last executing test programs: 7m20.860221979s ago: executing program 32 (id=77275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m38.603928707s ago: executing program 33 (id=86912): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wake_unlock', 0x309200, 0x3) 1m38.018539046s ago: executing program 34 (id=86922): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xa8}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) fgetxattr(r4, 0x0, 0x0, 0x0) 1m34.785043252s ago: executing program 35 (id=87007): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x100}, 0x0) 1m34.442217037s ago: executing program 36 (id=87017): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 1m32.600402313s ago: executing program 37 (id=87092): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) 1m32.268542716s ago: executing program 38 (id=87103): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4042841) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) 1m31.818348152s ago: executing program 39 (id=87119): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, 0x0) 1m31.399032704s ago: executing program 40 (id=87124): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x0) 1m30.05249614s ago: executing program 41 (id=87139): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m29.235172862s ago: executing program 42 (id=87182): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) read(r5, 0x0, 0x0) 1m27.111434167s ago: executing program 43 (id=87251): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c000004, 0x0, {[0x8000000002]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008"], 0x2c}}, 0x0) 1m25.88799322s ago: executing program 0 (id=87300): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) 1m25.862368713s ago: executing program 0 (id=87303): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1m25.745404045s ago: executing program 0 (id=87306): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.68874716s ago: executing program 44 (id=87306): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.091410332s ago: executing program 45 (id=87385): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 1m23.696175082s ago: executing program 46 (id=87391): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000001c0), 0x0, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m19.714622694s ago: executing program 47 (id=87513): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r4, &(0x7f00000001c0)="4c1d6f81800e6398fb0fc0a997df98e9ae2fccf6e8fa88a9f8b07b2dc010166df976363cc936632fb1e3e9042c1a8d1b4e19435cf5f08b0b4a", 0x39, 0x200008c5, &(0x7f00000002c0)={0xa, 0x4e20, 0x9, @empty, 0x6}, 0x1c) 1m19.359407639s ago: executing program 2 (id=87522): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, 0x0) 1m19.316408684s ago: executing program 48 (id=87522): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, 0x0) 1m15.661767312s ago: executing program 49 (id=87599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) 1m15.324257147s ago: executing program 50 (id=87609): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x3818000, 0x0) 1m13.8997851s ago: executing program 0 (id=87610): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) 1m13.894564081s ago: executing program 0 (id=87620): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286", 0x15) 1m13.779131723s ago: executing program 0 (id=87623): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r5, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) 1m13.674069543s ago: executing program 51 (id=87623): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r5, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) 1m12.841851187s ago: executing program 8 (id=87647): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r5, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 1m12.71848534s ago: executing program 8 (id=87648): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_clone(0x80020000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.61362181s ago: executing program 8 (id=87649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e21, @broadcast}}) 1m12.564575845s ago: executing program 8 (id=87650): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m12.529795559s ago: executing program 8 (id=87651): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6(0x10, 0x2, 0xc) sendto$inet6(r6, &(0x7f00000002c0)="1c00", 0x2, 0x0, 0x0, 0x0) 1m12.340960348s ago: executing program 8 (id=87655): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r3], 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x19, 0x526d630517582f22, 0x4}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 1m12.203829591s ago: executing program 52 (id=87655): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r3], 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x19, 0x526d630517582f22, 0x4}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 1m8.501143815s ago: executing program 4 (id=87741): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 1m8.471641969s ago: executing program 4 (id=87744): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) 1m7.423358384s ago: executing program 4 (id=87767): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) syz_open_procfs(0x0, 0x0) 1m6.963042011s ago: executing program 4 (id=87776): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m6.911942886s ago: executing program 4 (id=87779): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) 1m6.779958039s ago: executing program 4 (id=87783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 1m6.651979312s ago: executing program 53 (id=87783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 1m5.522439226s ago: executing program 3 (id=87803): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) 1m5.490703769s ago: executing program 3 (id=87804): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m5.418372136s ago: executing program 3 (id=87807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1m5.403147828s ago: executing program 3 (id=87808): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m5.38550351s ago: executing program 3 (id=87809): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10, 0x4008000}}], 0x1, 0x0) 1m5.276242281s ago: executing program 3 (id=87810): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigpending(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) 1m5.274100431s ago: executing program 54 (id=87810): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigpending(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) 1m4.857773553s ago: executing program 2 (id=87811): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x28400) 1m4.841789315s ago: executing program 2 (id=87816): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1m4.823453977s ago: executing program 2 (id=87817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m4.805923708s ago: executing program 2 (id=87818): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) 1m4.700089529s ago: executing program 2 (id=87819): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1m4.669376572s ago: executing program 55 (id=87819): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1m4.59375095s ago: executing program 6 (id=87822): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[]) 1m4.407129879s ago: executing program 6 (id=87824): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x28400) 1m4.406497399s ago: executing program 6 (id=87825): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m4.360980743s ago: executing program 6 (id=87826): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m4.341389905s ago: executing program 6 (id=87827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6(0x10, 0x2, 0xc) sendto$inet6(r6, &(0x7f00000002c0)="1c00", 0x2, 0x0, 0x0, 0x0) 1m4.242594145s ago: executing program 6 (id=87830): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x46, 0x4) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) 1m4.176474192s ago: executing program 56 (id=87830): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x46, 0x4) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) 2.029819885s ago: executing program 9 (id=89459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES16=r2]) 1.961889602s ago: executing program 9 (id=89460): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r7, 0xd, 0x11, r6, 0x0) 1.834488314s ago: executing program 9 (id=89461): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.801959068s ago: executing program 9 (id=89462): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="640100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.753751213s ago: executing program 9 (id=89463): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe10", 0x3}], 0x1}}], 0x2, 0xc044) 603.992978ms ago: executing program 9 (id=89482): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000008300)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="20fab01aa3991b81f44f9fd0d6003c2d69eb95c2f3c62c23ecdd621563d5dcbc723ce3480d466ad707d95cad18cd02fae595b071ee8503e3ae8b6a42861a3886e241e95af6b53646f435588107bc0a93bfa5de56ecb85d266b9bfe5b6260748d4ca213493d5e8669d3a5a70d244ed9fb355a3080abbc7348bce352a695734cb745e6e71b94f4de5288d5bc657475b4ce36ce4097e54cb1aeac3dea868cbda80fb4575576a263d10ced66f5db7b9927448b1eb8959e7afeeec7e7a6d477d267b0714cd017d1a52c26de03791f9a8f9314ea693bf5ae8ba444f3ad113045b4802bd2ce63f14df3ae7869cdc89efd51a9be8aef24046956ae26ce34f6cc4576f8978fcf04810447e8cc5be3054fb431b75c4a9cab01f0b13b44fb167d6b727484ec2d2add714396249cc27de40292734f62ab9463fed72b91b471e989182f0c5b291654fc0e296876a745cae273fefd99414445c96648cb7790d1cacf5de2418d9618e39f9eca8592dd40e5ccac76672e8abf4319b7bc7771c8ba5391f5e6b91bc5e10132c7930db8edd0a36ddd1027be737a01c5aed7b2ad1a1d94f8a9f7c67c44d586384df9a6cb37f5f201fb73cd95decf435bd0126296d343d94693dfed66ef49f1ee7088306ad049e2d723772c41ddff83984bf11afe520e537c3a376347b042c6d41c3c3db6160d0d9a37234342807d7b0653ac3d345cc6afed858ad439f08be2521a64b52a6d3d32db5a95e5791ccbc3d6ef1f43bc0b8b5a14f20dcf8a74a7e1322bf6860222dd83e7f244e531e0f2c2c737ea9b8ef6b6548f8e139c1a7aa9c5646431aa657b4268ec96f4eb13a3573af1430c9d32438be007f055f1f1b93cf5606dff644c6bdf719ba65d1e6ff782aea69265f7a87fbaa3fb2f825323a1c7a28c27fe264e79a21601a9c3e9b3015b9273214c97f067783ae6f3f748aea0b4645bbc640ef9a1507516ff65015a3ceab3dd240657cd36d3f34d635be75ae180e38c992e99cb6a78ebe76ae2b8e99c497972992dfc7927b39c896c97c4e386c4e79f2d40cf6d8627cbb9f1afeb327e7f825eb969edec6253f79327f4cb52f7d8d3f1a9b67d4a22c3bb8a691fb119c50e4378f19463a4f154e406522dfc95ea689bdaa8954b6a9b0f0579af82a1e374dde2d7e0b69bcaf6d0efb42da7c41004af55b4142a9813f8c37ef38de0bc5ba469cecacebbdfd033b03934310ced83a2735bbbf58af46a8e27912fbc210c4e3b55e7f6501e3aa948825ddd0e1be20a9c225f20e92989946bfc9fa68da3d1b5ce362aa1635290dbbf622b2e30b51e12c95657a09c89c33e35325bade4f09089f2e67ecaa388dc9ecb6c20d3f841f39772208952a8aa98340e1c9fa0c3cb8a7119259a9b4910a06285bd0ae0ce24fe7eca9e7c4105a6e6e949ca2079999455385e87899576e0edea8a1b2074b1b72c2f0705b7d058603425e15555f206f48aaa223a34a3040b4d518dfb094f6a5686a163b6fdb30021fe34eed42c077e7e6eda956d01e7ccc3949d78ef8b3fb112c952253bb1ff131e6db1d7036a27d770e9458e7fb6a960515ff5d9a7b1047d621aade687bce82e84e64d0d658c94c91785094e66494bdb384700f6e83c843d8bab80f51d8812edd6205d86cb6a5021f34dc2fd5fe9960b84b87f4bbf8c2dba29be4c5f949b8fd20db80c1d274ec1231cc9c26903479bac3abc07ca15394b02d6e14ac6e846ecca07d5477e3c08c63116b0ea1a21c61cb79f5318efb117cf2217ee2c38bcb2c1996f5e1a049cbeb3a3b7d7ffda5c119e8e9d974d6283b01471e142f6edc2e246fa84d98f3a00311fdab212691abbe3dcd6af2e6af8d5a2b94eed4f6b2a05c6cdd29dd7b7c979e37431233f22ebdd2897e0fd9a25e88a5e999e4261f59e7c0d2e279c301ac543a87cef9c4548d1a8996b68010acf04cf96921ba3c3e01e61715f60de9c81b995321a242e7bdfbb29ffad7c9128d7a1f26cdec1c6ad6f71e941f2e126a2e30ffb62eb06df6f205ed8f468c988a1172d767f97f7e60451725313fdc1a497b043c9b21a0e768462b62d5e694bb2deebbc565c80cd109f6c35c5bf3d26a1a54a2e5b45f56d0f241d9fadde970a05b01dcadb1a16e213214c0c7942af464033be148e58a572f4ccbd62635e1614294a1d7c30cbef69c2c9a15532fdae2851dbcd7fbe319404016b35dc6b8d86cfd623a5fb5ad42a60cd4a8489a30d8b866fe43c8798756684d95f6991c5a00fdd72ff5c75d35ab1982fa20ac1671e2e3ec7e6e4f00904f72df37ac07d2812830f1587bb36e5b859341ccc4d4e8879f2cc9c26ec245ac19c87a54de51a5205756bae2f297dc3e49d71aacfde95b9dd00cf7bc516accef9ea5d30a042dd72d10eb575c41bd29a3b13fed031955b0fd707873639791a979d5708e12c92d028fc744f209a7158f4ce2f7c28246bea72168cee3100ec5149ea26975219edd27f109b766ea19b336be08381198f1a3a27bfcc6e2b6237e9352b3b092fd61eacf5104d34febf7e7da1bc12cf31402c51fef33023cc356745cbf2ee0b328432a59dcdaae8e458a5e3b909336be64b311d2358588ea41ea1e10321054011b864a650bfc42ad987d4ee9f67987d7306982543863a7f3b8c04f93387fe68702f7c67d206adcbd5144967a01d75d970e96782606f0c08e9a5c2bc6805920c4685e60931644fa1fa071fc1c713108ad71177ebe11fd7124266f9a3613716c1b0ccbabbbd50befd6aa1ada10a67972cbf253fbeeaa1f9aae6908a5f7b172ab04418023df57a400892053e48b02ab9facbc14af441875d52eba253068a0ef25ef707df94e920921e1709a1debd27abec44c28bd71371f2c21951b0979656e662f039edf22f9089540f428fad69cc23210e814871bff3d2f1ccae024830bbca895494f759b0673ee302b8f2bea24cbfffab9eb9f865daf34b8e2e870129af76428f04ebdffcba625d3fc2e87cfb1a0418625dc5dee80006055e979c634644da8c4a3169fb84599b64ca590935c423f0c0321285ae65802effa6a394079835217645a6c6d310e63ee22b8ea11d9092666056cb0f8916bceabe85368fb8372e97eaea40a33d8cf1fc4a129edbccfd12d04663bb8d22daec8e85e44e91b6a502958ba67fa367d06eb10e32a1c67017d54b467c91668bb6e747dc2f7f2a980a4db25f47b1dc9cfab7f20b81152016eb287f9d2ed69c9971eaf00ee32eb570d7a784dc8d87a0fda82227678634234bd2a955b6938695fdca3618bf8d885c274ac0d4044da152716e3443f38b3e06f7175f38f2adbf7e6a703c5570e3ee093ba8c8e4121999703808005062ed2a62f2e1ac3090d2a93f139fc8288ebf76ab1ea8372434ee800abbee353404c5dd153d1f59140bcd768367efb57d6799319fd527b32f224465b7227c0f6912584c874e10cca008c277c4e92b6875e200cc70a43e95d27718bb725f49dbe7c4465a242e1fcfac0af08266e6c3c67038d617970f54fb7b4175e022602988b764992db632d41adc05740e0103d6dd769ab4f45d2e75aae192cc639a98ef068941e44e40f2ab1ad78970bf9cbdbbd1ca35717ab8814e01e93069e8925ae92fe75ab091cfc0d76fd34302cc458b9fa1cd0df711939f62fd5a99cf96c48b780a3faac4ccd10d5103bba0c5989593f8cc862e95df4591060abe2ffa8d54688a035b6d7985cdc66354b529d5a57184aafbc269b39dc1f849c80e21c9c09c6ea3281d38d14f2415eacb5932b537f2c9aec02701b2c82545f9eae2689fc5d033cf2e9880208cf04122e7b3dac0fd5d1cfd705bf741df4eb0fd870f300cad56c0a48ec5b4a4e9496cbf43ae35d5de995b604fe1465be2bd6b73fa5cf73c597eea405e2a3a91e04c5c3244bbad53fa8f88e157875e082e344e68f69121ac3be112ea15bfa1295511eec0dc0a385edbedb154dac50f77730678204305c1c914fc28aeb81cdcd34d47b6941f474decf70b6d4678b4cca8424875c36cfa7ac3a53416fa50b0ffafbe81ab74ae43d72b36217b72bfe76e29ef65db5a04620251a2348f4bebd70844b6f530b985a7ec069626c5527a113f9b2ff5a46ee83042b076a319a6d162499ed7e994a29f7fa2a75fbe66a5bbe7abc12e766ed6bfcfa7d307a861fef1b4b23fb9bf3da531dd90271e2f4070259e7c6e2ac7980906facc743136661d4ed24821a3d2305c2e17e2da4bc0f589cc1d852a5007f1a3e3779db6df9988909454a6237120dcc487062a6dbfc16d9fbec6c46c30b673106267ff130a1d0c974a6adfab8f7c451b09fe549870240d7a5ff7bf6e99fa5084935423f4d03b378d3c9f0b699ca22648cd4ef54330fbc0ef1ff0f3f46b5c9bb11060bd2e0f5834f5fedc4ef95e751c8f9f726e89c4a80bf371eb65f30decf75555400f3ac5ce1181fb00ccbd6ae211f6328dd3c2ed60f06115214983fd374432a3b611d499f110f53ad5c2d06af0cd13422c320ff60242bb73df5a5a31764b91fc384f396bea3670e466ac77923bc872915f953f689ba12d84204991844ac5476361d71d7b86b943cb9218023cf12bedbf30d071e5b6e161dfb886e6e39c1bf86b4fe1a276ba641da604eed44e66f2bdfd152dd5a8a94849b896076e49b61ac7a7efa6ef3ef2909b383ee7505c72d85ac33d28fd70271b7cf242abbff93f7acd2a390b02ef31c89b40139ca9b706b99333c829028d2b9b876e82fbee26081521a4c48a4fc21b3b1f195a82d340c88fe06dbeb3b8be97398c7d5ce57d2daddd1221c11eaa6ad79220b31314ba04fbadd4608e9eeb277723ec470b783fc4e20254fbf357e7bf160ea87df2f496cbb3cc637af1a208e0063888aa067e0419dfb3390dbcefd7440dfc926c738f19dcddeaf9d5d364855be65cf558538f9bdc6e96ccd494b13873f8e68d058d650087b5044bee4f686e4441d934550a2d48f8e05f131d02e04614ff5db2c428565dcf783ebb780ef74061dc5f200451c61d4bbd3cb18da4e8347e0aa739fd6ad6c02d865b4ca43817c41e7f62b53ab4ad1118f57cde558fb15934d644694f3a644f91299ca8e50c1357c3e4ba95b8c63dedb0a9aa9c0bd07e099b16bc30db14a56c0f03cc9c28cf3249102fbaf9e5dec7b389b4d8f1476dd1bed6ca2e84f65d0874fa73c8e611755a8ece7751f1187381aeb45480412884826f265e045f8b537415e1eb2ad0a3f13788e27f052e9971e660f36665dcc3371fb16115fc3665f9ffdd79356f52ac7c46b4804f016e7dd1669c05d433403ae50d2a546d6858f62411fa7ded64c85aa8579e98645afbae4f106238cbe7a801ff24015f5437130917db9838c5f4a13f5012d74957bbd1921f8388d41a0a3af3c748632b974d4486b0c95859132fcd1123e351cf1f372c5a47fc5a0bf2cdbead7c56934bd8c32e4752b7e90243e23b0e2501961015382421d52148ebad2207f8c6af8a112701619aa79a8c53a267a7b138a627b2e35f74c6e282ee222aca748ccebf713ca0cbf238cc2f2425610f9b2e706a41e6f14620c6a21c01b47440f3201c7749bf97139205b41c39b46de8b3095287109ac2e572e187419a1df60ccf942d40faa31e9e1f881b4427298247d29a77f0dd489aa17a934a762d8a57489013ca26b08b1370b481928c6b98b3a994cfd9d135a17759af636e63d5dd804260bcb19016b5a70cd8eea3e6db16042e6199a408040898dde11a871cf477ebfe025e2e2856e446e9274421386065bf14e00d584da34a888da597164ca5c6efdf0462c25b574ab6ad3db9bf478310103ebc0d16ea9ad5250d1938749aafca6157003def6b16956dc8fc4d7833f0c02a689a16ef071067704806b360c4e6498f54f54b9a6d24315a1d5cdf9da3b0747d766eaca393ddf09f5505a7e5de4819a140642bdfc99f182a5a965b2bf1ad2a501d25ff34733a2d7a2dcb5842a2cde35e0af484885b222657f2c18786f3519dea93349ec67750295d1884fe50cecedb01748f3f6b35c6a7761e97d79bbf71a1533d59066e59f528dc058827024040c018f4d1195148f793a6d6e502d88345c00751e551f4397295bbd5a649d404d9427be1f299b856691904ce42db1a65952ae73daa7fa4e2a9a6e5b467f9aabe3e3599004fc51b82a110b2e183c9a811ca932bb839acb961f3bca4b25b8cc9227f4ff7b83fbb31174aef0c391730140cd274be0396514fc6b56d503e5b1bd100080bcb645c615e5233a7b4b4ceb67cb91df9795d66182fec3d43698778a4dcf8aea3413c24ea0237dfb6b4cd9d585fcee08cfcdd4f892d76dab5504f7c6c7c73dd5a4d5815ecafbe85622fdbc773f3cff56f4b06bb2c2aaf0e0685cbb9a30a74157b675e1f035d37b3f1f45050502d74f430ea9da3ffaaad1bb7ee97e539f39d73e6e1465e767db7198d3b6f0a3c443cf5aea8ccfe23a062e3ba7918b86c4472a03ccdd7e51392eedc9033da5ec18efb2d5c894d7c6989969e03ba7f628d5248efed72775175a6556dbc169935fa851556f1de2dcf28965023196a6245f22d7eee4bd58c75eb3ccf169ac97da0ff72a538847e5952e4c4361fe2ccee539f4d0884be73c162c479a6abfb5778827c533166c720ab72b4ae019dbb355a4ce503227f0dd97dc028748736f3f1a74038eb5f08bfe1fe493ad59d0c04c4cd0611f30e9842e3fd1a3ff5430b477e4c9cf49f6d3407c2e76e05f4bf25f5aa358e2837d91985c44052569a4ee16824e2ab5646bbe993f2d60bc2973b285346faf8362e758e96714fc883c949c5461285f3102ba1c8c304064692eab8e593ba07c84ddf111f54b89d50867fc2883aac3aa03e5f96108acf0276ac8ae3183aa9b7d8ae905cd72ed0198ce79e503e15225256fd4cc3e9432acc7dbfce9b7d4ac19ec1383bc6d56fe6b04621718ee4c9f04f641d75733ef59cbbdd6925af64d1706fc674034be7b36570f20a3a2d4f24b10fc96e04e3326bfb1e4107a7224c90b0bf712d3a9167ffc86f718e3650124f9cb824f5f6cdb5abc5132a79896844dba54d330a5a6bafff7721b97b511f8c183ddbfe1a1ec6825746794e6a06aab15c86da686df5a879ff6c1e48cc582767daaa79ec0be155d392e32a588242d7924bf09d87874ef55e2bcf16c10df977f2dc20e35357040f018a73c0d8f5f9a3ff15958ff16f8409fc151b19f3f5506f1a156f827abb1cd4806a5a74ca7a368dc90e0666deabb3751278e9ee06d4e33ed40d8af9080622858dc2cb74183694ba082cad078b4a9bbfaaca898943fb77e829b9b9cbdb057430747e3be4d3e68354495ee2a8bca99016af0bcd82ce7058014098accf31557031a87100e1da7ca1d8310aa4139c1bb6f4d0a5e34d94e75c14df622ae6b9f7439183452d979808de5a697cb2e1aa5273e4188b373afe6749a0030d59464ca6af92f02e58ca067eb171025906917a4b23a384f619a83ec810b1a608d40956bc9f5c7099aadfd3f7cef5e29c35f75fef2d6163ac10a352cd0979ca83f230d573e756b44029195097ab067bb6aa27f546659d52e4888d00cd3905eb7e62328491ddb811bffc8a1fe7b47665c44afeaab295355a45aaacca64c818f6eef1b1bc25669d09044ef4b19d0f0c911b07832f377bb01bfe1194f7e2805a001ab1a018b7eb6383aed1d01b2db35d7be3c18118ba1694842c1b8b6b52a90b8ef59983e71c3fa0a17f0e432e5853703ce950857dc1b2485f788b8dc979ccdfee545cfa11e9de9f37fb72610d6283da5fa000ec1ef4bd180069f573b90997c32459cc17fe20c5b2dab54615a42417ae72737c20bb50f29746569f4bd540ac0196b368cfff7e2f550e80145ab0e6ea5d4257c74636914d065c38081b6d0947e0457e5559ec55bce20c28bf3a1ddc354e5570d0263b2fdf96562c62e395a2b7381eb992a941140ce8f5985ed6f80678ea617158caa0793956b77ddd4456770e1c500f3e36098c0868c73d6f032e0d3b5b64e68b78380b1bc4c8d81a1002ab1402e9b2fe5ada34477d3b8ebfea8af085806f96aaa3109cc0e8789fc7c4c56b9dcd72eb663c3d358f97ffdea1e506a1e0721a945c782e9a9251188a6e14171297277dc6e3588ba0463f0a2beca3c45e33d40c9b5ce845aca9886ac184b55d854bac94196cdbf1922532973c4dc9593c5de022070288c08f3675bea7371485fc2557461e42ad752b819a09473879c77619dd0c3ac705eab572fffbf2cea9420cfbcabf6c3d813d7923d14c89d0a0244c64b15cf760ffac603ad56e4363bea2667d385baeb71cccebc1cfc4aff668614614b991254a0cf564b791df0e419d9f08b71ff2357aaf8640d5aaef625db13c256df1b886069d2536ed6b14d7e1c2d0388606de561660ec1f62d005f1f26ba7adb290b994d9f4a140d19962c31cbfb7c3f670fed1c92e34ed54d1a77429e7ac7ae20292bce910efd26ae9dca98b6b49cfb9d6610b45189d94379b55677f20b1271e2942854a12900751623e1cc0e48644b834efbe3c749f310f2d363b919fe310e2c690559b85960827a95fb2c7b81c0348ecd6bb8ae9a5002fd8f5cceb656dd86d614196a3c06f2773e11394d401f2945507326935d8efc955aafa6d53db0cc5e75a6ac0595b76fb92233a42fc89aabb10890b290e5f207113158ab45908e2b914efacd7ce726dbf82082563fbcba80d48ab6dfaf54a8b24bac511f468f1838966fa76ba7cb141d44731e2f87ecabb8405b2700edff3f3e219fa94d412fe9e0686db76af7d528fcbb5b8fc67d4870d5ee6d04a4b3d1b08ad29c631c09a14c630ad57e2569c69a76e430c4f85b9805fba963212d0f3f29df73b32274badb978842a1ebcec847e24b8590073707881ccc62a08db41e02546d7848cf0fe064ad50bc528cb9a614c10601988ccfe00560b80de54b1f692d8ba259f26880098cd5afc7563813233b9843752486263e002770400eb2824ef2f61b5677e0d00389860266961a38e527b859852bf6b7e23b06157727b73d69c4aee9b2e2960880b56c6079b32900db1ceee56e7d1bdc1c8de0508115a0def84439dee598c4f5dddc242c1eb55e53400e000fe23b5b8df9daafe7e532567b43cba2b64a593bab399a2171f3562a9d00e8c542db7873df893b5641b3fe18a2dcc4a3d519a7a68f3cf36ce221877f694583280bf3e08d5725d391d7e50a08d5d0622aa7d18336eac36f6a5ccac4fb8196d19298a62500a090e7ef2ff8b0874d34c709d86895ef166db202f7e57e39cb53581651870e6500dbebe0ecb7cc3fa94c895396532c0fdf5e6add0ed8371119b0781ab250f7cd0136be29c14d3d76ec64bd14dbbd2a8b0e184922a962d437072377f36b218a69acde4bedd195b581fdf02f2ac95c589fbfc1d06c1431d02d10f5c325316458ddc274128590ef371ed1bf656cf1e2fdc9da82736b7726a52f1b1b0f36b11cf6d21235fd05797c91dbe1b0defa955a81d230cbba970e5d8bee5c010b2b5be88e0d5b73c435d27a8418bb8302efd6743423c9700766e790aebb858a03909c059bfde63bf774316cd8572ebdfe4563a8550fd3e64e1c38378c75b090f47f6f1affa2bec77f17aaa7e1c5d980d60fc4384f6241c07ac8578db01b8f225dc3b533e85c6c6ede97e154fa12fd9d13e2e8fdfa1a7ea2184eebc225f1a96fe70037d718145b775456766209541058ea478e65736c87ecde467c73290c3f3446f8aa7bb461828635059549e098450977e56bb3e08a4a018b9caa24126f2812c1352c51d9187fc532886a098cff963e81657f23cce8d75f59b24cf7174a321d47a8d2166913f7eab9f3ab85e9277e1e011a9d390dc6d59bcbff6c0f96dab10969287fc15139b46bc1c00e2614c95810bff4ee3e8e868e10d024af859394e3d871e85e43801040475057e80d418db3d9c3e27634ca91dbb2601392f6bb3b972ccdfe279f03d2f9ae9625f17a9df7b97c43aab9c846aadc58e8e11b00d28ec6b24618eb4cbc2eeb8d26cc8c45a652f843d632ed6cda77995fdbb0b968d4536880b51fe6d98b51405243f023e5cb0bc20b8a8ed1bb0df2e7bad1b1113b6d9aeaf1fb72fdb37613fd6fcbfe3f2d0a7631064e2f51306adacf44893ceb1383bbfbad1fd96c7a18f15625e268447663cbbbb16657884861b876ea924160911aa6b00e4933b666f0ce2f95792b0f8a6e03beef222365fc91773c311d63568fbce05ae6016c3c1792aaa52189ad95119194dae0342284c851110b94c7e5f1ee5325bf1b45e159471c510a90a66113e6a47544593563cb4c0d6aa2b3a2d78e9d3c6c98b31084ff7d06dcc7c8c7d99034c2acec76175348b971449eb43594737d58e9f8b4a7af9347c5a21ea08ecb5b9f198e01c9922c8d2f60759ef2e40e5d3b013becfbd46238895ac0a390d40d2d91c0031166d628c83bd95f378e6e7c27a06b7b9cb68af9a9d16dccca66d27c58f301372bb101bfbb4d15b7e47838238bef3889a89eca0353499cc7499dec7a91d53681491f9008c7669497937e74de2a7a680d2ba2b1ae3e906cbd2fdb3118a369f53aff9a55c7a939d378bafddbe59e38869d4805e7cc9f2a5e140d7146b2ad472801f9d2cb7d102ca1dcbc20be33d1a780c9a79c1550846de0d0e63e2d31ef8eede9544080c515262fe3a06452f3583b30e6828c02177a346005555cb75e5d67c4aa7a99cdadbe0d43ec7893c823d9370f83b655ae8724a9f335a0607443ca8846b10aa8b985de11ce43c2fed53e40ff240d6673b1e0701d3fb0bcff5adc1baeb8b505a0de5aa6f31b368303b476f3e8cd672fdf550dc7cc1ed2fdcda45fe6b5a814f7e06144b1f08c4a15b347ed8d3b81c7f971d9fcfc676c01450b44b469324230cd7ec1b7603db13617155e95e376389f020e2f76e242b7d4e9d76ea8c3f5763a18b63193693c935477f18c425410f4d02ceb0d437b1f5dd0d876fc1b0298aec7a38625390cfa052d6896be21c630f323af19bc37f7391e0802ae9902aa35733c7b1df39da8e61667bb788f8dd2fa259df7ad74472c05f44f79198f627dc64effd5b4bf78141babac4662c01dee1a581f808c05f9c540a7f90e02415d457adbda63ea78235f75bafeca785676221dae05dc508a02ccfa62d8e4696fe924f56478669bd78d3c8d87d2746fd6d969480b51682635ddd7addfe2ff4aed54abc685a9dd4732adb73910bd87336227dd4faf90d99f8ff48c7792aaea947ea38ca6c983918b9e571c6cdd0b042919a1ff6a6e2f3c91e0fa30cafe54c6fb228c37b37959f5d836e7a2bb91ff63485396492f7112f093afdb64c6f95dbb5a7de545554820913eaac89090d7424900aa880a4b2247667d99887299c15ecb45114006fcb24c334f1273ae8bd0b186777cc37d12429edf2ccc222e15a33632ec9122f7c83525284d652d710f8eaf4d44ff2d9af45386f5bd815ea2722fb91d8d257d55161c41f25bf92616771d6429bc361304d6348376794b0c814046a13ce7ba35f51ff702465d15af28ecde033d475cb82455dbf70478b351b19c82dd3f2bce24412de275eb25c3e3db1b8a5876c77eb68bbb4a4c0f7bde5747aa6eb12e0b772ca01400ba4983156e165acb6599cfd2cf92a0a42ff7537c1", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x9, {0x200000000000008, 0x0, 0x0, {0x4, 0xffffffffffffff01, 0x0, 0x8, 0x10000, 0x9, 0x4, 0x0, 0xffffffc0, 0x3000, 0x2, r2, r3, 0x100001, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) 603.792799ms ago: executing program 7 (id=89483): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 595.129549ms ago: executing program 7 (id=89484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000240), 0x4) 559.284173ms ago: executing program 7 (id=89485): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r5, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 476.317571ms ago: executing program 7 (id=89486): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB], 0x48}}, 0x20000000) 476.081041ms ago: executing program 7 (id=89487): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 426.838617ms ago: executing program 7 (id=89490): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe10", 0x3}], 0x1}}], 0x2, 0xc044) 248.515435ms ago: executing program 5 (id=89494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=']) 187.07055ms ago: executing program 1 (id=89495): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') lseek(r0, 0x10000000005, 0x0) 186.217541ms ago: executing program 5 (id=89496): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB='\x00\x00\x00'], 0x48}}, 0x20000000) 134.201126ms ago: executing program 1 (id=89497): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500), 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 133.929346ms ago: executing program 5 (id=89498): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 133.499466ms ago: executing program 1 (id=89499): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 115.057498ms ago: executing program 5 (id=89500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000980)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 79.780221ms ago: executing program 1 (id=89501): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 41.271686ms ago: executing program 5 (id=89502): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0x0) 40.583025ms ago: executing program 1 (id=89503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') close_range(r3, 0xffffffffffffffff, 0x0) 609.97µs ago: executing program 5 (id=89504): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000500), 0xc802, &(0x7f00000001c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffff}}]}) 0s ago: executing program 1 (id=89505): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, 0x0) kernel console output (not intermixed with test programs): 37.391489][T15368] veth0_vlan: entered promiscuous mode [ 3237.419448][T15368] veth1_macvtap: entered promiscuous mode [ 3237.540217][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83910'. [ 3237.589631][T15447] tmpfs: Unknown parameter 'grpquota' [ 3237.601886][T15445] netlink: 'syz.1.83912': attribute type 4 has an invalid length. [ 3237.662137][T15455] netlink: 'syz.1.83917': attribute type 4 has an invalid length. [ 3237.692177][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83920'. [ 3237.740711][T15468] tmpfs: Unknown parameter 'grpquota' [ 3237.775267][T15472] netlink: 'syz.3.83926': attribute type 4 has an invalid length. [ 3237.876338][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83931'. [ 3237.952167][T15478] fuse: Bad value for 'user_id' [ 3237.961407][T15478] fuse: Bad value for 'user_id' [ 3237.971582][T15494] netlink: 'syz.3.83935': attribute type 4 has an invalid length. [ 3238.931612][T15552] netlink: 'syz.2.83962': attribute type 4 has an invalid length. [ 3241.027989][T15682] overlayfs: missing 'lowerdir' [ 3241.318832][T15704] 9pnet_fd: Insufficient options for proto=fd [ 3241.401427][T16017] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 3241.562501][T16017] usb 3-1: config 0 has no interfaces? [ 3241.570224][T16017] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3241.599910][T16017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3241.620978][T16017] usb 3-1: config 0 descriptor?? [ 3241.781705][T15720] __nla_validate_parse: 5 callbacks suppressed [ 3241.781732][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84039'. [ 3241.844396][T16017] usb 3-1: USB disconnect, device number 3 [ 3242.123534][T15732] overlayfs: missing 'lowerdir' [ 3242.450273][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84051'. [ 3242.918139][T15764] overlayfs: missing 'lowerdir' [ 3243.490526][T15800] overlayfs: missing 'lowerdir' [ 3243.608597][T15810] overlayfs: missing 'lowerdir' [ 3244.869396][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84114'. [ 3245.103440][T15887] netlink: 'syz.4.84124': attribute type 4 has an invalid length. [ 3245.121812][T15887] netlink: 'syz.4.84124': attribute type 4 has an invalid length. [ 3245.218630][T15896] netlink: 104 bytes leftover after parsing attributes in process `syz.4.84129'. [ 3245.416609][T15911] overlayfs: missing 'lowerdir' [ 3245.504793][T15922] netlink: 156 bytes leftover after parsing attributes in process `syz.1.84141'. [ 3245.522271][T15924] netlink: 388 bytes leftover after parsing attributes in process `syz.4.84142'. [ 3245.562669][T15926] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84143'. [ 3245.667537][T15942] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84150'. [ 3245.924605][T15966] tmpfs: Unknown parameter 'grpquota' [ 3246.420141][T15992] netlink: 'syz.4.84175': attribute type 4 has an invalid length. [ 3246.931979][T16025] 9pnet: Could not find request transport: 0xffffffffffffffff [ 3247.030940][T16029] fuseblk: Unknown parameter 'r' [ 3247.475139][T16059] overlayfs: missing 'lowerdir' [ 3248.179087][T16067] netlink: 156 bytes leftover after parsing attributes in process `syz.2.84212'. [ 3248.815837][ T46] veth1_macvtap: left promiscuous mode [ 3248.831440][ T46] veth0_vlan: left promiscuous mode [ 3249.016658][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 3249.031383][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 3249.038626][T16107] bridge_slave_0: entered allmulticast mode [ 3249.045358][T16107] bridge_slave_0: entered promiscuous mode [ 3249.052112][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 3249.059192][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 3249.066380][T16107] bridge_slave_1: entered allmulticast mode [ 3249.072863][T16107] bridge_slave_1: entered promiscuous mode [ 3249.212823][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 3249.219970][T16107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3249.227348][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 3249.234443][T16107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3249.308440][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3249.331832][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3249.354818][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3249.361942][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3249.392976][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3249.400154][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3249.484744][T16107] veth0_vlan: entered promiscuous mode [ 3249.517191][T16107] veth1_macvtap: entered promiscuous mode [ 3249.771058][T16148] netlink: 'syz.3.84245': attribute type 4 has an invalid length. [ 3249.903125][T16164] netlink: 156 bytes leftover after parsing attributes in process `syz.4.84252'. [ 3249.945386][T16168] netlink: 'syz.3.84254': attribute type 4 has an invalid length. [ 3249.966384][T16170] overlayfs: missing 'lowerdir' [ 3250.392155][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84270'. [ 3250.445529][T16206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16206 comm=syz.3.84272 [ 3250.626422][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84280'. [ 3250.661895][T16223] netlink: 104 bytes leftover after parsing attributes in process `syz.4.84279'. [ 3250.968658][T16246] netlink: 104 bytes leftover after parsing attributes in process `syz.2.84290'. [ 3250.968981][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84289'. [ 3251.040638][T16251] netlink: 'syz.4.84292': attribute type 4 has an invalid length. [ 3251.291565][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84300'. [ 3251.704535][T16286] netlink: 156 bytes leftover after parsing attributes in process `syz.2.84308'. [ 3251.727092][T16288] netlink: 388 bytes leftover after parsing attributes in process `syz.1.84309'. [ 3252.019702][T16310] overlayfs: missing 'lowerdir' [ 3252.922073][T16328] netlink: 'syz.2.84330': attribute type 4 has an invalid length. [ 3253.316028][T16348] netlink: 'syz.1.84339': attribute type 4 has an invalid length. [ 3254.106412][T16364] overlayfs: missing 'lowerdir' [ 3254.297932][T16382] overlayfs: missing 'lowerdir' [ 3254.458301][T16396] __nla_validate_parse: 2 callbacks suppressed [ 3254.458325][T16396] netlink: 104 bytes leftover after parsing attributes in process `syz.3.84364'. [ 3254.548530][T16407] overlayfs: missing 'lowerdir' [ 3254.652621][T16428] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84375'. [ 3255.767971][T16486] netlink: 388 bytes leftover after parsing attributes in process `syz.3.84404'. [ 3256.891839][T16571] overlayfs: missing 'lowerdir' [ 3257.107644][T16587] overlayfs: missing 'lowerdir' [ 3257.298328][T16595] tmpfs: Unknown parameter 'grpquota' [ 3257.378088][T16605] netlink: 104 bytes leftover after parsing attributes in process `syz.2.84461'. [ 3258.108673][T16625] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84471'. [ 3258.564773][ T36] audit: type=1400 audit(1763235821.771:1075): avc: denied { wake_alarm } for pid=16632 comm="syz.4.84475" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3258.665883][T16643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.84480'. [ 3259.274005][T16671] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84491'. [ 3259.738023][T16687] netlink: 104 bytes leftover after parsing attributes in process `syz.4.84503'. [ 3259.814967][T16699] overlayfs: missing 'lowerdir' [ 3259.979485][T16724] overlayfs: missing 'lowerdir' [ 3260.266246][T16751] overlayfs: missing 'lowerdir' [ 3260.360801][T16756] bridge0: port 1(bridge_slave_0) entered blocking state [ 3260.370941][T16756] bridge0: port 1(bridge_slave_0) entered disabled state [ 3260.378263][T16756] bridge_slave_0: entered allmulticast mode [ 3260.385388][T16756] bridge_slave_0: entered promiscuous mode [ 3260.392045][T16756] bridge0: port 2(bridge_slave_1) entered blocking state [ 3260.399166][T16756] bridge0: port 2(bridge_slave_1) entered disabled state [ 3260.406285][T16756] bridge_slave_1: entered allmulticast mode [ 3260.412746][T16756] bridge_slave_1: entered promiscuous mode [ 3260.465960][T16770] netlink: 'syz.2.84541': attribute type 4 has an invalid length. [ 3260.478867][T16770] netlink: 'syz.2.84541': attribute type 5 has an invalid length. [ 3260.497538][T16770] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.84541'. [ 3260.532583][ T4676] bridge_slave_1: left allmulticast mode [ 3260.541495][ T4676] bridge_slave_1: left promiscuous mode [ 3260.547183][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 3260.578848][ T4676] bridge_slave_0: left allmulticast mode [ 3260.580757][T16777] overlayfs: missing 'lowerdir' [ 3260.591361][ T4676] bridge_slave_0: left promiscuous mode [ 3260.604790][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 3260.632971][T16781] netlink: 388 bytes leftover after parsing attributes in process `syz.4.84547'. [ 3260.730795][T16791] netlink: 104 bytes leftover after parsing attributes in process `syz.4.84552'. [ 3260.752505][ T4676] veth1_macvtap: left promiscuous mode [ 3260.758104][ T4676] veth0_vlan: left promiscuous mode [ 3260.838457][T16804] overlayfs: missing 'lowerdir' [ 3260.905589][T16756] bridge0: port 2(bridge_slave_1) entered blocking state [ 3260.912720][T16756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3260.920120][T16756] bridge0: port 1(bridge_slave_0) entered blocking state [ 3260.927217][T16756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3260.953102][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3260.969570][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3260.989083][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 3260.996216][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3261.007086][T16818] tmpfs: Unknown parameter 'grpquota' [ 3261.026541][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3261.033663][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3261.104736][T16756] veth0_vlan: entered promiscuous mode [ 3261.129059][T16756] veth1_macvtap: entered promiscuous mode [ 3261.273767][T16842] tmpfs: Unknown parameter 'grpquota' [ 3261.382778][T16861] netlink: 388 bytes leftover after parsing attributes in process `syz.2.84581'. [ 3262.293360][T16929] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16929 comm=syz.4.84613 [ 3262.736280][T16982] can: request_module (can-proto-0) failed. [ 3262.821287][T16988] overlayfs: missing 'lowerdir' [ 3263.090954][T17006] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84650'. [ 3263.486455][T17024] netlink: 104 bytes leftover after parsing attributes in process `syz.3.84659'. [ 3264.012318][T17044] netlink: 104 bytes leftover after parsing attributes in process `syz.2.84668'. [ 3264.219213][T17052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84666'. [ 3264.293028][T17056] tmpfs: Unknown parameter 'grpquota' [ 3264.436042][T17067] netlink: 104 bytes leftover after parsing attributes in process `syz.3.84678'. [ 3264.573770][T17081] tmpfs: Unknown parameter 'grpquota' [ 3264.741510][T17099] tmpfs: Unknown parameter 'grpquota' [ 3264.902538][T17119] netlink: 104 bytes leftover after parsing attributes in process `syz.3.84703'. [ 3264.964992][T17125] tmpfs: Unknown parameter 'grpquota' [ 3265.066998][T17139] netlink: 104 bytes leftover after parsing attributes in process `syz.3.84713'. [ 3265.185638][T17149] tmpfs: Unknown parameter 'grpquota' [ 3265.376327][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84730'. [ 3265.616123][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84742'. [ 3266.213347][ T36] audit: type=1400 audit(1763235829.421:1076): avc: denied { bind } for pid=17226 comm="syz.4.84750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3266.221015][T17231] fuseblk: Unknown parameter 'r' [ 3266.974564][T17252] overlayfs: missing 'lowerdir' [ 3267.018096][T17262] tmpfs: Unknown parameter 'grpquota' [ 3267.423850][T17300] 9pnet_fd: Insufficient options for proto=fd [ 3267.491396][T29540] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 3267.526032][ T36] audit: type=1400 audit(1763235830.731:1077): avc: denied { setopt } for pid=17309 comm="syz.3.84794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3267.652433][T29540] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 3267.660770][T29540] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 3267.675445][T29540] usb 3-1: config 0 has no interface number 0 [ 3267.683438][T29540] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 3267.692759][T29540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3267.700791][T29540] usb 3-1: Product: syz [ 3267.705683][T17330] tmpfs: Unknown parameter 'grpquota' [ 3267.721360][T29540] usb 3-1: Manufacturer: syz [ 3267.726027][T29540] usb 3-1: SerialNumber: syz [ 3267.742645][T29540] usb 3-1: config 0 descriptor?? [ 3267.752149][T29540] cdc_acm 3-1:0.123: skipping garbage [ 3267.757590][T29540] cdc_acm 3-1:0.123: skipping garbage [ 3267.935212][T17349] tmpfs: Unknown parameter 'grpquota' [ 3267.950941][T29540] usb 3-1: USB disconnect, device number 4 [ 3268.080521][T17363] fuseblk: Unknown parameter 'r' [ 3268.116507][T17367] tmpfs: Unknown parameter 'grpquota' [ 3268.310698][T17386] overlayfs: missing 'lowerdir' [ 3268.360668][T17394] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1045 sclass=netlink_xfrm_socket pid=17394 comm=syz.3.84833 [ 3268.408757][T17402] overlayfs: missing 'lowerdir' [ 3268.431000][T17406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84839'. [ 3268.588067][T17430] tmpfs: Unknown parameter 'grpquota' [ 3268.734942][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84851'. [ 3268.927995][T17455] tmpfs: Unknown parameter 'grpquota' [ 3268.944116][T17457] fuseblk: Unknown parameter 'r' [ 3269.408415][T17476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84873'. [ 3269.855510][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.84884'. [ 3271.097604][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.84900'. [ 3271.297107][T17544] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1045 sclass=netlink_xfrm_socket pid=17544 comm=syz.3.84906 [ 3272.363409][T17558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.84912'. [ 3272.560189][T17583] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1045 sclass=netlink_xfrm_socket pid=17583 comm=syz.2.84915 [ 3272.720072][T17607] netlink: 104 bytes leftover after parsing attributes in process `syz.2.84935'. [ 3272.833932][T17630] netlink: 104 bytes leftover after parsing attributes in process `syz.4.84946'. [ 3272.944399][T17644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.84953'. [ 3273.055715][T17663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84963'. [ 3273.256648][T17689] netlink: 104 bytes leftover after parsing attributes in process `syz.2.84974'. [ 3273.541744][T17712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.84983'. [ 3273.610214][T17716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84985'. [ 3273.949942][T17730] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84992'. [ 3275.312979][T17832] fuseblk: Unknown parameter 'r' [ 3275.488725][T17849] fuseblk: Unknown parameter 'r' [ 3275.695712][T17877] fuseblk: Unknown parameter 'r' [ 3276.323507][T17913] fuseblk: Unknown parameter 'r' [ 3276.759294][T17938] fuseblk: Bad value for 'fd' [ 3276.821380][ T432] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3276.978324][T17962] __nla_validate_parse: 10 callbacks suppressed [ 3276.978349][T17962] netlink: 388 bytes leftover after parsing attributes in process `syz.1.85104'. [ 3276.994253][ T432] usb 3-1: Using ep0 maxpacket: 32 [ 3277.004158][ T432] usb 3-1: config 0 has no interfaces? [ 3277.015340][ T432] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3277.040106][ T432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3277.051144][ T432] usb 3-1: Product: syz [ 3277.055666][ T432] usb 3-1: Manufacturer: syz [ 3277.060427][ T432] usb 3-1: SerialNumber: syz [ 3277.072142][ T432] usb 3-1: config 0 descriptor?? [ 3277.282561][T30631] usb 3-1: USB disconnect, device number 5 [ 3277.481984][T17984] netlink: 388 bytes leftover after parsing attributes in process `syz.4.85114'. [ 3277.680435][T17996] tmpfs: Unknown parameter 'grpquota' [ 3277.801478][T30631] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3277.951374][T30631] usb 5-1: Using ep0 maxpacket: 8 [ 3277.962107][T30631] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3277.970782][T30631] usb 5-1: config 4 has an invalid interface number: 156 but max is 0 [ 3277.979586][T30631] usb 5-1: config 4 has no interface number 0 [ 3277.988757][T30631] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8a.2e [ 3277.989909][T18019] tmpfs: Unknown parameter 'grpquota' [ 3277.998372][T30631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3278.023854][T30631] usb 5-1: Product: syz [ 3278.028140][T30631] usb 5-1: Manufacturer: syz [ 3278.033073][T30631] usb 5-1: SerialNumber: syz [ 3278.146136][T18038] tmpfs: Unknown parameter 'grpquota' [ 3278.190868][T18042] overlayfs: missing 'lowerdir' [ 3278.240322][T18046] netlink: 388 bytes leftover after parsing attributes in process `syz.2.85142'. [ 3278.251517][T30631] snd-usb-audio 5-1:4.156: probe with driver snd-usb-audio failed with error -71 [ 3278.279235][T30631] usb 5-1: USB disconnect, device number 14 [ 3278.304972][T18053] 9pnet_fd: Insufficient options for proto=fd [ 3278.627665][T18086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85160'. [ 3278.671526][T18090] 9pnet_fd: Insufficient options for proto=fd [ 3278.752771][T18096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85166'. [ 3279.531379][ T432] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 3279.702724][ T432] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3279.710373][ T432] usb 2-1: can't read configurations, error -61 [ 3279.861397][ T432] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 3280.032896][ T432] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3280.040647][ T432] usb 2-1: can't read configurations, error -61 [ 3280.057277][ T432] usb usb2-port1: attempt power cycle [ 3280.401391][ T432] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 3280.433316][ T432] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3280.441162][ T432] usb 2-1: can't read configurations, error -61 [ 3280.572557][ T432] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 3280.593410][ T432] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3280.601132][ T432] usb 2-1: can't read configurations, error -61 [ 3280.607783][ T432] usb usb2-port1: unable to enumerate USB device [ 3280.761378][T18211] No source specified [ 3281.730038][T18232] No source specified [ 3282.911415][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 3283.108126][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3283.120217][ T9] usb 3-1: can't read configurations, error -61 [ 3283.263742][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 3283.432689][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3283.447408][ T9] usb 3-1: can't read configurations, error -61 [ 3283.455536][ T9] usb usb3-port1: attempt power cycle [ 3283.801375][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 3283.835760][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3283.856009][ T9] usb 3-1: can't read configurations, error -61 [ 3284.001380][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 3284.053056][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3284.060690][ T9] usb 3-1: can't read configurations, error -61 [ 3284.067916][ T9] usb usb3-port1: unable to enumerate USB device [ 3285.243689][T18468] 9pnet_fd: Insufficient options for proto=fd [ 3285.721865][T18491] fuseblk: Bad value for 'fd' [ 3285.940753][T18495] 9pnet_fd: Insufficient options for proto=fd [ 3286.341368][T29540] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 3286.532751][T29540] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3286.540406][T29540] usb 2-1: can't read configurations, error -61 [ 3286.701454][T29540] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 3286.863525][T29540] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3286.871464][T29540] usb 2-1: can't read configurations, error -61 [ 3286.901493][T29540] usb usb2-port1: attempt power cycle [ 3287.167663][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85366'. [ 3287.241372][T29540] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 3287.283113][T29540] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3287.298344][T29540] usb 2-1: can't read configurations, error -61 [ 3287.431385][T29540] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 3287.463079][T29540] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3287.481152][T29540] usb 2-1: can't read configurations, error -61 [ 3287.511471][T29540] usb usb2-port1: unable to enumerate USB device [ 3288.032036][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85373'. [ 3288.351389][ T36] audit: type=1400 audit(1763235851.551:1078): avc: denied { read } for pid=18570 comm="syz.3.85383" path="socket:[1482711]" dev="sockfs" ino=1482711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3288.487364][T18577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85386'. [ 3288.589427][T18581] netlink: 'syz.3.85388': attribute type 4 has an invalid length. [ 3288.928882][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85395'. [ 3289.218743][T18620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85405'. [ 3289.552468][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85412'. [ 3292.359206][T18888] loop5: detected capacity change from 0 to 7 [ 3293.939268][T18937] netlink: 'syz.1.85552': attribute type 4 has an invalid length. [ 3294.649263][T18956] 9pnet_fd: Insufficient options for proto=fd [ 3295.001207][T18974] netlink: 'syz.2.85565': attribute type 4 has an invalid length. [ 3295.035116][T18979] /dev/loop0: Can't lookup blockdev [ 3295.344793][T19003] netlink: 'syz.4.85581': attribute type 4 has an invalid length. [ 3295.384233][T19005] /dev/loop0: Can't lookup blockdev [ 3297.014335][T19053] 9pnet_fd: Insufficient options for proto=fd [ 3297.100778][ T36] audit: type=1400 audit(1763235860.301:1079): avc: denied { mounton } for pid=19066 comm="syz.4.85611" path="/proc/750/cgroup" dev="proc" ino=1488431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 3297.841592][T19098] /dev/loop0: Can't lookup blockdev [ 3299.324259][T19158] netlink: 'syz.3.85653': attribute type 4 has an invalid length. [ 3299.718964][T19197] loop5: detected capacity change from 0 to 7 [ 3300.066483][T19219] /dev/loop0: Can't lookup blockdev [ 3300.464625][T19239] /dev/loop0: Can't lookup blockdev [ 3300.825606][T19260] /dev/loop0: Can't lookup blockdev [ 3301.442013][T19293] netlink: 'syz.1.85717': attribute type 4 has an invalid length. [ 3301.743649][T19318] netlink: 'syz.4.85727': attribute type 4 has an invalid length. [ 3302.184758][T19363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85746'. [ 3302.362952][T19383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85756'. [ 3302.418380][T19388] loop5: detected capacity change from 0 to 7 [ 3302.573126][T19406] 9pnet_fd: Insufficient options for proto=fd [ 3302.617897][T19408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85767'. [ 3304.032375][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85805'. [ 3304.590472][T19528] netlink: 'syz.2.85820': attribute type 4 has an invalid length. [ 3305.511388][T19592] /dev/loop0: Can't lookup blockdev [ 3306.052172][T19682] netlink: 'syz.2.85886': attribute type 4 has an invalid length. [ 3306.451476][T19736] loop5: detected capacity change from 0 to 7 [ 3307.091976][T19817] loop5: detected capacity change from 0 to 7 [ 3307.757592][T19854] loop5: detected capacity change from 0 to 7 [ 3309.078002][T19897] 9pnet_fd: Insufficient options for proto=fd [ 3309.194011][T19914] /dev/loop0: Can't lookup blockdev [ 3309.368119][T19933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85994'. [ 3309.419070][T19938] 9pnet_fd: Insufficient options for proto=fd [ 3309.430395][T19942] /dev/loop0: Can't lookup blockdev [ 3309.574694][T19970] netlink: 'syz.4.86011': attribute type 4 has an invalid length. [ 3309.725247][T19993] netlink: 'syz.2.86021': attribute type 4 has an invalid length. [ 3309.797032][T20004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.86026'. [ 3310.112984][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86045'. [ 3310.266605][T20060] 9pnet_fd: Insufficient options for proto=fd [ 3310.593565][T20078] 9pnet_fd: Insufficient options for proto=fd [ 3310.776018][ T1231] bridge_slave_1: left allmulticast mode [ 3310.791372][ T1231] bridge_slave_1: left promiscuous mode [ 3310.803979][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3310.833384][ T1231] bridge_slave_0: left allmulticast mode [ 3310.839879][ T1231] bridge_slave_0: left promiscuous mode [ 3310.853860][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3311.002537][T20100] /dev/loop0: Can't lookup blockdev [ 3311.023701][ T1231] veth1_macvtap: left promiscuous mode [ 3311.029413][ T1231] veth0_vlan: left promiscuous mode [ 3311.140657][T20084] bridge0: port 1(bridge_slave_0) entered blocking state [ 3311.147771][T20084] bridge0: port 1(bridge_slave_0) entered disabled state [ 3311.154911][T20084] bridge_slave_0: entered allmulticast mode [ 3311.161194][T20084] bridge_slave_0: entered promiscuous mode [ 3311.167705][T20084] bridge0: port 2(bridge_slave_1) entered blocking state [ 3311.174800][T20084] bridge0: port 2(bridge_slave_1) entered disabled state [ 3311.182050][T20084] bridge_slave_1: entered allmulticast mode [ 3311.188531][T20084] bridge_slave_1: entered promiscuous mode [ 3311.317423][T20084] bridge0: port 2(bridge_slave_1) entered blocking state [ 3311.324645][T20084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3311.331993][T20084] bridge0: port 1(bridge_slave_0) entered blocking state [ 3311.339050][T20084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3311.365300][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 3311.373015][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 3311.383433][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 3311.390494][T21385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3311.399561][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 3311.406671][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3311.442192][T20084] veth0_vlan: entered promiscuous mode [ 3311.454972][T20084] veth1_macvtap: entered promiscuous mode [ 3311.786508][T20172] netlink: 'syz.4.86094': attribute type 4 has an invalid length. [ 3312.313094][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86117'. [ 3312.528940][T20248] netlink: 'syz.3.86130': attribute type 4 has an invalid length. [ 3312.610493][T20257] 9pnet_fd: Insufficient options for proto=fd [ 3312.754496][T20268] netlink: 'syz.1.86139': attribute type 4 has an invalid length. [ 3312.867600][T20283] 9pnet_fd: Insufficient options for proto=fd [ 3313.060299][T20310] 9pnet_fd: Insufficient options for proto=fd [ 3313.096187][T20316] loop5: detected capacity change from 0 to 7 [ 3313.489417][T20334] netlink: 'syz.2.86169': attribute type 4 has an invalid length. [ 3314.333037][T20355] 9pnet_fd: Insufficient options for proto=fd [ 3314.907323][T20395] 9pnet_fd: Insufficient options for proto=fd [ 3316.299953][T20523] loop5: detected capacity change from 0 to 7 [ 3316.540301][ T36] audit: type=1400 audit(1763235879.741:1080): avc: denied { create } for pid=20533 comm="syz.4.86258" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3316.966850][T20578] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3317.006662][T20582] netlink: 'syz.2.86280': attribute type 4 has an invalid length. [ 3317.459414][T20601] /dev/loop0: Can't lookup blockdev [ 3317.540264][T20611] 9pnet_fd: Insufficient options for proto=fd [ 3318.132641][T20647] netlink: 104 bytes leftover after parsing attributes in process `syz.2.86310'. [ 3318.386062][T20676] netlink: 'syz.1.86323': attribute type 4 has an invalid length. [ 3318.962364][T20724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86345'. [ 3319.092114][T20731] netlink: 'syz.3.86348': attribute type 4 has an invalid length. [ 3319.166118][T20735] /dev/loop0: Can't lookup blockdev [ 3319.408124][T20747] netlink: 104 bytes leftover after parsing attributes in process `syz.2.86356'. [ 3319.581984][T20765] netlink: 'syz.4.86357': attribute type 4 has an invalid length. [ 3320.017019][T20792] loop5: detected capacity change from 0 to 7 [ 3320.387551][T20812] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3320.452923][T15368] cgroup: fork rejected by pids controller in /syz1 [ 3320.572699][ T4676] bridge_slave_1: left allmulticast mode [ 3320.578413][ T4676] bridge_slave_1: left promiscuous mode [ 3320.611480][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 3320.629956][ T4676] bridge_slave_0: left allmulticast mode [ 3320.635702][ T4676] bridge_slave_0: left promiscuous mode [ 3320.651406][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 3320.795344][ T4676] veth1_macvtap: left promiscuous mode [ 3320.801030][ T4676] veth0_vlan: left promiscuous mode [ 3321.040896][T20832] bridge0: port 1(bridge_slave_0) entered blocking state [ 3321.061414][T20832] bridge0: port 1(bridge_slave_0) entered disabled state [ 3321.068562][T20832] bridge_slave_0: entered allmulticast mode [ 3321.085218][T20832] bridge_slave_0: entered promiscuous mode [ 3321.102699][T20832] bridge0: port 2(bridge_slave_1) entered blocking state [ 3321.109827][T20832] bridge0: port 2(bridge_slave_1) entered disabled state [ 3321.131652][T20832] bridge_slave_1: entered allmulticast mode [ 3321.141480][T20832] bridge_slave_1: entered promiscuous mode [ 3321.387055][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 3321.394185][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3321.400109][T20871] loop5: detected capacity change from 0 to 7 [ 3321.431654][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3321.438797][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3321.546243][T20832] veth0_vlan: entered promiscuous mode [ 3321.582909][T20832] veth1_macvtap: entered promiscuous mode [ 3323.245521][T20939] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3323.740585][T20976] /dev/loop0: Can't lookup blockdev [ 3324.141722][T20997] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3324.504962][T21021] /dev/loop0: Can't lookup blockdev [ 3324.857239][T21057] /dev/loop0: Can't lookup blockdev [ 3324.896656][T21059] loop5: detected capacity change from 0 to 7 [ 3325.063299][T21069] netlink: 104 bytes leftover after parsing attributes in process `syz.4.86493'. [ 3325.105789][T21072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.86494'. [ 3325.372920][T21100] netlink: 104 bytes leftover after parsing attributes in process `syz.4.86507'. [ 3325.576068][T21142] /dev/loop0: Can't lookup blockdev [ 3326.664368][T21257] /dev/loop0: Can't lookup blockdev [ 3327.014633][T21293] /dev/loop0: Can't lookup blockdev [ 3327.045984][T21301] netlink: 104 bytes leftover after parsing attributes in process `syz.3.86596'. [ 3327.070549][T21303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86597'. [ 3327.435819][T21334] loop5: detected capacity change from 0 to 7 [ 3327.814511][T21346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.86617'. [ 3327.859894][T21350] netlink: 104 bytes leftover after parsing attributes in process `syz.4.86620'. [ 3328.172488][T22321] bridge_slave_1: left allmulticast mode [ 3328.184759][T22321] bridge_slave_1: left promiscuous mode [ 3328.202885][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3328.218740][T22321] bridge_slave_0: left allmulticast mode [ 3328.224964][T22321] bridge_slave_0: left promiscuous mode [ 3328.230701][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3328.346316][T22321] veth1_macvtap: left promiscuous mode [ 3328.352015][T22321] veth0_vlan: left promiscuous mode [ 3328.493245][T21375] bridge0: port 1(bridge_slave_0) entered blocking state [ 3328.510356][T21375] bridge0: port 1(bridge_slave_0) entered disabled state [ 3328.521923][T21375] bridge_slave_0: entered allmulticast mode [ 3328.528491][T21375] bridge_slave_0: entered promiscuous mode [ 3328.535700][T21375] bridge0: port 2(bridge_slave_1) entered blocking state [ 3328.543586][T21375] bridge0: port 2(bridge_slave_1) entered disabled state [ 3328.550845][T21375] bridge_slave_1: entered allmulticast mode [ 3328.557418][T21375] bridge_slave_1: entered promiscuous mode [ 3328.702281][T20876] bridge0: port 1(bridge_slave_0) entered blocking state [ 3328.709398][T20876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3328.717872][T20876] bridge0: port 2(bridge_slave_1) entered blocking state [ 3328.724983][T20876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3328.758114][T21375] veth0_vlan: entered promiscuous mode [ 3328.786263][T21375] veth1_macvtap: entered promiscuous mode [ 3328.992934][T21420] netlink: 104 bytes leftover after parsing attributes in process `syz.2.86645'. [ 3329.083250][T21427] loop5: detected capacity change from 0 to 7 [ 3330.080878][T21463] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3330.473583][T21490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86678'. [ 3330.639706][T21499] loop5: detected capacity change from 0 to 7 [ 3330.775554][T21506] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3330.963779][T21534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.86696'. [ 3331.003120][T21540] rust_binder: 1294: no such ref 0 [ 3331.041195][T21551] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3331.104098][T21563] netlink: 104 bytes leftover after parsing attributes in process `syz.1.86709'. [ 3331.164692][T21572] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3331.358983][T21612] loop5: detected capacity change from 0 to 7 [ 3331.574749][ T46] bridge_slave_1: left allmulticast mode [ 3331.600082][ T46] bridge_slave_1: left promiscuous mode [ 3331.626015][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3331.634644][ T46] bridge_slave_0: left allmulticast mode [ 3331.640623][ T46] bridge_slave_0: left promiscuous mode [ 3331.646832][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3331.807065][ T46] veth1_macvtap: left promiscuous mode [ 3331.813173][ T46] veth0_vlan: left promiscuous mode [ 3332.002297][T21640] bridge0: port 1(bridge_slave_0) entered blocking state [ 3332.015104][T21640] bridge0: port 1(bridge_slave_0) entered disabled state [ 3332.023788][T21640] bridge_slave_0: entered allmulticast mode [ 3332.030355][T21640] bridge_slave_0: entered promiscuous mode [ 3332.037319][T21640] bridge0: port 2(bridge_slave_1) entered blocking state [ 3332.045447][T21640] bridge0: port 2(bridge_slave_1) entered disabled state [ 3332.053102][T21640] bridge_slave_1: entered allmulticast mode [ 3332.061727][T21640] bridge_slave_1: entered promiscuous mode [ 3332.218550][T21640] bridge0: port 2(bridge_slave_1) entered blocking state [ 3332.225685][T21640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3332.233025][T21640] bridge0: port 1(bridge_slave_0) entered blocking state [ 3332.240078][T21640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3332.289758][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3332.301857][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3332.333854][T20876] bridge0: port 1(bridge_slave_0) entered blocking state [ 3332.340956][T20876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3332.351510][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3332.358694][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3332.413675][T21640] veth0_vlan: entered promiscuous mode [ 3332.428876][T21640] veth1_macvtap: entered promiscuous mode [ 3332.485673][T21697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86736'. [ 3332.727093][T21726] netlink: 104 bytes leftover after parsing attributes in process `syz.3.86778'. [ 3336.850493][T21900] loop5: detected capacity change from 0 to 7 [ 3337.454396][T22321] bridge_slave_1: left allmulticast mode [ 3337.463936][T22321] bridge_slave_1: left promiscuous mode [ 3337.470267][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3337.490628][T22321] bridge_slave_0: left allmulticast mode [ 3337.511328][T22321] bridge_slave_0: left promiscuous mode [ 3337.525872][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3337.578894][T22002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86907'. [ 3337.749454][T22321] veth1_macvtap: left promiscuous mode [ 3337.767001][T22321] veth0_vlan: left promiscuous mode [ 3337.940483][T22023] loop5: detected capacity change from 0 to 7 [ 3337.963012][T22018] bridge0: port 1(bridge_slave_0) entered blocking state [ 3337.981402][T22018] bridge0: port 1(bridge_slave_0) entered disabled state [ 3337.992967][T22018] bridge_slave_0: entered allmulticast mode [ 3338.006153][T22018] bridge_slave_0: entered promiscuous mode [ 3338.019629][T22018] bridge0: port 2(bridge_slave_1) entered blocking state [ 3338.031343][T22018] bridge0: port 2(bridge_slave_1) entered disabled state [ 3338.047159][T22018] bridge_slave_1: entered allmulticast mode [ 3338.059811][T22018] bridge_slave_1: entered promiscuous mode [ 3338.172080][T22018] bridge0: port 2(bridge_slave_1) entered blocking state [ 3338.179232][T22018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3338.186600][T22018] bridge0: port 1(bridge_slave_0) entered blocking state [ 3338.193692][T22018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3338.221062][T20876] bridge0: port 1(bridge_slave_0) entered disabled state [ 3338.241987][T20876] bridge0: port 2(bridge_slave_1) entered disabled state [ 3338.285532][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3338.292654][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3338.310605][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 3338.317742][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3338.340333][T22321] bridge_slave_1: left allmulticast mode [ 3338.348629][T22321] bridge_slave_1: left promiscuous mode [ 3338.363059][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3338.392601][T22321] bridge_slave_0: left allmulticast mode [ 3338.398314][T22321] bridge_slave_0: left promiscuous mode [ 3338.414206][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3338.434676][T22043] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3338.513870][T22050] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 216) [ 3338.522123][T22050] rust_binder: Error while translating object. [ 3338.533284][T22050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 3338.539707][T22050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 3338.558481][T22321] veth1_macvtap: left promiscuous mode [ 3338.578712][T22321] veth0_vlan: left promiscuous mode [ 3338.676125][T22056] /dev/loop0: Can't lookup blockdev [ 3338.686710][T22018] veth0_vlan: entered promiscuous mode [ 3338.719587][T22018] veth1_macvtap: entered promiscuous mode [ 3338.777251][T22044] bridge0: port 1(bridge_slave_0) entered blocking state [ 3338.791232][T22044] bridge0: port 1(bridge_slave_0) entered disabled state [ 3338.799349][T22044] bridge_slave_0: entered allmulticast mode [ 3338.806013][T22044] bridge_slave_0: entered promiscuous mode [ 3338.814002][T22044] bridge0: port 2(bridge_slave_1) entered blocking state [ 3338.821083][T22044] bridge0: port 2(bridge_slave_1) entered disabled state [ 3338.828920][T22044] bridge_slave_1: entered allmulticast mode [ 3338.839494][T22044] bridge_slave_1: entered promiscuous mode [ 3339.049459][T22087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86940'. [ 3339.068724][T22044] bridge0: port 2(bridge_slave_1) entered blocking state [ 3339.075865][T22044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3339.083243][T22044] bridge0: port 1(bridge_slave_0) entered blocking state [ 3339.090315][T22044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3339.160189][T20876] bridge0: port 1(bridge_slave_0) entered disabled state [ 3339.169618][T20876] bridge0: port 2(bridge_slave_1) entered disabled state [ 3339.193915][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3339.201023][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3339.230144][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3339.237283][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3339.280648][T22044] veth0_vlan: entered promiscuous mode [ 3339.310854][T22044] veth1_macvtap: entered promiscuous mode [ 3339.429426][T22100] /dev/loop0: Can't lookup blockdev [ 3339.624462][T22107] loop5: detected capacity change from 0 to 7 [ 3340.043264][T22138] loop5: detected capacity change from 0 to 7 [ 3341.369563][T22218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86998'. [ 3341.476511][ T1231] bridge_slave_1: left allmulticast mode [ 3341.483070][ T1231] bridge_slave_1: left promiscuous mode [ 3341.488791][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3341.496876][ T1231] bridge_slave_0: left allmulticast mode [ 3341.502701][ T1231] bridge_slave_0: left promiscuous mode [ 3341.508514][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3341.620407][ T1231] veth1_macvtap: left promiscuous mode [ 3341.627135][ T1231] veth0_vlan: left promiscuous mode [ 3341.685170][T22237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.87010'. [ 3341.767188][T22238] bridge0: port 1(bridge_slave_0) entered blocking state [ 3341.774357][T22238] bridge0: port 1(bridge_slave_0) entered disabled state [ 3341.783745][T22238] bridge_slave_0: entered allmulticast mode [ 3341.790400][T22238] bridge_slave_0: entered promiscuous mode [ 3341.796991][T22238] bridge0: port 2(bridge_slave_1) entered blocking state [ 3341.804254][T22238] bridge0: port 2(bridge_slave_1) entered disabled state [ 3341.811781][T22238] bridge_slave_1: entered allmulticast mode [ 3341.818255][T22238] bridge_slave_1: entered promiscuous mode [ 3341.905219][T22261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87019'. [ 3341.921422][T22238] bridge0: port 2(bridge_slave_1) entered blocking state [ 3341.928613][T22238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3341.935976][T22238] bridge0: port 1(bridge_slave_0) entered blocking state [ 3341.943063][T22238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3341.973780][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3341.983908][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3342.002306][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3342.009461][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3342.018229][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 3342.025347][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3342.078327][T22238] veth0_vlan: entered promiscuous mode [ 3342.084754][ T1231] bridge_slave_1: left allmulticast mode [ 3342.090437][ T1231] bridge_slave_1: left promiscuous mode [ 3342.096442][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3342.104193][ T1231] bridge_slave_0: left allmulticast mode [ 3342.109882][ T1231] bridge_slave_0: left promiscuous mode [ 3342.116445][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3342.201826][T22267] bridge0: port 1(bridge_slave_0) entered blocking state [ 3342.208998][T22267] bridge0: port 1(bridge_slave_0) entered disabled state [ 3342.217048][T22267] bridge_slave_0: entered allmulticast mode [ 3342.226009][T22267] bridge_slave_0: entered promiscuous mode [ 3342.234274][T22267] bridge0: port 2(bridge_slave_1) entered blocking state [ 3342.242036][T22267] bridge0: port 2(bridge_slave_1) entered disabled state [ 3342.249231][T22267] bridge_slave_1: entered allmulticast mode [ 3342.257436][T22267] bridge_slave_1: entered promiscuous mode [ 3342.264763][ T1231] veth1_macvtap: left promiscuous mode [ 3342.277598][ T1231] veth0_vlan: left promiscuous mode [ 3342.335463][T22238] veth1_macvtap: entered promiscuous mode [ 3342.410848][T22290] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 3342.442667][T22292] /dev/loop0: Can't lookup blockdev [ 3342.495412][T22299] 9pnet: Could not find request transport: ›b“5àèv²xÈ}§YD­i°·°Ü("¾lûò_±H"o¹¯iÒ[òÈòÛ½p¨aÿéäþÌÆ¤º}ßTy8ZÛ»jMf¶ [ 3342.592864][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3342.599989][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3342.627024][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3342.634171][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3342.718035][T22267] veth0_vlan: entered promiscuous mode [ 3342.762725][T22267] veth1_macvtap: entered promiscuous mode [ 3343.076031][ T36] audit: type=1400 audit(1763235906.281:1081): avc: denied { create } for pid=22383 comm="syz.8.87068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 3343.279904][T22407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87079'. [ 3343.636832][ T46] bridge_slave_1: left allmulticast mode [ 3343.651363][ T46] bridge_slave_1: left promiscuous mode [ 3343.657076][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3343.667111][ T46] bridge_slave_0: left allmulticast mode [ 3343.674578][ T46] bridge_slave_0: left promiscuous mode [ 3343.680265][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3343.810088][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.87096'. [ 3343.836514][T22439] bridge0: port 1(bridge_slave_0) entered disabled state [ 3343.873087][T22439] bridge_slave_0 (unregistering): left allmulticast mode [ 3343.887580][T22439] bridge_slave_0 (unregistering): left promiscuous mode [ 3343.902570][T22439] bridge0: port 1(bridge_slave_0) entered disabled state [ 3343.925921][ T46] veth1_macvtap: left promiscuous mode [ 3343.932662][ T46] veth0_vlan: left promiscuous mode [ 3343.945150][T22449] netlink: 40 bytes leftover after parsing attributes in process `syz.8.87100'. [ 3344.175805][T22441] bridge0: port 1(bridge_slave_0) entered blocking state [ 3344.176683][T22470] netlink: 72 bytes leftover after parsing attributes in process `syz.8.87109'. [ 3344.191501][T22441] bridge0: port 1(bridge_slave_0) entered disabled state [ 3344.199739][T22441] bridge_slave_0: entered allmulticast mode [ 3344.206561][T22441] bridge_slave_0: entered promiscuous mode [ 3344.213453][T22441] bridge0: port 2(bridge_slave_1) entered blocking state [ 3344.220585][T22441] bridge0: port 2(bridge_slave_1) entered disabled state [ 3344.228566][T22441] bridge_slave_1: entered allmulticast mode [ 3344.235032][T22441] bridge_slave_1: entered promiscuous mode [ 3344.417633][T22475] bridge0: port 1(bridge_slave_0) entered blocking state [ 3344.428448][T22475] bridge0: port 1(bridge_slave_0) entered disabled state [ 3344.435660][T22475] bridge_slave_0: entered allmulticast mode [ 3344.442942][T22475] bridge_slave_0: entered promiscuous mode [ 3344.449434][T22475] bridge0: port 2(bridge_slave_1) entered blocking state [ 3344.456585][T22475] bridge0: port 2(bridge_slave_1) entered disabled state [ 3344.463794][T22475] bridge_slave_1: entered allmulticast mode [ 3344.470501][T22475] bridge_slave_1: entered promiscuous mode [ 3344.531647][ T46] bridge_slave_1: left allmulticast mode [ 3344.537608][ T46] bridge_slave_1: left promiscuous mode [ 3344.543672][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3344.563917][ T46] bridge_slave_1: left allmulticast mode [ 3344.569838][ T46] bridge_slave_1: left promiscuous mode [ 3344.575885][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3344.594448][ T46] bridge_slave_0: left allmulticast mode [ 3344.600190][ T46] bridge_slave_0: left promiscuous mode [ 3344.606108][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3344.821140][ T46] veth1_macvtap: left promiscuous mode [ 3344.826742][ T46] veth0_vlan: left promiscuous mode [ 3344.832364][ T46] veth1_macvtap: left promiscuous mode [ 3344.837881][ T46] veth0_vlan: left promiscuous mode [ 3344.992396][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3344.999577][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3345.012798][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3345.019882][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3345.072488][T22502] bridge0: port 1(bridge_slave_0) entered blocking state [ 3345.079594][T22502] bridge0: port 1(bridge_slave_0) entered disabled state [ 3345.087370][T22502] bridge_slave_0: entered allmulticast mode [ 3345.094438][T22502] bridge_slave_0: entered promiscuous mode [ 3345.103708][T22502] bridge0: port 2(bridge_slave_1) entered blocking state [ 3345.110802][T22502] bridge0: port 2(bridge_slave_1) entered disabled state [ 3345.117974][T22502] bridge_slave_1: entered allmulticast mode [ 3345.124756][T22502] bridge_slave_1: entered promiscuous mode [ 3345.188083][T22441] veth0_vlan: entered promiscuous mode [ 3345.210035][T20876] bridge0: port 1(bridge_slave_0) entered blocking state [ 3345.217178][T20876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3345.225089][T20876] bridge0: port 2(bridge_slave_1) entered blocking state [ 3345.232154][T20876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3345.254589][T22441] veth1_macvtap: entered promiscuous mode [ 3345.301689][T22513] bridge0: port 1(bridge_slave_0) entered blocking state [ 3345.308792][T22513] bridge0: port 1(bridge_slave_0) entered disabled state [ 3345.316029][T22513] bridge_slave_0: entered allmulticast mode [ 3345.322562][T22513] bridge_slave_0: entered promiscuous mode [ 3345.330215][T22513] bridge0: port 2(bridge_slave_1) entered blocking state [ 3345.338176][T22513] bridge0: port 2(bridge_slave_1) entered disabled state [ 3345.345461][T22513] bridge_slave_1: entered allmulticast mode [ 3345.352110][T22513] bridge_slave_1: entered promiscuous mode [ 3345.408346][T22475] veth0_vlan: entered promiscuous mode [ 3345.426299][ T46] bridge_slave_1: left allmulticast mode [ 3345.432783][ T46] bridge_slave_1: left promiscuous mode [ 3345.438442][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3345.446408][ T46] bridge_slave_0: left allmulticast mode [ 3345.452714][ T46] bridge_slave_0: left promiscuous mode [ 3345.458363][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3345.570426][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 3345.577567][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3345.587010][T22475] veth1_macvtap: entered promiscuous mode [ 3345.595182][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3345.602289][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3345.615966][ T46] veth1_macvtap: left promiscuous mode [ 3345.621721][ T46] veth0_vlan: left promiscuous mode [ 3345.671316][T17519] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 3345.705072][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 3345.712290][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3345.720954][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3345.728039][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3345.772375][T22502] veth0_vlan: entered promiscuous mode [ 3345.794570][T22502] veth1_macvtap: entered promiscuous mode [ 3345.803106][T22513] veth0_vlan: entered promiscuous mode [ 3345.822654][T17519] usb 10-1: config 0 has an invalid interface number: 129 but max is 2 [ 3345.822995][T22513] veth1_macvtap: entered promiscuous mode [ 3345.830969][T17519] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 3345.846879][T17519] usb 10-1: config 0 has no interface number 0 [ 3345.853390][T17519] usb 10-1: config 0 interface 129 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3345.864707][T17519] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 3345.874225][T17519] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3345.887549][T17519] usb 10-1: config 0 descriptor?? [ 3345.924163][T22539] /dev/loop0: Can't lookup blockdev [ 3345.992902][ T36] audit: type=1400 audit(1763235909.191:1082): avc: denied { read } for pid=22540 comm="syz.0.87127" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 3346.016447][ T36] audit: type=1400 audit(1763235909.191:1083): avc: denied { open } for pid=22540 comm="syz.0.87127" path="/2/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 3346.164664][T22566] kvm: Disabled LAPIC found during irq injection [ 3346.201445][T22321] bridge_slave_1: left allmulticast mode [ 3346.209093][T22321] bridge_slave_1: left promiscuous mode [ 3346.216566][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3346.224814][T22321] bridge_slave_0: left allmulticast mode [ 3346.230556][T22321] bridge_slave_0: left promiscuous mode [ 3346.237299][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3346.252956][T17519] usbhid 10-1:0.129: can't add hid device: -71 [ 3346.259325][T17519] usbhid 10-1:0.129: probe with driver usbhid failed with error -71 [ 3346.272823][T17519] usb 10-1: USB disconnect, device number 2 [ 3346.422430][T22321] veth1_macvtap: left promiscuous mode [ 3346.428164][T22321] veth0_vlan: left promiscuous mode [ 3346.480807][T22593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87151'. [ 3346.563619][T22604] No source specified [ 3346.578063][T22590] bridge0: port 1(bridge_slave_0) entered blocking state [ 3346.592484][T22590] bridge0: port 1(bridge_slave_0) entered disabled state [ 3346.599920][T22590] bridge_slave_0: entered allmulticast mode [ 3346.608214][T22610] 9pnet: Unknown protocol version 9p2 [ 3346.608882][T22590] bridge_slave_0: entered promiscuous mode [ 3346.630342][T22590] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.638110][T22590] bridge0: port 2(bridge_slave_1) entered disabled state [ 3346.644034][T22614] 9pnet: p9_errstr2errno: server reported unknown error [ 3346.651678][T22590] bridge_slave_1: entered allmulticast mode [ 3346.669592][T22590] bridge_slave_1: entered promiscuous mode [ 3346.680072][T22620] netlink: 'syz.1.87163': attribute type 4 has an invalid length. [ 3346.714985][T22625] No source specified [ 3346.829012][T22590] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.836138][T22590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3346.843497][T22590] bridge0: port 1(bridge_slave_0) entered blocking state [ 3346.850552][T22590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3346.867087][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3346.882616][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3346.918895][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3346.926127][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3346.947806][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.955007][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3347.000171][T22590] veth0_vlan: entered promiscuous mode [ 3347.033326][T22590] veth1_macvtap: entered promiscuous mode [ 3347.042661][T22321] bridge_slave_1: left allmulticast mode [ 3347.048373][T22321] bridge_slave_1: left promiscuous mode [ 3347.055031][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3347.064779][T22321] bridge_slave_0: left allmulticast mode [ 3347.070484][T22321] bridge_slave_0: left promiscuous mode [ 3347.076491][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3347.282980][T22321] veth1_macvtap: left promiscuous mode [ 3347.288571][T22321] veth0_vlan: left promiscuous mode [ 3347.373902][T22688] netlink: 104 bytes leftover after parsing attributes in process `syz.6.87191'. [ 3347.450976][T22669] bridge0: port 1(bridge_slave_0) entered blocking state [ 3347.458202][T22669] bridge0: port 1(bridge_slave_0) entered disabled state [ 3347.469773][T22669] bridge_slave_0: entered allmulticast mode [ 3347.482554][T22669] bridge_slave_0: entered promiscuous mode [ 3347.489740][T22669] bridge0: port 2(bridge_slave_1) entered blocking state [ 3347.497158][T22669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3347.504706][T22669] bridge_slave_1: entered allmulticast mode [ 3347.511436][T22669] bridge_slave_1: entered promiscuous mode [ 3347.617318][T22669] bridge0: port 2(bridge_slave_1) entered blocking state [ 3347.624438][T22669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3347.631784][T22669] bridge0: port 1(bridge_slave_0) entered blocking state [ 3347.638838][T22669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3347.678800][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3347.686480][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3347.707189][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3347.714305][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3347.722118][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 3347.729264][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3347.749554][T22669] veth0_vlan: entered promiscuous mode [ 3347.760971][T22669] veth1_macvtap: entered promiscuous mode [ 3347.936808][ T36] audit: type=1400 audit(1763235911.141:1084): avc: denied { module_load } for pid=22750 comm="syz.6.87215" path="/bus" dev="ramfs" ino=1528347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 3347.937110][T22751] Invalid ELF header magic: != ELF [ 3348.420909][T22798] netlink: 104 bytes leftover after parsing attributes in process `syz.0.87236'. [ 3348.447457][ T36] audit: type=1400 audit(1763235911.651:1085): avc: denied { module_load } for pid=22799 comm="syz.0.87237" path="/31/bus" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 3348.447548][T22800] Invalid ELF header magic: != ELF [ 3348.532407][T22802] netlink: 104 bytes leftover after parsing attributes in process `syz.0.87238'. [ 3349.105368][T22321] bridge_slave_1: left allmulticast mode [ 3349.119292][T22321] bridge_slave_1: left promiscuous mode [ 3349.126802][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3349.158974][T22321] bridge_slave_0: left allmulticast mode [ 3349.181359][T22321] bridge_slave_0: left promiscuous mode [ 3349.191378][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3349.385715][T22321] veth1_macvtap: left promiscuous mode [ 3349.397056][T22321] veth0_vlan: left promiscuous mode [ 3349.586734][T22839] bridge0: port 1(bridge_slave_0) entered blocking state [ 3349.594092][T22839] bridge0: port 1(bridge_slave_0) entered disabled state [ 3349.601576][T22839] bridge_slave_0: entered allmulticast mode [ 3349.608112][T22839] bridge_slave_0: entered promiscuous mode [ 3349.621924][T22839] bridge0: port 2(bridge_slave_1) entered blocking state [ 3349.629293][T22839] bridge0: port 2(bridge_slave_1) entered disabled state [ 3349.653889][T22839] bridge_slave_1: entered allmulticast mode [ 3349.660464][T22839] bridge_slave_1: entered promiscuous mode [ 3349.789114][T22839] bridge0: port 2(bridge_slave_1) entered blocking state [ 3349.796251][T22839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3349.803610][T22839] bridge0: port 1(bridge_slave_0) entered blocking state [ 3349.810676][T22839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3349.873902][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3349.892113][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3349.904728][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3349.911939][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3349.921693][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3349.928812][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3349.958451][T22877] Invalid ELF header magic: != ELF [ 3349.964736][ T36] audit: type=1400 audit(1763235913.171:1086): avc: denied { execute } for pid=22876 comm="syz.1.87271" path="/blkio.bfq.group_wait_time" dev="ramfs" ino=1530930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 3349.967538][T22839] veth0_vlan: entered promiscuous mode [ 3350.025498][T22839] veth1_macvtap: entered promiscuous mode [ 3350.219350][T22911] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3350.219382][T22911] rust_binder: Read failure Err(EFAULT) in pid:152 [ 3350.526167][T22321] bridge_slave_1: left allmulticast mode [ 3350.548626][T22321] bridge_slave_1: left promiscuous mode [ 3350.561624][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3350.579638][T22321] bridge_slave_0: left allmulticast mode [ 3350.585592][T22321] bridge_slave_0: left promiscuous mode [ 3350.602231][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3350.796657][T22321] veth1_macvtap: left promiscuous mode [ 3350.803123][T22321] veth0_vlan: left promiscuous mode [ 3351.010281][T22955] bridge0: port 1(bridge_slave_0) entered blocking state [ 3351.017491][T22955] bridge0: port 1(bridge_slave_0) entered disabled state [ 3351.027096][T22955] bridge_slave_0: entered allmulticast mode [ 3351.033732][T22955] bridge_slave_0: entered promiscuous mode [ 3351.040839][T22955] bridge0: port 2(bridge_slave_1) entered blocking state [ 3351.048243][T22955] bridge0: port 2(bridge_slave_1) entered disabled state [ 3351.056191][T22955] bridge_slave_1: entered allmulticast mode [ 3351.062894][T22955] bridge_slave_1: entered promiscuous mode [ 3351.323787][T23003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87326'. [ 3351.340287][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3351.347441][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3351.380988][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3351.388115][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3351.429315][T22955] veth0_vlan: entered promiscuous mode [ 3351.462881][T22955] veth1_macvtap: entered promiscuous mode [ 3351.751060][T23057] fuse: Bad value for 'fd' [ 3351.788540][T23063] input: syz0 as /devices/virtual/input/input181 [ 3352.154588][ T46] bridge_slave_1: left allmulticast mode [ 3352.160311][ T46] bridge_slave_1: left promiscuous mode [ 3352.191856][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.211765][ T46] bridge_slave_0: left allmulticast mode [ 3352.217639][ T46] bridge_slave_0: left promiscuous mode [ 3352.223939][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.341359][T29540] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3352.374322][T23136] bridge0: port 1(bridge_slave_0) entered blocking state [ 3352.381484][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3352.381502][T23136] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.381566][T23136] bridge_slave_0: entered allmulticast mode [ 3352.403119][T23136] bridge_slave_0: entered promiscuous mode [ 3352.410306][ T46] veth1_macvtap: left promiscuous mode [ 3352.415989][ T46] veth0_vlan: left promiscuous mode [ 3352.467172][T23136] bridge0: port 2(bridge_slave_1) entered blocking state [ 3352.474378][T23136] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.483285][T23136] bridge_slave_1: entered allmulticast mode [ 3352.489992][T23136] bridge_slave_1: entered promiscuous mode [ 3352.502366][T29540] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3352.512872][T29540] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3352.525960][T29540] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3352.535066][T29540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.541353][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 3352.553164][T29540] usb 3-1: config 0 descriptor?? [ 3352.562421][T29540] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3352.563433][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3352.590832][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3352.611302][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3352.628521][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 3352.647817][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.666650][ T9] usb 4-1: config 0 descriptor?? [ 3352.678722][T23136] bridge0: port 2(bridge_slave_1) entered blocking state [ 3352.685875][T23136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3352.693233][T23136] bridge0: port 1(bridge_slave_0) entered blocking state [ 3352.700297][T23136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3352.726397][T20876] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.734427][T20876] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.745191][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3352.752384][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3352.764292][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3352.771386][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3352.784930][T29540] usb 3-1: USB disconnect, device number 10 [ 3352.791010][ T46] bridge_slave_1: left allmulticast mode [ 3352.796756][ T46] bridge_slave_1: left promiscuous mode [ 3352.802775][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.810359][ T46] bridge_slave_0: left allmulticast mode [ 3352.816132][ T46] bridge_slave_0: left promiscuous mode [ 3352.822129][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.917914][T23149] bridge0: port 1(bridge_slave_0) entered blocking state [ 3352.925255][T23149] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.932431][T23149] bridge_slave_0: entered allmulticast mode [ 3352.938784][T23149] bridge_slave_0: entered promiscuous mode [ 3352.945784][T23149] bridge0: port 2(bridge_slave_1) entered blocking state [ 3352.953045][T23149] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.960149][T23149] bridge_slave_1: entered allmulticast mode [ 3352.966867][T23149] bridge_slave_1: entered promiscuous mode [ 3352.974776][ T46] veth1_macvtap: left promiscuous mode [ 3352.980306][ T46] veth0_vlan: left promiscuous mode [ 3353.065952][T23136] veth0_vlan: entered promiscuous mode [ 3353.080462][ T9] logitech 0003:046D:C295.0002: hidraw0: USB HID v0.01 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 3353.092409][ T9] logitech 0003:046D:C295.0002: no inputs found [ 3353.113365][T23136] veth1_macvtap: entered promiscuous mode [ 3353.182425][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3353.189523][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3353.199623][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3353.206759][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3353.243656][T23149] veth0_vlan: entered promiscuous mode [ 3353.257883][T23149] veth1_macvtap: entered promiscuous mode [ 3353.297368][T29540] usb 4-1: USB disconnect, device number 48 [ 3353.556673][T23186] 9pnet_fd: Insufficient options for proto=fd [ 3353.651346][ T432] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 3353.812474][ T432] usb 9-1: config 0 has no interfaces? [ 3353.818172][ T432] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3353.828161][ T432] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3353.837619][ T432] usb 9-1: config 0 descriptor?? [ 3354.049808][T30631] usb 9-1: USB disconnect, device number 2 [ 3354.104150][T23232] rust_binder: 22: no such ref 1 [ 3354.228568][T23257] netlink: 104 bytes leftover after parsing attributes in process `syz.7.87435'. [ 3355.562233][T23348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 3356.128165][ T36] audit: type=1400 audit(1763235919.331:1087): avc: denied { bind } for pid=23392 comm="syz.3.87503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3356.362281][T23409] netlink: 'syz.2.87509': attribute type 4 has an invalid length. [ 3356.380464][T23409] netlink: 'syz.2.87509': attribute type 5 has an invalid length. [ 3356.398716][T23409] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.87509'. [ 3356.466735][ T1231] bridge_slave_1: left allmulticast mode [ 3356.486342][ T1231] bridge_slave_1: left promiscuous mode [ 3356.509845][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3356.537795][ T1231] bridge_slave_0: left allmulticast mode [ 3356.547451][ T1231] bridge_slave_0: left promiscuous mode [ 3356.557625][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3356.726329][ T1231] veth1_macvtap: left promiscuous mode [ 3356.741475][ T1231] veth0_vlan: left promiscuous mode [ 3357.002177][T23422] bridge0: port 1(bridge_slave_0) entered blocking state [ 3357.009286][T23422] bridge0: port 1(bridge_slave_0) entered disabled state [ 3357.022141][T23422] bridge_slave_0: entered allmulticast mode [ 3357.028702][T23422] bridge_slave_0: entered promiscuous mode [ 3357.036712][T23422] bridge0: port 2(bridge_slave_1) entered blocking state [ 3357.044696][T23422] bridge0: port 2(bridge_slave_1) entered disabled state [ 3357.053352][T23422] bridge_slave_1: entered allmulticast mode [ 3357.059789][T23422] bridge_slave_1: entered promiscuous mode [ 3357.088034][T23432] loop5: detected capacity change from 0 to 7 [ 3357.280291][ T1231] bridge_slave_1: left allmulticast mode [ 3357.299377][ T1231] bridge_slave_1: left promiscuous mode [ 3357.312912][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3357.321081][ T1231] bridge_slave_0: left allmulticast mode [ 3357.336876][ T1231] bridge_slave_0: left promiscuous mode [ 3357.349461][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3357.488676][T23422] bridge0: port 2(bridge_slave_1) entered blocking state [ 3357.495897][T23422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3357.503237][T23422] bridge0: port 1(bridge_slave_0) entered blocking state [ 3357.510294][T23422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3357.522629][T22321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3357.530671][T22321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3357.539651][T23467] rust_binder: 88: no such ref 0 [ 3357.563145][ T1231] veth1_macvtap: left promiscuous mode [ 3357.574751][ T1231] veth0_vlan: left promiscuous mode [ 3357.700926][T23436] bridge0: port 1(bridge_slave_0) entered blocking state [ 3357.708520][T23436] bridge0: port 1(bridge_slave_0) entered disabled state [ 3357.715974][T23436] bridge_slave_0: entered allmulticast mode [ 3357.722821][T23436] bridge_slave_0: entered promiscuous mode [ 3357.735359][T23436] bridge0: port 2(bridge_slave_1) entered blocking state [ 3357.749443][T23436] bridge0: port 2(bridge_slave_1) entered disabled state [ 3357.756867][T23436] bridge_slave_1: entered allmulticast mode [ 3357.771996][T23436] bridge_slave_1: entered promiscuous mode [ 3357.794389][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3357.801628][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3357.829766][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3357.836902][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3357.928307][T23422] veth0_vlan: entered promiscuous mode [ 3357.990243][T23422] veth1_macvtap: entered promiscuous mode [ 3358.027161][T22321] bridge0: port 1(bridge_slave_0) entered blocking state [ 3358.034284][T22321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3358.049226][T22321] bridge0: port 2(bridge_slave_1) entered blocking state [ 3358.056337][T22321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3358.127091][T23436] veth0_vlan: entered promiscuous mode [ 3358.155410][T23510] netlink: 104 bytes leftover after parsing attributes in process `syz.8.87551'. [ 3358.163599][T23436] veth1_macvtap: entered promiscuous mode [ 3360.311050][T23603] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3360.311078][T23603] rust_binder: Read failure Err(EFAULT) in pid:125 [ 3360.386229][ T1231] bridge_slave_1: left allmulticast mode [ 3360.419371][ T1231] bridge_slave_1: left promiscuous mode [ 3360.439635][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3360.460268][ T1231] bridge_slave_0: left allmulticast mode [ 3360.466047][ T1231] bridge_slave_0: left promiscuous mode [ 3360.477131][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3360.614054][ T1231] veth1_macvtap: left promiscuous mode [ 3360.619646][ T1231] veth0_vlan: left promiscuous mode [ 3360.821742][T23619] netlink: 104 bytes leftover after parsing attributes in process `syz.4.87605'. [ 3360.932675][T23626] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3360.932703][T23626] rust_binder: Read failure Err(EFAULT) in pid:29 [ 3360.986705][T23624] bridge0: port 1(bridge_slave_0) entered blocking state [ 3361.010597][T23624] bridge0: port 1(bridge_slave_0) entered disabled state [ 3361.038784][T23624] bridge_slave_0: entered allmulticast mode [ 3361.045267][T23624] bridge_slave_0: entered promiscuous mode [ 3361.053569][T23624] bridge0: port 2(bridge_slave_1) entered blocking state [ 3361.062643][T23624] bridge0: port 2(bridge_slave_1) entered disabled state [ 3361.070814][T23624] bridge_slave_1: entered allmulticast mode [ 3361.082148][T23624] bridge_slave_1: entered promiscuous mode [ 3361.208001][ T1231] bridge_slave_1: left allmulticast mode [ 3361.221307][ T1231] bridge_slave_1: left promiscuous mode [ 3361.227060][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3361.247659][ T1231] bridge_slave_0: left allmulticast mode [ 3361.261294][ T1231] bridge_slave_0: left promiscuous mode [ 3361.267006][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3361.445267][ T1231] veth1_macvtap: left promiscuous mode [ 3361.450865][ T1231] veth0_vlan: left promiscuous mode [ 3361.752177][T23636] bridge0: port 1(bridge_slave_0) entered blocking state [ 3361.759331][T23636] bridge0: port 1(bridge_slave_0) entered disabled state [ 3361.811353][T23636] bridge_slave_0: entered allmulticast mode [ 3361.817845][T23636] bridge_slave_0: entered promiscuous mode [ 3361.849389][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3361.856525][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3361.882610][T23636] bridge0: port 2(bridge_slave_1) entered blocking state [ 3361.889715][T23636] bridge0: port 2(bridge_slave_1) entered disabled state [ 3361.913437][T23636] bridge_slave_1: entered allmulticast mode [ 3361.919900][T23636] bridge_slave_1: entered promiscuous mode [ 3361.947706][T21385] bridge0: port 2(bridge_slave_1) entered blocking state [ 3361.954837][T21385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3362.113820][T23624] veth0_vlan: entered promiscuous mode [ 3362.154443][T23624] veth1_macvtap: entered promiscuous mode [ 3362.211734][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 3362.218970][T21385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3362.234777][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 3362.241876][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3362.293625][T23636] veth0_vlan: entered promiscuous mode [ 3362.326775][T23636] veth1_macvtap: entered promiscuous mode [ 3362.523826][ T46] bridge_slave_1: left allmulticast mode [ 3362.531343][ T46] bridge_slave_1: left promiscuous mode [ 3362.548407][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3362.562110][ T46] bridge_slave_0: left allmulticast mode [ 3362.567915][ T46] bridge_slave_0: left promiscuous mode [ 3362.583486][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3362.817260][ T46] veth1_macvtap: left promiscuous mode [ 3362.831417][ T46] veth0_vlan: left promiscuous mode [ 3363.035129][T23695] netlink: 104 bytes leftover after parsing attributes in process `syz.6.87634'. [ 3363.076881][T23687] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.104076][T23687] bridge0: port 1(bridge_slave_0) entered disabled state [ 3363.124411][T23687] bridge_slave_0: entered allmulticast mode [ 3363.130955][T23687] bridge_slave_0: entered promiscuous mode [ 3363.134585][T23704] netlink: 56 bytes leftover after parsing attributes in process `syz.4.87636'. [ 3363.138148][T23687] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.154277][T23687] bridge0: port 2(bridge_slave_1) entered disabled state [ 3363.161550][T23687] bridge_slave_1: entered allmulticast mode [ 3363.168053][T23687] bridge_slave_1: entered promiscuous mode [ 3363.194591][T23706] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3363.194617][T23706] rust_binder: Read failure Err(EFAULT) in pid:42 [ 3363.403574][T23687] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.417229][T23687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3363.424603][T23687] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.431684][T23687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3363.504871][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3363.512562][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3363.555587][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.562712][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3363.592872][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.600050][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3363.667172][T23687] veth0_vlan: entered promiscuous mode [ 3363.704363][T23687] veth1_macvtap: entered promiscuous mode [ 3363.976717][ T46] bridge_slave_1: left allmulticast mode [ 3363.999010][ T46] bridge_slave_1: left promiscuous mode [ 3364.021624][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3364.041613][ T46] bridge_slave_0: left allmulticast mode [ 3364.047329][ T46] bridge_slave_0: left promiscuous mode [ 3364.081419][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3364.262366][ T46] veth1_macvtap: left promiscuous mode [ 3364.267971][ T46] veth0_vlan: left promiscuous mode [ 3364.334059][T23755] netlink: 104 bytes leftover after parsing attributes in process `syz.4.87657'. [ 3364.358068][ T36] audit: type=1326 audit(1763235927.561:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3563f8f6c9 code=0x7ffc0000 [ 3364.384818][ T36] audit: type=1326 audit(1763235927.591:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3563f8f6c9 code=0x7ffc0000 [ 3364.424481][ T36] audit: type=1326 audit(1763235927.591:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3563f8df10 code=0x7ffc0000 [ 3364.448321][ T36] audit: type=1326 audit(1763235927.591:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3563f8f2cb code=0x7ffc0000 [ 3364.482039][ T36] audit: type=1326 audit(1763235927.591:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3563f8f2cb code=0x7ffc0000 [ 3364.521346][ T36] audit: type=1326 audit(1763235927.591:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3563f8f2cb code=0x7ffc0000 [ 3364.605198][T23756] bridge0: port 1(bridge_slave_0) entered blocking state [ 3364.612387][ T36] audit: type=1326 audit(1763235927.591:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3563f8f2cb code=0x7ffc0000 [ 3364.636036][ T432] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 3364.644219][T23756] bridge0: port 1(bridge_slave_0) entered disabled state [ 3364.651731][T23756] bridge_slave_0: entered allmulticast mode [ 3364.658235][T23756] bridge_slave_0: entered promiscuous mode [ 3364.664116][ T36] audit: type=1326 audit(1763235927.711:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3563f8f2cb code=0x7ffc0000 [ 3364.688475][T23756] bridge0: port 2(bridge_slave_1) entered blocking state [ 3364.695646][ T36] audit: type=1326 audit(1763235927.781:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3563f8f2cb code=0x7ffc0000 [ 3364.696109][T23756] bridge0: port 2(bridge_slave_1) entered disabled state [ 3364.721322][ T36] audit: type=1326 audit(1763235927.851:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23757 comm="syz.6.87658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3563f8f2cb code=0x7ffc0000 [ 3364.750154][T23756] bridge_slave_1: entered allmulticast mode [ 3364.756656][T23756] bridge_slave_1: entered promiscuous mode [ 3364.832963][ T432] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3364.845968][ T432] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3364.857222][ T432] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3364.878674][ T432] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3364.898803][ T432] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3364.920213][ T432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.929984][ T432] usb 7-1: config 0 descriptor?? [ 3364.938636][T23756] bridge0: port 2(bridge_slave_1) entered blocking state [ 3364.945784][T23756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3364.953109][T23756] bridge0: port 1(bridge_slave_0) entered blocking state [ 3364.960154][T23756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3364.995356][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 3365.003552][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 3365.040137][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3365.047279][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3365.077906][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 3365.085063][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3365.121149][T23756] veth0_vlan: entered promiscuous mode [ 3365.137519][T23756] veth1_macvtap: entered promiscuous mode [ 3365.369786][ T432] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 3365.382286][ T432] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 3365.622271][T17519] usb 7-1: USB disconnect, device number 2 [ 3365.731323][ T432] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 3365.881296][ T432] usb 6-1: Using ep0 maxpacket: 16 [ 3365.892100][ T432] usb 6-1: config 1 has an invalid interface number: 64 but max is 0 [ 3365.900237][ T432] usb 6-1: config 1 has no interface number 0 [ 3365.906605][ T432] usb 6-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 3365.922365][ T432] usb 6-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 3365.931513][ T432] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.939739][ T432] usb 6-1: Product: syz [ 3365.944152][ T432] usb 6-1: Manufacturer: syz [ 3365.948784][ T432] usb 6-1: SerialNumber: syz [ 3366.174384][ T432] usb 6-1: USB disconnect, device number 2 [ 3366.826124][T30631] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 3367.002360][T30631] usb 5-1: config 0 has no interfaces? [ 3367.008022][T30631] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3367.028177][T30631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3367.049197][T30631] usb 5-1: config 0 descriptor?? [ 3367.109541][T23896] tipc: Started in network mode [ 3367.114731][T23896] tipc: Node identity 4, cluster identity 4711 [ 3367.121740][T23896] tipc: Node number set to 4 [ 3367.265070][T17519] usb 5-1: USB disconnect, device number 15 [ 3368.165340][T23975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23975 comm=syz.6.87753 [ 3369.524885][T21385] bridge_slave_1: left allmulticast mode [ 3369.540872][T21385] bridge_slave_1: left promiscuous mode [ 3369.571397][T21385] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.606888][T21385] bridge_slave_0: left allmulticast mode [ 3369.631306][T21385] bridge_slave_0: left promiscuous mode [ 3369.637017][T21385] bridge0: port 1(bridge_slave_0) entered disabled state [ 3369.826598][T21385] veth1_macvtap: left promiscuous mode [ 3369.843627][T21385] veth0_vlan: left promiscuous mode [ 3370.041405][T16017] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 3370.141810][T24055] bridge0: port 1(bridge_slave_0) entered blocking state [ 3370.171414][T24055] bridge0: port 1(bridge_slave_0) entered disabled state [ 3370.178574][T24055] bridge_slave_0: entered allmulticast mode [ 3370.198777][T24055] bridge_slave_0: entered promiscuous mode [ 3370.213989][T16017] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 3370.223335][T16017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3370.224115][T24055] bridge0: port 2(bridge_slave_1) entered blocking state [ 3370.232714][T16017] usb 6-1: Product: syz [ 3370.242914][T16017] usb 6-1: Manufacturer: syz [ 3370.247540][T16017] usb 6-1: SerialNumber: syz [ 3370.252932][T24055] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.260048][T24055] bridge_slave_1: entered allmulticast mode [ 3370.268405][T16017] usb 6-1: config 0 descriptor?? [ 3370.275494][T24055] bridge_slave_1: entered promiscuous mode [ 3370.432074][T24055] bridge0: port 2(bridge_slave_1) entered blocking state [ 3370.439210][T24055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3370.446601][T24055] bridge0: port 1(bridge_slave_0) entered blocking state [ 3370.453699][T24055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3370.514845][T21385] bridge0: port 1(bridge_slave_0) entered disabled state [ 3370.522589][T21385] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.536502][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 3370.543634][T21385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3370.572132][T21385] bridge0: port 2(bridge_slave_1) entered blocking state [ 3370.579228][T21385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3370.633440][T24055] veth0_vlan: entered promiscuous mode [ 3370.662709][T24055] veth1_macvtap: entered promiscuous mode [ 3371.170456][T24109] bridge0: port 1(bridge_slave_0) entered blocking state [ 3371.178031][T24109] bridge0: port 1(bridge_slave_0) entered disabled state [ 3371.185456][T24109] bridge_slave_0: entered allmulticast mode [ 3371.191893][T24109] bridge_slave_0: entered promiscuous mode [ 3371.199378][T24109] bridge0: port 2(bridge_slave_1) entered blocking state [ 3371.206960][T24109] bridge0: port 2(bridge_slave_1) entered disabled state [ 3371.214471][T24109] bridge_slave_1: entered allmulticast mode [ 3371.220929][T24109] bridge_slave_1: entered promiscuous mode [ 3371.296734][T24109] bridge0: port 2(bridge_slave_1) entered blocking state [ 3371.303902][T24109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3371.311225][T24109] bridge0: port 1(bridge_slave_0) entered blocking state [ 3371.318321][T24109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3371.347523][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3371.356061][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3371.365982][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 3371.373097][T21385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3371.386597][T21385] bridge0: port 2(bridge_slave_1) entered blocking state [ 3371.393829][T21385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3371.428284][T24109] veth0_vlan: entered promiscuous mode [ 3371.443563][T24109] veth1_macvtap: entered promiscuous mode [ 3371.586098][ T1231] bridge_slave_1: left allmulticast mode [ 3371.592307][ T1231] bridge_slave_1: left promiscuous mode [ 3371.598040][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3371.606046][ T1231] bridge_slave_0: left allmulticast mode [ 3371.617680][ T1231] bridge_slave_0: left promiscuous mode [ 3371.628978][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3371.825272][ T1231] veth1_macvtap: left promiscuous mode [ 3371.830899][ T1231] veth0_vlan: left promiscuous mode [ 3371.896821][T24135] bridge0: port 1(bridge_slave_0) entered blocking state [ 3371.904421][T24135] bridge0: port 1(bridge_slave_0) entered disabled state [ 3371.914623][T24135] bridge_slave_0: entered allmulticast mode [ 3371.921098][T24135] bridge_slave_0: entered promiscuous mode [ 3371.928652][T24135] bridge0: port 2(bridge_slave_1) entered blocking state [ 3371.936221][T24135] bridge0: port 2(bridge_slave_1) entered disabled state [ 3371.943561][T24135] bridge_slave_1: entered allmulticast mode [ 3371.950302][T24135] bridge_slave_1: entered promiscuous mode [ 3372.056240][T24135] bridge0: port 2(bridge_slave_1) entered blocking state [ 3372.063357][T24135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3372.070627][T24135] bridge0: port 1(bridge_slave_0) entered blocking state [ 3372.077679][T24135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3372.109849][T21385] bridge0: port 1(bridge_slave_0) entered disabled state [ 3372.117608][T21385] bridge0: port 2(bridge_slave_1) entered disabled state [ 3372.130334][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 3372.137421][T21385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3372.148548][T24147] bridge0: port 2(bridge_slave_1) entered blocking state [ 3372.155763][T24147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3372.193050][T24135] veth0_vlan: entered promiscuous mode [ 3372.208972][T24135] veth1_macvtap: entered promiscuous mode [ 3372.228949][ T1231] bridge_slave_1: left allmulticast mode [ 3372.234705][ T1231] bridge_slave_1: left promiscuous mode [ 3372.240369][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3372.248603][ T1231] bridge_slave_0: left allmulticast mode [ 3372.254477][ T1231] bridge_slave_0: left promiscuous mode [ 3372.260143][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3372.377154][ T1231] tipc: Left network mode [ 3372.400957][T24164] bridge0: port 1(bridge_slave_0) entered blocking state [ 3372.408520][T24164] bridge0: port 1(bridge_slave_0) entered disabled state [ 3372.415911][T24164] bridge_slave_0: entered allmulticast mode [ 3372.422458][T24164] bridge_slave_0: entered promiscuous mode [ 3372.429647][ T1231] veth1_macvtap: left promiscuous mode [ 3372.435582][ T1231] veth0_vlan: left promiscuous mode [ 3372.502364][T24164] bridge0: port 2(bridge_slave_1) entered blocking state [ 3372.509649][T24164] bridge0: port 2(bridge_slave_1) entered disabled state [ 3372.516868][T24164] bridge_slave_1: entered allmulticast mode [ 3372.524568][T24164] bridge_slave_1: entered promiscuous mode [ 3372.639188][T24147] bridge0: port 1(bridge_slave_0) entered blocking state [ 3372.646323][T24147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3372.656250][T21385] bridge0: port 2(bridge_slave_1) entered blocking state [ 3372.663367][T21385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3372.699915][T24164] veth0_vlan: entered promiscuous mode [ 3372.714671][T24164] veth1_macvtap: entered promiscuous mode [ 3372.810061][T17519] usb 6-1: USB disconnect, device number 3 [ 3373.303340][T24248] overlayfs: missing 'lowerdir' [ 3373.907926][ T1231] bridge_slave_1: left allmulticast mode [ 3373.918520][ T1231] bridge_slave_1: left promiscuous mode [ 3373.944596][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3373.974796][ T1231] bridge_slave_0: left allmulticast mode [ 3373.980620][ T1231] bridge_slave_0: left promiscuous mode [ 3374.021437][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3374.283158][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 3374.283180][ T36] audit: type=1400 audit(1763235937.491:1131): avc: denied { getopt } for pid=24315 comm="syz.1.87894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3374.352102][ T1231] veth1_macvtap: left promiscuous mode [ 3374.357695][ T1231] veth0_vlan: left promiscuous mode [ 3376.318834][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.87940'. [ 3376.957085][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87959'. [ 3376.978005][T24455] bridge_slave_1: left allmulticast mode [ 3376.984400][T24455] bridge_slave_1: left promiscuous mode [ 3376.990289][T24455] bridge0: port 2(bridge_slave_1) entered disabled state [ 3377.001890][T24455] bridge_slave_0: left allmulticast mode [ 3377.007730][T24455] bridge_slave_0: left promiscuous mode [ 3377.021032][T24455] bridge0: port 1(bridge_slave_0) entered disabled state [ 3377.710353][T24528] netlink: 4 bytes leftover after parsing attributes in process `syz.9.87994'. [ 3377.731654][T24528] bridge_slave_1: left allmulticast mode [ 3377.740274][T24528] bridge_slave_1: left promiscuous mode [ 3377.753986][T24528] bridge0: port 2(bridge_slave_1) entered disabled state [ 3377.791822][T24528] bridge_slave_0: left allmulticast mode [ 3377.797552][T24528] bridge_slave_0: left promiscuous mode [ 3377.805634][T24528] bridge0: port 1(bridge_slave_0) entered disabled state [ 3378.092971][T24559] fuse: Bad value for 'group_id' [ 3378.108344][T24559] fuse: Bad value for 'group_id' [ 3378.748105][T24587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3379.014362][T24600] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=24600 comm=syz.1.88029 [ 3380.924928][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.9.88057'. [ 3381.185884][T30631] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 3381.356175][T30631] usb 6-1: Using ep0 maxpacket: 16 [ 3381.382015][T30631] usb 6-1: config 1 has an invalid interface number: 64 but max is 0 [ 3381.402377][T30631] usb 6-1: config 1 has no interface number 0 [ 3381.408824][T30631] usb 6-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 3381.432036][T30631] usb 6-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 3381.451325][T30631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3381.469748][T30631] usb 6-1: Product: syz [ 3381.479819][T30631] usb 6-1: Manufacturer: syz [ 3381.489776][T30631] usb 6-1: SerialNumber: syz [ 3381.707206][T30631] usb 6-1: USB disconnect, device number 4 [ 3381.823517][T24692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.88072'. [ 3381.911364][ T432] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 3382.072579][ T432] usb 10-1: config 0 has an invalid interface number: 82 but max is 0 [ 3382.080810][ T432] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3382.091257][ T432] usb 10-1: config 0 has no interface number 0 [ 3382.097465][ T432] usb 10-1: config 0 interface 82 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 3382.112351][ T432] usb 10-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 3382.121586][ T432] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.129669][ T432] usb 10-1: Product: syz [ 3382.133966][ T432] usb 10-1: Manufacturer: syz [ 3382.138677][ T432] usb 10-1: SerialNumber: syz [ 3382.145224][ T432] usb 10-1: config 0 descriptor?? [ 3382.151117][ T432] cdc_ether 10-1:0.82: skipping garbage [ 3382.156806][ T432] usb 10-1: bad CDC descriptors [ 3382.162003][ T432] usb 10-1: unsupported MDLM descriptors [ 3382.168248][ T432] cdc_acm 10-1:0.82: skipping garbage [ 3382.352867][T30631] usb 10-1: USB disconnect, device number 3 [ 3382.527316][ T36] audit: type=1326 audit(1763235945.731:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.5.88099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968b18f6c9 code=0x7ffc0000 [ 3382.558198][ T36] audit: type=1326 audit(1763235945.761:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.5.88099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968b18f6c9 code=0x7ffc0000 [ 3382.588857][ T36] audit: type=1326 audit(1763235945.761:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.5.88099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f968b18f6c9 code=0x7ffc0000 [ 3382.612803][ T36] audit: type=1326 audit(1763235945.761:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.5.88099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968b18f6c9 code=0x7ffc0000 [ 3382.636821][ T36] audit: type=1326 audit(1763235945.761:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.5.88099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968b18f6c9 code=0x7ffc0000 [ 3382.697386][T24770] rust_binder: 333: no such ref 0 [ 3382.781081][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.88114'. [ 3382.790195][T24782] bridge_slave_1: left allmulticast mode [ 3382.795899][T24782] bridge_slave_1: left promiscuous mode [ 3382.801646][T24782] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.809288][T24782] bridge_slave_0: left allmulticast mode [ 3382.815096][T24782] bridge_slave_0: left promiscuous mode [ 3382.820736][T24782] bridge0: port 1(bridge_slave_0) entered disabled state [ 3382.971637][ T432] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 3383.132474][ T432] usb 2-1: config 0 has no interfaces? [ 3383.138039][ T432] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3383.147386][ T432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3383.161043][ T432] usb 2-1: config 0 descriptor?? [ 3383.370407][ T432] usb 2-1: USB disconnect, device number 114 [ 3384.084268][T24871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88155'. [ 3384.107986][T24874] rust_binder: 164: no such ref 0 [ 3384.231710][T24896] rust_binder: 171: no such ref 0 [ 3384.255385][T30631] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 3384.398526][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.9.88176'. [ 3384.422347][T30631] usb 6-1: config 0 has no interfaces? [ 3384.428037][T30631] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3384.437391][T30631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3384.446515][T30631] usb 6-1: config 0 descriptor?? [ 3384.576834][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.9.88187'. [ 3384.656390][T30631] usb 6-1: USB disconnect, device number 5 [ 3384.737060][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.9.88195'. [ 3384.768695][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.88197'. [ 3385.121373][T24991] 9pnet: Unknown protocol version 9p [ 3386.158887][T25037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 3386.611292][T16017] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3386.771344][T16017] usb 6-1: Using ep0 maxpacket: 32 [ 3386.776772][T30631] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 3386.785709][T16017] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 3386.794275][T16017] usb 6-1: config 0 has no interface number 0 [ 3386.800775][T16017] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 3386.812543][T16017] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 3386.821758][T16017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3386.831187][T16017] usb 6-1: Product: syz [ 3386.835516][T16017] usb 6-1: Manufacturer: syz [ 3386.840144][T16017] usb 6-1: SerialNumber: syz [ 3386.845736][T16017] usb 6-1: config 0 descriptor?? [ 3386.851338][T25051] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3386.932325][T30631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3386.942575][T30631] usb 2-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 3386.955911][T30631] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3386.963515][T30631] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3386.973095][T30631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3386.981297][T30631] usb 2-1: SerialNumber: syz [ 3386.988578][T30631] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 3387.068918][T25051] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3387.201002][T30631] usb 2-1: USB disconnect, device number 115 [ 3387.722870][ T36] audit: type=1400 audit(1763235950.931:1137): avc: denied { append } for pid=25084 comm="syz.1.88246" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3388.045387][T25095] netlink: 44 bytes leftover after parsing attributes in process `syz.9.88251'. [ 3388.254202][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.88261'. [ 3388.339205][ T36] audit: type=1400 audit(1763235951.541:1138): avc: denied { read } for pid=25122 comm="syz.7.88264" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3388.403285][ T36] audit: type=1400 audit(1763235951.541:1139): avc: denied { open } for pid=25122 comm="syz.7.88264" path="/74/file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3388.636262][T25134] netlink: 'syz.1.88266': attribute type 4 has an invalid length. [ 3389.034344][T25177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88289'. [ 3389.096448][T16017] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3389.112944][T16017] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 3389.125451][T16017] asix 6-1:0.188: probe with driver asix failed with error -71 [ 3389.134944][T16017] usb 6-1: USB disconnect, device number 6 [ 3389.326957][ T36] audit: type=1400 audit(1763235952.531:1140): avc: denied { read } for pid=25212 comm="syz.9.88306" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3389.369915][ T36] audit: type=1400 audit(1763235952.551:1141): avc: denied { open } for pid=25212 comm="syz.9.88306" path="/dev/usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3389.396313][ T36] audit: type=1400 audit(1763235952.561:1142): avc: denied { ioctl } for pid=25212 comm="syz.9.88306" path="/dev/usbmon2" dev="devtmpfs" ino=97 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3389.572057][T24147] Bluetooth: hci0: Frame reassembly failed (-84) [ 3389.742723][T25242] netlink: 'syz.5.88319': attribute type 4 has an invalid length. [ 3390.051573][T25274] netlink: 44 bytes leftover after parsing attributes in process `syz.9.88335'. [ 3390.131310][T30631] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 3390.282075][T30631] usb 6-1: not running at top speed; connect to a high speed hub [ 3390.290819][T30631] usb 6-1: config 3 has an invalid interface number: 40 but max is 0 [ 3390.299101][T30631] usb 6-1: config 3 has no interface number 0 [ 3390.305421][T30631] usb 6-1: config 3 interface 40 altsetting 246 endpoint 0xF has invalid maxpacket 256, setting to 64 [ 3390.316571][T30631] usb 6-1: config 3 interface 40 has no altsetting 0 [ 3390.324864][T30631] usb 6-1: New USB device found, idVendor=0079, idProduct=214c, bcdDevice=1b.cf [ 3390.334122][T30631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3390.342186][T30631] usb 6-1: Product: syz [ 3390.346528][T30631] usb 6-1: Manufacturer: syz [ 3390.351156][T30631] usb 6-1: SerialNumber: syz [ 3390.361233][T25252] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3390.579040][T30631] usb 6-1: USB disconnect, device number 7 [ 3391.160937][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.88366'. [ 3391.261278][ T36] audit: type=1400 audit(1763235954.451:1143): avc: denied { getopt } for pid=25342 comm="syz.5.88368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3391.582173][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3391.588507][T25234] Bluetooth: hci0: command 0x1003 tx timeout [ 3392.305125][ T36] audit: type=1400 audit(1763235955.511:1144): avc: denied { create } for pid=25429 comm="syz.5.88410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 3392.381297][T16017] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 3392.532463][T16017] usb 10-1: config 0 has no interfaces? [ 3392.538116][T16017] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3392.567495][T16017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3392.593129][T16017] usb 10-1: config 0 descriptor?? [ 3392.801667][T30631] usb 10-1: USB disconnect, device number 4 [ 3392.993661][T25484] fuseblk: Bad value for 'fd' [ 3393.224790][T25497] loop5: detected capacity change from 0 to 7 [ 3393.887767][T25546] netlink: 'syz.5.88461': attribute type 5 has an invalid length. [ 3393.905830][T25546] netlink: 45 bytes leftover after parsing attributes in process `syz.5.88461'. [ 3394.479562][T25589] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88481'. [ 3394.551322][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.88485'. [ 3394.560423][T25598] bridge_slave_1: left allmulticast mode [ 3394.566147][T25598] bridge_slave_1: left promiscuous mode [ 3394.571897][T25598] bridge0: port 2(bridge_slave_1) entered disabled state [ 3394.579549][T25598] bridge_slave_0: left allmulticast mode [ 3394.585377][T25598] bridge_slave_0: left promiscuous mode [ 3394.591046][T25598] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.651345][ T432] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 3394.804038][ T432] usb 10-1: Using ep0 maxpacket: 32 [ 3394.817273][ T432] usb 10-1: config 0 has no interfaces? [ 3394.824172][ T432] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3394.835452][ T432] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3394.853897][ T432] usb 10-1: config 0 descriptor?? [ 3395.007949][T25626] netlink: 44 bytes leftover after parsing attributes in process `syz.7.88498'. [ 3395.061993][T25575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3395.072371][T25575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3395.082466][ T432] usb 10-1: USB disconnect, device number 5 [ 3395.150180][T25636] netlink: 'syz.7.88504': attribute type 4 has an invalid length. [ 3395.328156][T25662] netlink: 104 bytes leftover after parsing attributes in process `syz.7.88515'. [ 3395.367854][T25670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.88519'. [ 3396.007918][T25762] netlink: 'syz.7.88562': attribute type 4 has an invalid length. [ 3396.601565][ T36] audit: type=1326 audit(1763235959.811:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25810 comm="syz.7.88586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f127398f6c9 code=0x0 [ 3396.948903][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.88594'. [ 3396.982940][T25833] netlink: 44 bytes leftover after parsing attributes in process `syz.5.88596'. [ 3397.054802][T25839] netlink: 'syz.5.88598': attribute type 4 has an invalid length. [ 3397.098630][T25841] fuseblk: Bad value for 'fd' [ 3398.298753][T25929] fuseblk: Bad value for 'fd' [ 3398.362248][T25933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.88643'. [ 3398.671309][T16017] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3398.851297][T16017] usb 6-1: Using ep0 maxpacket: 16 [ 3398.866585][T16017] usb 6-1: config 1 has an invalid interface number: 64 but max is 0 [ 3398.881474][T16017] usb 6-1: config 1 has no interface number 0 [ 3398.894119][T16017] usb 6-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 3398.910104][T16017] usb 6-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 3398.920880][T16017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3398.930479][T16017] usb 6-1: Product: syz [ 3398.935125][T16017] usb 6-1: Manufacturer: syz [ 3398.940200][T16017] usb 6-1: SerialNumber: syz [ 3398.945670][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88654'. [ 3399.093751][T25973] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3399.093781][T25973] rust_binder: Read failure Err(EFAULT) in pid:528 [ 3399.142246][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.9.88663'. [ 3399.173707][T16017] usb 6-1: USB disconnect, device number 8 [ 3400.029613][T26034] fuseblk: Bad value for 'fd' [ 3400.159339][T26055] netlink: 44 bytes leftover after parsing attributes in process `syz.9.88699'. [ 3400.412008][T26090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88716'. [ 3400.496320][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.88720'. [ 3400.973817][T26142] fuseblk: Bad value for 'fd' [ 3401.295874][T26161] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3401.295903][T26161] rust_binder: Read failure Err(EFAULT) in pid:677 [ 3402.301318][T16017] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3402.487159][T16017] usb 6-1: Using ep0 maxpacket: 16 [ 3402.515514][T16017] usb 6-1: config 1 has an invalid interface number: 64 but max is 0 [ 3402.531429][T16017] usb 6-1: config 1 has no interface number 0 [ 3402.548234][T16017] usb 6-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 3402.574623][T16017] usb 6-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 3402.591521][T16017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3402.609968][T16017] usb 6-1: Product: syz [ 3402.620075][T16017] usb 6-1: Manufacturer: syz [ 3402.624822][T16017] usb 6-1: SerialNumber: syz [ 3402.768217][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88780'. [ 3402.849539][T16017] usb 6-1: USB disconnect, device number 9 [ 3403.107061][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.88801'. [ 3403.135457][T26278] rust_binder: Write failure EINVAL in pid:448 [ 3403.500738][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.88816'. [ 3403.609069][T26311] fuseblk: Bad value for 'fd' [ 3404.592349][T26351] fuseblk: Bad value for 'fd' [ 3404.613300][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.88838'. [ 3404.661298][T21575] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 3404.822372][T21575] usb 10-1: config 0 has no interfaces? [ 3404.828024][T21575] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3404.851392][T21575] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3404.871111][T21575] usb 10-1: config 0 descriptor?? [ 3404.881657][T26371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.88845'. [ 3405.053481][T26379] fuseblk: Bad value for 'fd' [ 3405.082616][T21575] usb 10-1: USB disconnect, device number 6 [ 3405.221731][T26388] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3405.221761][T26388] rust_binder: Read failure Err(EFAULT) in pid:499 [ 3405.352152][T26394] netlink: 44 bytes leftover after parsing attributes in process `syz.7.88858'. [ 3405.452505][T26402] netlink: 388 bytes leftover after parsing attributes in process `syz.7.88861'. [ 3405.559881][T26408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.88863'. [ 3405.638127][T26410] fuseblk: Bad value for 'fd' [ 3406.418129][T26444] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3406.418156][T26444] rust_binder: Read failure Err(EFAULT) in pid:749 [ 3406.768181][T26455] kvm: kvm [26454]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 3406.801472][T26455] kvm: kvm [26454]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 3406.970010][T26459] netlink: 'syz.9.88886': attribute type 4 has an invalid length. [ 3407.491327][T26495] fuseblk: Bad value for 'fd' [ 3407.582198][T30631] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 3407.742353][T30631] usb 6-1: config 0 has no interfaces? [ 3407.747920][T30631] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3407.769232][T30631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3407.781454][T30631] usb 6-1: config 0 descriptor?? [ 3407.988435][ T432] usb 6-1: USB disconnect, device number 10 [ 3408.639697][T26544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88926'. [ 3409.001345][T30631] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 3409.184113][T30631] usb 6-1: config 0 has no interfaces? [ 3409.189706][T30631] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3409.208912][T30631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3409.221407][T30631] usb 6-1: config 0 descriptor?? [ 3409.429325][T30631] usb 6-1: USB disconnect, device number 11 [ 3409.528784][T26581] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3409.528813][T26581] rust_binder: Read failure Err(EFAULT) in pid:812 [ 3409.593671][T26583] netlink: 'syz.1.88943': attribute type 4 has an invalid length. [ 3412.829994][T26696] fuseblk: Bad value for 'fd' [ 3413.237197][T26720] netlink: 44 bytes leftover after parsing attributes in process `syz.9.89008'. [ 3413.671291][T29540] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3413.822482][T29540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3413.832472][T29540] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 3413.841899][T29540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3413.851422][T29540] usb 6-1: config 0 descriptor?? [ 3414.315979][T29540] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 3414.321428][T30631] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3414.491281][T30631] usb 2-1: Using ep0 maxpacket: 16 [ 3414.497670][T30631] usb 2-1: config 1 has an invalid interface number: 64 but max is 0 [ 3414.505889][T30631] usb 2-1: config 1 has no interface number 0 [ 3414.512084][T30631] usb 2-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 3414.524771][T30631] usb 2-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 3414.533929][T30631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.542031][T30631] usb 2-1: Product: syz [ 3414.546261][T30631] usb 2-1: Manufacturer: syz [ 3414.550907][T30631] usb 2-1: SerialNumber: syz [ 3414.764861][T30631] usb 2-1: USB disconnect, device number 116 [ 3414.862906][T29540] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -71 [ 3414.870397][T29540] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71 [ 3414.879351][T29540] usb 6-1: USB disconnect, device number 12 [ 3415.192631][T26771] overlayfs: overlapping lowerdir path [ 3415.280399][T26781] netlink: 'syz.9.89034': attribute type 4 has an invalid length. [ 3415.393057][T26791] overlayfs: overlapping lowerdir path [ 3415.401955][T26793] fuseblk: Bad value for 'fd' [ 3415.466204][T26801] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3415.466232][T26801] rust_binder: Read failure Err(EFAULT) in pid:576 [ 3415.511025][T26805] No source specified [ 3415.560309][T26813] fuseblk: Bad value for 'fd' [ 3415.660601][T26827] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3415.660627][T26827] rust_binder: Read failure Err(EFAULT) in pid:575 [ 3415.732395][T26837] netlink: 388 bytes leftover after parsing attributes in process `syz.5.89059'. [ 3416.001797][T26855] No source specified [ 3416.026308][T26857] netlink: 44 bytes leftover after parsing attributes in process `syz.5.89069'. [ 3416.085207][T26861] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3416.085232][T26861] rust_binder: Read failure Err(EFAULT) in pid:591 [ 3416.401322][T31315] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3416.581238][T31315] usb 2-1: Using ep0 maxpacket: 16 [ 3416.590646][T31315] usb 2-1: config 1 has an invalid interface number: 64 but max is 0 [ 3416.609250][T31315] usb 2-1: config 1 has no interface number 0 [ 3416.619362][T31315] usb 2-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 3416.649997][T31315] usb 2-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 3416.669295][T31315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3416.680069][T31315] usb 2-1: Product: syz [ 3416.700595][T31315] usb 2-1: Manufacturer: syz [ 3416.709752][T31315] usb 2-1: SerialNumber: syz [ 3416.885211][T26930] overlayfs: overlapping lowerdir path [ 3416.949905][T31315] usb 2-1: USB disconnect, device number 117 [ 3418.379395][T26991] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3418.379424][T26991] rust_binder: Read failure Err(EFAULT) in pid:644 [ 3418.462447][T26997] binder: Bad value for 'max' [ 3419.643008][T27029] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3419.643036][T27029] rust_binder: Read failure Err(EFAULT) in pid:631 [ 3419.897596][T27049] binder: Bad value for 'max' [ 3420.034174][T27062] No source specified [ 3421.062311][T27087] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3421.062341][T27087] rust_binder: Read failure Err(EFAULT) in pid:648 [ 3421.585223][T27116] No source specified [ 3421.623368][T27118] netlink: 44 bytes leftover after parsing attributes in process `syz.1.89181'. [ 3421.881348][T27140] netlink: 44 bytes leftover after parsing attributes in process `syz.5.89201'. [ 3422.165458][T27161] netlink: 44 bytes leftover after parsing attributes in process `syz.9.89211'. [ 3423.062694][T27195] netlink: 44 bytes leftover after parsing attributes in process `syz.5.89226'. [ 3423.333402][T27203] No source specified [ 3423.785419][T27224] netlink: 'syz.5.89241': attribute type 4 has an invalid length. [ 3423.902329][T27228] No source specified [ 3424.428276][T27245] No source specified [ 3424.494450][T27249] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3424.494478][T27249] rust_binder: Read failure Err(EFAULT) in pid:683 [ 3424.650726][T27263] No source specified [ 3424.720871][T30631] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3424.900781][T30631] usb 2-1: Using ep0 maxpacket: 16 [ 3424.917772][T30631] usb 2-1: config 1 has an invalid interface number: 64 but max is 0 [ 3424.936123][T30631] usb 2-1: config 1 has no interface number 0 [ 3424.956323][T30631] usb 2-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 3424.992195][T30631] usb 2-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 3425.020769][T30631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.039068][T30631] usb 2-1: Product: syz [ 3425.043340][T30631] usb 2-1: Manufacturer: syz [ 3425.047974][T30631] usb 2-1: SerialNumber: syz [ 3425.282326][T30631] usb 2-1: USB disconnect, device number 118 [ 3425.585912][T27275] netlink: 'syz.9.89266': attribute type 4 has an invalid length. [ 3425.705974][T27277] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3425.706005][T27277] rust_binder: Read failure Err(EFAULT) in pid:737 [ 3425.811448][T27284] netlink: 44 bytes leftover after parsing attributes in process `syz.1.89269'. [ 3425.834747][T27286] No source specified [ 3426.447176][T27296] netlink: 132 bytes leftover after parsing attributes in process `syz.9.89274'. [ 3427.170986][T27314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.89281'. [ 3427.400998][T27334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89292'. [ 3427.401440][T27335] netlink: 44 bytes leftover after parsing attributes in process `syz.5.89293'. [ 3427.634104][T27343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89298'. [ 3427.698168][T27345] fuseblk: Bad value for 'fd' [ 3427.765117][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89302'. [ 3427.771963][T27352] netlink: 44 bytes leftover after parsing attributes in process `syz.7.89303'. [ 3427.934548][T27364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89307'. [ 3428.020821][T27372] fuseblk: Bad value for 'fd' [ 3428.044441][T27374] : renamed from bond_slave_0 [ 3428.307627][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.89318'. [ 3429.252885][T27433] fuseblk: Bad value for 'fd' [ 3429.553803][T27453] netlink: 44 bytes leftover after parsing attributes in process `syz.9.89351'. [ 3429.667743][T27459] fuseblk: Bad value for 'fd' [ 3430.309997][T27473] fuseblk: Bad value for 'fd' [ 3431.823948][T27510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.89378'. [ 3431.863128][T27512] No source specified [ 3431.950351][T27520] fuseblk: Bad value for 'fd' [ 3432.019010][T27530] rust_binder: 770: no such ref 0 [ 3432.024547][T27530] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 3432.098838][T27536] No source specified [ 3432.188054][T27544] fuseblk: Bad value for 'fd' [ 3432.231063][T27548] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3432.231100][T27548] rust_binder: Read failure Err(EFAULT) in pid:778 [ 3432.495716][T27561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.89402'. [ 3432.530994][T27563] No source specified [ 3432.603016][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.89408'. [ 3432.862618][T27596] incfs: Error accessing: ./file0. [ 3432.867849][T27596] incfs: mount failed -20 [ 3432.897390][T27599] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3432.897418][T27599] rust_binder: Read failure Err(EFAULT) in pid:818 [ 3432.975522][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.89426'. [ 3433.307814][T27631] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿ) failed with errno=-22 [ 3433.601584][T27655] fuseblk: Bad value for 'fd' [ 3434.334788][T27674] fuseblk: Bad value for 'fd' [ 3434.541491][T27680] netlink: 276 bytes leftover after parsing attributes in process `syz.9.89462'. [ 3434.678265][T27686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.89465'. [ 3434.993619][T27695] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿ) failed with errno=-22 [ 3435.177141][T27701] netlink: 276 bytes leftover after parsing attributes in process `syz.7.89471'. [ 3435.281839][T27705] netlink: 'syz.7.89473': attribute type 4 has an invalid length. [ 3435.925757][T27734] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿ) failed with errno=-22 [ 3436.026463][T27740] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3436.026491][T27740] rust_binder: Read failure Err(EFAULT) in pid:869 [ 3436.101726][T27748] fuseblk: Bad value for 'fd' [ 3436.167820][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89497'. [ 3436.220654][T27760] netlink: 'syz.1.89499': attribute type 4 has an invalid length. [ 3436.306069][T27769] ------------[ cut here ]------------ [ 3436.311700][T27769] WARNING: CPU: 1 PID: 27769 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 3436.321287][T27769] Modules linked in: [ 3436.325243][T27769] CPU: 1 UID: 0 PID: 27769 Comm: syz.5.89504 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3436.337040][T27769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3436.347215][T27769] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 3436.353207][T27769] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 3436.372917][T27769] RSP: 0018:ffffc9000824f860 EFLAGS: 00010246 [ 3436.379030][T27769] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 3436.387337][T27769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000824f918 [ 3436.395633][T27769] RBP: ffffc9000824f988 R08: ffffc9000824f917 R09: 0000000000000000 [ 3436.403730][T27769] R10: ffffc9000824f900 R11: fffff52001049f23 R12: ffffc9000824f8a0 [ 3436.411777][T27769] R13: dffffc0000000000 R14: 1ffff92001049f10 R15: 0000000000000000 [ 3436.419795][T27769] FS: 00007f968c0f86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 3436.428805][T27769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3436.435476][T27769] CR2: 0000200000001000 CR3: 000000013d6e2000 CR4: 00000000003526b0 [ 3436.443532][T27769] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000081 [ 3436.451585][T27769] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3436.459611][T27769] Call Trace: [ 3436.462973][T27769] [ 3436.465966][T27769] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3436.472115][T27769] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 3436.477900][T27769] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 3436.483750][T27769] ___kmalloc_large_node+0x81/0x220 [ 3436.488999][T27769] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 3436.494725][T27769] __kmalloc_large_node_noprof+0x1e/0xe0 [ 3436.500443][T27769] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 3436.506130][T27769] __kmalloc_noprof+0x336/0x530 [ 3436.511071][T27769] ? __cfi_lockref_get+0x10/0x10 [ 3436.516207][T27769] incfs_realloc_mount_info+0xa7/0x4d0 [ 3436.521763][T27769] ? incfs_add_sysfs_node+0x118/0x240 [ 3436.527286][T27769] incfs_alloc_mount_info+0x479/0x600 [ 3436.532752][T27769] incfs_mount_fs+0x3ca/0x960 [ 3436.537488][T27769] ? __cfi_incfs_mount_fs+0x10/0x10 [ 3436.542828][T27769] ? vfs_parse_fs_string+0x102/0x170 [ 3436.548268][T27769] ? selinux_capable+0x38/0x50 [ 3436.553133][T27769] legacy_get_tree+0x106/0x1b0 [ 3436.558031][T27769] ? __cfi_incfs_mount_fs+0x10/0x10 [ 3436.563340][T27769] vfs_get_tree+0x9e/0x290 [ 3436.567827][T27769] do_new_mount+0x251/0xb40 [ 3436.572433][T27769] ? security_capable+0xcf/0xf0 [ 3436.577437][T27769] path_mount+0x688/0x1050 [ 3436.581948][T27769] ? putname+0x113/0x150 [ 3436.586256][T27769] __se_sys_mount+0x2bd/0x480 [ 3436.591026][T27769] ? __x64_sys_mount+0xf0/0xf0 [ 3436.595837][T27769] ? __kasan_check_write+0x18/0x20 [ 3436.601048][T27769] ? fpregs_restore_userregs+0x11d/0x260 [ 3436.606746][T27769] __x64_sys_mount+0xc3/0xf0 [ 3436.611426][T27769] x64_sys_call+0x2021/0x2ee0 [ 3436.616171][T27769] do_syscall_64+0x58/0xf0 [ 3436.620680][T27769] ? clear_bhb_loop+0x50/0xa0 [ 3436.625406][T27769] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3436.631456][T27769] RIP: 0033:0x7f968b18f6c9 [ 3436.635925][T27769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3436.655621][T27769] RSP: 002b:00007f968c0f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3436.664113][T27769] RAX: ffffffffffffffda RBX: 00007f968b3e5fa0 RCX: 00007f968b18f6c9 [ 3436.672179][T27769] RDX: 0000200000000500 RSI: 0000200000000040 RDI: 0000200000000000 [ 3436.680311][T27769] RBP: 00007f968b211f91 R08: 00002000000001c0 R09: 0000000000000000 [ 3436.688334][T27769] R10: 000000000000c802 R11: 0000000000000246 R12: 0000000000000000 [ 3436.696402][T27769] R13: 00007f968b3e6038 R14: 00007f968b3e5fa0 R15: 00007ffc25e20b58 [ 3436.704455][T27769] [ 3436.707511][T27769] ---[ end trace 0000000000000000 ]--- [ 3436.713227][T27769] incfs: Error allocating mount info. -12 [ 3436.719020][T27769] incfs: mount failed -12