0x7, 0x2, 0x16}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a"], 0x20}}, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x35, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 33.242954808s ago: executing program 1 (id=5990): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="b2c5c79f07ab3d9614d5c058db4a274ad23734c22ae51ea860b7ba11a89526f3e0c83d84e43f97065e049df95ed807146bf75b9a01f43f46c3f9f2c9da76cbcf89ccb2ad441328f9b1fda9a445d98b4e5d74c3d3ef", 0x55}], 0x1}}], 0x2, 0x8008801) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x80000006, 0x1, 0x0, 0x80}]}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, 0xffffffffffffffff, 0x8bf83000) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r6, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) 31.000780329s ago: executing program 0 (id=5993): r0 = syz_pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x40) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x5, 0x6, 0x5, 0x300000000000000, 0xe, 0x0}) wait4(r1, &(0x7f00000000c0), 0x1000000, &(0x7f0000000100)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x80000000, 0x606001) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x800, 0x450501) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000240)={r3, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x11, "296e6524850a54297c562311ac3eaba1e55e07a8b0591f26582b867a42aaf2d721a591c61a1be9dcc438afc96b03c9aea9fa132b4387ec29167b0514dad66da5", "f6a53d4fd17a6d5a9ddad78a9e79196ab46a61a2b7355f969a28b7fc9202b090ac82474d727435231238ef7916fdb85338ac530ade2974bbdcf4ef6d40f3cd8a", "45d06b1c8c559b31addfc1ecaeab5486787a8c3b8aad79f5957507bae6a0ca4c", [0x79d, 0x7]}}) ptrace$cont(0xffffffffffffffff, r1, 0x3, 0x1) r4 = socket(0x28, 0x802, 0x1) bind$vsock_stream(r4, &(0x7f0000000380)={0x28, 0x0, 0x2710, @local}, 0x10) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f00000003c0), 0x1001) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x10, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "2c438c4fa99fe508", "81d95db5fe3b7eb5797dd15e0d00654c932707f8dc9a1986f0c64bb14b476d69", "5cf9fc24", "5ce6f2aa788ad76c"}, 0x38) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000540)) ptrace$poke(0x4, r1, &(0x7f0000000580), 0x1) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000005c0)) r6 = syz_open_procfs$namespace(r1, &(0x7f0000000600)='ns/user\x00') fcntl$lock(r6, 0x7, &(0x7f0000000640)={0x0, 0x1, 0xfffffffffffff9f7, 0x1000000, r1}) sendmsg$key(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x2, 0x13, 0x6, 0x5, 0x4, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_ident={0x2, 0xb, 0xfffc, 0x0, 0x7}]}, 0x20}}, 0x1010) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000740)) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000980)={0x3, 0x1, &(0x7f00000007c0)=""/114, &(0x7f0000000840)=""/142, &(0x7f0000000900)=""/69, 0x100000}) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f00000009c0)={0x0, 0x10000, 0x8}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x10400, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r8, 0x80083314, &(0x7f0000000a40)) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000a80)={'nicvf0\x00'}) 30.815935954s ago: executing program 0 (id=5994): r0 = socket$nl_audit(0x10, 0x3, 0x9) fchmod(r0, 0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/mnt\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) listen(r8, 0x0) r9 = socket(0x28, 0x5, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) write$P9_RFLUSH(r11, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) r12 = accept4$unix(r8, 0x0, 0x0, 0x0) recvfrom$unix(r12, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0) dup2(r7, r6) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000082000040"]) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 30.468422262s ago: executing program 4 (id=5995): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000145f18e4930200000000000000000ba8766745caaf000401000200040000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8880) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) r4 = socket$inet(0x2, 0x3, 0xfffffffd) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="0209000902"], 0x10}, 0x1, 0x300000000000000}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) lseek(r6, 0xca3, 0x4) sendfile(r6, r6, 0x0, 0x1200000000000) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="7f44f599b463e95abbc08d41520b49f2b6a57e511c96a29fd98e86e272dd604fa979b42551e79f84c16c878ac3952450d35a15431ccb5ccabbf193e49db64e8af914640c21f16908c07e16f3455afc2603002a5b916f5c62cbc9682872d5bef9606ccbde925ab591e29605297d579495ba71dfb694bcebb17b3c4a83", 0x7c}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='ext3\x00', 0x4010, 0x0) lremovexattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@random={'osx.', '/dev/nbd'}) 30.261418799s ago: executing program 4 (id=5996): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x20400000f01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 30.045781856s ago: executing program 4 (id=5997): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_bridge\x00', {0x9}, 0x6a0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x1, 0x4002) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) 29.916457546s ago: executing program 3 (id=5998): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"29320046ca37e7d8f20d5c098e5fc6a51ba9c30c13bd737087ada0b6a5acf6d630475c14baa0557e0e7d491afe42e1b10ebc5ca292bd579239fcde777e95e05a09d6ca641e621aa20b525aec69d3800114320c3416d486dac32be662825064bbc58ffa0ff195e8c1aed213c8d8474c83f78f88f0c60542ff26740756f1814db533e2e9c77615b35251a3b646c32209cd9b295a0ae85bc4ebcbae13a17a24184b772fb29576ba7de233e513a1484be98d9f41fd11d0beebf6b14f274c5eba170c2b6c69785cccab179da86ad520f535b3adcf7fa325a87eeffdf15665f4f4c89128098105663d9c18fc8fb562a04df1259230337de40867a42e3c7a2979a2f7df816d6ef85b61bcbb4be62373a382d41bcbc28a955c8197b3a6e23048e47447199f4a07f4e5c254a7583cbf59ad76aed06698abc0a17a68b9ec4a07beb2343e0b0c2d13244e7b6c9c738cd246cbe133c46f978ea9df7cd604513f2c41fb2f5bc9df6fd7cd9f7ce8e631add3e5b9db910857e1abecbf05c4a4011c35ab7203647bd51f05230a73224b3c3ab6e85f9fb2a67f8099d2ab871a1f69b015d14d0144ba709128730172f59b88a2dc0744338e378312f90d6df30deeb45c7e6d199826f903116b6e5fe8c5a80ad03f18bb56a7ff553a28f8c028317ddb23e5aa07ba3701cc90a4bc7d6eb817d00128aaba0e006751b4857ee76d6b5335a65f8b4f037e06d049c081dc23c6d526b6e18cd215b8509905116de8f53a172fb4579e58aa3a1180db71432b8547aed46f327ab9f0ef94821d31b66647978f4cfc577d8e8369097f9510a4651ce4258db15d479a3e0bd17e13c119d3c4ada0174a52a757d3325cf76fdd58e0c754c811ae49baa1c1d57673a37cea8b13ec7094d1647991afb2c24fb4f5658c1483d3224a3734ed54b5733832c198e162065c481bb2347e3ff9bc7d4ae4b735c62a2671c49d7ea5cd0358ec7dc63f47884db9c76f045f57a8ee53c67d22eaa355b4bbc1c72456b4651c1d888c013273a1e7eb1c11273099090bdbe13f029e0e747b8220926aa9cc1087d22b279b8c18425a84c6e3a2a2ced25a78970349fb38644f9e394848a7d638901e47ce5a9140c81a77254e034046ea21e4bd027e6e39940dd8bf998a78948d5ee7e1007e96eca97445a02ad5266e8282179d032398f40260941e015ff8cb80a9fc3ab312f4accdc0136208dbd6e9921e8c3fed0b1c7a9080f9863abef52a2beefe1e820539da787afbab42f62e2fe8db75c17a9861addfba44ad542a12ef3f7f185afb7597e0f5ce701e2908ea682b5fc1a14c5610134dff79e81a627d16b10369530bf3c4340bca7b669d0598ae0097e3c7c34a65bb306e7e679a54be3be9b04635726ae2ef68fab6d8f773975a19e1f13d8eb00ca696ed2426d3fa86d04cb08b5b7b11ad262993e5323663b7ab10caf8"}) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000002c0)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) uname(0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x4, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0xce33a000) 29.915731096s ago: executing program 0 (id=5999): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x4, 0x6}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x8, 0xd2b6, 0x6, 0xc00, 0xb0, 0x6, 0xfffffffffffffff7, 0x80000001, 0x5, 0x1, 0x3, 0x0, 0xc, 0xfff, 0x2, 0x9], 0x4000, 0x20200}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x8000, 0x74, 0x3, 0x80}, {0x9, 0x40, 0x50, 0x3d02}, {0x1000, 0x8, 0x4, 0x9}]}, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x0, 'vxcan1\x00', {0x2}, 0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000240)={0x3, 0x0, [{0x3, 0x1, 0x1, 0x0, @sint={0xa4, 0x3855eb0}}, {0x4, 0x3, 0x1, 0x0, @sint={0x8, 0x8}}, {0x6e, 0xfd7352b30cabf84d, 0x1, 0x0, @irqchip={0x7fff, 0x9}}]}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000003c0)=0x8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000440)=0xff) recvmsg$can_raw(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f0000000840)=""/74, 0x4a}], 0xa, &(0x7f0000000980)=""/227, 0xe3}, 0x40000042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000ac0)="e4dab6b71a8228f97da1bd7fab942598015d092e3bbdb6044961475fd1aec123ee671553d01c79c05bee2087874be5bda80a97fe8be0f2cba4c63e4098c38f817b5b11d0d14e4b6b35dacc9963a9bd2d4691d76ea2bca8d54e6d08d3f49b7a774590330f2109cb559f912826ddd590565eab36fdf93d23da8bfc8b61e28202d060d88e07865d0b73c382b6298523a33042ae637e8ad1d63677bc75313f74f2e34cd2a13ca245a2cfafcb2584a5efdda8fb85df42d6ed8439599b93b14500ea900cdf40742f8e7c4100650d2e92ed2890d187deba4f24", 0xd6) fstatfs(r5, &(0x7f0000000bc0)=""/85) fcntl$notify(r7, 0x402, 0x40000012) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000c40)=0x7) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) dup2(r2, r8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000cc0)={'pim6reg0\x00', 0x20}) write(r4, &(0x7f0000000d00)="b8f2dbdb9ceb73b0c8b4c894ee2617b5939969b2e905da0e85f0e561763cd522d4079d7d8e436edc7a521e721db8d799d6cf06072df0298f70395f4c48af97080f2fe29f5eba42e17eeccfc6431718057bbc169f57af2742c8a3e9228a9ad88b09789fb8d792546bbdb57e9c36e77942aa8da7aba74acee8622b704c5ad3209751f1c2690fc8c68c9f7540256f62b53bf87dea99a946d8575808e175d1b2c8084121414941be35098f2fed89b3cd", 0xae) write(r8, &(0x7f0000000dc0)="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", 0x1000) 29.860184121s ago: executing program 4 (id=6000): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41, 0x0, 0x20000}}, 0x10, 0x0}, 0x0) connect$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000480)={0x5, 0x0, [{0x796, 0x0, 0x80000001}, {0x1, 0x0, 0x7}, {0x807, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0x5}, {0x3, 0x0, 0x4}, {0x8402, 0x0, 0x4}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x8}, {0xfe, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x74}, {0x8, 0x0, 0x6}, {0x2, 0x0, 0x8}, {0x43, 0x0, 0x4}, {0x7761, 0x0, 0x3}]}) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="82f585", 0x3}], 0x1, &(0x7f0000000600), 0x0, 0x8010}}], 0x1, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r9 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x40042, 0x1, 0x3}, 0x10) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001740)=ANY=[@ANYBLOB="010000293207fc577ad10058c400000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) recvmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)=""/119, 0x77}, 0x4}, {{&(0x7f0000000140)=@l2tp6, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/79, 0x4f}], 0x1, &(0x7f0000000440)=""/45, 0x2d}, 0x6}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, &(0x7f0000002800)=""/4096, 0x1000}, 0x8}], 0x3, 0x10021, 0x0) mount$9p_unix(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000017c0)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', &(0x7f0000001800), 0x0, &(0x7f0000001840)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xadb}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 29.773200478s ago: executing program 1 (id=6001): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x0, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VCPU(r0, 0x7704, 0x2) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_STATUS(r2, 0x8001af71, &(0x7f00000000c0)) 29.484504631s ago: executing program 0 (id=6002): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0xfffffffffffffffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, 0x0) 29.483041662s ago: executing program 0 (id=6003): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x24]}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f00000021c0)) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x13, r3, 0x5401000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000006d00)=@newtaction={0x790, 0x32, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x77c, 0x1, [@m_ipt={0xe8, 0x7, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x91, 0x6, "6f721e5c6c8f2d171736b77f54fa93fdc807082e427d8511f970e07046bb7381b319cd1eaf993cffc5b1fbbee2946e5a94f391abb9f1953752e0d84bb0ce19cc7378b361a2c0805e3e207c04dd9997f5ee03c0b6395571c537489768981f089b30a503dc9fed83312b60fa2ae93d36d911cc33a74adf8f7e5b2c4bddd26e26fd27c774ba6dc89498556aea65e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x2ec, 0x1c, 0x0, 0x0, {{0x8}, {0x228, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10e, 0x6, {0x0, 'nat\x00', 0x8, 0x1, "72f03391c7425051a5c95806c7a490983a6807a1cb9722b93301f125c7a7310ce0368e2ad8857533424279ceb97398c25bf57c0e3703a91508f0ce797e7d5ecf31a3d7a2c55953d23563d8394c48defe1515767226b01856838eb5922c098de22b9a66a994bac1589489a52746b5cadeaef9a9bee03ff67a77be5dd7bd0711085b37478b2fa4462d17ad9f29274b96cf10d6a1fd6fc98a6e908a21aad918a0b1d986c4d439fa0e9f2a1026ca2e3ad321f8db193cf6e39199a55c9ffc7d3afe07ae0cf04ec788bc7480ec7a009634efa256db18cad6633063d118a9ba0831f8a146991181"}}, @TCA_IPT_TARG={0x111, 0x6, {0x1, 'filter\x00', 0xfe, 0x8, "a7e61aa509cf5386a0a0fd2a29a50dc4840568552407b3d8916754df5519a82e6602b39b4ae698166cee26b7e0ed983e00a61ee217559568580c7a4b04328279b8ead2f5888600a18130de7b6e253dc7483948c809f2503d38c430a7bdd8211f55cd2e52305e1a93a208cb000d70d3ef1b85ca6715b999827ef511b2116deb5c447dd77f79033154a7510ab31d60bddab24ffa8c00f9d5c0f1d5faa2c2a29aa6dab6405e0215230b6a9ec576d1b9b10e1033a349f911f895fa468852c82d4fc44c2590df3692038d4a73d0e9743d5397f1d74f5e124ab87c26bcc23f3c1d17406dd83fb6b0f380"}}]}, {0xa0, 0x6, "268a6ff250c9603a66a1adb1c7655257099d28122de4f41baa5c47a900a686c6ca76254146f1e7a1c2ad9ec7c59fe313d5591c5bd23f8aeaba751b09eca4e9ed0900ee1b1ef39e722178810b93d6840a207be6cc9c3f3e832a3da94f3806242a4caf6437bb4fa7f036c753b9c02c8c43b760a862fdac7ce383ce000781f963a179261c72bfea6bc721356e9feeb94172c515e32cfc74f6f028ac567b"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x180, 0xb, 0x0, 0x0, {{0x8}, {0x124, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xeb, 0x6, {0x3ff, 'raw\x00', 0x1, 0x6, "ca22ece2d64348b471bed163879302a2e7ff3adba7c06790627dd4cc62e64eddd034e6532a3b994ce365c7f45f404e9ff39210742684391fd08dd6ef514a75956602844b7e394f750297c4081f14c03a3884a29ae4804af29e010748d096cead65f2c3721c2eb4f10cd133c90a418aa32e90d7c57ee2653950c7bdc8fd87045f5474eb23e05d9ba291087cd9b8bca68281340f5b257fdb527f726b33c54452095e483527a180b968cd684ffdf379f743757ade415ac3d806ee99c59df9d64bac6f"}}]}, {0x38, 0x6, "5b400e79307d77abcda24a915c4fa14464eb6ba351ebc5a741a94bcf6280929d4c79adc8b058d96e849f1e0455d21d5bb738fe0b"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x224, 0x1a, 0x0, 0x0, {{0x8}, {0x134, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x126, 0x6, {0x0, 'mangle\x00', 0x2, 0x8, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xc9, 0x6, "0f9127fd455f64be2ea6d8a54f59776f450cd7cca4ab41437dbf6a7e05ffb6455b7da08c739e52831b78bae10c062371b0db21b56d07cad489eb2bc3081872bce67f6e5791aa6def8f4a5b8a5cf9dbb5d815c9da351fd0078cffc5935b1f3e1565a70c0f98e0837757b55d9b1cbf76515523c43c9705e598366310d377f19d150e2d5ef9491f709b15acb8e6939c46939a9b39eea2e7794429ce9fb2e8c9f60e0eb41399b1b5e946d7c843e64f7850024c7b66c09fe37a173eaf9f05a7a31b61b5d6b0f9e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x790}, 0x1, 0x0, 0x0, 0x8080}, 0x8009080) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0xe8, 0x0, 0x0, [{{0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x4, 0x0, 0x173d4, {0x0, 0x8000, 0x3f8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8000, 0x6000, 0x2, 0x0, r8, 0x2, 0xdffffffd}}, {0x4, 0x0, 0x3e, 0x0, '.&^\'\x9b\x8e\xf1\x8a\xbb\xbe\xddn=@\x9bE\xe4c\xfd\xcc\xba\xed\x0f\xd1\xb5}v-\xccq\x91\xe6\xbdw5\x06\x15\xd5\xf8\xec\"|\x00\x00\x00\x7f\xdf\xdf\xac&{d)v\x94\xd4B\xfd\'\xbc@\x95'}}]}, 0x0, 0x0, 0x0}) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r11) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r11, 0xc0085508, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002200)={0x150, 0xffffffffffffffda, r1, [{{0x6, 0x3, 0x2, 0x0, 0x8, 0xffff, {0x0, 0xfffffffffffffffd, 0x8000, 0x400, 0xfffffffffffffffc, 0x200, 0xfffff64a, 0x1, 0x8, 0x1000, 0xb8, 0xee00, 0xffffffffffffffff}}, {0x6, 0x6, 0x7, 0x1, 'binder\x00'}}, {{0x6, 0x3, 0xffffffffde86852d, 0x100000000, 0xc0, 0x80000000, {0x1, 0xcbe, 0x8, 0x1, 0xf5f, 0x1000, 0xfffffff9, 0x401, 0x10001, 0x4000, 0xfff, r2, r8, 0x1800000, 0xf}}, {0x6, 0x7fffffff, 0x7, 0x3, '):*<@*!'}}]}, 0x150) 29.275371298s ago: executing program 3 (id=6004): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)) (async) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') getdents64(r2, &(0x7f0000000080)=""/24, 0x18) (async) getdents64(r2, &(0x7f0000000080)=""/24, 0x18) getdents64(r2, 0xfffffffffffffffe, 0x64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f00000004c0)=[@request_death={0x400c630e, 0x3}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@flat=@handle={0x73682a85, 0x110a, 0x1}, @ptr={0x70742a85, 0x4, &(0x7f0000000540)=""/242, 0xf2, 0x1, 0x1a}, @fda={0x66646185, 0x5, 0x2, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}, 0x1400}, @acquire_done], 0x0, 0x0, 0x0}) 29.195215945s ago: executing program 1 (id=6005): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x1}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1) 29.100436972s ago: executing program 1 (id=6006): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1a0101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) eventfd2(0x0, 0x1) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x4, 0x1, 0x0, 0x0, @adapter={0x5, 0x2, 0x5, 0xb29, 0x8}}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 28.942577045s ago: executing program 1 (id=6007): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4080}, 0x0) (async, rerun: 64) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (rerun: 64) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r2, 0xd6baf000) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x311042, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000473000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x3ffe000) (async) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\t\x00\x00\x00\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89Gl:\xe0<\xe6\xa5\x90\xe3\xd2\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`DQT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8S\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf23\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xef\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0x\xb5\x1av\xad\xbe\xc7>B~t\xd7\xf2S\xca:Jn\x87\rl\xdaK\xfa\xf0\xff\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000000)={0x6, 'ip6tnl0\x00', {0x8012}, 0x4}) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f000077d000/0x1000)=nil, 0x1000) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xc480, 0x0) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000698000/0x1000)=nil, 0x1000}}) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 28.248488571s ago: executing program 4 (id=6008): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="100000001005000000000000005bdf252d348928daebe69a84e6bf5e98072c866f683feeeab5989d028eb371e3834e8a6943baac201eb1dfb0f7f4b79562a85d78962f6d824c944c2cc06899cc8d"], 0x10}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 27.667597628s ago: executing program 0 (id=6009): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'lo\x00', {0x3}, 0x81}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="1100000058001f00032ae4f9002304000a04d6", 0x13) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x848, 0x4) 26.700685296s ago: executing program 1 (id=6010): connect$unix(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x98af02) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x8, 0x13, r4, 0x80000000) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0xffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000e1"]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000045000/0x4000)=nil, 0x4000}, 0x2}) mmap(&(0x7f000085b000/0x1000)=nil, 0x1000, 0x2000002, 0x3032, 0xffffffffffffffff, 0xf4d55000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c5342, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@policy_type={0xa}]}, 0x5c}}, 0x20006804) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r9, &(0x7f0000000400)="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", 0x1f000) 24.66751674s ago: executing program 3 (id=6011): ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f00000000c0)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xa3, 0x45, "aeb8825b0c9d096b02e56a9d06ff10d22c21055b86fa5388950ec84ab1cc14899ca5f3c1b36aad319e762eccba7c402e476175c21c4439ee1fe9f013b800a2f73729f002cef0f9ebaa1f3e5b5d7c1d11d66d8298418d0c859d40dbe9b31374b616ee60da15b802754fa9caf0bdfa729c25673b01bfd49e776e3ef502fb349056eb51dde9422e5a47132c10f09f9f216da7fbcbd8cfc3b2817c9b568abc6d1e"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) recvfrom(r1, &(0x7f0000000380)=""/76, 0x4c, 0x141, &(0x7f0000000400)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1e4, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4bc3, 0x42}}}}, [@NL80211_ATTR_FRAME={0xf6, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8e5}, @device_b, @device_b, @initial, {0x5, 0x8}, "", @value={0xe, 0x1, 0x0, 0x0, 0x3}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0xc6, "4b8d46ebdbfdff411e59db59e953aaa6161dcd33cfb1eb9f5cb616dfe152312cdb5f9ae45d29efc372dd02d915a340c9deba64d9914ce3605db7f71216b64c5ca39b17e6c81d8f58691140e1b98971623cf6fffde94a51961f4288eed1fb27d227178544f21cb464f2a3629e7bd9cf10cf4a1b0ee0ab68d889e68f93f531dc8ac82b68b90cfb164fd83da7fba63d64ae489d85a5e6290c810846bafaa5632b8b9f290ed32cf166abc988b736aa75e3ee81cc9460a4410bbf5f28040d946b93256315eca92420"}]}}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x2}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x8}, {0xe, 0x5}, "f3765a61f945be7e50f4e0ceea7ad2dfc2b3e7caec3ca3e6be22cfb4f7aa9fbaf26431d8e5357e5aa3dca0f7784849dd27da4c9651355b29904ccffd76c938af216f5eb6c91c3b8398719da5d9603ddceecda5b619888454978cbf8086c4f2f8d2ea55c3cae19119e2fdaee543bbef2a24e7e3b8756907f09d896cbe3d1b0d60"}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x4117}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x8084) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x204, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "439cd7a28928c97554fbefb2eec18908e9a7cb38f022ad9b4b58090edf0d19567993"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "5d1884f31b9439b9dcbd64595c563c6146c5c54a8c97b38e5b8422f70ca9d2e4d375c0009a910922d47589909e0111daa0e9ea2e182db17d416018a621c0910adadbbbf9c8cb99cbc5ea6364149821a1293f660a075de12755cbb29943cc168a72bfdcaea5fddb16f380fae9ff2930683e8bc827e48d442bf0e32758c3d3e6893f4056840d3906216aa5bb710efda4951714e64fc1301cef625cb11d1e710d78ef6e2afabdc0b5c0dcc3342a2a115cccdb6a7b0b582eabaaed57d73239fd5108a8d0194b4cb2d233b248388d77219597d6cf6b7149b8d8b61588fc3cb3ca64e02f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "dbce2af5a31fe7e417468dde0e311fc3ee3266f0c97a7c74cbe78841400f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x50}, 0x4008090) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd9, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4008801) userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000c00)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xdc) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000c40)) r7 = socket(0x1d, 0x80000, 0x1) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000c80)={0x1, 0xae06}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x110, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x201b, 0x6}}}}, [@NL80211_ATTR_IE={0xc2, 0x2a, [@measure_req={0x26, 0x97, {0xdd, 0x6, 0x7, "910994f859ee7f1dbf932c7f5e1fc6be06211eff7e044ca49d7ac3ddfd86f38bd54fe66eec0a73ead9e866e50b8ccac1437cac7f4c88a981a366689ddc209fbf1e47c01e4ee08c0f2fd3e59ff93dfc1a9c5412a7faf58ccd73ff82bd036dffe9c9a73672cbb09a3b1ffcc892737a52641a655d129e0da257df2787519c02a40320e5ac4197c6572fbbaf6917629348c9729a5679"}}, @supported_rates={0x1, 0x3, [{0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}]}, @supported_rates={0x1, 0x1, [{0x6, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0xb9, 0x2}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x14}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000ec0)={0xed, 0x0, 0x4}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, r9, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) fgetxattr(r7, &(0x7f00000010c0)=@known='system.advise\x00', &(0x7f0000001100)=""/165, 0xa5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001400)={0x0, 0x1, &(0x7f0000001200)=""/193, &(0x7f0000001300)=""/122, &(0x7f0000001380)=""/125, 0x8080000}) 19.399989625s ago: executing program 4 (id=6012): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r3, 0x2) r4 = socket$inet6(0xa, 0x800, 0x40000000) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000000)=0x10005, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x840004, &(0x7f0000000040)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 11.048829408s ago: executing program 33 (id=6009): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'lo\x00', {0x3}, 0x81}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="1100000058001f00032ae4f9002304000a04d6", 0x13) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x848, 0x4) 2.831069221s ago: executing program 34 (id=6010): connect$unix(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x98af02) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x8, 0x13, r4, 0x80000000) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0xffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000e1"]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000045000/0x4000)=nil, 0x4000}, 0x2}) mmap(&(0x7f000085b000/0x1000)=nil, 0x1000, 0x2000002, 0x3032, 0xffffffffffffffff, 0xf4d55000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c5342, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@policy_type={0xa}]}, 0x5c}}, 0x20006804) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r9, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 479.573191ms ago: executing program 35 (id=6012): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r3, 0x2) r4 = socket$inet6(0xa, 0x800, 0x40000000) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000000)=0x10005, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x840004, &(0x7f0000000040)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 0s ago: executing program 36 (id=6011): ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f00000000c0)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xa3, 0x45, "aeb8825b0c9d096b02e56a9d06ff10d22c21055b86fa5388950ec84ab1cc14899ca5f3c1b36aad319e762eccba7c402e476175c21c4439ee1fe9f013b800a2f73729f002cef0f9ebaa1f3e5b5d7c1d11d66d8298418d0c859d40dbe9b31374b616ee60da15b802754fa9caf0bdfa729c25673b01bfd49e776e3ef502fb349056eb51dde9422e5a47132c10f09f9f216da7fbcbd8cfc3b2817c9b568abc6d1e"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) recvfrom(r1, &(0x7f0000000380)=""/76, 0x4c, 0x141, &(0x7f0000000400)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1e4, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4bc3, 0x42}}}}, [@NL80211_ATTR_FRAME={0xf6, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8e5}, @device_b, @device_b, @initial, {0x5, 0x8}, "", @value={0xe, 0x1, 0x0, 0x0, 0x3}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0xc6, "4b8d46ebdbfdff411e59db59e953aaa6161dcd33cfb1eb9f5cb616dfe152312cdb5f9ae45d29efc372dd02d915a340c9deba64d9914ce3605db7f71216b64c5ca39b17e6c81d8f58691140e1b98971623cf6fffde94a51961f4288eed1fb27d227178544f21cb464f2a3629e7bd9cf10cf4a1b0ee0ab68d889e68f93f531dc8ac82b68b90cfb164fd83da7fba63d64ae489d85a5e6290c810846bafaa5632b8b9f290ed32cf166abc988b736aa75e3ee81cc9460a4410bbf5f28040d946b93256315eca92420"}]}}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x2}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x8}, {0xe, 0x5}, "f3765a61f945be7e50f4e0ceea7ad2dfc2b3e7caec3ca3e6be22cfb4f7aa9fbaf26431d8e5357e5aa3dca0f7784849dd27da4c9651355b29904ccffd76c938af216f5eb6c91c3b8398719da5d9603ddceecda5b619888454978cbf8086c4f2f8d2ea55c3cae19119e2fdaee543bbef2a24e7e3b8756907f09d896cbe3d1b0d60"}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x4117}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x8084) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x204, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "439cd7a28928c97554fbefb2eec18908e9a7cb38f022ad9b4b58090edf0d19567993"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "5d1884f31b9439b9dcbd64595c563c6146c5c54a8c97b38e5b8422f70ca9d2e4d375c0009a910922d47589909e0111daa0e9ea2e182db17d416018a621c0910adadbbbf9c8cb99cbc5ea6364149821a1293f660a075de12755cbb29943cc168a72bfdcaea5fddb16f380fae9ff2930683e8bc827e48d442bf0e32758c3d3e6893f4056840d3906216aa5bb710efda4951714e64fc1301cef625cb11d1e710d78ef6e2afabdc0b5c0dcc3342a2a115cccdb6a7b0b582eabaaed57d73239fd5108a8d0194b4cb2d233b248388d77219597d6cf6b7149b8d8b61588fc3cb3ca64e02f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "dbce2af5a31fe7e417468dde0e311fc3ee3266f0c97a7c74cbe78841400f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x50}, 0x4008090) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd9, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4008801) userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000c00)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xdc) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000c40)) r7 = socket(0x1d, 0x80000, 0x1) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000c80)={0x1, 0xae06}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x110, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x201b, 0x6}}}}, [@NL80211_ATTR_IE={0xc2, 0x2a, [@measure_req={0x26, 0x97, {0xdd, 0x6, 0x7, "910994f859ee7f1dbf932c7f5e1fc6be06211eff7e044ca49d7ac3ddfd86f38bd54fe66eec0a73ead9e866e50b8ccac1437cac7f4c88a981a366689ddc209fbf1e47c01e4ee08c0f2fd3e59ff93dfc1a9c5412a7faf58ccd73ff82bd036dffe9c9a73672cbb09a3b1ffcc892737a52641a655d129e0da257df2787519c02a40320e5ac4197c6572fbbaf6917629348c9729a5679"}}, @supported_rates={0x1, 0x3, [{0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}]}, @supported_rates={0x1, 0x1, [{0x6, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0xb9, 0x2}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x14}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000ec0)={0xed, 0x0, 0x4}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, r9, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) fgetxattr(r7, &(0x7f00000010c0)=@known='system.advise\x00', &(0x7f0000001100)=""/165, 0xa5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001400)={0x0, 0x1, &(0x7f0000001200)=""/193, &(0x7f0000001300)=""/122, &(0x7f0000001380)=""/125, 0x8080000}) kernel console output (not intermixed with test programs): d -22 [ 355.785281][T16497] incfs: mount failed -22 [ 355.790671][T16497] incfs: mount failed -22 [ 355.796265][T16497] incfs: mount failed -22 [ 355.801318][T16497] incfs: mount failed -22 [ 355.807582][T16497] incfs: mount failed -22 [ 355.814759][T16497] incfs: Error accessing: ./file0. [ 355.820366][T16497] incfs: mount failed -2 [ 355.862881][ T457] usb 4-1: device descriptor read/64, error -71 [ 355.964635][T16510] 9pnet_fd: Insufficient options for proto=fd [ 356.036154][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 356.082888][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 356.102861][ T457] usb 4-1: device descriptor read/64, error -71 [ 356.214375][ T457] usb usb4-port1: attempt power cycle [ 356.235266][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 356.245382][ T9] usb 5-1: config 1 has an invalid interface number: 55 but max is 1 [ 356.253919][ T9] usb 5-1: config 1 has an invalid interface number: 158 but max is 1 [ 356.262117][ T9] usb 5-1: config 1 has no interface number 0 [ 356.268695][ T9] usb 5-1: config 1 has no interface number 1 [ 356.275693][ T9] usb 5-1: config 1 interface 55 has no altsetting 0 [ 356.282433][ T9] usb 5-1: config 1 interface 158 has no altsetting 0 [ 356.294163][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08a1, bcdDevice= 2.64 [ 356.303367][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.309375][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5405'. [ 356.311488][ T9] usb 5-1: Product: syz [ 356.324817][ T9] usb 5-1: Manufacturer: syz [ 356.329675][ T9] usb 5-1: SerialNumber: syz [ 356.552915][ T457] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 356.586252][ T457] usb 4-1: device descriptor read/8, error -71 [ 356.632442][ T9] usb 5-1: USB disconnect, device number 7 [ 356.632621][T16541] fuse: Bad value for 'fd' [ 356.724860][ T457] usb 4-1: device descriptor read/8, error -71 [ 356.767534][T16556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=16556 comm=syz.1.5412 [ 356.972889][ T457] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 356.994768][ T457] usb 4-1: device descriptor read/8, error -71 [ 357.124675][ T457] usb 4-1: device descriptor read/8, error -71 [ 357.234115][ T457] usb usb4-port1: unable to enumerate USB device [ 357.443120][T16584] fuse: Bad value for 'user_id' [ 357.448056][T16584] fuse: Bad value for 'user_id' [ 358.148426][T16609] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 358.148455][T16609] rust_binder: Error while translating object. [ 358.187065][T16609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.203263][T16609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 358.367202][T16626] netlink: 'syz.1.5438': attribute type 4 has an invalid length. [ 358.386552][T16628] netlink: 'syz.1.5438': attribute type 4 has an invalid length. [ 358.402939][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5439'. [ 358.465659][T16636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 358.680457][T16646] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 358.933434][ T36] kauditd_printk_skb: 1039 callbacks suppressed [ 358.933452][ T36] audit: type=1400 audit(2000000037.760:409082): avc: denied { ioctl } for pid=16657 comm="syz.3.5448" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 358.965444][ T36] audit: type=1400 audit(2000000037.760:409083): avc: denied { create } for pid=16689 comm="syz.0.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 358.985587][T15441] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 358.985648][ T36] audit: type=1400 audit(2000000037.760:409084): avc: denied { create } for pid=16689 comm="syz.0.5454" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 359.014752][ T36] audit: type=1400 audit(2000000037.760:409085): avc: denied { map } for pid=16689 comm="syz.0.5454" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 359.039349][ T36] audit: type=1400 audit(2000000037.760:409086): avc: denied { read write } for pid=16689 comm="syz.0.5454" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 359.064656][ T36] audit: type=1400 audit(2000000037.760:409087): avc: denied { create } for pid=16689 comm="syz.0.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.085222][ T337] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 359.092867][ T36] audit: type=1400 audit(2000000037.760:409088): avc: denied { create } for pid=16689 comm="syz.0.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.112783][ T36] audit: type=1400 audit(2000000037.760:409089): avc: denied { setopt } for pid=16689 comm="syz.0.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.134300][ T36] audit: type=1400 audit(2000000037.760:409090): avc: denied { create } for pid=16689 comm="syz.0.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.155201][T15441] usb 5-1: device descriptor read/64, error -71 [ 359.161492][ T36] audit: type=1400 audit(2000000037.760:409091): avc: denied { write } for pid=16689 comm="syz.0.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.178675][T16699] netlink: 596 bytes leftover after parsing attributes in process `syz.0.5457'. [ 359.293231][ T337] usb 4-1: Using ep0 maxpacket: 8 [ 359.306136][ T337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.344769][ T337] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 359.363595][ T337] usb 4-1: config 0 has no interface number 0 [ 359.369901][ T337] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 359.381945][ T337] usb 4-1: config 0 interface 88 has no altsetting 0 [ 359.394688][ T337] usb 4-1: string descriptor 0 read error: -22 [ 359.400920][ T337] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 359.410455][T15441] usb 5-1: device descriptor read/64, error -71 [ 359.418753][ T337] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 359.452366][ T337] usb 4-1: config 0 descriptor?? [ 359.460242][ T337] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input22 [ 359.652853][T15441] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 359.724628][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 359.763163][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 359.812882][T16660] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 359.842852][T15441] usb 5-1: device descriptor read/64, error -71 [ 359.863450][T16740] /dev/loop0: Can't lookup blockdev [ 359.872544][T16747] 9pnet_fd: Insufficient options for proto=fd [ 359.878765][T16748] 9pnet_fd: Insufficient options for proto=fd [ 359.935169][T16754] incfs: Backing dir is not set, filesystem can't be mounted. [ 359.943001][T16754] incfs: mount failed -2 [ 359.953786][ T9] usb 4-1: USB disconnect, device number 50 [ 360.082856][T15441] usb 5-1: device descriptor read/64, error -71 [ 360.191231][T16772] 9pnet_fd: Insufficient options for proto=fd [ 360.197852][T15441] usb usb5-port1: attempt power cycle [ 360.380252][T16785] binder: Bad value for 'defcontext' [ 360.453541][T16788] 9pnet_fd: Insufficient options for proto=fd [ 360.543385][T15441] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 360.593711][T15441] usb 5-1: device descriptor read/8, error -71 [ 360.638713][T16804] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5488'. [ 360.731173][T16809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16809 comm=syz.3.5490 [ 360.747476][T15441] usb 5-1: device descriptor read/8, error -71 [ 360.795027][T16812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16812 comm=syz.0.5491 [ 360.808000][T16812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=16812 comm=syz.0.5491 [ 360.992852][T15441] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 361.017280][T15441] usb 5-1: device descriptor read/8, error -71 [ 361.155085][T15441] usb 5-1: device descriptor read/8, error -71 [ 361.262925][T15441] usb usb5-port1: unable to enumerate USB device [ 361.587711][T16839] /dev/rnullb0: Can't open blockdev [ 361.783938][T16841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:155 [ 361.828696][T16843] 9pnet_fd: Insufficient options for proto=fd [ 361.897282][T16846] 9pnet_fd: Insufficient options for proto=fd [ 362.137324][T16873] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5514'. [ 362.146544][T16873] tc_dump_action: action bad kind [ 362.364529][T16886] netlink: 'syz.0.5518': attribute type 46 has an invalid length. [ 362.552306][T16904] overlayfs: failed to resolve '/': -2 [ 362.619475][T16907] overlayfs: failed to resolve './file0': -2 [ 362.803487][T16920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5529'. [ 363.411256][T16942] overlayfs: failed to clone upperpath [ 363.545193][T16950] overlayfs: failed to clone lowerpath [ 363.584412][T16954] 9pnet_fd: Insufficient options for proto=fd [ 363.896679][T16974] fuse: Bad value for 'group_id' [ 363.907680][T16974] fuse: Bad value for 'group_id' [ 363.968493][ T36] kauditd_printk_skb: 670 callbacks suppressed [ 363.968512][ T36] audit: type=1400 audit(2000000042.790:409762): avc: denied { mounton } for pid=16978 comm="syz.1.5549" path="/468/file0" dev="tmpfs" ino=2554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 363.971798][T16979] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›Xò۵רѳlú¶uË9 [ 364.021971][ T36] audit: type=1400 audit(2000000042.840:409763): avc: denied { create } for pid=16978 comm="syz.1.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.043602][ T36] audit: type=1400 audit(2000000042.840:409764): avc: denied { write } for pid=16978 comm="syz.1.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.064356][ T36] audit: type=1400 audit(2000000042.840:409765): avc: denied { read } for pid=16978 comm="syz.1.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.105491][ T36] audit: type=1400 audit(2000000042.850:409766): avc: denied { create } for pid=16978 comm="syz.1.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.128891][ T36] audit: type=1400 audit(2000000042.850:409767): avc: denied { write } for pid=16978 comm="syz.1.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.158945][ T36] audit: type=1400 audit(2000000042.850:409768): avc: denied { read } for pid=16978 comm="syz.1.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.181384][ T36] audit: type=1400 audit(2000000042.870:409769): avc: denied { unmount } for pid=16008 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 364.202511][ T36] audit: type=1400 audit(2000000042.890:409770): avc: denied { read write } for pid=16008 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.227793][ T36] audit: type=1400 audit(2000000042.890:409771): avc: denied { read write open } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.352853][ T9] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 364.505477][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 364.518176][ T9] usb 5-1: string descriptor 0 read error: -22 [ 364.524929][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 364.535065][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.761780][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 364.769512][T17018] /dev/rnullb0: Can't open blockdev [ 364.777984][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 364.788333][ T9] usb 5-1: USB disconnect, device number 12 [ 364.974439][T17026] overlayfs: failed to clone upperpath [ 365.122307][T17036] 9pnet: Could not find request transport: f°Ç9”z#íßqmžú2sª£Qž[ E-ñè¡ŸzÆd­ÚÕ^¾Á‡Ã£‚O²ñæÃS„ÜQb…p0x0000000000000005 [ 365.362724][T17043] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5573'. [ 365.374307][T17044] netlink: 'syz.0.5574': attribute type 4 has an invalid length. [ 365.396304][T17044] netlink: 'syz.0.5574': attribute type 4 has an invalid length. [ 365.612877][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 365.766060][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 365.773708][ T9] usb 5-1: can't read configurations, error -61 [ 365.800924][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5582'. [ 365.902868][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 365.912871][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 366.062845][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 366.069490][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 366.083601][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 366.092637][ T9] usb 5-1: can't read configurations, error -61 [ 366.101190][ T9] usb usb5-port1: attempt power cycle [ 366.106877][ T10] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 366.118043][ T10] usb 4-1: config 0 has no interface number 0 [ 366.125113][ T10] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 366.137018][ T10] usb 4-1: config 0 interface 88 has no altsetting 0 [ 366.150561][ T10] usb 4-1: string descriptor 0 read error: -22 [ 366.162862][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 366.181898][ T10] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 366.202188][ T10] usb 4-1: config 0 descriptor?? [ 366.215741][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input23 [ 366.305029][T17100] Invalid ELF header len 1 [ 366.346426][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 366.354510][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 366.425854][T17105] netlink: 'syz.1.5593': attribute type 16 has an invalid length. [ 366.433801][T17105] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5593'. [ 366.462858][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 366.481258][T17108] overlayfs: failed to clone upperpath [ 366.489057][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 366.501044][ T9] usb 5-1: can't read configurations, error -61 [ 366.585933][ T10] usb 4-1: USB disconnect, device number 51 [ 366.642869][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 366.687030][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 366.696235][T17122] overlayfs: failed to clone upperpath [ 366.704786][ T9] usb 5-1: can't read configurations, error -61 [ 366.713883][ T9] usb usb5-port1: unable to enumerate USB device [ 367.223939][T17151] overlayfs: missing 'workdir' [ 367.299135][T17154] netlink: 'syz.0.5609': attribute type 16 has an invalid length. [ 367.307302][T17154] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5609'. [ 367.888067][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5622'. [ 367.904745][T17197] netlink: 'syz.0.5622': attribute type 3 has an invalid length. [ 367.931182][T17204] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5624'. [ 367.947510][T17206] netlink: 37 bytes leftover after parsing attributes in process `syz.3.5625'. [ 368.192982][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 368.342885][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 368.349815][ T9] usb 4-1: config 80 has an invalid interface number: 157 but max is 3 [ 368.358205][ T9] usb 4-1: config 80 has an invalid interface number: 229 but max is 3 [ 368.366502][ T9] usb 4-1: config 80 has an invalid interface number: 54 but max is 3 [ 368.374747][ T9] usb 4-1: config 80 has an invalid interface number: 54 but max is 3 [ 368.382936][ T9] usb 4-1: config 80 has 3 interfaces, different from the descriptor's value: 4 [ 368.391971][ T9] usb 4-1: config 80 has no interface number 0 [ 368.398217][ T9] usb 4-1: config 80 has no interface number 1 [ 368.404445][ T9] usb 4-1: config 80 has no interface number 2 [ 368.410599][ T9] usb 4-1: config 80 interface 229 has no altsetting 0 [ 368.417664][ T9] usb 4-1: config 80 interface 54 has no altsetting 0 [ 368.424610][ T9] usb 4-1: config 80 interface 54 has no altsetting 1 [ 368.440473][ T9] usb 4-1: New USB device found, idVendor=0c52, idProduct=2103, bcdDevice=39.5d [ 368.472922][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.480994][ T9] usb 4-1: Product: syz [ 368.497854][ T9] usb 4-1: Manufacturer: syz [ 368.502643][ T9] usb 4-1: SerialNumber: syz [ 368.728072][ T9] ftdi_sio 4-1:80.157: FTDI USB Serial Device converter detected [ 368.740709][ T9] ftdi_sio ttyUSB0: unknown device type: 0x395d [ 368.750886][ T9] usb-storage 4-1:80.229: USB Mass Storage device detected [ 368.794424][ T9] ftdi_sio 4-1:80.229: FTDI USB Serial Device converter detected [ 368.807617][ T9] ftdi_sio ttyUSB1: unknown device type: 0x395d [ 368.816475][ T9] ftdi_sio 4-1:80.54: FTDI USB Serial Device converter detected [ 368.827626][ T9] ftdi_sio ttyUSB2: unknown device type: 0x395d [ 368.849273][ T9] usb 4-1: USB disconnect, device number 52 [ 368.857858][ T9] ftdi_sio 4-1:80.157: device disconnected [ 368.864951][ T9] ftdi_sio 4-1:80.229: device disconnected [ 368.871447][ T9] ftdi_sio 4-1:80.54: device disconnected [ 368.978646][ T36] kauditd_printk_skb: 1409 callbacks suppressed [ 368.978663][ T36] audit: type=1400 audit(2000000047.800:411181): avc: denied { read write } for pid=16008 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.011364][ T36] audit: type=1400 audit(2000000047.810:411182): avc: denied { read write open } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.041399][ T36] audit: type=1400 audit(2000000047.810:411183): avc: denied { ioctl } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.067508][ T36] audit: type=1400 audit(2000000047.860:411184): avc: denied { create } for pid=17238 comm="syz.4.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.093925][T17241] /dev/rnullb0: Can't open blockdev [ 369.099956][ T36] audit: type=1400 audit(2000000047.860:411185): avc: denied { create } for pid=17238 comm="syz.4.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.130822][ T36] audit: type=1400 audit(2000000047.860:411186): avc: denied { write } for pid=17238 comm="syz.4.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.151700][ T36] audit: type=1400 audit(2000000047.860:411187): avc: denied { read } for pid=17238 comm="syz.4.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.172686][ T36] audit: type=1400 audit(2000000047.860:411188): avc: denied { read } for pid=17238 comm="syz.4.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.193328][ T36] audit: type=1400 audit(2000000047.860:411189): avc: denied { write } for pid=17238 comm="syz.4.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.213961][ T36] audit: type=1400 audit(2000000047.860:411190): avc: denied { read } for pid=17238 comm="syz.4.5637" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 369.283347][T17250] serio: Serial port ttyS3 [ 369.390729][T17257] overlay: ./file0 is not a directory [ 369.684263][T17279] fuseblk: Bad value for 'rootmode' [ 369.694651][T17278] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 369.837114][T17289] tipc: Started in network mode [ 369.842023][T17289] tipc: Node identity ac141413, cluster identity 4711 [ 369.861140][T17289] tipc: New replicast peer: 10.1.1.2 [ 369.872198][T17289] tipc: Enabled bearer , priority 10 [ 370.148468][T17301] netlink: 4760 bytes leftover after parsing attributes in process `syz.3.5657'. [ 370.194510][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5659'. [ 370.200178][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5658'. [ 370.345283][T17316] overlayfs: failed to clone upperpath [ 370.379160][T17319] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 370.585087][T17331] Invalid logical block size (-23228) [ 370.744541][T17343] bridge0: port 3(ip6gretap0) entered blocking state [ 370.751513][T17343] bridge0: port 3(ip6gretap0) entered disabled state [ 370.758277][T17343] ip6gretap0: entered allmulticast mode [ 370.764279][T17343] ip6gretap0: entered promiscuous mode [ 370.769848][T17343] bridge0: port 3(ip6gretap0) entered blocking state [ 370.776584][T17343] bridge0: port 3(ip6gretap0) entered forwarding state [ 370.834941][T17346] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 370.842968][T17348] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 370.982862][ T10] tipc: Node number set to 2886997011 [ 371.061004][T17362] input: syz1 as /devices/virtual/input/input26 [ 371.192394][T17369] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 371.228608][T17371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.402760][T17394] rust_binder: Write failure EFAULT in pid:436 [ 371.410078][T17394] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.642531][T17403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.717746][T17403] rust_binder: Error in use_page_slow: ESRCH [ 371.724214][T17403] rust_binder: use_range failure ESRCH [ 371.730189][T17403] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 371.735700][T17403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 371.743712][T17403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:445 [ 371.914258][T17406] /dev/rnullb0: Can't lookup blockdev [ 372.414997][T17458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 372.685137][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5721'. [ 372.700533][T17473] bridge_slave_1: left allmulticast mode [ 372.706256][T17473] bridge_slave_1: left promiscuous mode [ 372.711918][T17473] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.719849][T17473] ªªªªª$: left allmulticast mode [ 372.725038][T17473] ªªªªª$: left promiscuous mode [ 372.730157][T17473] bridge0: port 1(ªªªªª$) entered disabled state [ 372.933873][T17481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17481 comm=syz.1.5724 [ 373.012926][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 373.112427][T17499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5730'. [ 373.152892][ T10] usb 4-1: device descriptor read/64, error -71 [ 373.393086][ T10] usb 4-1: device descriptor read/64, error -71 [ 373.632855][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 373.691638][T17511] netlink: 'syz.1.5734': attribute type 4 has an invalid length. [ 373.702281][T17511] netlink: 'syz.1.5734': attribute type 4 has an invalid length. [ 373.772849][ T10] usb 4-1: device descriptor read/64, error -71 [ 373.985546][ T36] kauditd_printk_skb: 764 callbacks suppressed [ 373.985565][ T36] audit: type=1400 audit(2000000052.810:411955): avc: denied { read write } for pid=17519 comm="syz.4.5738" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.027422][ T10] usb 4-1: device descriptor read/64, error -71 [ 374.058315][ T36] audit: type=1400 audit(2000000052.840:411956): avc: denied { read write open } for pid=17519 comm="syz.4.5738" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.113435][ T36] audit: type=1400 audit(2000000052.840:411957): avc: denied { read } for pid=17519 comm="syz.4.5738" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.149114][ T36] audit: type=1400 audit(2000000052.840:411958): avc: denied { read open } for pid=17519 comm="syz.4.5738" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.174462][ T10] usb usb4-port1: attempt power cycle [ 374.183403][ T36] audit: type=1400 audit(2000000052.840:411959): avc: denied { ioctl } for pid=17519 comm="syz.4.5738" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.242230][ T36] audit: type=1400 audit(2000000052.840:411960): avc: denied { set_context_mgr } for pid=17519 comm="syz.4.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 374.266763][ T36] audit: type=1400 audit(2000000052.840:411961): avc: denied { map } for pid=17519 comm="syz.4.5738" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.274272][T17534] fuse: Bad value for 'fd' [ 374.297410][ T36] audit: type=1400 audit(2000000052.840:411962): avc: denied { read } for pid=17519 comm="syz.4.5738" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.328314][ T36] audit: type=1400 audit(2000000052.850:411963): avc: denied { ioctl } for pid=17519 comm="syz.4.5738" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.359586][ T36] audit: type=1400 audit(2000000052.850:411964): avc: denied { call } for pid=17519 comm="syz.4.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 374.532859][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 374.555292][ T10] usb 4-1: device descriptor read/8, error -71 [ 374.685859][ T10] usb 4-1: device descriptor read/8, error -71 [ 374.932841][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 374.953563][T17579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 374.953592][T17579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 374.963094][T17579] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 374.967559][ T10] usb 4-1: device descriptor read/8, error -71 [ 374.972447][T17579] rust_binder: Read failure Err(EFAULT) in pid:241 [ 375.125901][ T10] usb 4-1: device descriptor read/8, error -71 [ 375.160577][T17580] /dev/loop0: Can't lookup blockdev [ 375.243424][ T10] usb usb4-port1: unable to enumerate USB device [ 375.282875][ T330] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 375.442856][ T330] usb 5-1: Using ep0 maxpacket: 8 [ 375.453447][ T330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.464159][ T330] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 375.472314][ T330] usb 5-1: config 0 has no interface number 0 [ 375.479617][ T330] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 375.491493][ T330] usb 5-1: config 0 interface 88 has no altsetting 0 [ 375.503963][ T330] usb 5-1: string descriptor 0 read error: -22 [ 375.510190][ T330] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 375.520826][ T330] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 375.531488][ T330] usb 5-1: config 0 descriptor?? [ 375.553100][ T330] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input27 [ 375.694794][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 375.711701][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 375.729727][T17584] virtiofs: Unknown parameter 'always' [ 375.778758][ T330] usb 5-1: USB disconnect, device number 17 [ 375.904342][T17588] netlink: 'syz.3.5753': attribute type 2 has an invalid length. [ 375.928371][T17588] rust_binder: Fixups oob 164 166 363 196 [ 375.928397][T17588] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 375.940868][T17588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 375.949893][T17588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 376.177802][T17603] tipc: Can't bind to reserved service type 0 [ 376.233447][T17603] /dev/rnullb0: Can't open blockdev [ 376.541253][T17626] 9pnet_fd: Insufficient options for proto=fd [ 376.558738][T17627] 9pnet_fd: Insufficient options for proto=fd [ 376.635046][T17633] incfs: Error accessing: ./file0. [ 376.640227][T17633] incfs: mount failed -20 [ 376.747998][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 376.795734][T17638] netlink: 'syz.4.5770': attribute type 4 has an invalid length. [ 376.924999][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 376.948646][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.965433][ T10] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 376.984997][ T10] usb 4-1: config 0 has no interface number 0 [ 376.991134][ T10] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 377.020297][ T10] usb 4-1: config 0 interface 88 has no altsetting 0 [ 377.040338][ T10] usb 4-1: string descriptor 0 read error: -22 [ 377.049735][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 377.068508][ T10] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 377.092950][ T10] usb 4-1: config 0 descriptor?? [ 377.111016][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input28 [ 377.335133][ T10] usb 4-1: USB disconnect, device number 57 [ 377.388409][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 377.411709][T14983] udevd[14983]: Unable to EVIOCGABS device "/dev/input/event3" [ 377.633348][T17647] /dev/rnullb0: Can't lookup blockdev [ 377.714272][T17654] fuseblk: Unknown parameter 'user_i¼•®¶ˆd' [ 377.893821][T17678] netlink: 'syz.1.5784': attribute type 4 has an invalid length. [ 377.903525][T17677] netlink: 'syz.1.5784': attribute type 4 has an invalid length. [ 378.075236][T17682] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 378.075260][T17682] rust_binder: Error while translating object. [ 378.089518][T17682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 378.096798][T17682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 378.368127][T17709] netlink: 'syz.0.5796': attribute type 13 has an invalid length. [ 378.824502][T17747] /dev/rnullb0: Can't lookup blockdev [ 379.031582][ T36] kauditd_printk_skb: 525 callbacks suppressed [ 379.031600][ T36] audit: type=1400 audit(2000000057.850:412490): avc: denied { read write } for pid=15045 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.067777][T17755] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.073857][T17756] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.074439][T17755] audit: audit_lost=4480 audit_rate_limit=0 audit_backlog_limit=64 [ 379.088884][T17756] audit: audit_lost=4481 audit_rate_limit=0 audit_backlog_limit=64 [ 379.097651][ T36] audit: type=1400 audit(2000000057.850:412491): avc: denied { read write open } for pid=15045 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.099019][T17755] audit: backlog limit exceeded [ 379.123081][ T36] audit: type=1400 audit(2000000057.850:412492): avc: denied { ioctl } for pid=15045 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.142426][T17756] audit: backlog limit exceeded [ 379.155138][ T36] audit: type=1400 audit(2000000057.870:412493): avc: denied { read } for pid=17754 comm="syz.3.5812" name="binder0" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.196260][T17760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5813'. [ 379.248809][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 380.008623][T17793] netlink: 'syz.1.5824': attribute type 4 has an invalid length. [ 380.016517][T17793] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5824'. [ 380.157344][T17798] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 381.292866][ T372] Bluetooth: hci0: command 0x1003 tx timeout [ 381.292909][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 381.849492][T17819] rust_binder: 272: no such ref 3 [ 381.854707][T17819] rust_binder: Write failure EINVAL in pid:272 [ 382.133725][T17832] kvm: emulating exchange as write [ 382.184023][T17830] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.191114][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.198270][T17830] bridge_slave_0: entered allmulticast mode [ 382.204563][T17830] bridge_slave_0: entered promiscuous mode [ 382.211525][T17830] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.218599][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.226992][T17830] bridge_slave_1: entered allmulticast mode [ 382.233429][T17830] bridge_slave_1: entered promiscuous mode [ 382.284250][T17838] input: syz1 as /devices/virtual/input/input29 [ 382.314760][ T329] bridge_slave_1: left allmulticast mode [ 382.320804][T17838] devpts: called with bogus options [ 382.332991][ T329] bridge_slave_1: left promiscuous mode [ 382.344569][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.352292][ T329] bridge_slave_0: left allmulticast mode [ 382.358954][ T329] bridge_slave_0: left promiscuous mode [ 382.365128][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.539294][ T329] veth1_macvtap: left promiscuous mode [ 382.545067][ T329] veth0_vlan: left promiscuous mode [ 382.685541][T17830] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.692616][T17830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.700025][T17830] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.707133][T17830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.786808][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.813063][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.856005][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.863571][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.893538][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.900624][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.936150][T17867] netlink: 'syz.3.5846': attribute type 27 has an invalid length. [ 382.963384][T17867] bridge0: port 3(ip6gretap0) entered disabled state [ 382.970434][T17867] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.977678][T17867] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.015300][T17868] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 383.030453][T17868] binder: Unknown parameter 'defcontext01777777777777777777777' [ 383.039993][T17871] rust_binder: Write failure EFAULT in pid:300 [ 383.113271][T17874] rust_binder: 304: no such ref 0 [ 383.184453][T17830] veth0_vlan: entered promiscuous mode [ 383.279440][T17830] veth1_macvtap: entered promiscuous mode [ 383.551196][T17896] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 383.589007][T17896] rust_binder: Write failure EINVAL in pid:521 [ 383.625011][T17901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 383.632663][T17901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 383.647453][T17901] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 383.657299][T17901] rust_binder: Read failure Err(EFAULT) in pid:4 [ 383.745359][T17911] /dev/rnullb0: Can't open blockdev [ 384.033357][ T36] kauditd_printk_skb: 1259 callbacks suppressed [ 384.033374][ T36] audit: type=1400 audit(2000000322.857:413750): avc: denied { write } for pid=17921 comm="syz.1.5861" lport=55831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.065905][ T36] audit: type=1400 audit(2000000322.877:413751): avc: denied { write } for pid=17921 comm="syz.1.5861" lport=55831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.094378][ T36] audit: type=1400 audit(2000000322.877:413752): avc: denied { write } for pid=17921 comm="syz.1.5861" lport=55831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.121024][T17922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.130756][ T36] audit: type=1400 audit(2000000322.887:413753): avc: denied { write } for pid=17921 comm="syz.1.5861" lport=55831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.137423][T17922] audit: audit_lost=4483 audit_rate_limit=0 audit_backlog_limit=64 [ 384.175878][T17922] audit: backlog limit exceeded [ 384.183352][ T36] audit: type=1400 audit(2000000322.887:413754): avc: denied { write } for pid=17921 comm="syz.1.5861" lport=55831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.189211][T17922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.222825][T17922] audit: audit_lost=4484 audit_rate_limit=0 audit_backlog_limit=64 [ 384.231166][T17939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=17939 comm=syz.0.5867 [ 384.254402][T17939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17939 comm=syz.0.5867 [ 384.271173][T17936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17936 comm=syz.0.5867 [ 384.465106][T17938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17938 comm=syz.4.5868 [ 384.601357][T17945] rust_binder: validate_parent_fixup: fixup_min_offset=122, parent_offset=36 [ 384.601381][T17945] rust_binder: Error while translating object. [ 384.611088][T17945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 384.636020][T17945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 384.725261][T17952] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 384.909189][T17961] rust_binder: Write failure EFAULT in pid:19 [ 384.921732][T17959] netlink: 'syz.4.5874': attribute type 12 has an invalid length. [ 385.230970][T17974] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 385.249676][T17974] rust_binder: Write failure EINVAL in pid:347 [ 385.882673][T16113] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 386.042644][T16113] usb 5-1: Using ep0 maxpacket: 16 [ 386.050433][T16113] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 386.059332][T16113] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.069463][T16113] usb 5-1: config 0 has no interface number 0 [ 386.078460][T16113] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 386.087812][T16113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.095836][T16113] usb 5-1: Product: syz [ 386.100007][T16113] usb 5-1: Manufacturer: syz [ 386.104653][T16113] usb 5-1: SerialNumber: syz [ 386.110566][T16113] usb 5-1: config 0 descriptor?? [ 386.325419][T17995] cgroup2: Unknown parameter 'favordynmos' [ 386.341733][T16113] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 386.353639][T16113] usb 5-1: No valid video chain found. [ 386.368008][T16113] usb 5-1: USB disconnect, device number 18 [ 386.574915][T18019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=18019 comm=syz.0.5897 [ 386.588653][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5897'. [ 386.599919][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5897'. [ 386.654539][T18026] netlink: 'syz.3.5898': attribute type 11 has an invalid length. [ 386.662514][T18026] netlink: 'syz.3.5898': attribute type 1 has an invalid length. [ 386.670314][T18026] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.5898'. [ 386.862542][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 387.014290][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 387.023018][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 387.033346][ T9] usb 2-1: config 220 has no interface number 2 [ 387.039595][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 387.053592][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 387.055011][T18040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 387.060390][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 387.068827][ T330] rust_binder: 18039: removing orphan mapping 0:24 [ 387.069575][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 387.082500][ T330] rust_binder: 0: removing orphan mapping 24:1104 [ 387.087717][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 387.119923][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.129009][ T9] usb 2-1: Product: syz [ 387.133427][ T9] usb 2-1: Manufacturer: syz [ 387.138068][ T9] usb 2-1: SerialNumber: syz [ 387.229190][T18048] /dev/loop0: Can't lookup blockdev [ 387.400319][T18052] random: crng reseeded on system resumption [ 387.422518][ T330] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 387.472524][ T9] usb 2-1: selecting invalid altsetting 0 [ 387.478560][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 387.485200][ T9] usb 2-1: No valid video chain found. [ 387.501189][ T9] usb 2-1: USB disconnect, device number 37 [ 387.572704][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 387.589176][ T330] usb 5-1: config 80 has an invalid interface number: 157 but max is 3 [ 387.600017][ T330] usb 5-1: config 80 has an invalid interface number: 229 but max is 3 [ 387.608881][ T330] usb 5-1: config 80 has an invalid interface number: 54 but max is 3 [ 387.617607][ T330] usb 5-1: config 80 has an invalid interface number: 54 but max is 3 [ 387.637982][ T330] usb 5-1: config 80 has 3 interfaces, different from the descriptor's value: 4 [ 387.653392][T18057] rust_binder: Write failure EINVAL in pid:548 [ 387.653669][ T330] usb 5-1: config 80 has no interface number 0 [ 387.672129][ T330] usb 5-1: config 80 has no interface number 1 [ 387.678990][ T330] usb 5-1: config 80 has no interface number 2 [ 387.685722][ T330] usb 5-1: config 80 interface 229 has no altsetting 0 [ 387.693342][ T330] usb 5-1: config 80 interface 54 has no altsetting 0 [ 387.700178][ T330] usb 5-1: config 80 interface 54 has no altsetting 1 [ 387.716091][ T330] usb 5-1: New USB device found, idVendor=0c52, idProduct=2103, bcdDevice=39.5d [ 387.731026][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.741281][ T330] usb 5-1: Product: syz [ 387.745629][ T330] usb 5-1: Manufacturer: syz [ 387.750375][ T330] usb 5-1: SerialNumber: syz [ 387.962287][T18043] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 387.962312][T18043] rust_binder: Read failure Err(EFAULT) in pid:363 [ 387.971814][T18043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:363 [ 387.982380][ T330] ftdi_sio 5-1:80.157: FTDI USB Serial Device converter detected [ 388.003309][ T330] ftdi_sio ttyUSB0: unknown device type: 0x395d [ 388.013022][ T330] usb-storage 5-1:80.229: USB Mass Storage device detected [ 388.078290][ T330] ftdi_sio 5-1:80.229: FTDI USB Serial Device converter detected [ 388.086440][ T330] ftdi_sio ttyUSB1: unknown device type: 0x395d [ 388.094591][ T330] ftdi_sio 5-1:80.54: FTDI USB Serial Device converter detected [ 388.103141][ T330] ftdi_sio ttyUSB2: unknown device type: 0x395d [ 388.113585][ T330] usb 5-1: USB disconnect, device number 19 [ 388.123533][ T330] ftdi_sio 5-1:80.157: device disconnected [ 388.131095][ T330] ftdi_sio 5-1:80.229: device disconnected [ 388.143908][ T330] ftdi_sio 5-1:80.54: device disconnected [ 388.209036][T18083] netlink: 'syz.0.5916': attribute type 4 has an invalid length. [ 388.220732][T18084] netlink: 'syz.0.5916': attribute type 4 has an invalid length. [ 388.229736][T18083] netlink: 'syz.0.5916': attribute type 4 has an invalid length. [ 388.407965][T18110] /dev/rnullb0: Can't lookup blockdev [ 388.593871][T18133] /dev/rnullb0: Can't open blockdev [ 388.670909][T18138] rust_binder: Error while translating object. [ 388.671972][T18138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.684155][T18138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 388.776660][T18130] overlayfs: failed to clone upperpath [ 388.932325][ T330] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 389.082247][ T330] usb 5-1: Using ep0 maxpacket: 32 [ 389.087963][ T36] kauditd_printk_skb: 1517 callbacks suppressed [ 389.087979][ T36] audit: type=1400 audit(2000000327.907:415271): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.119463][ T36] audit: type=1400 audit(2000000327.907:415272): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.120981][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.145440][ T36] audit: type=1400 audit(2000000327.937:415273): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.155391][ T330] usb 5-1: config 0 has no interfaces? [ 389.182255][ T36] audit: type=1400 audit(2000000327.937:415274): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.185578][ T330] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 389.211689][ T36] audit: type=1400 audit(2000000327.937:415275): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.220207][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.245478][ T36] audit: type=1400 audit(2000000327.977:415276): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.256134][ T330] usb 5-1: config 0 descriptor?? [ 389.285229][ T36] audit: type=1400 audit(2000000328.107:415277): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.310512][ T36] audit: type=1400 audit(2000000328.107:415278): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.336137][ T36] audit: type=1400 audit(2000000328.107:415279): avc: denied { ioctl } for pid=18137 comm="syz.4.5932" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.401076][ T36] audit: type=1400 audit(2000000328.217:415280): avc: denied { execmem } for pid=18147 comm="syz.0.5935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 389.514538][T18158] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5938'. [ 389.545921][T18160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 389.545948][T18160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 389.780654][T18184] netlink: 'syz.1.5946': attribute type 16 has an invalid length. [ 389.799956][T18185] netlink: 'syz.1.5946': attribute type 16 has an invalid length. [ 390.439863][T18209] rust_binder: Write failure EINVAL in pid:85 [ 390.511731][T18220] /dev/rnullb0: Can't lookup blockdev [ 390.593440][T18227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 390.620469][T18231] overlayfs: failed to clone upperpath [ 391.028593][T18263] tmpfs: Bad value for 'huge' [ 391.034623][T18264] tmpfs: Bad value for 'huge' [ 391.581506][T18282] random: crng reseeded on system resumption [ 391.656112][T15441] usb 5-1: USB disconnect, device number 20 [ 391.831929][ T330] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 391.991166][ T330] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 392.005257][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.018152][ T330] usb 2-1: config 0 descriptor?? [ 392.060708][T18297] overlayfs: failed to clone upperpath [ 392.161391][T18303] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.243455][ T330] usb 2-1: Cannot set MAC address [ 392.248573][ T330] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 392.289918][ T330] usb 2-1: USB disconnect, device number 38 [ 392.787294][T18330] bridge0: port 3(veth0_to_bridge) entered blocking state [ 392.794595][T18330] bridge0: port 3(veth0_to_bridge) entered disabled state [ 392.801867][T18330] veth0_to_bridge: entered allmulticast mode [ 392.808410][T18330] veth0_to_bridge: entered promiscuous mode [ 392.814558][T18330] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.826917][T18330] bridge0: port 3(veth0_to_bridge) entered blocking state [ 392.834091][T18330] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 392.845075][ C1] net_ratelimit: 22 callbacks suppressed [ 392.845086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.863071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.875191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.887324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.899477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.911597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.923851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.935997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.948127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 392.960347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 393.351723][ T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 393.505110][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.524863][ T10] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 393.544671][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.585910][ T10] usb 5-1: config 0 descriptor?? [ 394.023317][ T10] waltop 0003:172F:0501.000F: item fetching failed at offset 0/3 [ 394.048896][ T10] waltop 0003:172F:0501.000F: probe with driver waltop failed with error -22 [ 394.223018][ T36] kauditd_printk_skb: 542 callbacks suppressed [ 394.223036][ T36] audit: type=1400 audit(2000000333.048:415823): avc: denied { read write } for pid=18332 comm="syz.4.5989" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.271785][ T10] usb 5-1: USB disconnect, device number 21 [ 394.347864][ T36] audit: type=1400 audit(2000000333.078:415824): avc: denied { read write open } for pid=18332 comm="syz.4.5989" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.431631][ T36] audit: type=1400 audit(2000000333.078:415825): avc: denied { ioctl } for pid=18332 comm="syz.4.5989" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.511619][ T36] audit: type=1400 audit(2000000333.078:415826): avc: denied { read write } for pid=18332 comm="syz.4.5989" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 394.569636][ T36] audit: type=1400 audit(2000000333.078:415827): avc: denied { read open } for pid=18332 comm="syz.4.5989" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 395.184573][ T36] audit: type=1400 audit(2000000334.008:415828): avc: denied { read write } for pid=16008 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.332046][ T36] audit: type=1400 audit(2000000334.028:415829): avc: denied { read write open } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.442699][ T36] audit: type=1400 audit(2000000334.028:415830): avc: denied { ioctl } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.561481][ T36] audit: type=1400 audit(2000000334.128:415831): avc: denied { read write } for pid=18337 comm="syz.4.5992" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.661450][ T36] audit: type=1400 audit(2000000334.128:415832): avc: denied { read write open } for pid=18337 comm="syz.4.5992" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.909967][T18345] rust_binder: Error in use_page_slow: ESRCH [ 395.909995][T18345] rust_binder: use_range failure ESRCH [ 395.927849][T18345] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 395.941490][T18345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 395.959496][T18345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:399 [ 396.175705][T18354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24340 sclass=netlink_route_socket pid=18354 comm=syz.4.5995 [ 396.852434][T18361] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 396.924411][T18363] binder: Bad value for 'stats' [ 397.453316][T18382] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 397.453341][T18382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 397.473066][T18382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:132 [ 397.535086][T18377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.576500][T18377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.851192][ C1] net_ratelimit: 64513 callbacks suppressed [ 397.851214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 397.851249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.857361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 397.869451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.881750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 397.893765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.905635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 397.917591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.929511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 397.941474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.980587][T15441] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 398.594691][T15441] usb 4-1: Using ep0 maxpacket: 8 [ 398.772884][T15441] usb 4-1: config 0 has no interfaces? [ 398.881974][T15441] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 400.419198][ T36] kauditd_printk_skb: 431 callbacks suppressed [ 400.419217][ T36] audit: type=1400 audit(2000000339.239:416264): avc: denied { read write } for pid=17830 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.880234][T15441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.900647][ C1] sched: DL replenish lagged too much [ 402.860543][ C0] net_ratelimit: 129735 callbacks suppressed [ 402.860565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.860605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 402.866688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.879131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 402.891106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 402.903053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 402.915084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.927056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 402.939010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.950925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 405.060556][T15441] usb 4-1: Product: syz [ 405.064765][T15441] usb 4-1: Manufacturer: syz [ 405.069457][T15441] usb 4-1: SerialNumber: syz [ 405.583510][ T36] audit: type=1400 audit(2000000339.289:416265): avc: denied { read write } for pid=15045 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 407.869929][ C1] net_ratelimit: 116830 callbacks suppressed [ 407.869951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 407.870053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 407.876119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 407.888138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.900172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 407.912163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.924641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 407.936578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.948490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 407.960592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 409.527673][ T36] audit: type=1400 audit(2000000339.289:416266): avc: denied { read write open } for pid=15045 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.235090][T15441] usb 4-1: config 0 descriptor?? [ 412.879350][ C1] net_ratelimit: 101860 callbacks suppressed [ 412.879371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 412.879416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.885477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 412.897790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.910025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 412.922020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.933966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 412.946193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 412.957992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 412.970008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.436523][T15441] usb 4-1: can't set config #0, error -71 [ 415.639214][ T36] audit: type=1400 audit(2000000339.679:416268): avc: denied { read write open } for pid=17830 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.888731][ C1] net_ratelimit: 101634 callbacks suppressed [ 417.888753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 417.888778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.894846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 417.906859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.918754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 417.930733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.942623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 417.954753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 417.966541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 417.978523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.017561][ T36] audit: type=1400 audit(2000000339.679:416269): avc: denied { ioctl } for pid=17830 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.279632][ T36] audit: type=1400 audit(2000000339.289:416267): avc: denied { ioctl } for pid=15045 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.036241][T15441] usb 4-1: USB disconnect, device number 58 [ 419.641290][ T36] audit: type=1400 audit(2000000341.509:416270): avc: denied { execmem } for pid=18389 comm="syz.4.6008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 421.802824][ T36] audit: type=1400 audit(2000000348.490:416271): avc: denied { read write } for pid=16008 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 422.321477][ T36] audit: type=1400 audit(2000000348.490:416272): avc: denied { read write open } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 422.898122][ C0] net_ratelimit: 97039 callbacks suppressed [ 422.898144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.898197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 422.904165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.916089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 422.928243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 422.940031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 422.951966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.964042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 422.975997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.987872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 423.396123][ T36] audit: type=1400 audit(2000000348.490:416273): avc: denied { ioctl } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.910627][ T36] audit: type=1400 audit(2000000361.031:416274): avc: denied { execmem } for pid=18393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 426.345835][ T36] audit: type=1400 audit(2000000361.551:416275): avc: denied { read write } for pid=18394 comm="syz.3.6011" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 427.761440][ T36] audit: type=1400 audit(2000000361.551:416276): avc: denied { read write open } for pid=18394 comm="syz.3.6011" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 427.907522][ C0] net_ratelimit: 95571 callbacks suppressed [ 427.907544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.907588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 427.913561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.925470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 427.937555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.949406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 427.961571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 427.973360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 427.985397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.997574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 429.950924][ T36] audit: type=1400 audit(2000000361.601:416277): avc: denied { ioctl } for pid=18394 comm="syz.3.6011" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf7a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 432.030800][ T36] audit: type=1400 audit(2000000361.601:416278): avc: denied { create } for pid=18395 comm="syz.4.6012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.916898][ C1] net_ratelimit: 95227 callbacks suppressed [ 432.916927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 432.916964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.922983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 432.935248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 432.947144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 432.959076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.971126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 432.983404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.995325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 433.007271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.985217][ T36] audit: type=1400 audit(2000000361.611:416279): avc: denied { create } for pid=18396 comm="syz.1.6010" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 437.926309][ C1] net_ratelimit: 99043 callbacks suppressed [ 437.926330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 437.926548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 437.932350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 437.944326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.956333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 437.968387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.980313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 437.992336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.004209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 438.016416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 441.726043][ T36] audit: type=1400 audit(2000000361.641:416280): avc: denied { read append } for pid=18396 comm="syz.1.6010" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 442.935709][ C0] net_ratelimit: 104016 callbacks suppressed [ 442.935732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.935735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 442.935826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 442.942145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 442.954031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 442.965998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.978012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 442.990003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.001979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 443.013993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.945077][ C0] net_ratelimit: 104594 callbacks suppressed [ 447.945101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.945160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 447.951195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.963388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 447.975415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.987340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 447.999564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 448.011366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 448.023355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.035387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 451.387709][ T36] audit: type=1400 audit(2000000361.641:416281): avc: denied { read append open } for pid=18396 comm="syz.1.6010" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 452.954499][ C1] net_ratelimit: 103130 callbacks suppressed [ 452.954521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 452.954648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 452.960656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 452.972604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.984630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 452.996650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.008680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 453.020783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.032776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 453.044868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 453.508980][ T36] audit: type=1400 audit(2000000361.641:416282): avc: denied { create } for pid=18396 comm="syz.1.6010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 453.805564][ T36] audit: type=1400 audit(2000000361.661:416283): avc: denied { read write } for pid=18394 comm="syz.3.6011" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.905735][ T36] audit: type=1400 audit(2000000361.661:416284): avc: denied { read write open } for pid=18394 comm="syz.3.6011" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 457.964058][ C0] net_ratelimit: 102305 callbacks suppressed [ 457.964081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.964136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 457.970392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 457.982188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 457.994254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.006238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 458.018307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.030170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 458.042324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.054229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 459.714156][ T36] audit: type=1400 audit(2000000361.661:416285): avc: denied { create } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 462.973297][ C1] net_ratelimit: 108484 callbacks suppressed [ 462.973318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 462.973361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 462.979453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 462.991778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 463.003654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 463.015639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.027632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 463.039624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.051482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 463.063472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.982670][ C1] net_ratelimit: 111115 callbacks suppressed [ 467.982693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 467.982729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 467.988804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 468.001054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.013131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 468.025328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.037296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 468.049330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.061141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 468.073574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.992063][ C1] net_ratelimit: 112668 callbacks suppressed [ 472.992161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.992089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 472.992262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 472.998365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 473.010354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 473.022580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 473.034392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 473.046595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.058661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 473.070720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.845270][ T36] audit: type=1400 audit(2000000361.661:416286): avc: denied { create } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 478.001509][ C1] net_ratelimit: 108604 callbacks suppressed [ 478.001531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 478.001621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 478.007628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 478.019817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 478.031630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 478.043653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.055723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 478.067686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.079559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 478.091543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.723779][ T36] audit: type=1400 audit(2000000361.851:416287): avc: denied { bind } for pid=18396 comm="syz.1.6010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 481.051622][ T36] audit: type=1400 audit(2000000361.851:416288): avc: denied { listen } for pid=18396 comm="syz.1.6010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.621696][ T36] audit: type=1400 audit(2000000361.871:416289): avc: denied { create } for pid=18396 comm="syz.1.6010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 483.010873][ C0] net_ratelimit: 100722 callbacks suppressed [ 483.010895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.010945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 483.017144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 483.029038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 483.041166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 483.052961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 483.064915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.077019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 483.089197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.101178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 483.152539][ T36] audit: type=1400 audit(2000000361.891:416290): avc: denied { write } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.412929][ T36] audit: type=1400 audit(2000000361.891:416291): avc: denied { ioctl } for pid=18394 comm="syz.3.6011" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 486.182158][ T36] audit: type=1400 audit(2000000361.901:416292): avc: denied { create } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 488.020249][ C1] net_ratelimit: 96648 callbacks suppressed [ 488.020273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 488.020349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 488.026323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 488.038367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.050330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 488.062507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.074362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 488.086366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.098509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 488.110539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.403396][ T36] audit: type=1400 audit(2000000361.911:416293): avc: denied { bind } for pid=18395 comm="syz.4.6012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 488.750322][ T36] audit: type=1400 audit(2000000361.941:416294): avc: denied { create } for pid=18395 comm="syz.4.6012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.392712][ T36] audit: type=1400 audit(2000000361.941:416295): avc: denied { write } for pid=18395 comm="syz.4.6012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 491.321802][ T36] audit: type=1400 audit(2000000361.981:416296): avc: denied { ioctl } for pid=18394 comm="syz.3.6011" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf7c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 492.083760][ T36] audit: type=1400 audit(2000000361.981:416297): avc: denied { read } for pid=18394 comm="syz.3.6011" dev="nsfs" ino=4026532434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 492.805221][ T36] audit: type=1400 audit(2000000361.981:416298): avc: denied { read open } for pid=18394 comm="syz.3.6011" path="net:[4026532434]" dev="nsfs" ino=4026532434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 493.029664][ C1] net_ratelimit: 97200 callbacks suppressed [ 493.029686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 493.029833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 493.035752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 493.047710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.059817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 493.071765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.083700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 493.095678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.107522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 493.119618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.039059][ C0] net_ratelimit: 102471 callbacks suppressed [ 498.039079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.039095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 498.039208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 498.049230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 498.057218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 498.069551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 498.081386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 498.093392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.105404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 498.117536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.590694][ T36] audit: type=1400 audit(2000000361.981:416299): avc: denied { create } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.542401][ T36] audit: type=1400 audit(2000000362.371:416300): avc: denied { create } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.048495][ C1] net_ratelimit: 95520 callbacks suppressed [ 503.048515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 503.048526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 503.048741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 503.054576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 503.066746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.079293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 503.091288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.103520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 503.115475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.127464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 503.192143][ T36] audit: type=1400 audit(2000000362.371:416301): avc: denied { write } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.121580][ T36] audit: type=1400 audit(2000000362.572:416302): avc: denied { write } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.671072][ T36] audit: type=1400 audit(2000000363.022:416303): avc: denied { read } for pid=18394 comm="syz.3.6011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.871001][ T36] audit: type=1400 audit(2000000363.712:416304): avc: denied { execmem } for pid=18401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 506.140746][ T36] audit: type=1400 audit(2000000363.722:416305): avc: denied { read write } for pid=16008 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.341136][ T36] audit: type=1400 audit(2000000363.722:416306): avc: denied { read write open } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.900660][ T36] audit: type=1400 audit(2000000363.722:416307): avc: denied { ioctl } for pid=16008 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.167227][ T36] audit: type=1400 audit(2000000365.202:416308): avc: denied { read write } for pid=15045 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.430604][ T36] audit: type=1400 audit(2000000365.202:416309): avc: denied { read write open } for pid=15045 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.720117][ T36] audit: type=1400 audit(2000000365.202:416310): avc: denied { ioctl } for pid=15045 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.057865][ C1] net_ratelimit: 94643 callbacks suppressed [ 508.057887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 508.057928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.063953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 508.076089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.088078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 508.100014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.112098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 508.124048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.135948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 508.147918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.382734][ T36] audit: type=1400 audit(2000000365.502:416311): avc: denied { execmem } for pid=18404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 513.067279][ C0] net_ratelimit: 95330 callbacks suppressed [ 513.067301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 513.067360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 513.073298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.085319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 513.097291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.109169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 513.121225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.133255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 513.145374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.157424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.076680][ C1] net_ratelimit: 105181 callbacks suppressed [ 518.076702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.076801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.082832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.094994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.106818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.118773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.130784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.142765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.154739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 518.166777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.371768][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 520.371787][ T36] audit: type=1400 audit(2000000459.203:416334): avc: denied { read } for pid=18417 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 520.787992][ T36] audit: type=1400 audit(2000000459.273:416335): avc: denied { read open } for pid=18417 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 521.565243][ T328] bridge_slave_1: left allmulticast mode [ 521.579215][ T36] audit: type=1400 audit(2000000460.393:416336): avc: denied { read } for pid=18418 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 521.836397][ T328] bridge_slave_1: left promiscuous mode [ 521.997432][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.057729][ T36] audit: type=1400 audit(2000000460.393:416337): avc: denied { read open } for pid=18418 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 522.107909][ T328] bridge_slave_0: left allmulticast mode [ 522.179441][ T328] bridge_slave_0: left promiscuous mode [ 522.202620][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.356820][ T36] audit: type=1400 audit(2000000460.453:416338): avc: denied { mounton } for pid=18417 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 523.086107][ C0] net_ratelimit: 97196 callbacks suppressed [ 523.086130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.086205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 523.092216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.104115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 523.116120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.128043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 523.140004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.151929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 523.163893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.175764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 523.555836][ T36] audit: type=1400 audit(2000000460.453:416339): avc: denied { sys_module } for pid=18417 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 524.187194][ T36] audit: type=1400 audit(2000000460.543:416340): avc: denied { mounton } for pid=18418 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 524.400634][ T36] audit: type=1400 audit(2000000460.543:416341): avc: denied { sys_module } for pid=18418 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 525.454594][ T36] audit: type=1400 audit(2000000460.703:416342): avc: denied { sys_module } for pid=18416 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 528.095501][ C1] net_ratelimit: 100057 callbacks suppressed [ 528.095522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 528.095547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.101640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 528.113632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.125606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 528.137607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.149481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 528.161437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.173387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 528.185365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 529.026200][ T36] audit: type=1400 audit(2000000461.003:416343): avc: denied { read } for pid=18419 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 533.104945][ C1] net_ratelimit: 104005 callbacks suppressed [ 533.104967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 533.105025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 533.111080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 533.123091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.135202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 533.147180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.159067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 533.171055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.183016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 533.195316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.114336][ C1] net_ratelimit: 102967 callbacks suppressed [ 538.114358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 538.114466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 538.120565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 538.132622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.144620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 538.156618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.168471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 538.180469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.192424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 538.204396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.345004][ T36] audit: type=1400 audit(2000000461.003:416344): avc: denied { read open } for pid=18419 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 543.123695][ C1] net_ratelimit: 102945 callbacks suppressed [ 543.123717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 543.123751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.129833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 543.141805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.153770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 543.165729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.177869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 543.189979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.201867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 543.213985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 543.285218][ T36] audit: type=1400 audit(2000000461.003:416345): avc: denied { mounton } for pid=18419 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 543.355847][ T36] audit: type=1400 audit(2000000461.063:416346): avc: denied { sys_module } for pid=18419 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 548.133147][ C1] net_ratelimit: 100277 callbacks suppressed [ 548.133172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 548.133219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 548.139281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 548.151434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.163401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 548.175359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.187379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 548.199371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.211230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 548.223194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.142527][ C1] net_ratelimit: 100344 callbacks suppressed [ 553.142549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 553.142580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.148694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 553.160672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.172626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 553.184764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.196627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 553.208797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 553.220681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 553.232800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 557.493049][ T36] audit: type=1400 audit(2000000496.318:416347): avc: denied { execmem } for pid=18420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 558.151929][ C1] net_ratelimit: 99760 callbacks suppressed [ 558.151951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 558.151983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 558.157975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 558.170134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 558.181956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 558.193897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.205869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 558.217858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.229719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 558.241705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.161397][ C1] net_ratelimit: 98374 callbacks suppressed [ 563.161419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 563.161468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.167635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 563.179632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.191685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 563.203699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.215569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 563.227718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 563.239517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 563.251662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 568.170758][ C0] net_ratelimit: 100918 callbacks suppressed [ 568.170779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.170784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 568.171008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 568.176883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 568.189049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 568.200867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 568.212885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.224970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 568.237033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.248981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 569.613823][ T36] audit: type=1400 audit(2000000508.459:416348): avc: denied { execmem } for pid=18421 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 570.383186][ T36] audit: type=1400 audit(2000000509.209:416349): avc: denied { execmem } for pid=18422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 571.463129][ T36] audit: type=1400 audit(2000000510.299:416350): avc: denied { read } for pid=18423 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 572.052827][ T36] audit: type=1400 audit(2000000510.379:416351): avc: denied { read open } for pid=18423 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 573.180214][ C0] net_ratelimit: 95691 callbacks suppressed [ 573.180236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 573.180278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 573.186432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 573.198363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 573.210386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.222518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 573.234446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.246337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 573.258366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.270243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 577.513467][ T37] INFO: task syz.0.4892:14978 blocked for more than 124 seconds. [ 577.532573][ T37] Not tainted syzkaller #0 [ 577.537541][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.652364][ T36] audit: type=1400 audit(2000000516.490:416352): avc: denied { write } for pid=276 comm="syz-executor" path="pipe:[2301]" dev="pipefs" ino=2301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 577.776551][ T37] task:syz.0.4892 state:D stack:0 pid:14978 tgid:14978 ppid:14111 flags:0x00004006 [ 577.786818][ T37] Call Trace: [ 577.790254][ T37] [ 577.793219][ T37] __schedule+0x1322/0x1df0 [ 577.797760][ T37] ? __sched_text_start+0x10/0x10 [ 577.802847][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 577.808241][ T37] ? _raw_spin_unlock+0x45/0x60 [ 577.813139][ T37] ? __kasan_check_write+0x18/0x20 [ 577.818271][ T37] schedule+0xc6/0x240 [ 577.822394][ T37] schedule_timeout+0xb2/0x3a0 [ 577.827175][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 577.832618][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 577.838183][ T37] ? __smp_call_single_queue+0xd5/0x390 [ 577.843799][ T37] ? generic_exec_single+0x201/0x500 [ 577.849106][ T37] wait_for_common+0x359/0x630 [ 577.854060][ T37] ? wait_for_completion+0x40/0x40 [ 577.859179][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 577.864726][ T37] wait_for_completion+0x1c/0x40 [ 577.869788][ T37] rcu_barrier+0x415/0x530 [ 577.874219][ T37] netdev_run_todo+0x10e/0xcb0 [ 577.878998][ T37] ? kvfree+0x39/0x50 [ 577.883022][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 577.888327][ T37] rtnl_unlock+0x12/0x20 [ 577.892622][ T37] tun_chr_close+0xc5/0x150 [ 577.897147][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 577.902290][ T37] __fput+0x1fe/0xa00 [ 577.906282][ T37] ? call_rcu+0x14/0x20 [ 577.910461][ T37] ____fput+0x20/0x30 [ 577.914453][ T37] task_work_run+0x1e3/0x250 [ 577.919053][ T37] ? __cfi_task_work_run+0x10/0x10 [ 577.924203][ T37] ? free_nsproxy+0x223/0x290 [ 577.928889][ T37] do_exit+0x9bc/0x2630 [ 577.933166][ T37] ? __sched_text_start+0x10/0x10 [ 577.938205][ T37] ? __cfi_do_exit+0x10/0x10 [ 577.942840][ T37] ? __kasan_check_write+0x18/0x20 [ 577.947962][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 577.953299][ T37] ? __kasan_check_read+0x15/0x20 [ 577.958338][ T37] ? cgroup_update_frozen+0x160/0x990 [ 577.963748][ T37] do_group_exit+0x22a/0x300 [ 577.968349][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 577.973666][ T37] get_signal+0x139d/0x14f0 [ 577.978184][ T37] arch_do_signal_or_restart+0x96/0x720 [ 577.983772][ T37] ? common_nsleep+0x93/0xb0 [ 577.988396][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 577.994596][ T37] ? __se_sys_clock_nanosleep+0x300/0x390 [ 578.000354][ T37] ? __kasan_check_read+0x15/0x20 [ 578.005396][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 578.011505][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 578.016978][ T37] do_syscall_64+0x64/0xf0 [ 578.021429][ T37] ? clear_bhb_loop+0x50/0xa0 [ 578.026116][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 578.032052][ T37] RIP: 0033:0x7f68f69c14a5 [ 578.036484][ T37] RSP: 002b:00007f68f7786f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 578.044975][ T37] RAX: fffffffffffffdfc RBX: 00007f68f6bc5fa0 RCX: 00007f68f69c14a5 [ 578.052977][ T37] RDX: 00007f68f7786fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.060982][ T37] RBP: 00007f68f6a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 578.069057][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.077145][ T37] R13: 00007f68f6bc6038 R14: 00007f68f6bc5fa0 R15: 00007ffc73cb81e8 [ 578.085164][ T37] [ 578.189579][ C0] net_ratelimit: 96707 callbacks suppressed [ 578.189600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.189641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 578.195936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.207879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 578.220007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 578.231872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 578.244006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.255966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 578.267961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 578.279828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 578.384193][ T37] NMI backtrace for cpu 1 [ 578.384221][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 578.384250][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.384263][ T37] Call Trace: [ 578.384270][ T37] [ 578.384279][ T37] __dump_stack+0x21/0x30 [ 578.384309][ T37] dump_stack_lvl+0x10c/0x190 [ 578.384333][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 578.384359][ T37] dump_stack+0x19/0x20 [ 578.384382][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 578.384407][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 578.384430][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 578.384454][ T37] ? sched_show_task+0x379/0x560 [ 578.384478][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 578.384500][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.384524][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.384547][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 578.384572][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 578.384596][ T37] watchdog+0xd8f/0xed0 [ 578.384623][ T37] ? __cfi_watchdog+0x10/0x10 [ 578.384646][ T37] ? __kasan_check_read+0x15/0x20 [ 578.384673][ T37] ? __kthread_parkme+0x138/0x180 [ 578.384690][ T37] ? schedule+0xc6/0x240 [ 578.384717][ T37] kthread+0x2c7/0x370 [ 578.384735][ T37] ? __cfi_watchdog+0x10/0x10 [ 578.384759][ T37] ? __cfi_kthread+0x10/0x10 [ 578.384778][ T37] ret_from_fork+0x67/0xa0 [ 578.384802][ T37] ? __cfi_kthread+0x10/0x10 [ 578.384822][ T37] ret_from_fork_asm+0x1a/0x30 [ 578.384850][ T37] [ 578.384858][ T37] Sending NMI from CPU 1 to CPUs 0: [ 578.607271][ C0] NMI backtrace for cpu 0 [ 578.607286][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 578.607307][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.607318][ C0] RIP: 0010:__kernel_text_address+0x5/0x40 [ 578.607343][ C0] Code: c1 03 38 c1 7c c0 48 c7 c7 c0 a7 ca 87 e8 e3 de 84 00 eb b2 90 b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <48> 89 e5 53 48 89 fb e8 3f 00 00 00 85 c0 0f 95 c0 48 81 fb 00 50 [ 578.607356][ C0] RSP: 0018:ffffc90000006c70 EFLAGS: 00000246 [ 578.607370][ C0] RAX: 0000000000000000 RBX: ffffc90000006cf0 RCX: 0000000000006c01 [ 578.607382][ C0] RDX: ffffc90000007f40 RSI: 1ffff92000000d96 RDI: ffffffff814ff3eb [ 578.607393][ C0] RBP: ffffc90000006c98 R08: ffffc90000006d70 R09: ffffc90000006d68 [ 578.607405][ C0] R10: 0000000000000010 R11: ffffffff81744340 R12: ffff888103662600 [ 578.607416][ C0] R13: 0000000000000100 R14: dffffc0000000000 R15: 1ffff92000000d9e [ 578.607428][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 578.607441][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.607452][ C0] CR2: 00007f89398f7d60 CR3: 00000001742be000 CR4: 00000000003526b0 [ 578.607466][ C0] Call Trace: [ 578.607471][ C0] [ 578.607478][ C0] ? unwind_get_return_address+0x51/0x90 [ 578.607497][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 578.607519][ C0] arch_stack_walk+0x10b/0x170 [ 578.607542][ C0] ? handle_softirqs+0x1ab/0x630 [ 578.607564][ C0] stack_trace_save+0x9d/0xe0 [ 578.607584][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 578.607604][ C0] ? kmem_cache_free+0x1c1/0x510 [ 578.607627][ C0] ? dev_queue_xmit_nit+0xa40/0xae0 [ 578.607644][ C0] ? dev_hard_start_xmit+0x187/0x770 [ 578.607662][ C0] ? __dev_queue_xmit+0x19cc/0x3790 [ 578.607680][ C0] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 578.607701][ C0] ? __br_forward+0x25c/0x390 [ 578.607720][ C0] ? br_flood+0x50e/0x730 [ 578.607739][ C0] ? br_handle_frame_finish+0x12bb/0x1720 [ 578.607762][ C0] ? br_handle_frame+0x5a6/0xba0 [ 578.607783][ C0] kasan_save_track+0x3e/0x80 [ 578.607798][ C0] ? kasan_save_track+0x3e/0x80 [ 578.607812][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 578.607830][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 578.607845][ C0] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 578.607874][ C0] ? skb_clone+0x229/0x460 [ 578.607895][ C0] ? dev_queue_xmit_nit+0x1ad/0xae0 [ 578.607911][ C0] ? dev_hard_start_xmit+0x187/0x770 [ 578.607929][ C0] ? __dev_queue_xmit+0x19cc/0x3790 [ 578.607947][ C0] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 578.607967][ C0] ? __br_forward+0x25c/0x390 [ 578.607987][ C0] ? br_flood+0x67e/0x730 [ 578.608006][ C0] ? br_handle_frame_finish+0x12bb/0x1720 [ 578.608028][ C0] ? br_handle_frame+0x5a6/0xba0 [ 578.608049][ C0] ? __netif_receive_skb_core+0xf48/0x3940 [ 578.608069][ C0] ? process_backlog+0x3e5/0xae0 [ 578.608089][ C0] ? __napi_poll+0xd0/0x610 [ 578.608107][ C0] ? net_rx_action+0x584/0xce0 [ 578.608132][ C0] kasan_save_alloc_info+0x40/0x50 [ 578.608151][ C0] __kasan_slab_alloc+0x73/0x90 [ 578.608166][ C0] kmem_cache_alloc_noprof+0x131/0x3a0 [ 578.608187][ C0] ? skb_clone+0x229/0x460 [ 578.608208][ C0] skb_clone+0x229/0x460 [ 578.608229][ C0] dev_queue_xmit_nit+0x1ad/0xae0 [ 578.608245][ C0] ? netif_skb_features+0x82f/0xbf0 [ 578.608265][ C0] dev_hard_start_xmit+0x187/0x770 [ 578.608285][ C0] __dev_queue_xmit+0x19cc/0x3790 [ 578.608304][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 578.608326][ C0] ? __dev_queue_xmit+0x24c/0x3790 [ 578.608347][ C0] ? kasan_save_track+0x4f/0x80 [ 578.608361][ C0] ? kasan_save_track+0x3e/0x80 [ 578.608374][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 578.608393][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 578.608409][ C0] ? __cfi___dev_queue_xmit+0x10/0x10 [ 578.608427][ C0] ? br_handle_frame+0x5a6/0xba0 [ 578.608448][ C0] ? __netif_receive_skb_core+0xf48/0x3940 [ 578.608468][ C0] ? process_backlog+0x3e5/0xae0 [ 578.608487][ C0] ? __napi_poll+0xd0/0x610 [ 578.608506][ C0] ? net_rx_action+0x584/0xce0 [ 578.608525][ C0] ? handle_softirqs+0x1ab/0x630 [ 578.608546][ C0] ? __do_softirq+0xf/0x16 [ 578.608568][ C0] ? do_softirq+0xa6/0x100 [ 578.608588][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 578.608609][ C0] ? rcu_do_batch+0x5c6/0xd20 [ 578.608634][ C0] ? rcu_nocb_cb_kthread+0x4dc/0xac0 [ 578.608653][ C0] ? kthread+0x2c7/0x370 [ 578.608668][ C0] ? ret_from_fork+0x67/0xa0 [ 578.608688][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 578.608712][ C0] ? __copy_skb_header+0x453/0x5e0 [ 578.608733][ C0] br_dev_queue_push_xmit+0x553/0x6d0 [ 578.608753][ C0] ? __copy_skb_header+0x453/0x5e0 [ 578.608774][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 578.608795][ C0] ? __skb_clone+0x47a/0x7a0 [ 578.608816][ C0] __br_forward+0x25c/0x390 [ 578.608835][ C0] br_flood+0x67e/0x730 [ 578.608856][ C0] br_handle_frame_finish+0x12bb/0x1720 [ 578.608886][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 578.608910][ C0] br_handle_frame+0x5a6/0xba0 [ 578.608932][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 578.608954][ C0] __netif_receive_skb_core+0xf48/0x3940 [ 578.608974][ C0] ? ip6_mc_input+0x4f3/0x670 [ 578.608992][ C0] ? ip6_mc_input+0x4f3/0x670 [ 578.609009][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 578.609026][ C0] ? check_preempt_wakeup_fair+0x12e/0xae0 [ 578.609048][ C0] ? qdisc_run_end+0x120/0x120 [ 578.609067][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 578.609085][ C0] ? ip6_rcv_finish+0x344/0x3c0 [ 578.609102][ C0] ? ipv6_rcv+0xed/0x220 [ 578.609118][ C0] ? __kasan_check_write+0x18/0x20 [ 578.609138][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 578.609158][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 578.609179][ C0] process_backlog+0x3e5/0xae0 [ 578.609201][ C0] __napi_poll+0xd0/0x610 [ 578.609220][ C0] net_rx_action+0x584/0xce0 [ 578.609242][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 578.609262][ C0] ? sched_clock+0x44/0x60 [ 578.609280][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 578.609299][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 578.609317][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 578.609336][ C0] handle_softirqs+0x1ab/0x630 [ 578.609358][ C0] __do_softirq+0xf/0x16 [ 578.609379][ C0] do_softirq+0xa6/0x100 [ 578.609399][ C0] [ 578.609405][ C0] [ 578.609410][ C0] ? __cfi_do_softirq+0x10/0x10 [ 578.609431][ C0] ? avc_node_free+0x2b6/0x2f0 [ 578.609451][ C0] ? __cfi_avc_node_free+0x10/0x10 [ 578.609470][ C0] __local_bh_enable_ip+0x74/0x80 [ 578.609498][ C0] rcu_do_batch+0x5c6/0xd20 [ 578.609519][ C0] ? rcu_core+0xd20/0xd20 [ 578.609540][ C0] ? __kasan_check_write+0x18/0x20 [ 578.609565][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 578.609591][ C0] ? __kasan_check_read+0x15/0x20 [ 578.609615][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 578.609641][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 578.609669][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 578.609695][ C0] ? __kasan_check_write+0x18/0x20 [ 578.609721][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 578.609744][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 578.609769][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 578.609795][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 578.609813][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 578.609833][ C0] ? __kasan_check_read+0x15/0x20 [ 578.609858][ C0] ? __kthread_parkme+0x138/0x180 [ 578.609881][ C0] ? schedule+0xc6/0x240 [ 578.609907][ C0] kthread+0x2c7/0x370 [ 578.609926][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 578.609952][ C0] ? __cfi_kthread+0x10/0x10 [ 578.609971][ C0] ret_from_fork+0x67/0xa0 [ 578.609994][ C0] ? __cfi_kthread+0x10/0x10 [ 578.610013][ C0] ret_from_fork_asm+0x1a/0x30 [ 578.610040][ C0] [ 580.441352][ T36] audit: type=1400 audit(2000000516.490:416353): avc: denied { write } for pid=276 comm="syz-executor" path="pipe:[2301]" dev="pipefs" ino=2301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 580.733004][ T36] audit: type=1400 audit(2000000516.490:416354): avc: denied { write } for pid=276 comm="syz-executor" path="pipe:[2301]" dev="pipefs" ino=2301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 582.842978][ T36] audit: type=1400 audit(2000000516.570:416355): avc: denied { execmem } for pid=18424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 583.199007][ C1] net_ratelimit: 94126 callbacks suppressed [ 583.199029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 583.199099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 583.205056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 583.217064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.229087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 583.241244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.253116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 583.265157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.277023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:f6:c2:07:58:0a, vlan:0) [ 583.288988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.670090][ T36] audit: type=1400 audit(2000000519.290:416356): avc: denied { mounton } for pid=18423 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1