last executing test programs: 1m5.994959946s ago: executing program 3 (id=20): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0xc0800) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m5.678755302s ago: executing program 3 (id=22): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000012c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 1m5.677788002s ago: executing program 3 (id=23): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000c, 0x8010, 0xffffffffffffffff, 0xd9a7b000) syz_clone(0x80040000, &(0x7f0000003300), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x100000000000003b, 0x0, 0x0, 0x11000000}, 0x20000001) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x0, 0xf49, 0x7, 0x0, 0x6d1, 0x200, 0x9}, {0x7, 0x1, 0x7, 0x80000000, 0x9, 0xc, 0x904c}, {0x0, 0x9, 0x2, 0x0, 0x63, 0x7, 0x9}, {0xd, 0x6, 0x7, 0xbf17, 0x7, 0x3, 0x8}]}) dup(r0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000c, 0x8010, 0xffffffffffffffff, 0xd9a7b000) (async) syz_clone(0x80040000, &(0x7f0000003300), 0x0, 0x0, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x100000000000003b, 0x0, 0x0, 0x11000000}, 0x20000001) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x0, 0xf49, 0x7, 0x0, 0x6d1, 0x200, 0x9}, {0x7, 0x1, 0x7, 0x80000000, 0x9, 0xc, 0x904c}, {0x0, 0x9, 0x2, 0x0, 0x63, 0x7, 0x9}, {0xd, 0x6, 0x7, 0xbf17, 0x7, 0x3, 0x8}]}) (async) dup(r0) (async) 1m5.657322532s ago: executing program 3 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9) 1m5.645141262s ago: executing program 3 (id=26): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000300000010700c11f04000010203010902240001017f500709040009020301000809210f00062122c902090581030002040e08df5204bfd607d666c311271b0fe99b2138a368658405b585f0b15b06342c4817774579952cc8041002613ce50bd3d29d62eca639284d48ff2d4504d00071be6e47905b0678a62c2d39c3e94d7ac9843a90657e0bacdf71f78170386f2879d7a2513b46eb14d84992cb5f07e3b154e1e4bb8d7e9391f72e3c"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648e000) syz_usb_connect(0x3, 0x24, &(0x7f0000002a00)={{0x12, 0x1, 0x110, 0xaf, 0x88, 0x8, 0x20, 0x645d, 0xbc2c, 0x146c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x99, 0xdc, 0x0, 0x8, 0x5, 0x1, 0xe}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m5.548556264s ago: executing program 3 (id=28): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="20010d0000000d0ac3d51e2ea4ba766a5cf072925e0fc19bf9ced69d97555655c104"], &(0x7f0000000080)={0x0, 0x3, 0x93, @string={0x93, 0x3, "34b9c18a6b584c765155b43b1fc67509f119a425d0e468ca0a9fef9aa9118b8474b0e8020980b1e8dda346be3a98a79e30a046c60c1f07e865015d8bcb697fb641e119c4f6d485a9a3ec8c213bbee846f5e6ae8310b483ce10a181cec55aa4c4d00562f1a1db02d1d8449fd3851b94e490e164999c0413b2e1d80fb9a2c07f64f1c0c31b595e9f155e4a836ae9fd8e72cc"}}, &(0x7f0000000140)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x8, "ce8c"}, @global=@item_4={0x3, 0x1, 0x7, "e90f19d2"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x3ac}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x40, 0xd, 0xb, "206b444de4d79e9c05b190"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x39}, &(0x7f00000002c0)={0x20, 0x1, 0x14, "4ca1658cdca2e7f644e543394d2d3999a64b3c87"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x3}}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x2012, r0, 0x4d757000) 1m5.499421565s ago: executing program 32 (id=28): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="20010d0000000d0ac3d51e2ea4ba766a5cf072925e0fc19bf9ced69d97555655c104"], &(0x7f0000000080)={0x0, 0x3, 0x93, @string={0x93, 0x3, "34b9c18a6b584c765155b43b1fc67509f119a425d0e468ca0a9fef9aa9118b8474b0e8020980b1e8dda346be3a98a79e30a046c60c1f07e865015d8bcb697fb641e119c4f6d485a9a3ec8c213bbee846f5e6ae8310b483ce10a181cec55aa4c4d00562f1a1db02d1d8449fd3851b94e490e164999c0413b2e1d80fb9a2c07f64f1c0c31b595e9f155e4a836ae9fd8e72cc"}}, &(0x7f0000000140)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x8, "ce8c"}, @global=@item_4={0x3, 0x1, 0x7, "e90f19d2"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x3ac}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x40, 0xd, 0xb, "206b444de4d79e9c05b190"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x39}, &(0x7f00000002c0)={0x20, 0x1, 0x14, "4ca1658cdca2e7f644e543394d2d3999a64b3c87"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x3}}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x2012, r0, 0x4d757000) 54.486798967s ago: executing program 1 (id=139): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002080)={@empty, @loopback, 0x0}, &(0x7f00000020c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', r1, 0x4, 0x3, 0x6, 0xfffffff9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x1, 0x80, 0x3ff, 0x1}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) fchdir(0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001c8, 0x12) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000021c0)="04", 0x1, 0x400c5, 0x0, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, 0xffffffffffffffff, 0x147a5000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002240), r5) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)=ANY=[@ANYBLOB="58800020", @ANYRES16=r6, @ANYBLOB="10002dbd7000fcdbdf250b00000014000980080002000100000008000100070000003000048014000780080003000e00000008000200080000000900010073797a31000000000900010073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) fadvise64(0xffffffffffffffff, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper={0x40046306}], 0x0, 0x0, 0x0}) 54.422419638s ago: executing program 1 (id=140): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x800, 0x2}}, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 54.408706567s ago: executing program 1 (id=141): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) syz_io_uring_setup(0x5bbd, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x38) close_range(r2, 0xffffffffffffffff, 0x0) 53.518805352s ago: executing program 1 (id=149): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0xfdfd, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e22, @loopback}, 'ip_vti0\x00'}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000002f80)) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 53.518384412s ago: executing program 1 (id=150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x420282, 0x12) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xb, 0xf, 0x0, 0x23, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bbc, 0x2, {0x6, 0x6c, 0x0, 0x5, 0x0, 0x0, 0x0, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1}, @sadb_lifetime={0x4, 0x2, 0x2, 0x8, 0x3, 0x1}, @sadb_lifetime={0x4, 0x2, 0xa, 0x10, 0x7, 0x9}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}, @sadb_lifetime={0x4, 0x3, 0x3, 0x1, 0x3, 0x6}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_key={0x6, 0x0, 0x120, 0x0, "ecce09e8d6f4e47663a385acfea3464620c448039cd5cb743f05b4524b27c69ecdeaa16f"}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}]}, 0x118}}, 0x4040084) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001300)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 53.419943354s ago: executing program 1 (id=151): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000180)=0x5c0d, 0x4) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$inet(0x2, 0x3, 0x6) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)=0xff62) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d80a5b80ac50cfd973883", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',privport,afid=0x0000000000000008,\x00']) (async, rerun: 32) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="54000000130003042cbd7000ffdbdf2518da05064e214e22e38a000005000000000000020600000082210000f4ffffffff0300008f120000", @ANYRES32=0x0, @ANYBLOB="ffffffff7f00000008040000000200000400f40004000100"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r12, 0x0) (async) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x5], 0x8000000, 0x28340}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10001) (async) r13 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r13, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 45.490777351s ago: executing program 4 (id=212): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x406000, 0x8e) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x8000, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x4044014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = fsopen(&(0x7f0000000280)='cgroup\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) 45.489791871s ago: executing program 4 (id=213): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="142dfab8166aeb232958d8118500000018000902"], 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700), 0x622700, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') write$P9_RVERSION(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040050) socket$inet6(0xa, 0x3, 0x87) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f0000000440)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000200)='tmpfs\x00', 0x3a00cd8, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4e6) 45.446789721s ago: executing program 4 (id=214): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') sync_file_range(r0, 0x80000001, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'geneve0\x00', 0x2002}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010200000000ddf958b00eb62f83060003"], 0x1c}}, 0x8004) r3 = syz_usb_connect(0x3, 0xdd1, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x5a, 0xb, 0xf3, 0x8, 0x19d2, 0x1082, 0x91bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdbf, 0x3, 0xa, 0x6e, 0x60, 0x4d, [{{0x9, 0x4, 0x3f, 0x9, 0x7, 0xff, 0xff, 0xff, 0x80, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0xa, 0x2, "db0e4e526c09"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x80, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x9, 0x6}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x4, 0xe, "9dc4"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x4, 0x7, "1e2476dd3af4eb"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x4, 0x53, 0x3, "0a88776b3a7446"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x76, 0x9, 0x1}]}], [{{0x9, 0x5, 0x7, 0x1, 0x8, 0x4, 0x6a, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfe, 0x545}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x10, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x7, 0x9, 0x9, [@generic={0x52, 0x21, "1212151b196b56bbc5f8f8be27b68920c4deb3a0d9326f6d6f6119d880f36584e4f91a8222985ac74dfad39c0ceebfd3484477f77b92de28845d1b59aa0aa5bcd5fe3a7966b0c6f8e88101166ed3ef59"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xff, 0x4, 0x1, [@generic={0xa8, 0x2, "9aba91368576a5d4d8fb5929f7bbc61cd7f9144a928222ed334a87ee1ac68c4a757377c3fadd26c16b85873a701f284e53f79b243b47032ad7edd0b8936ea9ebb4b0d899886394d75ad5057223db639b71601e0268c43a7119fa82ee2070b83ad2e23f2af4387fa3e21af2efbfe792af24ff28333742374c5f12735de3ce20614bb58ab559ffcd16f0225648f22411e3384c81675d69040d77bff516859ceb652083e8fc597b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xcc, 0x5, 0xf7, [@generic={0xf9, 0x31, "ada4ecb84b4a097a412d8fde0a1762f4e0bd06d7d96ab8d3bc27f9142ff558a84845dadc46f5ff931af405239104a987fbf901ce5a085045aede5db15b68e2adc6203f5c55a9ed820fcce66bea8cbdc587185e24129f25b0d52cefe4469f5f41832713824c72486035b19a470a8e033df1718f47170ea0e9062cffdadf6ce7b35782e81f973776252cf7a64760742f4e4cc5dce64369561bbeef7ca0da723ef40397cffa15ad6d985172102b2e704be0cb5d1556bc829cc5e8c8ac2f3b683d379453b0283908f1c2e251a7f8b0ed5516da141d5911522a9aea33477220a3d1e2b8da98aad599388d92e8869badd2578b45c6160628f7aa"}, @generic={0xbd, 0xe, "0bd62bd49bfd90a91c780995365963eb061b91a8132c5e5d1f955b99e69ad00f5bb3077490f89e496c73965a68829e577281c93840612bef19153d8c5feadffe7d2307e7c0a1a24cc73d29713bd9e0c5fd07712be5182aa728fc757dad63d30ebedbf5ec4e7e18e541268ac6c624c9ed08de44ed9d2a59171d365859dcc73aec3823457effa09306257b035b610ef2ab816ee9b96d963c0c4e2185219d032790064760106e686557896546dd976767bdb4687b5bcad73b6fd91dd8"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x8, 0xc, 0xf, [@generic={0x5d, 0x23, "f917851e4bc443946d2167e2d9dea3c4f7048ce2543c1ba884d745833f817b8b6efa4d4960430ad728ab52ba734ea0c060e02e9acaa79a3fce52875b6b4624529cf9057c306cd4df8a721e82853530de9c04cd0bae79ed422b32ae"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x2, 0xf, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x4}]}}]}}, {{0x9, 0x4, 0x58, 0x47, 0x10, 0x8, 0x3, 0x0, 0x80, [@hid_hid={0x9, 0x21, 0x9, 0xff, 0x1, {0x22, 0xa2a}}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0xfb, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8001}, @generic={0x98, 0x22, "a58bb820b70f4e94b11068ae985f3ea9b3a0b19360ac8598ab75d18c847101f30c443e2f243f0362d58c53df5aef75678333110efcda21cde23b94f2193a50ec8d8db9b005b6ce204dd9a1c4b7d0e6252cd38358e7baf8aae3f371881a368b8d8aebe6c70375b08221396ff60a58a6ca560826fc93c25368ed0a7746d967443c0bd5c8c7df8132ddb9d22bf3af3cd9f61fa8afcbe61c"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xf213}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x5}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x2, 0x6, 0x0, [@generic={0x81, 0x23, "c9192801543ed3fee494e8f2fb86b8f68e674e2b666424b6fc13a252580706942e3f22c07d50149265dc334cd00aa9359cc248c046feccc910a8756397d6365d965fca55aa290a653a3bfb5c756df9b45bf162777d5ad8e654c3f6cb0eea934fe0aa14e816d72472b0b19b17fe77f91a50f515561dea5fc42a8ddf6ca1f62c"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x1d}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x7, 0x3, 0xe4, [@generic={0x6e, 0x9, "17fabf7e73ddefe58a6b726373082004e086ca28b3c9dc84e102cfd2991689ca730d023e0673344ab68d4d06bfa302909b0d44c480dea80148e5217a1ba627fcabdad2ac392595395c5672d9cb605a1b41a5fdac53ed86510e7ad07459b4e3b8dc0a666f3e041b68fd6ab3dc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xf1, 0xc8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3ff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7f, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0xf801}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x3, 0x8, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x400}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x2, 0x80, 0xae, [@generic={0x59, 0x5, "297d4175e51c718d9589e4f6cb07d9a2631a51c118edefbbd3794f3d221dee1ea037afdc84cdfde57707edbb5359a03a265c2f97f0f6f0aae09b534899d3d1c2c0e1c4f71afadd10f94b6c829aad7748387615523c2905"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x8, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x3, 0x8}, @generic={0x4, 0xb, "fe26"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0x5, 0x1, [@generic={0xfd, 0xb, "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"}]}}, {{0x9, 0x5, 0x1337455ee857068f, 0x2, 0x0, 0x6, 0x6, 0x0, [@generic={0x7d, 0x9, "4c42fbc00e3641cef75d3db836d25d1c6533222fbb3ca2f1f472ca3946ba011cf91133ba2581b5aa47cdc2d645f0327b329ecbd315f3af46a6aa48c5e76caf834c68b62d9646a1feaf23784d0dd0523cf41e289ef0cdf9238264b799ebd360c3fe6370618365df3bd200ee07167166840f91507fe1acdb53ea3d8c"}]}}, {{0x9, 0x5, 0x0, 0x14, 0x8, 0x6, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x3, 0x0, 0x88, [@generic={0xc9, 0x0, "bf54c971eba285fd8d2b3406eebf46afb63585f03e8a006b56a87d116418f705f364dd703429c85098d6d255a1788cd09c8701c33b952ff8eaf101fe4dfaa2fde6a6cf613c77453b7a61d53becdbc5a3a341903a0df734bb3be44cb1be2542b6b088c4aae16c1cbd17de44ab64e4a096d61c6aa1fbd0eb69fbed6eaf671f6c9568ee50b3fc3fa73f392ce3823320ec9c845877d62dfdee5c25f4bdc196175cf74dfd416b87b12304652aa453e40a1af1215e616cd31d26c1e32e4c7b15ff0932115c495241f029"}]}}, {{0x9, 0x5, 0xa, 0x12, 0x8, 0x31, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xea6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0xe, 0x9, 0x4, [@generic={0xf3, 0xd, "f5fb1f9b1c33016f943ab5805f8aa3bc63c65e2e13e39c26522ec436fadc1204831142aa6836dbfb28ac55327d351c3f7fb3880b1460ac2820d16b68808842dfdabe119b1937e318182bb03211ba61582b27e6397c88fa9c107f6e39e29834abf71dc9ed220996968c32fcafb298a4f3b79406874ad72aecc815807a616aaa1073693a51ba9e3d89148e0219bf257106a69989e55245263084e8420fea4c295628ed85dfcb4852a10614e3b37d1f8e137811aea3da880b45db7049d8d676a039b0ebe9818aeae509db6f732c65b1a0cb32a31b37d195017b8fa74b9eca38536e0dd8e351434c1f247d1744c2087bde1379"}]}}, {{0x9, 0x5, 0xb, 0x14, 0x260, 0xd2, 0x2, 0x8, [@generic={0x83, 0x9, "dd9951e3cb801007c58a9854fa33b9195e15347b369e6bb5bee5db53c1e02afbac635678228837632fcafe4df6b4745cfa09e6e3f88e91c64a26d09a2a316bed7df0a475b9493dfa60ef97a9819d387948efbbd74edbe790baa82b0f5eee83ba13dfb60db8f67bbb3376e38127ea4e23780cd85b0e727c4fa1ca783412d210a313"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6}]}}]}}, {{0x9, 0x4, 0x2c, 0x81, 0xa, 0xf8, 0x6f, 0x1b, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "977445"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x45, 0xc}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x9}, @mdlm_detail={0xa2, 0x24, 0x13, 0xb5, "7dc546a25231f14bf4b6d7bcc233d172fbb1ae4181528f3b087d8ad867fb824f76ae457087ef34b40c3fd580d39de9686dbab402d5f79ddf5310541753d16d25531f91d4206bceb80f2ab4a7356cd38981f9c384f19187607d1a288e61c46cc173d326cca866872dfca42d81cdaaea2380c0031202257a5822adcd736712caa8d2d3dc4170a9e5133e069d47347e755744f652ba098282cf6f2aa249307b"}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x3, 0x2, 0x3, 0x5a, 0x5}, @acm={0x4, 0x24, 0x2, 0xb}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7}]}], [{{0x9, 0x5, 0x8, 0x0, 0x90, 0xb, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x82, 0xa58}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x34, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x1, 0x90, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0xf4, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x5, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xd, 0x5, 0x8, [@generic={0x63, 0x5, "6b083c151085facf6a616c87ff41c6c0bc852a29342b69720f02ce81f12579bcc81cee6402194d609c4133a9fc0f15b084bdbbbd6eca3d57400834a5db678b36cfb4bf803773e41582e5aa40c7658fb36bbeb9cb0848c955e335a04b7a9eeacf00"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0xb, 0x5, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}, @generic={0xcd, 0xa, "b73a0ddc95d00bd6dfe44a68c166cfbf91c175b00ae6f58f564224d66065b598e8302d3eaea410321b1144a4db72441e08e3fd49b3647db174a9a58d77d37d894381c11002bea5456c2537de239744ae9cc00ceaab988a03e444abb2b09e050e2bcd87846bb8c79b65960bcafc61cbfb9a7574d6a13e45983c06c0f86b1db4c7a4db0de23dfb63fa937f14a6aefb2d90b068015c4edf4c731ba4c39b42892f9e3bcf44fa859be45834be3a211825f2a138b789a098d8493e2c6115637ee244f2416ab1df404a4991ea6bb9"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x8, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x8}]}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0xff, 0x1, 0x2, [@generic={0xb1, 0x1, "01781fe2e107423f8386486d56c2fa1b10667b84c86dca5a0af25e5e75ea51e2cafa3e2bfcc8be51c943c3f949e9b652708deca766d003f806866349b9f0b9c095aa7aec31a9567ede63678d3abcecb8c09ad96c2a4a90a5126a02926ecfd1d0e37f13283463f9e17a078b40f9071ccdd1be52950c380a97839f3b69361610ca767c6f076eb2fe9f7e9f504772af02c2b0f4de2f8da58285acf1e2fe784626c2017e6995d325664d633518bb277afc"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x1, 0x4, 0x7, [@generic={0x5, 0x24, "efabf1"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x81, 0x9, 0x2, 0x10, 0x6}, 0xfffffda0, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x5}, 0x4, [{0x24, &(0x7f0000000180)=@string={0x24, 0x3, "6b5a3e852a8e3f421a140810269d6475602841cabfde7a52979a09244cf6b80a2bc7"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000001240)=@string={0x0, 0x3, "dad627a6ea67eb6e66b98d8821bd22a0480a2eb932461f7bd7d7f8e811d537d6725a62068380a737c3fd6840591a0528a125a093d163f42e53f7d0b5f8ddd8c4f3945a6cbd31c20062b0fee0c3b595372073015381e9e2c33847e26506ba60c253f8a09343e30de1af1585b9efbee85270557be4eecbdf847c9ce4c099ce413147d8ed4f7bc56662bbd0c6f05c231368b08102e9237034ecf0e9925bd8df27aa423cf290f47e84b278615dee874ced3050a44cc9f6dad5782e9266e4865c573c77b93cd0e95ca62f5403995738"}}]}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x9b, &(0x7f0000001180)=@generic={0x6, 0x2, 0x93, "5f1f654b", "3a9718007b8bfbfc61a477b98e75b4ef4323ee089d7284b69f05a6dacc64caf6dc34936b41d9cd5913dba6a17596542225eb9ea4d857d42fff3292396e129b9c5a241a1fc2df769aa952dbafe592e82fde061220ae37f0257c7312ece5df08e19ad8276ececea605d191925f35eb57c60571636660738cdb61c7c82379c3ea2d03ff49c083258174fd00ba2eb7d237064d374f"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffdb3, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 43.530014164s ago: executing program 4 (id=223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write(r3, &(0x7f0000000140)="3e7f20e1987fb28e30fc450abcab61190dd1b0c7c029842eb592eee2b027c93961c5f6997f69e0be0904c103e54cf6f0c644649ac8eea8984263bd1eb430d2783b195ecf638dec9bab8e40b4d822889bb863638a884e2120638c31847cb11eb6ad6e39460d88d7eac3ad366bf729d8ac2dce3a72b8040a655e6e224fb28dc2c1cc69657311fe980607db94a23eb9786934f5a6b8d27a0969ca3ad5787632f78fb9a4c5ec2a700a5324a1b7f84fafc042a07c9abe57d92545601bfa16e52304f44be0a8ef2507806068936ea2dad5e4503891c827b4808cf75a5841ccfbc7e17ed389c31526037557b4af719c5912d036db0b7870a2ff24", 0xf7) 41.38742449s ago: executing program 4 (id=242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x8a7d}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 41.307241671s ago: executing program 4 (id=243): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) (async) write$rfkill(r1, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) epoll_create(0x9) (async) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x60002026}) socket(0x2, 0x3, 0xff) (async) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x7, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fgetxattr(r3, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000380)=""/233, 0xe9) (async) fgetxattr(r3, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000380)=""/233, 0xe9) socket$inet6(0xa, 0x2, 0x3a) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x633a, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="800009e9220800ce", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x40000020, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 41.221120543s ago: executing program 33 (id=243): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) (async) write$rfkill(r1, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) epoll_create(0x9) (async) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x60002026}) socket(0x2, 0x3, 0xff) (async) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x7, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fgetxattr(r3, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000380)=""/233, 0xe9) (async) fgetxattr(r3, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000380)=""/233, 0xe9) socket$inet6(0xa, 0x2, 0x3a) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x633a, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="800009e9220800ce", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x40000020, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 38.369961301s ago: executing program 34 (id=151): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000180)=0x5c0d, 0x4) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$inet(0x2, 0x3, 0x6) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)=0xff62) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d80a5b80ac50cfd973883", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',privport,afid=0x0000000000000008,\x00']) (async, rerun: 32) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="54000000130003042cbd7000ffdbdf2518da05064e214e22e38a000005000000000000020600000082210000f4ffffffff0300008f120000", @ANYRES32=0x0, @ANYBLOB="ffffffff7f00000008040000000200000400f40004000100"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r12, 0x0) (async) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x5], 0x8000000, 0x28340}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10001) (async) r13 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r13, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 38.063424096s ago: executing program 2 (id=271): r0 = syz_io_uring_setup(0x75aa, &(0x7f0000000100)={0x0, 0xc4f6, 0x20, 0x3, 0x284}, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x644b, &(0x7f0000000200)={0x0, 0x4000ce80, 0x2000, 0x0, 0x25a, 0x0, r0}, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002300)=ANY=[@ANYBLOB="021002050300000026bd70005553fbdbdf25010017001b06"], 0x18}}, 0x44) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r3, r4, 0x0, 0x2af) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz1\x00', {0x4, 0x7, 0x3, 0xf4c}, 0x14, [0x4, 0x2, 0x5, 0x6, 0x0, 0x9, 0x4, 0x2, 0x5, 0x101, 0x1000, 0xd489, 0x7, 0x5, 0x3, 0x3, 0x3, 0x2, 0xffff4433, 0x9, 0x2, 0x6, 0x200, 0x1c7, 0x5, 0x4, 0x9, 0x0, 0x5, 0x5, 0x80000000, 0x5c, 0x7, 0x5f, 0xfffffffd, 0x10000, 0xf, 0x7, 0x0, 0x4, 0xd, 0x4, 0x3, 0x7, 0x3, 0x2, 0x9, 0x2d, 0x7608cc4b, 0x9, 0x4, 0xfffffff7, 0x7fffffff, 0x5, 0x0, 0x7ff, 0x4, 0x4, 0x7f, 0xf0, 0x7, 0x1, 0x0, 0x2], [0xfffffffa, 0x9, 0x4, 0x17a5, 0x9, 0x366, 0x7, 0x8, 0xa, 0x8001, 0x6, 0x0, 0x1ff, 0xed73, 0x3, 0xa, 0x3, 0x3, 0x8001, 0x4, 0x3, 0x1, 0x7, 0x1, 0x6, 0x9, 0x6561, 0x9, 0x8, 0x49852885, 0x6, 0x3, 0x3, 0x5, 0x3, 0x4ed, 0x8, 0x80, 0x2, 0xfffffe14, 0x5275, 0x3, 0x8, 0x1, 0x6, 0x8, 0x2, 0x3, 0x7e00000, 0xbd4, 0x9, 0x8, 0x400, 0x6, 0xffffff00, 0x8000, 0x1, 0x19b4, 0x151, 0xffff, 0xc, 0x3, 0x2, 0xa], [0x3, 0x2d5c, 0xfffffff8, 0x7, 0x7, 0x10001, 0x4, 0x3, 0x9, 0xae, 0xf, 0x2, 0x9e, 0x1, 0x7, 0x2, 0xff, 0x6, 0x0, 0x20, 0x9, 0x5, 0x5b4, 0x2, 0x8, 0x0, 0xc, 0x94e, 0xa008, 0xf, 0x8, 0xc000, 0xc, 0x80000001, 0x10000, 0x5, 0xb6, 0x2, 0x6, 0x56, 0x7f, 0x1, 0x9, 0x3, 0x8, 0x4, 0x10, 0x7, 0x56234e4f, 0x81, 0xfffffffb, 0xa, 0xc, 0xffffff2b, 0x2, 0x5, 0x5, 0x7, 0x66800000, 0x700, 0x52ef, 0x4, 0xdc, 0x3ff], [0x6, 0x6, 0x6, 0x5, 0x8, 0x5, 0x84, 0x7, 0x2, 0x81, 0x0, 0x8000, 0x40, 0x2, 0xfffffbff, 0x101, 0x2, 0x0, 0x4, 0xcd9a, 0x4, 0x4, 0x7ff, 0x8001, 0x5, 0xe, 0x1, 0x7, 0x7f, 0x0, 0x10001, 0x537, 0x7071, 0x5, 0x7, 0x3, 0x35, 0x80000000, 0x80000001, 0x200, 0x80000000, 0xfffffff1, 0x1, 0xffffffc0, 0xa4a, 0x7, 0x7, 0x80000001, 0x4, 0x80000000, 0x7, 0x8000, 0x8ac, 0xa, 0x3, 0x7, 0x6, 0x2, 0x5, 0x6, 0x10, 0x81, 0xfffffff7, 0x2]}, 0x45c) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 37.997973557s ago: executing program 5 (id=272): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x1000000000007, 0x3c05e0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) (async) timer_create(0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x9, 0xd, "534a85015f0d2b8f5dd68b0cb81a0553fbc127b115288b938a4a82f15ea9d602c05a09fb03ce28eefc8e36339f3329659065f6bd44cfabfd3fc6a206342bf35e", "4eb50fabe4d9a620f7327881d26a2b29a8e1f42f7907521c250cacdcb6f027ac9ff0cc0ac6a807db43e82b13d8bc1bb0ad752906a0a2c501ecab0549c519248f", "e892028420583eca099cc1ebf42fd5af1ebeb196d65437ac8884fa3cf0790809", [0x4]}) (rerun: 64) 37.938566688s ago: executing program 5 (id=273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x7, 0x0, 0x23}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 37.937752538s ago: executing program 5 (id=274): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xec9a5f35b400935b, 0x0) memfd_secret(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000440)={0x5, 0x1, 0x1, 0x200, 0x2, 0x0, [{0x1, 0x6, 0x5, '\x00', 0x2200}, {0x1, 0x8001, 0x1, '\x00', 0x2281}]}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000240)) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xec9a5f35b400935b, 0x0) (async) memfd_secret(0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000440)={0x5, 0x1, 0x1, 0x200, 0x2, 0x0, [{0x1, 0x6, 0x5, '\x00', 0x2200}, {0x1, 0x8001, 0x1, '\x00', 0x2281}]}) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000240)) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 37.522998986s ago: executing program 6 (id=263): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x16, [@remote, @private=0xa010102, @local, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}], 0x30}}], 0x1, 0x40000) write$binfmt_format(r0, &(0x7f0000000000)='0\x00', 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x16, [@remote, @private=0xa010102, @local, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}], 0x30}}], 0x1, 0x40000) (async) write$binfmt_format(r0, &(0x7f0000000000)='0\x00', 0x1) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) (async) 37.342660758s ago: executing program 6 (id=277): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) sigaltstack(0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x52, 0x0, 0x0}) 37.341648628s ago: executing program 2 (id=278): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0xffffffffffffffff, 0x1400000000000, 0x2001) (async, rerun: 64) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) (rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32) sendfile(r0, r0, 0x0, 0x7ffff000) (rerun: 32) 37.334307899s ago: executing program 5 (id=279): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800c62a9d5a"], 0x1c}], 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x8, 0x1cc03931, &(0x7f00000002c0)="8a"}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x244, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) close_range(r1, r3, 0x0) 37.334037439s ago: executing program 5 (id=280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) sendmsg$AUDIT_USER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x3ed, 0x200, 0x70bd2d, 0x25dfdbfd, "167ae6aff64ad2b8c7663ad11aac27e893ee9b98467c816a42e5d000e2004a616eee14b8c9ef21949628be063429cb829807c1a9031ed3481ed00e59503d9418dcd5fdb5ae8a802c8e3b3736452900e7a44f", ["", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x200040c0}, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) shutdown(r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37.069181283s ago: executing program 0 (id=283): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x81, 0x4) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='io.latency\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x8) connect$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x4, 0x2}}, 0x10) fcntl$setpipe(r0, 0x407, 0xa6e) ioctl$KVM_CAP_HYPERV_VP_INDEX(r3, 0x4068aea3, &(0x7f0000000180)) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000200)=0x4e, 0x4) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x85, 0x7, 0xd, 0xd6, 0x8, 0xa4, 0x7, 0x4, 0xd, 0x1, 0x2c, 0x6, 0x378e}, {0xafe3, 0x40, 0x9, 0x81, 0x9, 0x9, 0x4, 0x21, 0x5, 0x3, 0xd, 0x8a, 0x2}, {0x43f2, 0x2, 0xf, 0x3, 0xc, 0x3, 0x6, 0x8, 0x6, 0x2, 0x7, 0x4, 0x8}], 0x80f}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x4}) r4 = open_tree(r3, &(0x7f0000000380)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) write$FUSE_BMAP(r3, &(0x7f00000003c0)={0x18, 0xfffffffffffffffc, 0x0, {0x5}}, 0x18) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000400)={0x1, 0xb9, "3f7232096222ff8c68cc36296f1d74c4abf4dc579ad70a5355fe5427b7fdf135dd28b06ff11dab4a7f857e6ba6b9306c6ae36e3e48614b7fcdadb6fbaf8bfe64d6cd87ea77a94f33ef28e9c8bb293cb131d256d41b1389f70a775ab9fbc0c7f8e687f0e0e22a1d6b8b7abf738468b0756e8604fdaa45c20eb22d7f379813c10fd44b3c4b423c0852b7e866a35afa505fef38a2d2421c31497093fe9a808d35a8d491e36133b44f5e2775e4761a8fe42ace7123a7ba32a822b4"}) r5 = openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500), 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f0000000540)=[{r3, 0x21}, {r3, 0x7b5888d22b7c11d8}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x8]}, 0x8) r7 = getpgid(0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000600)=r7) write$vga_arbiter(r4, &(0x7f0000000640)=@unlock_all, 0xb) sendfile(r0, r5, &(0x7f0000000680)=0x571f493d, 0x78c) r8 = syz_open_procfs(r7, &(0x7f00000006c0)='schedstat\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000700)={0xd000, 0x10000, 0x1}) r9 = dup2(r8, r5) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f0000000740)={{r9}, "6e160f723a7c79a5d98ba064777d2ca7844a61399a0ef26ac81676f37fd413ae24fe3d78964cfc6fb9ed254d40229eed856a2404903275ea87385f8e3467be002056114709314bfde3e004d4c617d706099faa4223574b79bf58b3537663c03f682bb33c519974db5e8207b86addaa60bfe2d14bd1643dfa121f3c754aa87c0fc01b780178b0455958f39c7651647290054e137a19c4276ed015774221671d3e325a95d7d273c1cdc1c42f1842c1b18ada2897534c290a9c0febee41db573cc607f294db72fceb961157e2c45607575808235246d111b6a3c4bd5c7a76a3e20f9858e1cfc4e92b760649364892f3f94ed3730da9a790aed3ba8304fbfd720da8f3c1db56aa0dff0d3fce9e84a73690387ef501871c8aaf68cdc3535b8db32f5e7ada1e7d4d2305fde222cf71b346ccfa3614df20a2b4b888ea7960aab6f1970d748a67ce4952402817076ff8a2f577924c5ca25384118402e549835ecf1776c63eab72ed5e54a0bc0cbdf233e1ac0c95d04b8ce7f0a1f89c5142f822474e0878d2e2898c7d7a86f1a3c6bb8f664b1e138b5c6bcecc845d5d5b629b8531ceeaab4832a03c4f1df0f7e6b4f303cdb22f9e457b63bcda988c61a00c4fd3666f3ab0133a4cb6a0711b6f6db10dcca931cdc8a091641fdcbb41204e05c615976fa7193ee030bdf51e29a5449f5ab45b93f0f1768dac755ccf93d7c523569ffd66d3ced745ed94952346e2535b8ca794f282b010ee61898df667e46351389321c0cc808161a412b25781379bd91c827af257abe8afc7fe556e2cf90c73b8d23523f18e98ef9fc483f6e9bd203fbda34cf400e9aa82d22a4e89e458cbec23a72303a6e5a85cceddd0fdb65d8d85adfbdcfbbffb10a0e50cfb51bf68d283b07107f45b31930ec32333ed10b289778f3944e63c8ee3f6e719bff3640e290354eff7244c3e6a9ca375001782403e6036629c09d4f34bf375c3939a97b04f990869678ef297c9f8b8b4564f74eae4a7c5b9b111d0f993e5851e1add6c2e8eaa27577525418ee31992dcd022149914eb7b17790900ad67515b4a811c8cfababce17c1c78d1224c0c657fe81e9c549bf43c9960aff0aef76f9839bd9fbf56ce419d68fed1b88aa2a5cad486798c793c45158e9b7818d4a4d3a8752468fb46f5f85492265c02ef03ca7e8be880e4334343bc4ac62f72c502a599475531c9a340243bbb16599cf3aa86d87d384e9724276970caddb33c24daaae3eb677f668421e0e13bae0b5a39d62f1d3330004ea18ba1f463b8d3ef9145732e66d8eb75fb2bea22452adcf4b1184bc5306c001c7c1599fbf6e56eb6999a0cf02886841a6789c1bf057913cf139fbde0d4183456a46d41cde9157423c2e356e0a8554eecc52cddc90c08b989a3dc1c710398a1cf0ff44a398da39438cdea4fe75f612d7f70fbb070ade564b549e0088eaa68721373aeadc0af2f4b16179eafc9401874803d61eac8a3099b6004e8442538abd90f2d08dc0d469acc9a591b06c5a690c79ada7e025bacfe429156b5d5919d934d0d40e54fadb025164e797db03fdb5a7b57a9579ae3bab19afd490aef392e6a9c141dfecdccd0ad980aade20c1066739f33fb755ffd918baa34bd867ebd9543e9b7025e3d635b2e05b642e99d2d72a15cfa5b1543742a87aa628781e438b15cc1a8963ae98d6e3a2bc69f34eb7514ba5059e86838411ffa8b535ff569e9c0253de2a7ec36bc9c01390ee0b385c9dc26d89c29271eb3d4de70a5b7d1a77a13966601763dbc170ef345486d9ac33631f6fdaff913483930b1f0d3a26a8ec4e876e36dbdd132120db6ba58003c56cb2145ff22620db716273d21e3e01056631f908c5e64e426a479b4d995f3e96e623f1617079ed72f34836cdc5a7d72aee395c8a561aec6fa1ad5b6fef0f9a8101f12b92047c8fcc7ccca29f7399a86e23028faf7d0f39e93334469a149f5b8a229f7ce2af2e35e9b35cba16523ac52ace197e0ff186f418bee980aa47ed9912ef4e1fe3e2facfab3cf89b830f5ba0c682916f2858f3e9ed28e3a59fa70642c1a2c8de32664e9bb76a4a3c8d61e71250c68ad6352748051d9031fd337b02e09d95551408cc20388ce726ba75b72e40fd0b8f9dc757928ca1b826ca8cd02ea2aff0d52ff0c612c605f0241eae7f760b85ff4a2311379c5920e3f1f9f68896eaf5ab64b6c904af67f91388c2186cdf7bd1d2ae4559ca390a4daa12c9b61e4c637f0ffb96e7c528b42ae33ad333e7d710f5b71fbe0e627fbe811bdd717a5a944cd5a0d44c248165c5e37a8ff396b48d00136bb8884cd93f675bc76fc15400fd7494f22489c7a3431dd66363cdfc9a63239dedbd4d0dd57fabf6ce2cf973bbe3eb31852715e7ada97729c37ecdb9bfb33ae22cc882e0c7e15fca864f59f06aa726b4c4384914a2fe6d8818c3fd457447a546649962af84463b68746513cd283007d3673db4d964deae04f6b8ec907f437adc66e983af78e2140eb29a0715e9e5c823d435956d7d08e6c3f450a170a5584cf62b16a13a8a29c15eecd3c6cb0862b4b2e74aef38afbe2fed32d3aabf2c77ed8991adc884f38372d3c2d39c52f66807c87f951bcf2c5caaf58af7f9d4119b56db104961f6ff28f4759bd27f27bab1735468c68f890df3a4422426ec7eb4813d2914284273005e78f71445eb9916c8527cd580087a730a1ae8be4b41ef9211f2eac6fb2d5fbdf195782e0ea1674bd8fa09c1df2ebd87b2f2af3ef4eabf1b930ed96ad1a17bf29a0928c71eeeacb94a344ce3485a876d47adcc8728decd8a030559b743d7b613dcd790bc6f5e11e4cfc1d7e5e17c11ddba2ffec53e7b75f7ed6ac5fcd53db66058e75cee7753347e18666a1a86dd66aa389d41074e1d06619abc4ab5335dfe5156f60fb799f04876f829efbf0959078925e12b99295138b21ac37b4dbd700680a4dbb01f200715b21d1572dea5b684a52c0069fa7d595381476503581d6c6361b90e631c4574d9f2b43b57a0304a2819c53ee499ba70ee9dc647629e9bd7c715672488441e1d75059f76e89dcaf1572268579c7fd66e586892aa251b1ae9d2a38d47b4fb8801602bf58102e65dd2f278621c88b2f142893e6cdea1297fed812d36341e7cb07f45535878afada70632d1c88d73a8bab5a339c96da0056b9533c6d493753c588cdfcb0ea7f78e411b8b0921b34b048a5bf875086daf8532ff419189a0ee1bbea23759e31eeffd12bcdb5fe772aadbac3112e7b8fa83229d7795480a032380514e87bd984f70830e4800eccedf1ed3a4ef64801c4e8e7921b8dd5db48e6580bcf67968b9fe2ab8f296d4e52ea9c2690bc086693ce98c6c52552f76b93ac303f1934349496b3938fd7ae96c587cf2c3bdb62a223fba666e417ac441db141bb86085895142792ead7dc477753544676beecd49fcf3190886565fe4daa53c1a601c2964b0706b19ca36ea062f5e72c2bce55c12fb82d0915c4854d21b7ce7b85b2228fd4ab1b13767a8f8eb84c1785835693f23c680819cd7f02a06815abf91c99453cc6b8c3633200de6183dd1cd51b08e381ee1cdf97ee2bb90c97caea9d149a5f1a7c17f022f8eb3e077048428efe3067dbdca68bc79c1ae8ebf65590049c9ba58fa6d1c05eddb7d24d4ecf5d68a4c6f2ed89ab2f206c46ac46bddc46f9b7e31c6c43451e4247fe53386877da353940c22ee66d38feb0fe6a8f73dcc8b8849cc303eaecf97040339c90f68140a4211110804ddf594206c96ebdc306268349cb4063d125c2f797fb758f3ea2306bd45199937a424cdb6dc2d84552c40f5639772f48f570265e7be4ceb0510eb0f3697c97fbaac1573b337369a4bcf3db18f1821cf5ed736da70d196606e974a517172dc10b6b382244fc34f600e52a959bc6642de44c34d691f67c9474c6ee8e73f7827eccc6f05b1514e09e089957596b8e9c1ee640472c0dfdcc5ae193b99275cd28c3f300490202b9f7c351dad38a2a590624bc11643186a20c7d15077e2dca9047f5d82b3cabc0b5960a0fbb9806b02e2c93ef9e732aa8047dfe5cd9d810f6425da3a4bcc920179676f36c500386bcf0236438cd175c38d0dccb208deb07757347adf17f7a942b9a17adf01096b378aa35fa8b59d2d76172eb497d8ab1f713be97c28965960ea989b2894b6a87888876a3b8301f1a25f76b972f26983d6135e7f57f96dbc409ed24a136c61ce5bbe03382b0cb8f4175ebca0b21006944c20854cde4bf18e81ad48c24c5ab239bb6619d1f86562093ca0c1bd97c6e5439710b5ab339ccb37dc55ff75b7ae21f1ab03474ba18cad3cca2f7b8838101fe8084853ae35d4e9e6d5042d182197c9861351828efb8989e1c5d797d49867c9ef2590d80ecf961251a7dfe05a4ade62bb3774963d584bc90ef9fdec193f88eedd76e22b911ad820b7d0a19d3bd8a9627c3762591a2771fbcadeb1902d47d63b5939185ec58ff41de58dff952b8c7c2761defa41118d653c33fd871e36d65fcc06dff583f9d23833789f243a71e310759d0abaef6da0405cf84d955a8ddebf1c245bcc2c939d29e9d5819d5f5d626a20360f6e5d2abf96a82d4354921c0312d475c89dcf24402fdabe8847cb539c8e5068fc70cd49430b6e4dbdfb1d002b3044d53068bb337b200986d6f38cff41ece336390aa838afb2f3ddadc4044c60bcbf1cf0e19b00cb5c38c2b08d56b22273df4da99750756d84ac10b155d5b378803f13e794c46e9fb24d0c06059ad74496ba7348e2072aed04595fcac737a9a1973d4b9266fcbe2a24aaceb05b4bf5f9c91e54743fcbfd7f7eeca388a07e62e9e1d4fba39434d55957869beafa510c62658373fbeeb8b111510a510df8205cfcecf40a3e87feb07f0028f6f008d08ee7c2194c71e2d84d38cc1f66231f7c1a57b0bdf69c6ed0b997fc0ceef9b6fcb9c4a3cf54801ade52d719fb6fa90e9b1c1f6b48d0ad6692c7f9d78e41700d061cfb142c3fbd53312eccf5cd0824af767ffb65296fea285a3961e954df2846864594d1e8cd6dc7d2f6b67d11bbe65dbcffe1ab60c9499779f0220d7f446c700e27a8c28b0acb0419c61d744040117d2e08c239082b7e2ed43ec15f133dbdfa28221e2ac9ea8a0176bcc3f1cb79bcd7c332ae29ea41840e8d3ab7a84c35a5ca3cef57c388e84ee9b29e4ac75174fe3be3740619a126acc7de01c25965c1a7a5b89ffaa377f85d2613306ed3494c7372dee9642c54a904d3ed785723a2b220fe526b2b6f982b8ec4b5470c381f22e4dc120007c69f803ead73f3256973e007b04b54b3ca2ce568e588f83b93b6dba099e4449ffffd086ceee05e46e50f896f3e2a179836cd27caee88203d260b8bc89e33dc6cb71b0c35314d0366f07e6c3c6f11699060f2241ac9960a89bed1a26472d46504b10644898a6b6010a052934935bb1f6a01d1702796b22986da2ac2990e8c113a8d4843a89a2859f5e832d887dcc0ca9722a2049c3b68274a3f9cc128dafa536253000a533534e1dcdd88927d39c7051f9160234c2c372cedbb85e9f9ba069dac16d089c9e9fa7dea739a11f244ee15e7e5574abe0d3d3b867e7a27278d59312039c76f8d1184a2f2abef5f521e5a13801e9fad9b0c0eda8cb0837d795898040268bb2a927b82df7bb706cf7e30d21bc9262b03b00a9af372120cfc908613354688b5d089adcad25fb23fa1d6019646ba1363f8e7159001bf51360d818f9b26f48c410bafb9aef720562d0b84a91d2b9e76039cef1d8e75df7666917ba879791a4e679e92f"}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000001740)={0xc5, 0x0, r4}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000017c0)=@req={0x8, 0x5, 0x100, 0x1}, 0x10) sendmsg$unix(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001800)="07dd2363bfb5efe896ef02a39b8b0805aa9bac62c692a6cffe26a07d1bf602721ab8de3b007f23ac3ab8f205db04ef000d579923c0e9aa9ac38214fbf675bfa244160f3ce58a4be259c272540f84d7a6013ac1836c672c8e63937b637ffc78b50fa144509dda6dd2bf4fb51a4e8257a4cc7cb9e0c5d5ce7d3b49259261de8be7102f6acde39a5a90ea324a4fafa730ecc78ccd49de725520366fbd3fac6868cb7cfc06500ab3f4f7911e7a6a924e23e063", 0xb1}, {&(0x7f00000018c0)="0b3df43667e41c6fd2d334733c0841bf3aec1bd725e654d95cc9905dc72754fc6343779958f29cbfbfa0157dabd7d6eeaa", 0x31}, {&(0x7f0000001900)="0d439037b883e4062f236f3ed2ff5ce2f2cb69967fd2d21e4bd45c2e10e88e2416337ec1425403b9faa084d964caba191c2a4ab4993ba91f082407cefb333552f88e0f6191c3ca87aca35b63da5f035135b885feae4d2e0f4ad10e1b9763e376ad5032b9311ca6bf47786a5e5ab263d50a2d5fe2a5089ad9dbc4fd345247208b2efe34e53e406a8152ae40ec2e44130ef1e39e9678ccd8cc4fad508c982dbd70efb31fb8a5657a01e0e248b4fc0d594f850b18ec87b1902ac5774dbaf2a97b8df7cbf93d7fd2f31b74", 0xc9}, {&(0x7f0000001a00)="48c52360ef742b9c2724b1d31c63cc56682c5dc4006f464fc33b5f917bd6e4efe5360f15f48500b844fe00cfeb388154175857d8", 0x34}, {&(0x7f0000001a40)="4e2e07642537a771c561af20f18257d462f09fe41dd521fc569bc965c5faad53012823b84c087a8c8f0e79536cd9ac474852cf955c1ff01e5801068cbad33a70665c446ad10d74cbf28e0d84effef280c7d4e72f9ae11a3feab8d78e08c9b59e51c0aa5656d218395bbca154cfc728433bac86cead9d6bdb29144a9afac40cd0fa6eae0e45758727c4c7f8161eb1ce7b50db40b2843930e9406c51f04ec7e3e9799b68cde624e8d1117642c780f204af162d6407be18ef1f2d3f48f0b211f75f27715f57926587fab9221e38de21732f783af88803bcb9f4520eb597e2b0a58e791e7fc97e4fd544922c37", 0xeb}, {&(0x7f0000001b40)="2502a82d4f2370c1e6a4c88a3fc6", 0xe}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="c2ed143aa35f34c8eeaa2e25d9eec910c99d70cadaf36f3124901a4444f0875e3ed522043c17e3c9574f6b5f22f88b6d7a1c5e4630fa01e77f9f2279df1d3583ede59ff3a8280ee1a9f3d6", 0x4b}, {&(0x7f0000002c00)="2beff308d4c2bf00302db0be1cf815e2ff53950ab674613be33fca52ea4763efffa690bdf9c2d54c54abffe6ad092548601405cad68d9f99ceefe1633f594b41c4ac64b1f5414ac2d0139ac3655c259a997c7bf544fd50e859c630d6bc64f949e11830a342da9c76228d3e11e2cbd71d379b6972afbb213aa992a8d458cd0ea955fbf5b93253dd161fa5ae7370c5cc5af8a327cd4d28132de28cc92e0c6faaa4e8c59abe66a7d44ec24b77563320c4f0dc866b5399102ae9c0d07e3593cda125e66cfb10822502de7387b2f0b8522c57de0092075b91852fbeef6252969edac5047c18f96fb0e861a85ff72e0d55", 0xee}], 0x9, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r7, r1, r2}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}], 0x38, 0x1}, 0x10) 37.033264923s ago: executing program 0 (id=284): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000012c0)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f00000013c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001400)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000001500)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_clone(0x86080000, &(0x7f0000001800)="a328f6c6f5f225c43897af4e5864066f8f509e13b633b9c220b71dc94856fbbfc36cd994438022b9553eb1b9a674f620bac85ad815d5c0d0eebe089db34e70850b41d58a0bc391e7517f9b5953ec9fac2a56c35b2d41808fca29992c584caa9ebe151ecb1f606f21e80115849494ac44ffc4732bf488bafc9d", 0x79, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="3bc8a0b912b27c19eef0347fc209c41595904fcdac8ac64d08f747fb13a6035f1b910676d6968ea9ca3a484e5c19bec270621ee2150586807a67e62404232191b62a1094a77030f4e2a3a0d2a9d1effe2d0f39e46707acbbc3f16bbc2ff53038ab7d693481e80e1703ae5b775eeabd61229777953f0d13dee4d425dca509c175c025dd1a4436a07ad82c0c50cef0c2b031392a182e061cdb6b2ba3756aa72011ff8cf95ecc6c5a467b6fc77519") getresuid(&(0x7f00000019c0)=0x0, &(0x7f0000001a00), &(0x7f0000001a40)) statx(r0, &(0x7f0000001a80)='./file0\x00', 0x100, 0x2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001bc0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000001cc0)=0xe8) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000040)={0x18, 0x29, 0x800, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x61, 0x0, 0x0, @fd=r0}]}, 0x18}, {&(0x7f0000000080)={0x123c, 0x13, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1028, 0xe8, 0x0, 0x1, [@nested={0x4, 0x113}, @typed={0x1004, 0x13f, 0x0, 0x0, @binary="0561d5d742c6b704315dfd8abe96e9f9b05686a6865e6644b6f6503b63a967b78488a0ff38a58ab6e3075eb09cc9f8de13f2bff1e35351225601dc066a4985a29cb8020ba8fc81ea38140c3fd5713fdcde5a6c6b2f5111c07bd49b29226e258b0d7902640baf1b79c1f865240a558b2f865825c876b5f85378fe463d0e2e538098752f3a2e430cb5b9242e1acb74a5564ac038416cc3cbc03f4d8180c161a7fc6c077c30bf75e2d9549369d7cf3a9c78e143b871d37bdd80c3f0b5bdd3467f2944b7aca5c45b749d22968a4a20447ab9899775fb248dcdf7a96c850fb7b683c97d07f521583c57b2e48a2f1784bca6a0c25d9b0bdbc7c647e3d38461b77c1a9741913ab3a7a6f147d790f6420a2d7a716e6eed3e9855aca2e451b2eb20ca0c390eb03b9abec63d0084d58a9e991387660a5e130f6d5094a4d011098cf6592b9b01de38ab19bfa299da695aeb890af92ee8692ecae1c00bbd3f8cadc830dff73742d74d169abf664d33c904e3308f27c0d3680d108ab79dfc9c6ed19f1bfb6f937b4493c022f61bf691785ff2116c6c8e7cdc5d69d165576a59723a6b1ec0297e0331951bcb6541b1f60a097130e3e205920ba9e554eba74ba0eef4690e020c5a35e98906bd1b7496a01a8417ca4e99503bbb1c9a4d0e481630843960e8f63b2198fcba5f9b9560e285e0e9d444f1e1e278193038a59126a0311c752bb022bd4ebd74b04d1957823fc15f137bbdb3fd2058990010f1f95be5983cfbfd4a0a1555648a836fbec3137186b66897ea384d6bbbb4ee608c3af8ad5d2a5bf916239001bae4185e2fe16a9dd729417dec1b75c0426255af7e9d96f74d61737f0f3884ff8fbe40709099c53c1b3c166c5f1ad8a78dc87dd47500041c448304688c9847ac49746746b5146e8003fb1f6e6814d982853b357613731872f76e7eca3b970f08467fe70666534f907f66b20fdc5d9d08d9709dc46ddc25bd8592342bdf566ef07f956fb595706569430613febf993292b25ab100bbb66fec95e75893451ece31c66bf54bdd59c3023a5f9e05d58d4c86e1d03e26236756a02f0661ab36ecee4eeaf549efae876a7b339bf344664c9a9e9275e583c8f6d74630761ce7c23ddd41d8043ec56c66977e7b23871b41c4c49fedda86a8fd8cbabcdd0bc61f4e6e02ca72b0d5479de4eddd378d42e0b5bcc3535f56f0f426f5284d715b8bf8fa06b2b7527c16fd556fe56d8843a47eac8aaaf26d7cfcd8c63c3ba98ecd2737376b54e758c9633b9ab20089f2ce229d7b13ff520b5c83d5964ab93e920d8715c794b0da61bee64f36b50df2dc525a08d434c5f8717449c9c671108e1c2c2ee3efd394dfdf27873784d32a58868a7565bb071742598ca5fa6d326c01d715a52ff92e2daed7451ad3f6d7ac0165f4d969ffb2ac4b0d23d4c7b135c41c7474cabcc5fe0c4fb876ec098b64184cab3977928e19f1805993da9edb56d30b6a2705024772a6d0871c7ba39f3d8c7861b48de7355b8d18fcf59e8cd3b47cc803b5836f127de65c9ba73a223e5e6e409dc6df0b112f507be3a3e97bd9c4841ff9adb8f202720b80c80fa3094ba834eaad84d749acf7260a50528c07f6b1547daa8341ee89c2df0e7df1ecba9cd9adc25ff664127084d60f9b472aef7693605db44ec838c00c15b93624bab2b701e79068d38a74303d55f23cb66d64edccad5a544fd16a41583455b6b2e5d9628cae2ccb33998efdc77b22a75dfcfc3889ef6fdc8af202fd02b460b6c1d25b0fdbb370fdf7840e44d3b1b3e90dbc2d470e49a46fe4be14010fbaf3caf52a3a1a00c543822784a61a6307e6bf553b59e6b1229ddfdf6557e8fd097115c948700e41bf16117e26c49b7905592a391c37590f2a215fb947d305048c5383f1417ce696b6b727a1ba58fd5e03c72ddacd5d8995fe9d46fe7116f7ff7d3a702d939802443fb8bbedf21f3e9d109df5ae936cff23ef6460ca6c99868938ff0f8f17f86e8e2fd0a0319f82b34d61cce8039aea4657968acd2615b380724e49c0718ec7d4647198eaf62e7df58460740f2618e0a8e04f59ecf3cc857ae3f4a76f53b3c3d4d239359ef8ce7ef4eb4ba1d1b28bab169e353cf9f26ad0f951aed3eb0b9997af3912e13dfe286e15fc55bfbd399669a5c919467d840c4ca3f4ad1271cf5df2e3540025f6caed9249c6072c6814bff0ac2b8fe170b10a737aae42e60e468dc02c110aa8275445205eff3f62fdbbc4b6a27b42962cb7ad20f3c928dd9f450d120e05108f1638224785b24f9a7758b9f2b2aab32b2cf25e80570aadbc3e19e359c2a2e1a9d7bd90ff2fe87fd7ce4bcb6feed64faadfc0ef3991e56d98b9715133a98c9b5018eeb1a1f414a135f5ad1ceaadeb56338524a1b10099a9fd742226d948b5973450ad3127e2d1ed32edaaec688b58846a45a3e830f000052884b22f6389dccafdddc33c787ca1ee45f9fc5baa742950e4b8dfe75740d3f9c893be6d2785c36095335e05db55d0604a1a16fb102b0f96c62f0536e97a2bb58be377ec4e6b8d59811a08f83d89f8e7eac9df344abe90af5575c7342eeb7d1bbede4ded217d5a575a15093f073bf5d1ea430b43c6491c80e6331a564223125ff523d016d49156eb3f8eb1c5f1f3a57c11ea5b72552058a98074d44d245740a51a8fa192d3f277ee3652b09979e35ef16d127a73ca0ae440c1893c1579fc395995a117bbdab0aded612805858bb3973e97d2d5a8aa42d4aefb0a60c1b7a580672526362a028164a27ed43f7c9e0f0361d7d74180af6e4752dd32c1c32826600b5e5f8042efaccb103f5738c227cd019dfbd6171e2e8679402bc74a5cc301b5a0fdd511f5c938a4f9f11558629aa4a2a0e2cb2ea9b47e1c4e2ebb4911864da41a21bba9ddcf749ca881bd5d832c6ddb9fc4b1fb58942fbae64675e68d73217ea0563d7ca2091df8c54e4e44452819361fed706af804c0b297504d7fda3958e9c9bcf5dda2f2ff5cfdbee45b886c3f79d21d2fba3abc9daa9c69c49bfd68e6a1b7ede1474d56aa217d9f4a616796ea5e6c0d2e4e923efe81595ee75c2313282545ffb49f3a9fdc148d6815ce5d73783b9b575165cd5e55f3441918d5257854db74dedce0e8b7b05264c4342ca74769f51adf7ddf28dcad348fcf7133bfd4a8bdc0a0f0bb9a425250f12a9bc3c1f311a638daa92bef30c5fc76f0ff4772540d3b9a576c274ac8bb22c9591a79eb51d7a3ea96abf1fba2b48fd77e15b60a62344e9f1405f207f16915509edbec70f4573ad608cba8116928f807ee25a68e742c72032377e05ee270f9b7c409b25f09140fc39a53982616326ddc7e2d369b86fc13feb2acdd917ec72148caaf525b2f0ab934e3d3f0edcd0296222dc41b450397f404b5941b09a549f62cb771bdd88661cd8c80cc16920ce75977f2677e8f5214061d4b5b1c700f9956dc6e6727645e08f90f890af86684bc5cfac0826c118186d831bf2868395eb54132d2cadec7191dd0ed5f394f36090f5ad2d8998151fe870e10aa810fb31b549b6ae27f0aaca3339a2bd21a6486a42792117a66b03cbd2c6b3cd9f16505a0ddb25d9ef684d225ec4cd36d2d15d28c9c691dd3badc3091d23fc811ccd6f37c06570eacbe925519669526775686a17638bcf283609f159655639936880d97bd3538375f26e8ce5b76ca6ed93b960fe55bb1257f0e667561bfb40d99ab48625fbb2c5ff2d790d040289cf6cae155920f9a154f0414c1d9a8d325daf08cb0c06169aa18e08b4847b3de37b9b5b0edb03860303da19dfe31fa050224c9fd6f1faf05ada8c537aca7a88933f48db5532031c230a729ee4261bd48d1b60566adea65e0ba1bdf1b0bd850fa59f5607a6225d60852aaf76dc847adbbd5becfa687a6e02b8dfa1d3900183b5df41c3ff9144eb29dadf9523ea31dd4c87899df72550462b9b4fa2749c424b5f9c7c28e3ebfc35a9322cc76741cfd2601602aaf4d15cd83df002d510061239987ec1e46f1f5b3a0b196277fdf7d67fed726351733f0c9f4c62ae68e462192263d8d3d4261783e5db9ab2937a6983cdb961122da01855eca08250b3ff8fab74c05a94ab98aa7eb17ef92aa75a9e1f2058fc8b1fbbce847fb25ebb42bf184b530e3aa2da5989e1ae85a70993d8619bd7426e25a31960fcf213118f44653fd084509c99d77622485521de22bd6fbd232a3bc88e6a16b47d2e8520afb567c49716c767db589f6537aedfb03e7dffb610f7045ff0e8a7c83086ecd35091bb5464fa97b47568ae539948d3aa280619cc8532c427a40775c6a23e808791b617aa30226cdd801a4d8d8d9c0bfb3747c935a46ab8d2b87ebf6771d789cc6f497543c351bf6efc063ff831edcdeb1d8c6d35160aba89897a056a410073c1c78a7898c219a9802f8507bb995f086d8a44d3e83dfbe917a662fa867181b0f17491fbc78be2927697e4ff0d412fb3425f8c51c288b898cceba178f7d24f26efd3f6907fffb599bb54007815e5e80b8186e15ca061b0b947ce0b6b32f5c4f2192cfbf255475333f94bb96c7a6f52ad3579803adc95ec7fa176248c0c483417e7cd50366cc135b40b252c7f6fe566dfea20e0f1856f14591516d4239b6b5e49813e373274214eea7feb4bf772cbb689f0ad6a71ae64054ab9f1153f904e8993ae268b70e4371dd603708f6cb7d9be619afa309a3dc604bf884de6851c33dba7ada9390886caa4004838b014d1b4e26cb46bd625f9be9f0f0b4be66eba6644969d8cf12c7eb8dbe9fc4d890b4a556aeb4366fb74aa761e91232e26ba57f1c4ea580ffee116238d9865408a5ee6bc2ac3ddb8dbe3bb99ec08a5219cc65bd57f1fc6277f9273fc21376ab14ab0c421ed688967d1fe76ffdd27fd1cc73f74b5225aa9ea6b5375d2c5898d1bf422ff18c15fa4ac97557622f0c45616ebd1b2571fd4fde9790fd6516637045d0ecf0abdb73d329f17ee459d2a323f2ae0fb03ef97c58b3ceff94cd86d5efbef605e0549f10543151698ce5b73ad0022f4bce474ded8193512aa4222c4a1d481773787f56057b66b8638a41e72e6546d8743d9d65eef1140620521548d7c8ad0dd4bcccb039bd62b98ef297ddef3f120d0885558a1c5bd46273a8ae446437473fa39f7f339eece93a6bdb1b17cf39df3b34fad88d5f28cf97ea5a4dcd2fc214d6ba437f3fdb021afd9348570ec6040d3ffe1d0ce45e723273e2fa71d495af4ab51950839a35a3d5294a4b88ea6aab0e4b6a501d495bf2003d07ab080996d57821482d8d3bd8fd4febe439171bbed3ff0167a9480d9c2d446a86ee158b5776c3b05f912d21a52348a4b3b989efa2312b5c5f6a159e4a711392f97ddfb26d5963f9306d0fbeb194c7c99806afd91a51cf75aa353ca3c0a224f077be0218f6ce8c98f7f1c47221441997fef303ea26618091d738fcc0d58250691e309d9c28e0b80ecf72940b6491ff241e76435ada2835f0478b72b0494da1d5e1d1068584eef4d2853540be2927327b7c5ae903f004499b39a888186e8054a149af4df8770741d506b196bea60eccd93bc6bb98c6b3a07d287d813abab595ab86fff3981249900f8c1a6b32b0a52f94d27de462c54a6eb1a1c0b4cd040e72e7f035d8478a2e839e000fa7ccfe9162b887af0df21cc8b7e3c7c749dbe159fc3dfc4771f1a112dba4f0d36bf44b78ba02a53f8dd615a98f8f161ce91f1d079a42ccf37b9c664d46d769a289eb26e1ef3279687bb2323f25d7f17bc03468503a7d00f5330871ec1111a49bc2529e0b6c9a48d9ee0e5d583d49b4"}, @typed={0x8, 0x46, 0x0, 0x0, @pid=r1}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@local}]}, @typed={0xc, 0x106, 0x0, 0x0, @u64=0x7}, @nested={0xc1, 0x13d, 0x0, 0x1, [@generic="785c1f9f863321381bbc13b9ff8e94d439b82b8a977b5ebedfb613a41784afbb14ec2b500f926074c07539f42ebbf71c6e249d1ddce3d825579994e2a5888e8407a33d81c2489a0d8a115020f352b9ee48ddc20c4da880696ab899d89c06f4ce294c12d57c3cb4319e7227470624ddfb578f86545537f6af52dac1fcb8ca667deb9dfd17142285605fa9df99b71fc2f230e58d55dde6487499b02787ece4de271ef6dd81721187aa616d047eb79931b83b1fb61811f1db71ee78bbeca8"]}, @generic="5e65458421099cdbe23e08e40ba48f631d53ac9886c891d797215fe0a7916d4d2e2a70992413bf35cdcb1ea42be0f80668c5186a190ec9700e3feb24296b16c964df7f0fe2201531653ea472585477502389ad95a1caf2f50f79d410e53e58e8c827bf5c16ccae28a7af7b16afdf32636faaeaba96640800aba4770999f250f5a4a361d1ccf7dcced4", @nested={0x18, 0x94, 0x0, 0x1, [@typed={0xc, 0x145, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x5a}, @nested={0x4, 0x2c}]}, @nested={0x4}, @nested={0x29, 0x141, 0x0, 0x1, [@nested={0x4, 0xcf}, @generic="1a669c6814cc1299c0ce53ea7640dfa6a5eb748fd93f8e28354d5a98f22ef63866"]}, @generic="de4c27e0f4d73be51b3216347bef14b11fb9c5015b", @generic="7182debab9fade5e323360824740d0d90ad6c9e05cafbffb053af501346edfa9e1ee397036047b2bb2643261ddf691c4b4f0b7723dd74c2cd432942700a34f02e9db5a89e419c70d4b75097f0e"]}, 0x123c}, {&(0x7f00000015c0)={0x1c8, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x7, 0xc2, 0x0, 0x0, @str='{[\x00'}, @nested={0x3a, 0xdc, 0x0, 0x1, [@typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x132}, @generic="6479dd489744fa6c5dc48dd82053c19ab5beed7739503fdd2a13e7f70562"]}, @generic="129c2e680f1dd27f84ab725cd548b99f8cf27b222728c078b1b6703b7138944abe7d8cbc60ff625690d7da04f14671c2d8e2324638badb4ebd91b970e5c44d4164dbc660c4022d938f85b92045606f5ec6b78c49da6707102dff83f18e33eda9fe5ff9ff2a4ca7f3f4e69e0d91e1c06c834d1255fdf65e", @nested={0x14, 0x9e, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @uid=r2}, @typed={0x8, 0xa1, 0x0, 0x0, @uid=r3}]}, @nested={0xe8, 0x100, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @uid=r4}, @typed={0x4, 0x47}, @generic, @typed={0x4, 0x84}, @nested={0x4, 0x114}, @nested={0x4, 0x10a}, @nested={0x4, 0x88}, @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x6}, @generic="274df77924e186213485040a6d60dc8481f3c4ab20a6aeec4f2725202b13f927627f4262c9d9ce402d4f540d0abba04e056ca200d8b4a79639624c", @generic="61e3e2658802b22e03bdd1400d7e01681ca587b56447d1ec0a0f00a2cdb8cbad8b59b96144c1e70101c9148c4565dea9308f6ecacb9b570b6307f3e4085bbc203be8545cef711a7d6e38440774a5c00de49811ae252b33d54008dd37d324e899c43acb7ac9cc924cb75401d09e4b0560fd680134998c2cbdd357dbf935b1d88f40"]}]}, 0x1c8}], 0x3, &(0x7f0000003d80)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r12, r0, r0, r0, r0, r0]}}], 0xc8, 0x20000000}, 0x24000014) r14 = userfaultfd(0x80801) ioctl$UFFDIO_POISON(r14, 0xc020aa08, &(0x7f0000003ec0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg$inet(r12, &(0x7f0000004080)=[{{&(0x7f0000003f00)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000004040)=[{&(0x7f0000003f40)}, {&(0x7f0000003f80)="61718f3d094900580a4ae978682c99669feb3bff1bf777f6834b07d9df027d9d5cb13e2ccf64b5a3a7d51c613d7a05330ac96333661a436d5f3d029765f368da862f10a4fb9aecf2ea39406c5f30528adf0ba966dc4736ccdddc36593ea46f52cbd5c69980ace454f50c1feedd444be48fed2df33b8c6601b96fa85cc460b71150b056f9e9281657188e222112acf05e68b97008759e05d91527ad26f8842e", 0x9f}], 0x2}}], 0x1, 0x24000000) syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000040c0)=0x1ff, 0x4) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000004140)=[@text32={0x20, &(0x7f0000004100)="0f080f01df66baf80cb83280df8cef66bafc0c66ed0fc7ae800000003e640f015eff67dfeb66ba430066ed660f382b77290f18c536f30f009101000000", 0x3d}], 0x1, 0x0, &(0x7f0000004180), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r14, 0xc020f509, &(0x7f00000041c0)={r13, 0x8, 0x81}) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000042c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) fcntl$setpipe(r15, 0x407, 0x6) r16 = fsmount(r15, 0x0, 0x290a2bd715e23f62) r17 = openat2$dir(0xffffffffffffff9c, &(0x7f0000004300)='./file0\x00', &(0x7f0000004340)={0x0, 0xe4, 0x11}, 0x18) mkdirat(r17, &(0x7f0000004380)='./file0\x00', 0x162) recvfrom(r0, &(0x7f00000043c0)=""/94, 0x5e, 0x0, &(0x7f0000004440)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x80) write$uinput_user_dev(r16, &(0x7f00000044c0)={'syz1\x00', {0x0, 0x6, 0x8, 0x81}, 0x19, [0x2, 0x7, 0x4, 0x8, 0x4, 0x5, 0xf, 0x7, 0x7, 0x9, 0x5197, 0x1ff, 0x8, 0x7fffffff, 0x9, 0x907d, 0x5, 0x40, 0x4, 0x1, 0xffffff59, 0x4, 0x7fff, 0x6, 0xd, 0x8000, 0x98b, 0x40, 0xa, 0x3, 0x7, 0x5, 0x93f, 0x7ff, 0x4c, 0x9, 0x5, 0xca9c, 0x3, 0x4, 0x2, 0x8, 0x9, 0xab27, 0x0, 0xfc0, 0x5, 0x4, 0x2, 0x4, 0x101, 0x0, 0x385e, 0x694, 0x80000001, 0x2, 0x3ff, 0xa973, 0xfffffffd, 0x4792e31d, 0x1000, 0x2, 0x10001, 0x6], [0x3, 0xffffffff, 0x9, 0x0, 0xfffff950, 0x80, 0x180, 0x8000, 0x6, 0x14e161b3, 0x0, 0x6, 0x3, 0x3, 0x6, 0xfffffffb, 0x6, 0x100000, 0x1, 0x7ff, 0x2, 0x6, 0x7fff, 0x7fff, 0x1, 0x7, 0x0, 0x5, 0x4, 0x9, 0xb, 0x1, 0x5, 0x2, 0x1, 0x0, 0x136, 0x10001, 0x6, 0xff, 0x5e, 0x5a26, 0x6, 0x80, 0xb, 0xbe6, 0x5, 0x87, 0xb90, 0xb2, 0x9, 0x1, 0x0, 0xfffffffc, 0x3, 0x80000001, 0x5, 0x7, 0x5, 0x10001, 0x7f, 0x4, 0xa, 0x6], [0x8, 0x4, 0x8, 0x10001, 0xe0, 0x1000, 0x4, 0xffff, 0xbc91, 0x5, 0xa285, 0x7, 0x8, 0x7ff, 0xffff45c2, 0x6b, 0x0, 0x5eb, 0xe, 0xfffffffb, 0x0, 0xc, 0x1, 0x8001, 0x3, 0xfbc2, 0xff, 0xfffffff6, 0x8, 0x4, 0x6, 0x2, 0x4d200cb7, 0x100, 0x6, 0x3, 0x7, 0x3, 0x9, 0x3, 0x1, 0x1, 0x5, 0x7c, 0x8001, 0x2, 0x6985, 0x8, 0x6a, 0x5c5a, 0x3, 0x7e, 0x4, 0xe7a, 0xa4, 0x7, 0x1, 0x1b17, 0x40, 0xfffffffd, 0x1, 0x3, 0x800, 0x52dc], [0x800, 0x5, 0x5, 0x5, 0x3, 0xf, 0x6, 0x0, 0x5, 0x6, 0x1, 0x2, 0x9, 0x4, 0x2, 0x2eb, 0x9, 0xfffff6eb, 0x2, 0x3, 0x573d, 0x0, 0x7, 0x4, 0x80000001, 0x1, 0x6, 0x4, 0x2, 0x80000000, 0x9, 0x0, 0x80000000, 0x7, 0x6, 0x3, 0x3, 0xf9, 0x6, 0x4, 0x1, 0x7, 0x8, 0x3, 0xfff, 0xf, 0x1, 0x855, 0xff, 0x1, 0x4, 0xf9b0, 0x7, 0x2e, 0xfffffffa, 0xc, 0x400, 0x9, 0x80000001, 0x0, 0x7, 0x9, 0x8, 0x1ff]}, 0x45c) mount_setattr(0xffffffffffffffff, &(0x7f0000004940)='./file0\x00', 0x9900, &(0x7f0000004980)={0x100080, 0x79, 0x80000, {r15}}, 0x20) quotactl_fd$Q_GETINFO(r14, 0xffffffff80000502, r7, &(0x7f00000049c0)) 36.958817285s ago: executing program 0 (id=285): r0 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r0, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x1c, 0x23, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, &(0x7f0000000000)) 36.958232075s ago: executing program 0 (id=286): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x3, 0x81, 0x3, 0xfffffe00}]}, 0x10) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000400)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x8, 0x2, {{0x3a, 0x4, 0x2, 0x33, 0xe8, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@lsrr={0x83, 0xf, 0xe5, [@multicast2, @local, @local]}, @generic={0x44, 0x10, "d659ea82232c42e53fe2c72a8f14"}, @noop, @timestamp_prespec={0x44, 0x1c, 0x5, 0x3, 0x9, [{@empty}, {@rand_addr=0x64010102, 0xfffffffd}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x5, [{@broadcast, 0xb168}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @timestamp={0x44, 0x14, 0x93, 0x0, 0xa, [0x4b34, 0x10000, 0xbe47, 0x0]}, @noop, @cipso={0x86, 0x6f, 0x3, [{0x6, 0xc, "4278f36428e62608bbe0"}, {0x6, 0xc, "93ef80402ff25c1bed57"}, {0x0, 0xf, "19e261cd873edeec874aa33629"}, {0x2, 0x8, "134f6a00782a"}, {0x7, 0x12, "1f04000000309ea3ffff000000000000"}, {0x2, 0x6, "e48d047e"}, {0x5, 0x2}, {0x6, 0xd, "a65d565957bd0874cc0472"}, {0x5, 0x10, "8e66d4c9b31a2d7cd7b7f2fe2266"}, {0x5, 0x3, "85"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x8, 0x2, {{0x3a, 0x4, 0x2, 0x33, 0xe8, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@lsrr={0x83, 0xf, 0xe5, [@multicast2, @local, @local]}, @generic={0x44, 0x10, "d659ea82232c42e53fe2c72a8f14"}, @noop, @timestamp_prespec={0x44, 0x1c, 0x5, 0x3, 0x9, [{@empty}, {@rand_addr=0x64010102, 0xfffffffd}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x5, [{@broadcast, 0xb168}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @timestamp={0x44, 0x14, 0x93, 0x0, 0xa, [0x4b34, 0x10000, 0xbe47, 0x0]}, @noop, @cipso={0x86, 0x6f, 0x3, [{0x6, 0xc, "4278f36428e62608bbe0"}, {0x6, 0xc, "93ef80402ff25c1bed57"}, {0x0, 0xf, "19e261cd873edeec874aa33629"}, {0x2, 0x8, "134f6a00782a"}, {0x7, 0x12, "1f04000000309ea3ffff000000000000"}, {0x2, 0x6, "e48d047e"}, {0x5, 0x2}, {0x6, 0xd, "a65d565957bd0874cc0472"}, {0x5, 0x10, "8e66d4c9b31a2d7cd7b7f2fe2266"}, {0x5, 0x3, "85"}]}]}}}}}) sendto$packet(r0, &(0x7f00000004c0)="458fa12cf6d7162ec35efd74b17d4336ac09e05b6210c8a62f44e89c1cda90b582b4c12d3631d5ca18b987c3670ade94da037af14f6ce233a9e1d354bed34f661581ffa9602c4f408c0c5ba665863d93922d48c4193da1a0a3377918420c1daf997523ad4c7291bcc2c699611484b1306a536c915ba50f230abaa5efbc73ecc41c840d142b48014968ed13f5e68ee098f2bf9e15612098d04f51a863adf595ad45bb433f1a1341fcf587e3555739425697664f84bfb30c711d438cd5654beacb9d5017ed4b1be4620b79ba", 0xcb, 0x8000, &(0x7f00000003c0)={0x11, 0x1a, r2, 0x1, 0x5}, 0x14) (async) sendto$packet(r0, &(0x7f00000004c0)="458fa12cf6d7162ec35efd74b17d4336ac09e05b6210c8a62f44e89c1cda90b582b4c12d3631d5ca18b987c3670ade94da037af14f6ce233a9e1d354bed34f661581ffa9602c4f408c0c5ba665863d93922d48c4193da1a0a3377918420c1daf997523ad4c7291bcc2c699611484b1306a536c915ba50f230abaa5efbc73ecc41c840d142b48014968ed13f5e68ee098f2bf9e15612098d04f51a863adf595ad45bb433f1a1341fcf587e3555739425697664f84bfb30c711d438cd5654beacb9d5017ed4b1be4620b79ba", 0xcb, 0x8000, &(0x7f00000003c0)={0x11, 0x1a, r2, 0x1, 0x5}, 0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) timer_create(0x9, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040044) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022abd7001000000250f0000002a000e0068c3"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) (async) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022abd7001000000250f0000002a000e0068c3"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$FIONCLEX(r4, 0x5450) (async) ioctl$FIONCLEX(r4, 0x5450) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) (async) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x58, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @dead_binder_done], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x58, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @dead_binder_done], 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "c138c257eef13a8cd0d8f68a7a302543"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "875b14c8772c2a1340c0c18fc643318b"}]}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) 36.843708486s ago: executing program 6 (id=287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) linkat(r1, &(0x7f00000001c0)='./file1\x00', r1, &(0x7f0000000200)='./file0\x00', 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x5a, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa7"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 36.750766829s ago: executing program 6 (id=288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x28, 0x3, 0x0, {0x10, @ether_spec={@local, @remote, 0x1ff}, {0x0, @random="cc80348623a4", 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, 0x4e22, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x604}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffcde23d1e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c843}, 0x8000) mmap$binder(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @increfs], 0x5d, 0x0, 0x0}) 36.611986981s ago: executing program 6 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000020100c0", @ANYRESOCT=0x0]) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x48, 0x0, &(0x7f00000000c0)) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="13f8fbdefea67b4881396b4a9ed16f765e51a82a513bdc5eed9a458e8158a3521454353b1183fc0c9f1e4f521dc72d744afdcb62328e0b517adedacc46db5521dea012a3dcb6648b9d3fa174fef819f2e1a310d693be49ff197d3b50df55145eae2685f0db556bae994497c4e45f52b7a3ae89ade52ba2cb3dff1cd94cf96bffc16306e1eb1a4ba05e90ada161e4c5df5dc1cefcd7f303e4eb20a548a871f85489db60") (async) r6 = socket$xdp(0x2c, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)='vfat\x00', 0x20c00a, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbf8, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0xc840) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) (async) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x15, "f46243ff05c19fbc2528ffffffef072201fa01e9d7"}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x2}, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000180)="04", 0x1, 0x24000080, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000000)={0x400000, 0x80000000}, 0x8) (async, rerun: 64) close_range(r8, 0xffffffffffffffff, 0x10000000000000) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) 36.488241233s ago: executing program 2 (id=290): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40440, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x2b, 0x9, 0x1050000, 0x4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x100, 0x18}}, 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) mount$bpf(0x0, 0x0, 0x0, 0x800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) 36.487619753s ago: executing program 5 (id=291): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x4, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000001280)="8218165a4675138469c8f3d967ceaddb54bcc881a18f0c3b84507ca177a7651d62c39fca82ac3897dfc5c4086516316664320b9e1f33dd6c65642d0faa6f2b7d62ac5b16f2521af1a368554b194eb6b3edab33e33090433d0c0337f65d16cc897ffee33aa2b61982677b2accd6dfd1eb6114ff2c700d76131af2363e7d40a2b96ef9d230b9deb6f54b664d725bec12698bd01eab5ec34fa83e088085d5370a74c3dfd8686823aa3822a2c9d438b1d25b4dfce0e143d2d9842a65cbce36e9319ffff5b3eb73802d1d2da34023179ae812b52ee1a6ad332db04edc1f3637d329b3e47362d609c095698409c24274f57deb758610e2e85aa68149c1884b4897a766de414d356dcc598054ea931106d198688058a1b275e994e6533c0e46887bd0a73f2c40eca60ca2eda217c670f537271894bbdfd3e77efd2c2cfbddd3c397a70ded0f0bd4f437c72bf50d32ff714db33376db2524e332d65efd6200be7a387b3df78f053397009578622710f5e14e440d81ac11a8265aae3d122ba047d6566ced3246498aafa6e8f3f939f646c743cc5860d27a701d3b32fdc78dbdac2cbee3f2cb120b874b30c32f6ae77e509c5f595bb018c4813ab13e4bd86292a99b597eeb3a68986ff00d4a100d250033f72eb57767ab0220b3fbe478479d8269d12e9209663335e191e2880aa56ff5b775bae375f8eeef0f50e198ac27166e99ddc3b71692dc86daedaef11d94dbc5b53eec97f78e784985e0e1940f932cdb32bd4336051e249aa84efd34dc1a6a08ace1a353d69cc97a9ef68310b8f81695432341adfab138650a2c599530c4e5257c649d2a980ed56f01deb13b67cf23e86e761408364c8d366c9af6b73f26f13c688c2713cff9bf11a6c2a33b19c8dec8889d476ba7d0207693555ff18e02d734065d07bcd01f3de569be8d134e572648a1b5f2c12f05bbe96dc3372dd6651cd8d6fae272d09dfff53b178f6ed033a2dddb6769e9d95a935367375334a5c7022f69896c44e0ff3994097d6621640243637e7399e7247039dcbbff69f130de9510de55e3981dd985de93a5e18bc61225f4caef802ea754d0575832fb1abb4ef0eba74baf1f041373bdcaadc7331b8360aafb9e6f8b97ec4163bc060efec1b3d450f2cca555ec33ffcb47dc7cad82b83aa0407f0a56374affa0845e8bec95c1bb580a38a12d2281c21a4e64d3dbdff14c316d130b0308d95c0addce37328f516235ef3f0e7c898fee3fab562edd0b7b3538c4e35ccf52fc3aabb8b36590de318f4fbebfc45f0063b0f45d11538b1d8ae0abf79e0514a9df2b12d9a185b8095b8926baee6926380b2be0cca099952b3966db530e75206960a2328d3cac08d0f74398bf2aac766a856b3c79c1e69146d1684a05bff55a762749c444b066591a9ef98a2bc140f247f7eaa9f9f73166b8bd9c413c9d39d66330e40c2ac46911f6ad9176912a49dbdec0195292097147f21de19a8700ca9b5a6dace2add7f7d740408393a22954e6f242ef6116b8ea86455f353d21215faebc1f68e15d2a658653f1aef216fa63804e26390ef165f73814ab305536cef0b8bffe079c08fc55f170bab6026f5aab03918022e2ebbe6247c6bc2c95f23276149bae2a978ea88a0af77684e1196737336c1c77d9a13bc31d89f4c7d372ff6cbf1138c8ba21b7a7834f03b05c0f95c89d237f4e2cf18bdcec882c44f79ccef7a073c541977ac358d8bc1d75ce677b22451a297249f43077c5d1afbfcb35069553478bfcfe92d8b375941e056ea80c7cc67ab40cb382d1c3b4b141e79b401e836ff702e0586d312407ccd596723b1f0f0a7462252024ba323944998b6ddefa13223672138089e63e160ef44d4a24f445aa9b9402b66013f95cda84a402063c1179562c1fab6180aa1b65da6f149305b97c8841fefc863eb62c9979e679e196290bd51f7d9241ec7fb2860497d7a0e5edf4cb32bcd24acf2f7074d065b2a0dee642f0d2e4dfe8f9bd24fa9a0c1f61978762479b7a71730a560dc33217c46124be6f7d6bbdfb382d2758df454dd10b142d8f40d352161ef59286749c341d701b98d1777f8a2bfa29bd6b3eeb623437ab4b812f6104eceda9a06354f15539b2c44a754255d42afd5ac156f761fe7d8bf96695b6f7805a10e564d1ff74c9fd0dad2025a6a5c7e654078acd103a67a189a944bb7a23e2acf806c64f4133b0e981b13f796a1795b35cd0c2033088314b978a717ea8a1ae8d42707784e8763e520a1a4ebcd2e5584666c66d13fad30ecfc3462e587141d618a293e763d8011cacb1ccdc1cac6d4e28c1f050acd92aef77a32b7208cbee710f9cb23371d0689f1ed86a814761781569aa41a770b1f86307dbf5c4d885df34fb97d380028430d72d40c0464481b07cd79cd891a9ff71242dbfc4a50c95b77aae602f653c040f9a839ffccced8e47705a1374e602412b9ea3781c1e29529a6175ea5d7183276b805466adbfe62f59f8929578b498dad9d36fa1eaf7b791b92e7665c1784b4abe34717df8b878cd7eb2a211b768b4d5b0d1d992d64b44a4f5d1b87130f412f9553203708149b780bbba5d7050df836cb6021864a3f75aa2dc6089e3d49693b2f05467522cdeb809a4a04066f6e50ba3ede5e75e86e0c870df98da172a7b1e54e16f4eed46b6265b5299434ac79ab3386f7457cbc0d6507fd28d72e3f42994456598cd72b74ea87adf6ffbf6dac942661db3c3121d151ddb642e767da39e81f455fa6a44ed6f1b04a48a957b41eee5ddf3446a33f93dce8580ad031652042b23e5ea06c4e8cf7a2b1349bb9be0e2ec419ce73b698df098204a1aba2a43e45bd2a6dd3f825e5e0ffc37794a6fa7826b1d338ae2ecee0f0781a9cb6c9dec8677caf19e3494605975224fb566a38d1a579097903f85aa88f94b2095d197a33ddd500ace42f42ba7c3c32e21cce22f9c33fd5b8969afbb02791985a8a80610b43474c2f0b5dcaf1939af76075ee4a52a8df4b16ee061b9c294b089feb025cac7e5806cebf2947fac866e37c5ece1a2f78b59bc83f8f7320230493efe924a1117dbe7e958f6090b3a41671485ea43a5f75a1d77b02f58e335f64a286cb16b6d5eb1b8a56fbddd61d9e70233aa943cebb798550225beb17245e15cdabd2d2862a4c7e7faa0f5360f16ea3bd4a96ff366ffde56125c8e3136f09b699d23e56ecf52b254e0bbbfa6ead5521035b4c4fcd1b3955335aeb9354637e4ee3032101defaa069bf561caa3323291b8fe8168452f9685e8ef1f5df93a6cef2c9cfd159609c91e672b1b2f3b51971640bc7ba8457ea57f09efad465e1354fa5e25a40b2953b3c49e7eb0ef166ea232d212183e20baa98e0d4832929fd466abf3deec6c1f5cf0754b2823ecd919318f13632c0f688e7f9c9552457dc8e0c3517c3ff0371dd6b4f1e08cc0f37a41ea82eb049b6fe229948492e901bd9a0066dc1dc89e69bfd938aa4b72de035b369c3e9bea68d2a75179019f9e8cce44be2a4ac69a0dc2beb70a0b7ac45112056799a033f61e07f5c316dc365b516bb60d6096bdc9478c631dfb4544eee0cf4580df6a7ad99819bf3811b8d008a4ceddbb07b0b63fac32679a52a8eb4d9ff2a6a4623b8879c6ae520cd488fae06095c4e101b811650297bb4a5ab96ad3f5e346c8b49803765898f678f50abb4e6684bd2ce9b7615a76a5ec2ad97826e62e30a4bd225131d76f13b2acbed1f829609cde267624dc9e7eb52aa732737fab7cc6f2f84989faa84490f939b4810ddb68a89661127cb0a934c3b3a56ccfa664943aa870a487809d0cd367ba09b24d69f66faf7dba030894aca27f965d0947829fde6cb33a15532426820ee9672d5cb9523fbc1dcb4cc8999b8e9d6f37f96e8a90214df14498828c87ef64b54364c8febd49450797e2de328868180c9ffec68f515b77f04ec7aa43b48a315b7818bdf51d39b27a762993e78b04871eeaca5d40c6812fb7a309e461d3e91d1e33a8ab100c5065ec85be1646a7ef11f6d3bb829ad597a5dacb3d8cbad5f6febb29b0cbc761271a37641e35265bc768482b4aea760e0d6e927ffaed151f73769fbf2dadd5a06376dba1118264e88d035cb25ac65af403cf10b72e225d06c4e4c02c1a639e0975005ee77625f7beda99c2581bac280ba4fa2e7753392b517942592575be54aaf34dfd6a02ad25a836261a7fa830fd590dde51af8d1620d2cd5c29246b5179143eb3d35e2ef3409146dfff5fb3567fa62b59edaddfb0f4a9031d1c0ccd4cb40859011142c0d873c3a5c519a723f088f1388a2f8a83e77aa16b91ad9131e8c84cec5bddcd6c8f49ad73636a05c38b9bf8796f4fb81114fcba335600208968ea0e0b3f5a0169a4f22392a0272aae6cfc2311b8fe8db8b5354d9cb328d30a17d4068ca405708907d3463813f9006e9eac96a6a7f9a2dff7cd401b007901fc528f44ebc8764335399947860dc948ab7a4dc74608d8172a8a48133a99d7e4ac3a26f0b8e4d0c8c89425f5c20e3f7997ee58814f3eb5f6ebec7e90b4538fcc136a13acc9d1e4e6d8aeafd03ea31bd14b5bed854fb0704f9bda1d385ae2e5eb77d19199373354758b2c95d5fc748f9ca416ce400636fd5c58d638d08a7f93806c8ebe273d8c6c6a5e88e4b85ca989ecb331e0eeb1c9a699c35ee4462a5fcfcbf48de7f7a0b545339217931c2101efb6d8b487a6b99f96f32091b6ccbb5dcb98627ddddbb4963b9c81abaf8b58a28efa8e14f90b5cfc84f284f52be18848e48bf2ac2a4568194fe16ceb3e9d66a85226999a692f7d7df2cc1bccbb5e78938b12bd63bce549201d2335c683d2c739ea445f3c191074a36b8027960d8265a54171f3bb879e2d338e972e70313824316d93664710be9593b00e5583691bf47d38ef455f50809c87a3d42b124845f8fd7fd9b78a78201b5b50ded4eece2247dd63487f20fc50fb2b5281d100c2aa3bb79540b2d2c6946847eb8298e93359babda1a90042204340641e73825094136a4dd8ae2d949a63226b04c0a389da5efab6cefeab08dcd43caf33a846e8061a6d45df77fcf1e7f4d5f264d349b2e961794a265a0751c8c55a8dfec4e76122fcabbabc7eeee1230935a2441a4c7655b3a874af5c46431d520d6e3f45caf7b9d1a7a1ef087c7a9d62d097a3d2c8e68ca92f133a840e62e6558b5b4a5e5c64792ec1e2994f9d595c355598d92f373281b628c85a74ac494b2450cea5d5241abaa0238cd0efdeefde98562bc0474d63becdeb4c0578aa3a4d9c629b04391529c9a12fed7ea68ef2f6f627952982ccf952634572fe7b2c46cf64e9919e86186e36543010250ec3cde84359d4427c0c1a13fd44139c417bd8c27f793910b417bedff568f937389858c46f82f65b0a5f01e14967f91aeb18414163340652dd6f535a180216871a5a988d2b84adfece82632161fc523057498d8b1e282968f0ffde88e6d608e7ca71d591cefc57ea569b1f31ad7b3e3b290dac096096a20ca2a2302eb25d3261628d2631ce1bb30702a3ae3de431776de49563723e1716cb35e95c03adab1ec912389509a0f4214f6bef1230358b8d7afbcc7b3510cc90345bdbe7bdd958b7c2e988a654a720d5c029cb50fc43e80818c39b093547b1a60c2c328c0124763d729e12146acb1a55682006d1874135bb003c094ad83f1745b85f494fcc1a9d30b65db7455744075511c61d26f09bfa718219ca4b6b1576e76c71ec3d52372eb2a702888b9758122a48653780d9d372a0e97d97e8d860f725cb871ca747d947e6d2d27691615cbf84e526cc3d") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) readahead(r5, 0xa183, 0xffffffffffff0001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/113, 0x71) ioctl$EVIOCGLED(r6, 0x40284504, &(0x7f0000000000)=""/56) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') gettid() read$FUSE(r7, &(0x7f0000003240)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 35.796810815s ago: executing program 0 (id=292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='system_u:object_r:klogd_var_run_t:s0 /usr/lib/\x00elepathy/mission-control)5 0000000000000000000\x00'], 0x5f) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1], 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x4, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r1, 0x7, 0x7, 0x1}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1000}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000040), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000004c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) 35.700528996s ago: executing program 2 (id=293): getpid() setns(0xffffffffffffffff, 0x24020000) r0 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 35.102049686s ago: executing program 6 (id=294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000100)=0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async, rerun: 32) r5 = socket(0x2, 0x3, 0x6) (rerun: 32) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r5, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 27.309052258s ago: executing program 0 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r1, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x3) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) timer_create(0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x9, 0xd, "534a85015f0d2b8f5dd68b0cb81a0553fbc127b115288b938a4a82f15ea9d602c05a09fb03ce28eefc8e36339f3329659065f6bd44cfabfd3fc6a206342bf35e", "4eb50fabe4d9a620f7327881d26a2b29a8e1f42f7907521c250cacdcb6f027ac9ff0cc0ac6a807db43e82b13d8bc1bb0ad752906a0a2c501ecab0549c519248f", "e892028420583eca099cc1ebf42fd5af1ebeb196d65437ac8884fa3cf0790809", [0x4]}) 25.969578901s ago: executing program 2 (id=296): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x202461, 0x50) ioctl$KVM_CREATE_VCPU(r0, 0x7704, 0x2) 21.540107526s ago: executing program 35 (id=291): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x4, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000001280)="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") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) readahead(r5, 0xa183, 0xffffffffffff0001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/113, 0x71) ioctl$EVIOCGLED(r6, 0x40284504, &(0x7f0000000000)=""/56) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') gettid() read$FUSE(r7, &(0x7f0000003240)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 20.155075409s ago: executing program 36 (id=294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000100)=0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async, rerun: 32) r5 = socket(0x2, 0x3, 0x6) (rerun: 32) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r5, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r5, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 15.493106518s ago: executing program 2 (id=299): mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) 11.769435461s ago: executing program 37 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r1, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x3) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) timer_create(0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x9, 0xd, "534a85015f0d2b8f5dd68b0cb81a0553fbc127b115288b938a4a82f15ea9d602c05a09fb03ce28eefc8e36339f3329659065f6bd44cfabfd3fc6a206342bf35e", "4eb50fabe4d9a620f7327881d26a2b29a8e1f42f7907521c250cacdcb6f027ac9ff0cc0ac6a807db43e82b13d8bc1bb0ad752906a0a2c501ecab0549c519248f", "e892028420583eca099cc1ebf42fd5af1ebeb196d65437ac8884fa3cf0790809", [0x4]}) 0s ago: executing program 38 (id=299): mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 25.352150][ T36] audit: type=1400 audit(1753600628.540:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.353556][ T283] cgroup: Unknown subsys name 'net' [ 25.374963][ T36] audit: type=1400 audit(1753600628.540:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.402169][ T36] audit: type=1400 audit(1753600628.580:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.402579][ T283] cgroup: Unknown subsys name 'devices' [ 25.567444][ T283] cgroup: Unknown subsys name 'hugetlb' [ 25.573088][ T283] cgroup: Unknown subsys name 'rlimit' [ 25.748750][ T36] audit: type=1400 audit(1753600628.940:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.772049][ T36] audit: type=1400 audit(1753600628.940:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.791977][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.797022][ T36] audit: type=1400 audit(1753600628.940:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.828524][ T36] audit: type=1400 audit(1753600629.000:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.854036][ T36] audit: type=1400 audit(1753600629.000:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 25.935398][ T36] audit: type=1400 audit(1753600629.130:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.961006][ T36] audit: type=1400 audit(1753600629.130:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.961053][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.793741][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.800840][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.808053][ T290] bridge_slave_0: entered allmulticast mode [ 26.814363][ T290] bridge_slave_0: entered promiscuous mode [ 26.822019][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.829136][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.836591][ T290] bridge_slave_1: entered allmulticast mode [ 26.842873][ T290] bridge_slave_1: entered promiscuous mode [ 26.946919][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.954005][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.961144][ T292] bridge_slave_0: entered allmulticast mode [ 26.967444][ T292] bridge_slave_0: entered promiscuous mode [ 26.973611][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.980729][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.987885][ T291] bridge_slave_0: entered allmulticast mode [ 26.994122][ T291] bridge_slave_0: entered promiscuous mode [ 27.003909][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.011015][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.018107][ T293] bridge_slave_0: entered allmulticast mode [ 27.024366][ T293] bridge_slave_0: entered promiscuous mode [ 27.030607][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.037679][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.044751][ T292] bridge_slave_1: entered allmulticast mode [ 27.051167][ T292] bridge_slave_1: entered promiscuous mode [ 27.057347][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.064400][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.071526][ T291] bridge_slave_1: entered allmulticast mode [ 27.077824][ T291] bridge_slave_1: entered promiscuous mode [ 27.088969][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.096043][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.103121][ T293] bridge_slave_1: entered allmulticast mode [ 27.109568][ T293] bridge_slave_1: entered promiscuous mode [ 27.208204][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.215300][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.222596][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.229656][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.290553][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.297943][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.316275][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.323375][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.336492][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.343562][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.421354][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.428445][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.436520][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.443562][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.462293][ T290] veth0_vlan: entered promiscuous mode [ 27.477883][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.484975][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.492720][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.499801][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.518482][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.525600][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.533226][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.540343][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.548629][ T290] veth1_macvtap: entered promiscuous mode [ 27.597959][ T291] veth0_vlan: entered promiscuous mode [ 27.623909][ T293] veth0_vlan: entered promiscuous mode [ 27.634034][ T291] veth1_macvtap: entered promiscuous mode [ 27.644152][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.662898][ T292] veth0_vlan: entered promiscuous mode [ 27.678975][ T293] veth1_macvtap: entered promiscuous mode [ 27.711991][ T292] veth1_macvtap: entered promiscuous mode [ 27.775754][ T344] rust_binder: Error while translating object. [ 27.775830][ T344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.793857][ T344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 27.871875][ T360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 27.882428][ T359] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.891957][ T361] rust_binder: Write failure EINVAL in pid:14 [ 27.913371][ T362] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.936700][ T365] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9'. [ 28.164982][ T61] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.324996][ T61] usb 2-1: Using ep0 maxpacket: 32 [ 28.331391][ T61] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 28.343928][ T61] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 28.353477][ T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.362179][ T61] usb 2-1: Product: syz [ 28.366876][ T61] usb 2-1: Manufacturer: syz [ 28.371883][ T61] usb 2-1: SerialNumber: syz [ 28.378305][ T61] usb 2-1: config 0 descriptor?? [ 28.384480][ T61] cdc_ether 2-1:0.0: probe with driver cdc_ether failed with error -22 [ 28.393370][ T61] usb 2-1: unsupported MDLM descriptors [ 28.571280][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.579439][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.587731][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.596355][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.604611][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.612514][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.620385][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.628327][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.636132][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.643884][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.651640][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.659660][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.667534][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.675747][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.683631][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.691864][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.700305][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.708258][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.716435][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.724263][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.732350][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.746036][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.754179][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.762956][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.770944][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.782007][ T390] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.783067][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.784753][ T391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 28.789751][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.797664][ T391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:15 [ 28.806736][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.831310][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.839566][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.850590][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.858476][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.866781][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.874840][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.892902][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.896334][ T396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.900805][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.921114][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.929186][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.937136][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.946858][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.955041][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.962787][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.971273][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.979752][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.988110][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.996059][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 29.001440][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.012977][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.021007][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.028943][ T65] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 29.039074][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 29.052239][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.060312][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.069611][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.077571][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.087030][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 29.095101][ T65] usb 1-1: SerialNumber: syz [ 29.100292][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.108701][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.108846][ T377] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 29.116838][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.131479][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.140115][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.148145][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.156412][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.164257][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.172363][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.180325][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.188645][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.196804][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.204666][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.212875][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.221066][ T380] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.259814][ T404] capability: warning: `syz.2.21' uses deprecated v2 capabilities in a way that may be insecure [ 29.339980][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.350327][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.364432][ T418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.389109][ T12] bridge_slave_1: left allmulticast mode [ 29.401464][ T12] bridge_slave_1: left promiscuous mode [ 29.407290][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.415163][ T65] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 29.427070][ T12] bridge_slave_0: left allmulticast mode [ 29.432759][ T12] bridge_slave_0: left promiscuous mode [ 29.435165][ T65] usb 1-1: USB disconnect, device number 2 [ 29.441769][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.579422][ T12] veth1_macvtap: left promiscuous mode [ 29.585120][ T12] veth0_vlan: left promiscuous mode [ 29.654976][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.698714][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.706574][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.713658][ T430] bridge_slave_0: entered allmulticast mode [ 29.728897][ T430] bridge_slave_0: entered promiscuous mode [ 29.736654][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.739570][ T439] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.743766][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.768108][ T430] bridge_slave_1: entered allmulticast mode [ 29.774495][ T430] bridge_slave_1: entered promiscuous mode [ 29.804951][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 29.812390][ T45] usb 3-1: config 0 has an invalid interface number: 36 but max is 1 [ 29.820636][ T45] usb 3-1: config 0 has an invalid interface number: 129 but max is 1 [ 29.829042][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.839283][ T45] usb 3-1: config 0 has no interface number 0 [ 29.846303][ T45] usb 3-1: config 0 has no interface number 1 [ 29.852514][ T45] usb 3-1: config 0 interface 129 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 29.865580][ T45] usb 3-1: config 0 interface 36 has no altsetting 0 [ 29.872306][ T45] usb 3-1: config 0 interface 129 has no altsetting 0 [ 29.882241][ T45] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=cb.5d [ 29.891397][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.899668][ T45] usb 3-1: Product: syz [ 29.903915][ T45] usb 3-1: Manufacturer: syz [ 29.908766][ T45] usb 3-1: SerialNumber: syz [ 29.915319][ T45] usb 3-1: config 0 descriptor?? [ 29.932005][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.939124][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.946451][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.953495][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.980092][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.988097][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.007479][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.014559][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.030524][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.037647][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.062121][ T430] veth0_vlan: entered promiscuous mode [ 30.086067][ T430] veth1_macvtap: entered promiscuous mode [ 30.123370][ T420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.124061][ T420] rust_binder: Error while translating object. [ 30.131249][ T420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 30.138560][ T420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 30.159396][ T45] asix 3-1:0.36 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.178980][ T45] asix 3-1:0.36: probe with driver asix failed with error -71 [ 30.188324][ T45] asix 3-1:0.129 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.199000][ T45] asix 3-1:0.129: probe with driver asix failed with error -71 [ 30.210012][ T45] usb 3-1: USB disconnect, device number 2 [ 30.286266][ T463] rust_binder: Read failure Err(EAGAIN) in pid:33 [ 30.521440][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 30.521459][ T36] audit: type=1400 audit(1753600633.710:178): avc: denied { read } for pid=470 comm="syz.0.39" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.555561][ T36] audit: type=1400 audit(1753600633.710:179): avc: denied { open } for pid=470 comm="syz.0.39" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.588509][ T36] audit: type=1400 audit(1753600633.770:180): avc: denied { read append } for pid=474 comm="syz.0.40" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.613266][ T36] audit: type=1400 audit(1753600633.770:181): avc: denied { open } for pid=474 comm="syz.0.40" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.637937][ T36] audit: type=1400 audit(1753600633.770:182): avc: denied { ioctl } for pid=474 comm="syz.0.40" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.664167][ T36] audit: type=1400 audit(1753600633.780:183): avc: denied { name_bind } for pid=476 comm="syz.0.41" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.701191][ T36] audit: type=1400 audit(1753600633.780:184): avc: denied { remount } for pid=476 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.729887][ T484] can0: slcan on ptm0. [ 30.751981][ T36] audit: type=1400 audit(1753600633.920:185): avc: denied { bind } for pid=482 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.786911][ T65] usb 2-1: USB disconnect, device number 2 [ 30.791962][ T36] audit: type=1400 audit(1753600633.930:186): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.816024][ T36] audit: type=1400 audit(1753600633.930:187): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=609 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.885289][ T495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:55 [ 30.971099][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.981243][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.990664][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.997870][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.004353][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.011392][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.030160][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.037016][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.043479][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.050287][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.056976][ T388] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.075484][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.075515][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.082125][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.089230][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.095969][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.102493][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.118395][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.235117][ T388] usb 3-1: Using ep0 maxpacket: 32 [ 31.255668][ T388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.264549][ T388] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 31.273053][ T523] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 31.273361][ T388] usb 3-1: can't read configurations, error -61 [ 31.374956][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.424981][ T388] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.534940][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 31.550381][ T10] usb 5-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 1023 [ 31.567016][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 31.581955][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 31.591210][ T388] usb 3-1: Using ep0 maxpacket: 32 [ 31.599250][ T388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.609663][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.623210][ T388] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 31.641077][ T10] usb 5-1: Manufacturer: ␉ [ 31.647439][ T388] usb 3-1: can't read configurations, error -61 [ 31.658393][ T10] usb 5-1: SerialNumber: syz [ 31.665298][ T388] usb usb3-port1: attempt power cycle [ 31.695927][ T512] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 31.913232][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 11 proto 1 vid 0x0525 pid 0xA4A8 [ 31.925054][ T529] rust_binder: Write failure EFAULT in pid:64 [ 31.937906][ T10] usb 5-1: USB disconnect, device number 2 [ 31.968844][ T10] usblp0: removed [ 32.015234][ T388] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.045734][ T388] usb 3-1: Using ep0 maxpacket: 32 [ 32.052940][ T388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.077520][ T388] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 32.094968][ T388] usb 3-1: can't read configurations, error -61 [ 32.129527][ T543] block device autoloading is deprecated and will be removed. [ 32.138575][ T543] rust_binder: Failed copying remainder into alloc: EFAULT [ 32.138598][ T543] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 32.146350][ T543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.154627][ T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:71 [ 32.197191][ T548] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 32.224978][ T388] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.235074][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'. [ 32.266704][ T388] usb 3-1: Using ep0 maxpacket: 32 [ 32.273211][ T388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.282494][ T388] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 32.292071][ T388] usb 3-1: can't read configurations, error -61 [ 32.298728][ T388] usb usb3-port1: unable to enumerate USB device [ 32.380115][ T554] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 32.395636][ T554] random: crng reseeded on system resumption [ 32.426112][ T559] exFAT-fs (rnullb0): invalid boot record signature [ 32.447326][ T559] exFAT-fs (rnullb0): failed to read boot sector [ 32.454169][ T559] exFAT-fs (rnullb0): failed to recognize exfat type [ 32.492213][ T563] netlink: 'syz.1.65': attribute type 27 has an invalid length. [ 32.500765][ T563] rust_binder: Got transaction with invalid offset. [ 32.500807][ T563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.507728][ T563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 32.685790][ T45] rust_binder: 573: removing orphan mapping 0:4216 [ 32.701143][ T579] rust_binder: Error while translating object. [ 32.701174][ T579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.707960][ T579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 32.792642][ T583] 9pnet_fd: p9_fd_create_unix (583): problem connecting socket: ./file0: -111 [ 33.076368][ T604] ======================================================= [ 33.076368][ T604] WARNING: The mand mount option has been deprecated and [ 33.076368][ T604] and is ignored by this kernel. Remove the mand [ 33.076368][ T604] option from the mount to silence this warning. [ 33.076368][ T604] ======================================================= [ 33.282488][ T561] incfs_lookup_dentry err:-4 [ 33.287350][ T561] incfs: Can't find or create .index dir in ./file0 [ 33.294045][ T561] incfs: mount failed -4 [ 33.625875][ T622] exFAT-fs (rnullb0): invalid boot record signature [ 33.632522][ T622] exFAT-fs (rnullb0): failed to read boot sector [ 33.639054][ T622] exFAT-fs (rnullb0): failed to recognize exfat type [ 33.771498][ T627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:100 [ 33.877151][ T484] can0 (unregistered): slcan off ptm0. [ 33.934650][ T642] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 34.364966][ T388] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.392094][ T698] binder: Bad value for 'stats' [ 34.515990][ T388] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.530332][ T388] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.540443][ T388] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.547146][ T388] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 34.556284][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.572101][ T388] usb 2-1: config 0 descriptor?? [ 34.805008][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.853475][ T704] lo: entered promiscuous mode [ 34.860528][ T703] lo: left promiscuous mode [ 34.954993][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 34.963456][ T702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.972643][ T702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.982872][ T702] Zero length message leads to an empty skb [ 34.989837][ T708] netlink: 324 bytes leftover after parsing attributes in process `syz.2.97'. [ 35.004369][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.012781][ T45] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 35.020510][ T45] usb 1-1: can't read configurations, error -71 [ 35.181098][ T388] usb 2-1: string descriptor 0 read error: -22 [ 35.274328][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.274360][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.280914][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.295174][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.304172][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.321954][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.332186][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.388783][ T388] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input5 [ 35.425336][ T388] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 35.523225][ T724] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.538165][ T724] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 35.546923][ T724] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.554862][ T724] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 35.588120][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.613381][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.631359][ T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.631380][ T388] usb 2-1: USB disconnect, device number 3 [ 35.805008][ T61] usb 5-1: Using ep0 maxpacket: 16 [ 35.813979][ T721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.830721][ T721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.850789][ T61] usb 5-1: unable to get BOS descriptor or descriptor too short [ 35.865711][ T61] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 35.876093][ T61] usb 5-1: can't read configurations, error -71 [ 35.983505][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 36.254991][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.285006][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.374045][ T760] !@: renamed from xfrm0 (while UP) [ 36.374780][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 36.374797][ T36] audit: type=1326 audit(1753600639.555:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.4.113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ffb8e9a9 code=0x0 [ 36.425089][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 36.431369][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.434962][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 36.441793][ T65] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 36.448305][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.457005][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.465874][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 36.475360][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.488711][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.496307][ T65] usb 3-1: SerialNumber: syz [ 36.505088][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.517731][ T45] usb 2-1: SerialNumber: syz [ 36.524691][ T45] usb 2-1: bad CDC descriptors [ 36.716336][ T45] usb 3-1: USB disconnect, device number 7 [ 36.723349][ T36] audit: type=1326 audit(1753600639.905:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=750 comm="syz.2.108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2bb58e9a9 code=0x0 [ 36.751659][ T31] usb 2-1: USB disconnect, device number 4 [ 36.954978][ T65] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.084951][ T65] usb 1-1: device descriptor read/64, error -71 [ 37.324945][ T65] usb 1-1: device descriptor read/64, error -71 [ 37.428994][ T787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 37.564994][ T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.664990][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.704991][ T65] usb 1-1: device descriptor read/64, error -71 [ 37.815016][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 37.821613][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.830173][ T31] usb 2-1: config 1 has an invalid interface number: 81 but max is 0 [ 37.838313][ T31] usb 2-1: config 1 has no interface number 0 [ 37.845943][ T31] usb 2-1: New USB device found, idVendor=19d2, idProduct=6a61, bcdDevice=b0.c0 [ 37.855029][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.863012][ T31] usb 2-1: Product: syz [ 37.867200][ T31] usb 2-1: Manufacturer: syz [ 37.871810][ T31] usb 2-1: SerialNumber: syz [ 37.944989][ T65] usb 1-1: device descriptor read/64, error -71 [ 37.974945][ T45] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 38.055037][ T65] usb usb1-port1: attempt power cycle [ 38.080876][ T787] rust_binder: Read failure Err(EFAULT) in pid:101 [ 38.125970][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 38.143329][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 38.154863][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 38.165890][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.180247][ T45] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 38.189446][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.197663][ T45] usb 5-1: Product: syz [ 38.201853][ T45] usb 5-1: Manufacturer: syz [ 38.207168][ T45] usb 5-1: SerialNumber: syz [ 38.212517][ T45] usb 5-1: config 0 descriptor?? [ 38.217817][ T789] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 38.226484][ T45] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 38.394994][ T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.416073][ T65] usb 1-1: device descriptor read/8, error -71 [ 38.428459][ T45] usb 5-1: USB disconnect, device number 5 [ 38.546098][ T65] usb 1-1: device descriptor read/8, error -71 [ 38.785047][ T65] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.806010][ T65] usb 1-1: device descriptor read/8, error -71 [ 38.914952][ T781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.936503][ T65] usb 1-1: device descriptor read/8, error -71 [ 39.027014][ T798] 9pnet_fd: Insufficient options for proto=fd [ 39.055100][ T65] usb usb1-port1: unable to enumerate USB device [ 39.074427][ T802] capability: warning: `syz.4.125' uses 32-bit capabilities (legacy support in use) [ 39.197009][ T36] audit: type=1400 audit(1753600642.385:255): avc: denied { setopt } for pid=805 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.198354][ T810] tipc: Started in network mode [ 39.221286][ T810] tipc: Node identity 4, cluster identity 4711 [ 39.227757][ T810] tipc: Node number set to 4 [ 39.261596][ T813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.285008][ T36] audit: type=1400 audit(1753600642.465:256): avc: denied { read write } for pid=817 comm="syz.4.131" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.316194][ T36] audit: type=1400 audit(1753600642.465:257): avc: denied { open } for pid=817 comm="syz.4.131" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.340217][ T36] audit: type=1400 audit(1753600642.505:258): avc: denied { create } for pid=817 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 39.361454][ T36] audit: type=1400 audit(1753600642.505:259): avc: denied { write } for pid=817 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 39.382458][ T823] process 'syz.2.132' launched '/dev/fd/7/vcan0' with NULL argv: empty string added [ 39.392614][ T36] audit: type=1400 audit(1753600642.575:260): avc: denied { execute_no_trans } for pid=821 comm="syz.2.132" path="/26/vcan0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.594976][ T790] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.664949][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.724938][ T790] usb 5-1: device descriptor read/64, error -71 [ 39.764731][ T835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 39.787049][ T36] audit: type=1400 audit(1753600642.975:261): avc: denied { read } for pid=836 comm="syz.0.137" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.818719][ T36] audit: type=1400 audit(1753600642.995:262): avc: denied { open } for pid=836 comm="syz.0.137" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.824946][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 39.855941][ T45] usb 3-1: config 1 has an invalid interface number: 248 but max is 0 [ 39.864979][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.875281][ T45] usb 3-1: config 1 has no interface number 0 [ 39.883106][ T45] usb 3-1: config 1 interface 248 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 39.896742][ T45] usb 3-1: config 1 interface 248 has no altsetting 0 [ 39.904240][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.913436][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 39.921764][ T45] usb 3-1: SerialNumber: syz [ 39.930959][ T45] usb 3-1: bad CDC descriptors [ 39.984955][ T790] usb 5-1: device descriptor read/64, error -71 [ 40.130829][ T65] usb 3-1: USB disconnect, device number 8 [ 40.215006][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.244994][ T790] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 40.366044][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.374968][ T790] usb 5-1: device descriptor read/64, error -71 [ 40.376229][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.392102][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 40.401221][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.409350][ T9] usb 1-1: SerialNumber: syz [ 40.445064][ T31] usb 2-1: USB disconnect, device number 5 [ 40.457277][ T843] overlayfs: overlapping lowerdir path [ 40.520873][ T844] rust_binder: Write failure EFAULT in pid:104 [ 40.614992][ T790] usb 5-1: device descriptor read/64, error -71 [ 40.621639][ T9] usb 1-1: 0:2 : does not exist [ 40.640776][ T9] usb 1-1: USB disconnect, device number 9 [ 40.660133][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.688562][ T857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.689616][ T857] rust_binder: 94: no such ref 2 [ 40.755067][ T790] usb usb5-port1: attempt power cycle [ 40.826863][ T866] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.878699][ T867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 41.094989][ T790] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 41.126022][ T790] usb 5-1: device descriptor read/8, error -71 [ 41.259031][ T790] usb 5-1: device descriptor read/8, error -71 [ 41.495773][ T880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.495804][ T880] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 41.505344][ T790] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 41.524740][ T880] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:115 [ 41.553810][ T790] usb 5-1: device descriptor read/8, error -71 [ 41.591917][ T45] rust_binder: 0: removing orphan mapping 0:1048 [ 41.604943][ T388] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.705985][ T790] usb 5-1: device descriptor read/8, error -71 [ 41.759098][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 41.759116][ T36] audit: type=1400 audit(1753600644.945:268): avc: denied { write } for pid=891 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.825059][ T790] usb usb5-port1: unable to enumerate USB device [ 42.111245][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.118458][ T894] incfs_lookup_dentry err:-13 [ 42.133349][ T894] incfs: Can't find or create .index dir in ./bus [ 42.143527][ T894] incfs: mount failed -13 [ 42.153932][ T894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.492426][ T904] rust_binder: Write failure EINVAL in pid:79 [ 42.569230][ T36] audit: type=1400 audit(1753600645.755:269): avc: denied { getopt } for pid=910 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.595880][ T911] bpf: Bad value for 'gid' [ 42.884939][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 43.034938][ T9] usb 5-1: device descriptor read/64, error -71 [ 43.274987][ T9] usb 5-1: device descriptor read/64, error -71 [ 43.514969][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 43.664940][ T9] usb 5-1: device descriptor read/64, error -71 [ 43.914948][ T9] usb 5-1: device descriptor read/64, error -71 [ 44.025100][ T9] usb usb5-port1: attempt power cycle [ 44.114937][ T895] Bluetooth: hci0: command 0x1003 tx timeout [ 44.121051][ T781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.162208][ T916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.211095][ T919] fuse: Unknown parameter '~aXls00000000000000000000' [ 44.320459][ T36] audit: type=1400 audit(1753600647.505:270): avc: denied { write } for pid=926 comm="syz.2.165" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.352640][ T36] audit: type=1400 audit(1753600647.525:271): avc: denied { remove_name } for pid=926 comm="syz.2.165" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.375252][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 44.397737][ T36] audit: type=1400 audit(1753600647.525:272): avc: denied { unlink } for pid=926 comm="syz.2.165" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.406782][ T9] usb 5-1: device descriptor read/8, error -71 [ 44.438368][ T36] audit: type=1326 audit(1753600647.625:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bb58e9a9 code=0x7ffc0000 [ 44.478544][ T36] audit: type=1326 audit(1753600647.625:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bb58e9a9 code=0x7ffc0000 [ 44.512374][ T936] veth0_to_hsr: entered allmulticast mode [ 44.526941][ T936] veth0_to_hsr: left allmulticast mode [ 44.542708][ T36] audit: type=1326 audit(1753600647.625:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd2bb58e9a9 code=0x7ffc0000 [ 44.558538][ T938] netlink: 324 bytes leftover after parsing attributes in process `syz.2.170'. [ 44.574032][ T36] audit: type=1326 audit(1753600647.625:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bb58e9a9 code=0x7ffc0000 [ 44.598585][ T36] audit: type=1326 audit(1753600647.625:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bb58e9a9 code=0x7ffc0000 [ 44.621969][ T9] usb 5-1: device descriptor read/8, error -71 [ 44.667082][ T944] syz.2.172 (944): /proc/943/oom_adj is deprecated, please use /proc/943/oom_score_adj instead. [ 44.675465][ T946] binder: Unknown parameter '0xffffffffffffffff' [ 44.864996][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 44.885969][ T9] usb 5-1: device descriptor read/8, error -71 [ 45.015911][ T9] usb 5-1: device descriptor read/8, error -71 [ 45.130460][ T9] usb usb5-port1: unable to enumerate USB device [ 45.185989][ T960] input: syz1 as /devices/virtual/input/input7 [ 45.356088][ T964] 9pnet_fd: Insufficient options for proto=fd [ 45.634939][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.735126][ T978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 45.796935][ T45] usb 3-1: device descriptor read/64, error -71 [ 45.987939][ T992] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 46.005140][ T992] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 46.023998][ T992] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 46.041825][ T45] usb 3-1: device descriptor read/64, error -71 [ 46.048250][ T992] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 46.074962][ T790] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 46.245717][ T790] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.253812][ T790] usb 5-1: not running at top speed; connect to a high speed hub [ 46.269776][ T790] usb 5-1: config 10 has an invalid interface number: 50 but max is 0 [ 46.278245][ T790] usb 5-1: config 10 has no interface number 0 [ 46.284460][ T790] usb 5-1: config 10 interface 50 has no altsetting 0 [ 46.291735][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.310680][ T790] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=43.2d [ 46.321865][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.334930][ T790] usb 5-1: Product: syz [ 46.339149][ T790] usb 5-1: Manufacturer: syz [ 46.353927][ T790] usb 5-1: SerialNumber: syz [ 46.464971][ T45] usb 3-1: device descriptor read/64, error -71 [ 46.592190][ T790] usbserial_generic 5-1:10.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 46.592657][ T1011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.614263][ T790] usbserial_generic 5-1:10.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 46.642082][ T790] usbserial_generic 5-1:10.50: device has no bulk endpoints [ 46.665600][ T790] usb 5-1: USB disconnect, device number 14 [ 46.669682][ T1013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.193'. [ 46.690670][ T1013] netlink: 59 bytes leftover after parsing attributes in process `syz.0.193'. [ 46.704941][ T1013] netlink: 59 bytes leftover after parsing attributes in process `syz.0.193'. [ 46.744961][ T45] usb 3-1: device descriptor read/64, error -71 [ 46.820251][ T1017] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 46.855174][ T45] usb usb3-port1: attempt power cycle [ 46.876924][ T1019] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 47.167275][ T65] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 47.200066][ T1027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 47.225194][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.275785][ T45] usb 3-1: device descriptor read/8, error -71 [ 47.324970][ T65] usb 1-1: device descriptor read/64, error -71 [ 47.407126][ T45] usb 3-1: device descriptor read/8, error -71 [ 47.564941][ T65] usb 1-1: device descriptor read/64, error -71 [ 47.644976][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 47.675959][ T45] usb 3-1: device descriptor read/8, error -71 [ 47.807200][ T45] usb 3-1: device descriptor read/8, error -71 [ 47.814932][ T65] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 47.915086][ T45] usb usb3-port1: unable to enumerate USB device [ 47.954950][ T65] usb 1-1: device descriptor read/64, error -71 [ 48.194997][ T65] usb 1-1: device descriptor read/64, error -71 [ 48.285279][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 48.285299][ T36] audit: type=1400 audit(1753600651.475:299): avc: denied { ioctl } for pid=1040 comm="syz.2.203" path="socket:[8299]" dev="sockfs" ino=8299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.305238][ T65] usb usb1-port1: attempt power cycle [ 48.323245][ T36] audit: type=1400 audit(1753600651.515:300): avc: denied { bind } for pid=1040 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.367836][ T36] audit: type=1400 audit(1753600651.555:301): avc: denied { setopt } for pid=1040 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.397402][ T36] audit: type=1400 audit(1753600651.555:302): avc: denied { write } for pid=1040 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.600990][ T1048] veth1_vlan: mtu greater than device maximum [ 48.607268][ T36] audit: type=1400 audit(1753600651.785:303): avc: denied { ioctl } for pid=1047 comm="syz.2.206" path="socket:[8377]" dev="sockfs" ino=8377 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.633778][ T1048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 48.664993][ T65] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 48.705915][ T65] usb 1-1: device descriptor read/8, error -71 [ 48.839986][ T65] usb 1-1: device descriptor read/8, error -71 [ 49.085013][ T65] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 49.116199][ T36] audit: type=1400 audit(1753600652.305:304): avc: denied { append } for pid=1064 comm="syz.4.210" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 49.129046][ T65] usb 1-1: device descriptor read/8, error -71 [ 49.264968][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.285949][ T65] usb 1-1: device descriptor read/8, error -71 [ 49.404948][ T65] usb usb1-port1: unable to enumerate USB device [ 49.414984][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 49.425542][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.444932][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.462308][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.475340][ T31] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 49.486442][ T31] usb 3-1: Product: syz [ 49.490660][ T31] usb 3-1: Manufacturer: syz [ 49.499643][ T31] hub 3-1:4.0: USB hub found [ 49.500187][ T1078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1078 comm=syz.4.213 [ 49.750551][ T36] audit: type=1400 audit(1753600652.935:305): avc: denied { connect } for pid=1055 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.774976][ T65] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 49.876939][ T31] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 49.905296][ T31] usb 3-1: USB disconnect, device number 13 [ 49.934958][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 49.943396][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 49.952289][ T65] usb 5-1: config 10 has an invalid interface number: 63 but max is 2 [ 49.968295][ T1083] fuse: Bad value for 'user_id' [ 49.973202][ T1083] fuse: Bad value for 'user_id' [ 49.978396][ T65] usb 5-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 49.988789][ T65] usb 5-1: config 10 has an invalid interface number: 88 but max is 2 [ 49.997617][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.997646][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 50.007088][ T65] usb 5-1: config 10 has an invalid interface association descriptor of length 4, skipping [ 50.033682][ T65] usb 5-1: config 10 has an invalid interface number: 44 but max is 2 [ 50.044920][ T65] usb 5-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 50.054227][ T65] usb 5-1: config 10 has no interface number 0 [ 50.067032][ T65] usb 5-1: config 10 has no interface number 1 [ 50.073482][ T65] usb 5-1: config 10 has no interface number 2 [ 50.085877][ T65] usb 5-1: config 10 interface 63 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 50.097107][ T65] usb 5-1: config 10 interface 63 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 50.108076][ T65] usb 5-1: config 10 interface 63 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 50.126450][ T65] usb 5-1: config 10 interface 63 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 50.138315][ T65] usb 5-1: config 10 interface 88 altsetting 71 bulk endpoint 0x3 has invalid maxpacket 1024 [ 50.148720][ T65] usb 5-1: config 10 interface 88 altsetting 71 has a duplicate endpoint with address 0xC, skipping [ 50.159703][ T65] usb 5-1: config 10 interface 88 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 50.170790][ T65] usb 5-1: config 10 interface 88 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 50.181938][ T65] usb 5-1: config 10 interface 88 altsetting 71 has a duplicate endpoint with address 0x1, skipping [ 50.192909][ T65] usb 5-1: config 10 interface 88 altsetting 71 has an endpoint descriptor with address 0x29, changing to 0x9 [ 50.205028][ T65] usb 5-1: config 10 interface 88 altsetting 71 endpoint 0x9 has an invalid bInterval 229, changing to 7 [ 50.216681][ T65] usb 5-1: config 10 interface 88 altsetting 71 endpoint 0x9 has invalid maxpacket 25921, setting to 1024 [ 50.228202][ T65] usb 5-1: config 10 interface 88 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 50.239356][ T65] usb 5-1: config 10 interface 88 altsetting 71 has a duplicate endpoint with address 0x6, skipping [ 50.250412][ T65] usb 5-1: config 10 interface 88 altsetting 71 has a duplicate endpoint with address 0x8F, skipping [ 50.261418][ T65] usb 5-1: config 10 interface 88 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 50.272530][ T65] usb 5-1: config 10 interface 88 altsetting 71 has a duplicate endpoint with address 0x1, skipping [ 50.283435][ T65] usb 5-1: config 10 interface 88 altsetting 71 has a duplicate endpoint with address 0xA, skipping [ 50.294282][ T65] usb 5-1: config 10 interface 88 altsetting 71 has a duplicate endpoint with address 0xB, skipping [ 50.305242][ T65] usb 5-1: config 10 interface 88 altsetting 71 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 50.307383][ T36] audit: type=1400 audit(1753600653.495:306): avc: denied { name_bind } for pid=1089 comm="syz.0.217" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 50.318643][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 50.350253][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 50.362562][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0x1, skipping [ 50.374684][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 50.385669][ T65] usb 5-1: config 10 interface 44 altsetting 129 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 50.404579][ T1090] kvm: pic: non byte write [ 50.447661][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0x1, skipping [ 50.461136][ T65] usb 5-1: config 10 interface 44 altsetting 129 has an endpoint descriptor with address 0x6B, changing to 0xB [ 50.473137][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 50.484309][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 50.504724][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 50.516057][ T65] usb 5-1: config 10 interface 44 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 50.527192][ T65] usb 5-1: config 10 interface 44 altsetting 129 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 50.543487][ T65] usb 5-1: config 10 interface 63 has no altsetting 0 [ 50.550443][ T65] usb 5-1: config 10 interface 88 has no altsetting 0 [ 50.557535][ T65] usb 5-1: config 10 interface 44 has no altsetting 0 [ 50.558399][ T36] audit: type=1400 audit(1753600653.755:307): avc: denied { setopt } for pid=1094 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.567254][ T65] usb 5-1: Dual-Role OTG device on HNP port [ 50.609416][ T65] usb 5-1: New USB device found, idVendor=19d2, idProduct=1082, bcdDevice=91.bb [ 50.634972][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.645949][ T65] usb 5-1: Product: й [ 50.663382][ T65] usb 5-1: Manufacturer: ш [ 50.774942][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.904956][ T9] usb 3-1: device descriptor read/64, error -71 [ 50.916007][ T1080] rust_binder: Write failure EFAULT in pid:130 [ 50.919153][ T65] usb-storage 5-1:10.88: USB Mass Storage device detected [ 51.101658][ T65] usb 5-1: USB disconnect, device number 15 [ 51.154999][ T9] usb 3-1: device descriptor read/64, error -71 [ 51.394982][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 51.486792][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.534959][ T9] usb 3-1: device descriptor read/64, error -71 [ 51.545386][ T1110] rust_binder: Write failure EFAULT in pid:234 [ 51.618347][ T36] audit: type=1400 audit(1753600654.805:308): avc: denied { ioctl } for pid=1119 comm="syz.0.227" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.791202][ T1127] netlink: 'syz.0.229': attribute type 46 has an invalid length. [ 51.794980][ T9] usb 3-1: device descriptor read/64, error -71 [ 51.799124][ T1127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.229'. [ 51.925026][ T9] usb usb3-port1: attempt power cycle [ 51.933029][ T1137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 51.982931][ T1141] fuse: Bad value for 'user_id' [ 51.987981][ T1141] fuse: Bad value for 'user_id' [ 51.993359][ T1141] exFAT-fs (rnullb0): invalid boot record signature [ 52.000069][ T1141] exFAT-fs (rnullb0): failed to read boot sector [ 52.006551][ T1141] exFAT-fs (rnullb0): failed to recognize exfat type [ 52.264995][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 52.305924][ T9] usb 3-1: device descriptor read/8, error -71 [ 52.435908][ T9] usb 3-1: device descriptor read/8, error -71 [ 52.684939][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 52.715936][ T9] usb 3-1: device descriptor read/8, error -71 [ 52.847442][ T9] usb 3-1: device descriptor read/8, error -71 [ 52.964996][ T9] usb usb3-port1: unable to enumerate USB device [ 53.554946][ T781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.561318][ T895] Bluetooth: hci0: command 0x1003 tx timeout [ 53.650191][ T13] bridge_slave_1: left allmulticast mode [ 53.656974][ T13] bridge_slave_1: left promiscuous mode [ 53.662725][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.670931][ T13] bridge_slave_0: left allmulticast mode [ 53.685799][ T13] bridge_slave_0: left promiscuous mode [ 53.695432][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.754975][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 53.850820][ T13] veth1_macvtap: left promiscuous mode [ 53.866223][ T13] veth0_vlan: left promiscuous mode [ 53.880714][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 53.880732][ T36] audit: type=1400 audit(1753600657.065:316): avc: denied { mounton } for pid=1165 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.945687][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 53.952077][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.964584][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.973942][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.987837][ T45] usb 1-1: SerialNumber: syz [ 54.001002][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 54.007420][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 54.085713][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.092905][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.101705][ T1165] bridge_slave_0: entered allmulticast mode [ 54.108778][ T1165] bridge_slave_0: entered promiscuous mode [ 54.116421][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.123592][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.130997][ T1165] bridge_slave_1: entered allmulticast mode [ 54.138155][ T1165] bridge_slave_1: entered promiscuous mode [ 54.201365][ T1159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.209958][ T1159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.231822][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.238931][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.246276][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.253328][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.279968][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.287650][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.297853][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.304946][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.325486][ T9] usb 1-1: USB disconnect, device number 15 [ 54.327768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.338514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.372115][ T1165] veth0_vlan: entered promiscuous mode [ 54.399363][ T1165] veth1_macvtap: entered promiscuous mode [ 54.429406][ T36] audit: type=1400 audit(1753600657.615:317): avc: denied { mount } for pid=1165 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.475607][ T36] audit: type=1400 audit(1753600657.635:318): avc: denied { mounton } for pid=1165 comm="syz-executor" path="/root/syzkaller.J6CI3W/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.534942][ T36] audit: type=1400 audit(1753600657.635:319): avc: denied { unmount } for pid=1165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.571746][ T36] audit: type=1400 audit(1753600657.665:320): avc: denied { accept } for pid=1180 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.064937][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 55.235508][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 55.246424][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 55.258275][ T31] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 55.278776][ T31] usb 1-1: config 0 has no interface number 0 [ 55.294929][ T31] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid maxpacket 51666, setting to 64 [ 55.315716][ T31] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.330146][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 55.349503][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 55.360673][ T36] audit: type=1400 audit(1753600658.545:321): avc: denied { accept } for pid=1191 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.384927][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.411224][ T31] usb 1-1: Product: syz [ 55.415935][ T31] usb 1-1: Manufacturer: syz [ 55.420646][ T31] usb 1-1: SerialNumber: syz [ 55.432840][ T31] usb 1-1: config 0 descriptor?? [ 55.480293][ T36] audit: type=1400 audit(1753600658.665:322): avc: denied { ioctl } for pid=1196 comm="syz.2.250" path="socket:[9000]" dev="sockfs" ino=9000 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.568072][ T1204] rust_binder: 1202 RLIMIT_NICE not set [ 55.648188][ T36] audit: type=1400 audit(1753600658.835:323): avc: denied { audit_write } for pid=1189 comm="syz.0.247" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.649475][ T1190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.653941][ T36] audit: type=1400 audit(1753600658.835:324): avc: denied { unlink } for pid=1189 comm="syz.0.247" name="#3" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.708438][ T36] audit: type=1400 audit(1753600658.835:325): avc: denied { getattr } for pid=1189 comm="syz.0.247" name="/" dev="incremental-fs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.735812][ T31] ipheth 1-1:0.196: Unable to find endpoints [ 55.752032][ T31] usb 1-1: USB disconnect, device number 16 [ 56.396977][ T1216] mmap: syz.2.257 (1216) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.441702][ T1219] 9pnet_fd: Insufficient options for proto=fd [ 56.529995][ T1228] 9pnet_fd: Insufficient options for proto=fd [ 56.780797][ T1230] 9pnet: Unknown protocol version 9p200ltuid= [ 56.817748][ T13] bridge_slave_1: left allmulticast mode [ 56.823539][ T13] bridge_slave_1: left promiscuous mode [ 56.829300][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.837663][ T13] bridge_slave_0: left allmulticast mode [ 56.843341][ T13] bridge_slave_0: left promiscuous mode [ 56.849222][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.934702][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.951869][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.966346][ T1241] bridge_slave_0: entered allmulticast mode [ 56.980426][ T1241] bridge_slave_0: entered promiscuous mode [ 57.000495][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.010879][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.019701][ T1267] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.027788][ T1241] bridge_slave_1: entered allmulticast mode [ 57.041565][ T1241] bridge_slave_1: entered promiscuous mode [ 57.056094][ T13] veth1_macvtap: left promiscuous mode [ 57.061715][ T13] veth0_vlan: left promiscuous mode [ 57.261062][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.268182][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.275559][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.282616][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.310122][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.318044][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.329286][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.336392][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.345735][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.352791][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.404000][ T1241] veth0_vlan: entered promiscuous mode [ 57.418557][ T1241] veth1_macvtap: entered promiscuous mode [ 57.619054][ T1290] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.619163][ T1290] rust_binder: Read failure Err(EFAULT) in pid:7 [ 57.983437][ T1310] binder: Bad value for 'defcontext' [ 58.193054][ T1316] rust_binder: 1315 RLIMIT_NICE not set [ 58.194174][ T1315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.199791][ T1315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 58.258243][ T1318] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 58.267461][ T1318] rust_binder: Read failure Err(EFAULT) in pid:12 [ 58.299503][ T1320] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.313204][ T1320] bridge0: port 3(veth0_to_bridge) entered disabled state [ 58.320418][ T1320] veth0_to_bridge: entered allmulticast mode [ 58.326950][ T1320] veth0_to_bridge: entered promiscuous mode [ 58.333109][ T1320] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.345424][ T1320] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.352609][ T1320] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 58.360851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.372948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.385022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.397091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.409167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.421258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.433315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.445389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.458412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.470483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.505254][ T1327] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 63.238275][ C1] net_ratelimit: 124121 callbacks suppressed [ 63.238297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.238448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.244556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.257084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.268598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.280990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.292603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.304944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.316437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.328860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.314924][ C0] sched: DL replenish lagged too much [ 68.153754][ C1] net_ratelimit: 92677 callbacks suppressed [ 68.153779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.154065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.159814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.171839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.183733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.195814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.207733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.220018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.231490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.243544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.094848][ C1] net_ratelimit: 102565 callbacks suppressed [ 73.094874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.094913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.101008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.113122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.125089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.137445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.149002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.160995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.172968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.185094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.054827][ C1] net_ratelimit: 107796 callbacks suppressed [ 78.054850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.054883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.061020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.073308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.084952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.096853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.108792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.120896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.132691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.144826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.243155][ T1342] loop7: detected capacity change from 0 to 7 [ 82.921191][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 83.028506][ C1] net_ratelimit: 108467 callbacks suppressed [ 83.028530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.028608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.034638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.046702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.058562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.070630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.082456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.094378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.106396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.118481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.281875][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.291097][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.342362][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.351757][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.468261][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.477557][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.639222][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.648522][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.659920][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.669111][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 88.012188][ C1] net_ratelimit: 105319 callbacks suppressed [ 88.012212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.012472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.018338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 88.030245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.042120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.054288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.066625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.078582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.090452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.102400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.003106][ C1] net_ratelimit: 114194 callbacks suppressed [ 93.003131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.003150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.009276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.021177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.033071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.045202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.057109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.069039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.080898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.092865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.999276][ C1] net_ratelimit: 111162 callbacks suppressed [ 97.999299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.999321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.005562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.017685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.029528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.041500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.053424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.065621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.077366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.089586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.999257][ C1] net_ratelimit: 121440 callbacks suppressed [ 102.999282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.999349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.005406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.017504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.029415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.041284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.053299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.065275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.079143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.089446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.002045][ C1] net_ratelimit: 120831 callbacks suppressed [ 108.002068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.002137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.008213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 108.020412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.032175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 108.044159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.056091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 108.068056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.080055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 108.092059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.006741][ C1] net_ratelimit: 117630 callbacks suppressed [ 113.006765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.006770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.007030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.012883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.025056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.036798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.048742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.060687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.072520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.084489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.012914][ C1] net_ratelimit: 120508 callbacks suppressed [ 118.012937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 118.013005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.019481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 118.031523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.043336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.055343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.067215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.079195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.091110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.103200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.020215][ C1] net_ratelimit: 121033 callbacks suppressed [ 123.020254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.020255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.020594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.026455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.038503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.050421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.062336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.074294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.086311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.098124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 128.028163][ C0] net_ratelimit: 120975 callbacks suppressed [ 128.028187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.028227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 128.034550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.046257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.058593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.070152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.082096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.093979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.105836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.117811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.036746][ C1] net_ratelimit: 120119 callbacks suppressed [ 133.036770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.036862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.042894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.055028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.066783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.078969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.091003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.103139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.114918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.127070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.045707][ C1] net_ratelimit: 120819 callbacks suppressed [ 138.045731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.045960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.051821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.063851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.075730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.087699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.099723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.111591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.123474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.135550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.054950][ C1] net_ratelimit: 119598 callbacks suppressed [ 143.054973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.054998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.061096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 143.073179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.084916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.096896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.108815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.120926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.132742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 143.144948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.064409][ C0] net_ratelimit: 113633 callbacks suppressed [ 148.064432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.064440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.064524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 148.070549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.082461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 148.094390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.106337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 148.118723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.130513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 148.142528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.073968][ C0] net_ratelimit: 105921 callbacks suppressed [ 153.073991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.074017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.080110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.092107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 153.104003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.116100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.128470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.140179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.152087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.163973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.083721][ C1] net_ratelimit: 116304 callbacks suppressed [ 158.083746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.083820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.089855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 158.101897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.113729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.125871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.137614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.149529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.161448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 158.173592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.093527][ C1] net_ratelimit: 121766 callbacks suppressed [ 163.093550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.093775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.099704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.111698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.123564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.135539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.147534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.159535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.171395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.183348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.103355][ C1] net_ratelimit: 118697 callbacks suppressed [ 168.103379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.103601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.109480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.121490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.133315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.145389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.157177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 168.169121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.180985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.193311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.113209][ C1] net_ratelimit: 117841 callbacks suppressed [ 173.113233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 173.113261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.119331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.131352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.143322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.155214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.167221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.179442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.191101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.203155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.123158][ C1] net_ratelimit: 114980 callbacks suppressed [ 178.123182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.123262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.129308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 178.141578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.153284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.165505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.177471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.189565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.201313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.213629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.133081][ C1] net_ratelimit: 119740 callbacks suppressed [ 183.133105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 183.133163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.139242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.151559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.163282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.175459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.187051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.199058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.210888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.222852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.143037][ C1] net_ratelimit: 115710 callbacks suppressed [ 188.143061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 188.143088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.149169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.161470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.173111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.185005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.196893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 188.208762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.220728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.232799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.285989][ T37] INFO: task syz.5.291:1326 blocked for more than 123 seconds. [ 189.701586][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 189.701609][ T36] audit: type=1400 audit(1753600793.377:337): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2771]" dev="pipefs" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 189.881422][ T37] Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 [ 190.419793][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 190.428581][ T37] task:syz.5.291 state:D stack:0 pid:1326 tgid:1326 ppid:1165 flags:0x00004004 [ 190.438843][ T37] Call Trace: [ 190.442146][ T37] [ 190.445115][ T37] __schedule+0x1322/0x1df0 [ 190.449658][ T37] ? __sched_text_start+0x10/0x10 [ 190.454763][ T37] ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10 [ 190.461995][ T37] ? __call_rcu_common+0x41f/0x700 [ 190.467165][ T37] schedule+0xc6/0x240 [ 190.471279][ T37] schedule_timeout+0xb2/0x3a0 [ 190.476088][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 190.481495][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 190.487099][ T37] ? __percpu_ref_switch_mode+0x345/0x5f0 [ 190.492858][ T37] wait_for_common+0x359/0x630 [ 190.497687][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 190.503624][ T37] ? wait_for_completion+0x40/0x40 [ 190.508778][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 190.514724][ T37] ? percpu_ref_kill_and_confirm+0xf4/0x220 [ 190.520702][ T37] ? kill_ioctx+0x2b0/0x3d0 [ 190.525271][ T37] wait_for_completion+0x1c/0x40 [ 190.530242][ T37] exit_aio+0x2df/0x3b0 [ 190.534454][ T37] ? __cfi_exit_aio+0x10/0x10 [ 190.539169][ T37] ? uprobe_clear_state+0x2cd/0x340 [ 190.544428][ T37] __mmput+0x30/0x320 [ 190.548427][ T37] ? mmput+0x4d/0x170 [ 190.552431][ T37] mmput+0x55/0x170 [ 190.556277][ T37] do_exit+0x918/0x2630 [ 190.560458][ T37] ? __kasan_check_write+0x18/0x20 [ 190.565622][ T37] ? __cfi_do_exit+0x10/0x10 [ 190.570237][ T37] ? futex_wake+0x63a/0x900 [ 190.574786][ T37] ? __kasan_check_write+0x18/0x20 [ 190.579927][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 190.585083][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 190.590660][ T37] do_group_exit+0x22a/0x300 [ 190.595303][ T37] ? __kasan_check_write+0x18/0x20 [ 190.600447][ T37] get_signal+0x139d/0x14f0 [ 190.605010][ T37] arch_do_signal_or_restart+0x96/0x720 [ 190.610587][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 190.616808][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 190.622292][ T37] do_syscall_64+0x64/0xf0 [ 190.626750][ T37] ? clear_bhb_loop+0x50/0xa0 [ 190.631462][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 190.637416][ T37] RIP: 0033:0x7f0aac58e9a9 [ 190.641870][ T37] RSP: 002b:00007ffe762126a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 190.650332][ T37] RAX: 0000000000000001 RBX: 00007f0aac7b5fa8 RCX: 00007f0aac58e9a9 [ 190.658349][ T37] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0aac7b5fa8 [ 190.666407][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000e7621299f [ 190.674455][ T37] R10: 00007f0aac7b5fa0 R11: 0000000000000246 R12: 00007f0aac7b5fac [ 190.682536][ T37] R13: 00007f0aac7b5fa0 R14: 0000000000001d11 R15: 0000000000000008 [ 190.690561][ T37] [ 190.713922][ T37] NMI backtrace for cpu 0 [ 190.713947][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 190.713982][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.713996][ T37] Call Trace: [ 190.714004][ T37] [ 190.714012][ T37] __dump_stack+0x21/0x30 [ 190.714044][ T37] dump_stack_lvl+0x10c/0x190 [ 190.714071][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.714100][ T37] dump_stack+0x19/0x20 [ 190.714126][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 190.714153][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 190.714177][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 190.714201][ T37] ? sched_show_task+0x379/0x560 [ 190.714228][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 190.714251][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 190.714276][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 190.714302][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 190.714329][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 190.714355][ T37] watchdog+0xd8f/0xed0 [ 190.714383][ T37] ? __cfi_watchdog+0x10/0x10 [ 190.714415][ T37] ? __kasan_check_read+0x15/0x20 [ 190.714444][ T37] ? __kthread_parkme+0x138/0x180 [ 190.714475][ T37] ? schedule+0xc6/0x240 [ 190.714503][ T37] kthread+0x2ca/0x370 [ 190.714523][ T37] ? __cfi_watchdog+0x10/0x10 [ 190.714549][ T37] ? __cfi_kthread+0x10/0x10 [ 190.714569][ T37] ret_from_fork+0x67/0xa0 [ 190.714596][ T37] ? __cfi_kthread+0x10/0x10 [ 190.714616][ T37] ret_from_fork_asm+0x1a/0x30 [ 190.714649][ T37] [ 190.714657][ T37] Sending NMI from CPU 0 to CPUs 1: [ 190.915348][ C1] NMI backtrace for cpu 1 [ 190.915364][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 190.915387][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.915398][ C1] RIP: 0010:ip6_rcv_finish+0x160/0x3c0 [ 190.915420][ C1] Code: 16 e8 34 da a9 fc 43 80 7c 25 00 00 75 1e eb 24 e8 25 da a9 fc eb 05 e8 1e da a9 fc 48 89 df e8 56 20 04 00 43 80 7c 25 00 00 <74> 08 4c 89 f7 e8 66 e0 ff fc 4d 8b 36 49 83 e6 fe 49 83 c6 28 4c [ 190.915434][ C1] RSP: 0018:ffffc90000230ac8 EFLAGS: 00000246 [ 190.915450][ C1] RAX: c11c8bc7cab7e800 RBX: ffff8881262363c0 RCX: ffff888113bddc81 [ 190.915463][ C1] RDX: ffff888126236441 RSI: 0000000000800000 RDI: 0000000000000000 [ 190.915474][ C1] RBP: ffffc90000230af0 R08: 0000000000000000 R09: ffff8881262363c0 [ 190.915485][ C1] R10: ffffc900002306b0 R11: fffff520000460da R12: dffffc0000000000 [ 190.915497][ C1] R13: 1ffff11024c46c83 R14: ffff888126236418 R15: 0000000000000000 [ 190.915509][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 190.915536][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.915547][ C1] CR2: 00007f8f126e7d60 CR3: 000000010b78c000 CR4: 00000000003526b0 [ 190.915562][ C1] Call Trace: [ 190.915567][ C1] [ 190.915574][ C1] ipv6_rcv+0xed/0x220 [ 190.915589][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 190.915604][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 190.915617][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 190.915642][ C1] ? __cfi_virtnet_poll+0x10/0x10 [ 190.915664][ C1] process_backlog+0x44b/0xae0 [ 190.915686][ C1] __napi_poll+0xd0/0x610 [ 190.915703][ C1] net_rx_action+0x584/0xce0 [ 190.915723][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 190.915741][ C1] ? sched_clock+0x44/0x60 [ 190.915758][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 190.915777][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 190.915793][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 190.915812][ C1] handle_softirqs+0x1ab/0x630 [ 190.915835][ C1] __do_softirq+0xf/0x16 [ 190.915854][ C1] do_softirq+0xa6/0x100 [ 190.915874][ C1] [ 190.915879][ C1] [ 190.915884][ C1] ? __cfi_do_softirq+0x10/0x10 [ 190.915905][ C1] ? __kasan_slab_free+0x6a/0x80 [ 190.915928][ C1] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 190.915944][ C1] __local_bh_enable_ip+0x74/0x80 [ 190.915964][ C1] rcu_do_batch+0x5c6/0xd20 [ 190.915984][ C1] ? rcu_core+0xd20/0xd20 [ 190.916002][ C1] ? __kasan_check_write+0x18/0x20 [ 190.916020][ C1] ? _raw_spin_lock+0x8c/0x120 [ 190.916038][ C1] ? __kasan_check_read+0x15/0x20 [ 190.916057][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 190.916077][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 190.916098][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 190.916117][ C1] ? __kasan_check_write+0x18/0x20 [ 190.916136][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 190.916154][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 190.916172][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 190.916190][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 190.916213][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 190.916235][ C1] ? __kasan_check_read+0x15/0x20 [ 190.916254][ C1] ? __kthread_parkme+0x138/0x180 [ 190.916276][ C1] ? schedule+0xc6/0x240 [ 190.916295][ C1] kthread+0x2ca/0x370 [ 190.916309][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 190.916328][ C1] ? __cfi_kthread+0x10/0x10 [ 190.916342][ C1] ret_from_fork+0x67/0xa0 [ 190.916380][ C1] ? __cfi_kthread+0x10/0x10 [ 190.916395][ C1] ret_from_fork_asm+0x1a/0x30 [ 190.916419][ C1] [ 193.153024][ C1] net_ratelimit: 105899 callbacks suppressed [ 193.153046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 193.153102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.159154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 193.171172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.183077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 193.195018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.207028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 193.218991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.230879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.242876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.163009][ C1] net_ratelimit: 118076 callbacks suppressed [ 198.163034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 198.163130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.169124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.181201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.193299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.205327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.217082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:76:7f:c2:34:20, vlan:0) [ 198.228969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.240820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.252814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)