last executing test programs: 9m27.573610484s ago: executing program 2 (id=71): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x9, 0x8804}) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x200000c4) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6fd523b, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2c1fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x2]}}) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000640)={0x40a6, {{0x2, 0x4e20, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c059c0b0000000000010902240001008c99b109040000020300010009210101000132050009058103"], 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x12, 0x1, 0x4, "6a4a42aba98b2f07359d3272d6e8ce294686c732c24a39cc509c79ad4bf6de70b02c91ffbe04916d065f1681d04be078c2e4c1014ec966a8158d76d7aa63c0d9", "ce5862f532d5bff5ff013807abc3406dfe731e87f50cd5bb091fff519936869fd5295ddc045503fe0b01150b5b5ebf1561daa3dc633d717f3f7a3d1f1edac2f2", "c0c045fd3dfd710ca2562c2d8e828bb61dea84761cff87e28f9c8a246fa4f376", [0x8, 0xa]}) 9m27.570080704s ago: executing program 2 (id=72): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x957acd2f5556811e}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0xffffffffffffffff, 0x5210c0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x2, 0x7}) 9m27.554122975s ago: executing program 2 (id=74): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x2000000, @empty, 0x3}}}, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000200)="360f0fc70dbaf80c66b80471ec8b66efbafc0cb83000ef0f1644dd26360fc798000066b9c709000066b8c93f000066ba000000000f300f28bd00a03e640f30660f38810f2636660f3acf069d00d60f78800200", 0x53}], 0x1, 0x59, &(0x7f0000000280)=[@dstype3={0x7, 0x7}], 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='keyring\x00', &(0x7f00000023c0)='\x00') socket$inet6(0xa, 0x3, 0xff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x1, 0x9, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 9m27.383844318s ago: executing program 2 (id=77): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 'id1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff0200"/53], 0xfdef) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) read(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x10000000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0xa8ca3411d3c26009, 0x20010, r0, 0x22e7c000) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000180)) 9m27.354206849s ago: executing program 2 (id=78): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYRES8=r0], 0x110}}], 0x1, 0x931766f6319ee4c5) r2 = socket$inet6(0xa, 0x80001, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000003480)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, 0xffffffffffffffff, 0x22e7c000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12f, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000d00)={0x2020}, 0x2020) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x403, 0x0) sendmmsg$inet6(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r7, r6, 0x0, 0x80000000) sendfile(r1, r0, 0x0, 0x80000000) 9m27.249484411s ago: executing program 2 (id=79): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ftruncate(r0, 0x3119c976) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) getrandom(&(0x7f00000005c0)=""/108, 0x6c, 0x1) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x40) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000880)={0x0, {{0xa, 0x4e20, 0x0, @empty, 0x1}}}, 0x88) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) rt_sigqueueinfo(0x0, 0x16, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) (async) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0414c700000000000109022400010000000c090415000103000100092105000a012205000905810300"], 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) setsockopt$inet6_int(r4, 0x29, 0xd0, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000580)) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18) (rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x6, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '5'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xa, 0x7ff, 0x59}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x8a, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x3, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x3, 0x2c, 0xff, 0x20, 0xc}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1809}}]}) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async, rerun: 32) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x420, 0x3f4, 0x206, 0x70bd25, 0x25dfdbfb, {0x3, 0x0, 0xb, [0x4, 0x5, 0x815, 0x8, 0x5, 0x5, 0x7fff, 0x8000, 0xffffffc6, 0xe, 0x2fe4ee5c, 0x4, 0xb6, 0x2, 0xbaaf, 0xe4, 0x7446, 0xea, 0x0, 0x10, 0x2, 0x9fb, 0x91, 0xa9, 0x10, 0x9, 0x2, 0x7, 0x7, 0x5, 0x3, 0x1000, 0x0, 0x3e3d8176, 0x3, 0x3, 0x1, 0x3, 0x800, 0x0, 0x1, 0x400, 0x7fffffff, 0x7fff, 0xb, 0xc4b, 0x2, 0x0, 0x2, 0x5, 0x9, 0x80000001, 0x2, 0x400, 0x5d, 0x8, 0xa75b, 0x4, 0x9, 0x6, 0x6, 0x8, 0xfffffffc, 0x1], [0x5, 0x3, 0x2, 0x0, 0x400, 0x0, 0xfffffffc, 0x7, 0x4, 0x8, 0x8000, 0x10000, 0x401, 0x1ff, 0x2, 0x5a, 0x6, 0x5, 0x9, 0xfffff000, 0x3, 0x7, 0x5, 0x9, 0x75c, 0xfffffff7, 0x2, 0x3, 0x6, 0x3, 0x1, 0x7, 0x8, 0x4, 0x3, 0x10000, 0xd15, 0x5, 0x1, 0x1, 0x8001, 0xe, 0x2, 0x7, 0x57165f79, 0xf64, 0x1, 0xc, 0x0, 0x5, 0x8, 0x5, 0x8, 0x6, 0x2, 0x0, 0x3, 0x200, 0x8, 0xd, 0xbd, 0xee5d, 0x7f, 0x743], [0x9, 0x0, 0x10000, 0xfffffffc, 0x1, 0xc4ff, 0x7f, 0x5, 0xb, 0x6, 0x91c, 0x7, 0xee, 0x1, 0x5, 0x80000, 0x2, 0x5, 0x80010, 0x5, 0xf372, 0x10001, 0x0, 0x5, 0x4b20, 0x0, 0xf, 0x800, 0x7, 0x10001, 0x9d, 0x316, 0x1, 0xe, 0x10, 0x9, 0x1ef2c661, 0x8418, 0xffff, 0x4bf09d2d, 0xda5, 0xfffffff8, 0x5, 0x7619, 0xfffff7e7, 0x2, 0x2e6, 0x3, 0x7, 0x37aab9ce, 0xec6d, 0x0, 0xca4, 0x9, 0x2, 0x80000001, 0x8, 0x1, 0x5, 0x2, 0x5, 0x10000, 0x3, 0x7f], [0xb0db, 0x8, 0x0, 0x82000000, 0x7, 0x8, 0x6, 0x2, 0x7, 0x5, 0x6, 0x9, 0x6, 0x1, 0xc7c9, 0xd5f, 0xa, 0x200, 0x0, 0x401, 0x4c0, 0x2, 0x2, 0xf7, 0x60, 0x2, 0x1, 0x4, 0x3, 0xb, 0x2, 0x3, 0xffffffff, 0xfc, 0x8, 0x3, 0x800, 0x3350, 0x77, 0x4, 0xffffffff, 0x2, 0x4, 0x2, 0x12bce1ad, 0x1f29, 0x5, 0x7, 0x1, 0x8, 0x5, 0xfffffff9, 0x6, 0x2, 0xfffffff7, 0x2, 0x3, 0xf, 0x4, 0x76, 0xe5, 0x1ff, 0xff, 0x2c75]}, ["", "", "", "", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x4008) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) prctl$PR_CAPBSET_READ(0x17, 0x1d) prctl$PR_CAPBSET_READ(0x17, 0xb) 9m27.241703271s ago: executing program 32 (id=79): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ftruncate(r0, 0x3119c976) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) getrandom(&(0x7f00000005c0)=""/108, 0x6c, 0x1) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x40) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000880)={0x0, {{0xa, 0x4e20, 0x0, @empty, 0x1}}}, 0x88) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) rt_sigqueueinfo(0x0, 0x16, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) (async) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0414c700000000000109022400010000000c090415000103000100092105000a012205000905810300"], 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) setsockopt$inet6_int(r4, 0x29, 0xd0, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000580)) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18) (rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x6, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '5'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xa, 0x7ff, 0x59}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x8a, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x3, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x3, 0x2c, 0xff, 0x20, 0xc}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1809}}]}) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async, rerun: 32) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x420, 0x3f4, 0x206, 0x70bd25, 0x25dfdbfb, {0x3, 0x0, 0xb, [0x4, 0x5, 0x815, 0x8, 0x5, 0x5, 0x7fff, 0x8000, 0xffffffc6, 0xe, 0x2fe4ee5c, 0x4, 0xb6, 0x2, 0xbaaf, 0xe4, 0x7446, 0xea, 0x0, 0x10, 0x2, 0x9fb, 0x91, 0xa9, 0x10, 0x9, 0x2, 0x7, 0x7, 0x5, 0x3, 0x1000, 0x0, 0x3e3d8176, 0x3, 0x3, 0x1, 0x3, 0x800, 0x0, 0x1, 0x400, 0x7fffffff, 0x7fff, 0xb, 0xc4b, 0x2, 0x0, 0x2, 0x5, 0x9, 0x80000001, 0x2, 0x400, 0x5d, 0x8, 0xa75b, 0x4, 0x9, 0x6, 0x6, 0x8, 0xfffffffc, 0x1], [0x5, 0x3, 0x2, 0x0, 0x400, 0x0, 0xfffffffc, 0x7, 0x4, 0x8, 0x8000, 0x10000, 0x401, 0x1ff, 0x2, 0x5a, 0x6, 0x5, 0x9, 0xfffff000, 0x3, 0x7, 0x5, 0x9, 0x75c, 0xfffffff7, 0x2, 0x3, 0x6, 0x3, 0x1, 0x7, 0x8, 0x4, 0x3, 0x10000, 0xd15, 0x5, 0x1, 0x1, 0x8001, 0xe, 0x2, 0x7, 0x57165f79, 0xf64, 0x1, 0xc, 0x0, 0x5, 0x8, 0x5, 0x8, 0x6, 0x2, 0x0, 0x3, 0x200, 0x8, 0xd, 0xbd, 0xee5d, 0x7f, 0x743], [0x9, 0x0, 0x10000, 0xfffffffc, 0x1, 0xc4ff, 0x7f, 0x5, 0xb, 0x6, 0x91c, 0x7, 0xee, 0x1, 0x5, 0x80000, 0x2, 0x5, 0x80010, 0x5, 0xf372, 0x10001, 0x0, 0x5, 0x4b20, 0x0, 0xf, 0x800, 0x7, 0x10001, 0x9d, 0x316, 0x1, 0xe, 0x10, 0x9, 0x1ef2c661, 0x8418, 0xffff, 0x4bf09d2d, 0xda5, 0xfffffff8, 0x5, 0x7619, 0xfffff7e7, 0x2, 0x2e6, 0x3, 0x7, 0x37aab9ce, 0xec6d, 0x0, 0xca4, 0x9, 0x2, 0x80000001, 0x8, 0x1, 0x5, 0x2, 0x5, 0x10000, 0x3, 0x7f], [0xb0db, 0x8, 0x0, 0x82000000, 0x7, 0x8, 0x6, 0x2, 0x7, 0x5, 0x6, 0x9, 0x6, 0x1, 0xc7c9, 0xd5f, 0xa, 0x200, 0x0, 0x401, 0x4c0, 0x2, 0x2, 0xf7, 0x60, 0x2, 0x1, 0x4, 0x3, 0xb, 0x2, 0x3, 0xffffffff, 0xfc, 0x8, 0x3, 0x800, 0x3350, 0x77, 0x4, 0xffffffff, 0x2, 0x4, 0x2, 0x12bce1ad, 0x1f29, 0x5, 0x7, 0x1, 0x8, 0x5, 0xfffffff9, 0x6, 0x2, 0xfffffff7, 0x2, 0x3, 0xf, 0x4, 0x76, 0xe5, 0x1ff, 0xff, 0x2c75]}, ["", "", "", "", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x4008) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) prctl$PR_CAPBSET_READ(0x17, 0x1d) prctl$PR_CAPBSET_READ(0x17, 0xb) 4m44.019770204s ago: executing program 0 (id=5239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x19) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80080) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f0000000040)) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000080)={0x0, 0xffffffff}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r4, &(0x7f0000000440)={'syz1\x00', {0x81, 0xd32, 0xb, 0x9c3d}, 0x2, [0x5, 0x1, 0x52eb90bc, 0x97, 0x80, 0x1, 0x7, 0x9, 0x28, 0x9, 0x4b, 0x9, 0xfffffffe, 0x1, 0xbe4, 0x5, 0x0, 0x8, 0xd, 0x9, 0x5, 0x72380e58, 0xffffffff, 0x400, 0x0, 0x6, 0x9, 0x7, 0x7fffffff, 0x8, 0x0, 0x7, 0x3, 0x7f, 0x4, 0x5, 0x1, 0x10000000, 0x3, 0x9, 0x401, 0x9, 0x5, 0x9, 0x80000001, 0x5, 0xff5, 0xfffffbff, 0xd1, 0x3, 0x0, 0x46ee, 0x40, 0x7, 0x7, 0x4, 0xffffff7c, 0x9, 0x9, 0x3, 0x0, 0xffffffff, 0x2, 0x9], [0x9, 0xffe00000, 0x28000000, 0xffffffff, 0xfffffffa, 0x80000000, 0x8001, 0x2, 0x0, 0x5, 0x5, 0x0, 0x0, 0xe7, 0xb, 0x200, 0x1, 0x22, 0x7ff, 0x3, 0xd0, 0x4, 0x0, 0x2, 0xedbc, 0x9, 0x0, 0xb04, 0x7ff, 0x1, 0x80, 0x8, 0x45, 0xffffffff, 0x10001, 0x3, 0x7, 0x686, 0x4cc, 0xfff, 0x8, 0xff, 0xfffffff3, 0x1, 0x1, 0x5507bd6c, 0x8001, 0x6, 0x5, 0x0, 0x7, 0xc84, 0x6, 0x7, 0x5, 0xe, 0x9, 0x8, 0x9, 0x116, 0x6, 0x5, 0x5, 0x1], [0x1, 0x401, 0x1, 0x6, 0x9, 0x5, 0x14000000, 0x9, 0x3, 0xff, 0xf81a, 0x2, 0x4, 0x3, 0x7, 0xa6, 0x0, 0x8, 0x40, 0x2, 0x81, 0x4254, 0x10001, 0x1, 0x3, 0xbb, 0x0, 0x19, 0x66, 0x4, 0x4, 0x1, 0x7, 0x6, 0xf71, 0xfff, 0x8000, 0x0, 0x4, 0x80000000, 0x3, 0x0, 0xfffffffd, 0x8001, 0x0, 0x55889df4, 0xc, 0xd, 0x8000000, 0x7, 0x39e, 0x5, 0x7, 0x2, 0xd, 0x7f, 0xe, 0x2b, 0x1, 0x1, 0x2, 0x8, 0x7, 0x9], [0x40, 0x3, 0x2, 0x8, 0xd, 0xfffffffb, 0xc, 0x5, 0xb, 0x9, 0x3, 0x7, 0x1000, 0x81fa, 0xd0, 0xfffffff9, 0x8000, 0x4, 0x80000001, 0x8000000, 0x4, 0x7, 0x7, 0x1, 0x68000, 0x9, 0x9, 0x5, 0x810, 0x4, 0x3, 0x9, 0x9e, 0x1, 0x7, 0x8, 0x7, 0x40, 0xfffffffa, 0x10, 0x2, 0x9, 0x8, 0x4, 0xffff, 0x1, 0x9, 0x1800, 0x1, 0x1, 0x7, 0x2, 0x8, 0x7fff, 0x95, 0x40, 0xf, 0x10000000, 0x2ec, 0x8, 0x3, 0x6, 0x7, 0x2]}, 0x45c) 4m43.939853505s ago: executing program 0 (id=5240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="7288"]) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$PPPIOCSDEBUG(r4, 0x40047440, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 4m43.869420866s ago: executing program 0 (id=5241): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r3, @ANYBLOB="010027bd0000fcdbdf2518"], 0x1c0}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x8}, 0x42, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)="b72b06ebc764f6077df3cee4eac9f37a043a2e66cb09d373183016c7d71983f4f29f021599cf4f93c8cf28a66216ef6599dea3c3850e76512b39736d7dfa50c4be9cebb4fc6aaeb640cfdba3fabac5519923497b742db85ea575225b10c128d1aee872b502fdd33ade8a8b649a03537ba50ff7c7da9a36db0df0e4bd2732d2e8abf6ab5f94fb6ee32383830c311bf79e73f8c5e420d54d8cde6788b3256766251f871abfdd3c05003625d6e4f5fbbc1008cdb1f615d88911d93e5a031fd7c861b40a3a5a1073ef74bb8c5997f550b1180281d6bb18c092ed01cb065666cfb078d45ca568f47f97d2d41c5f", 0xeb, 0x0, &(0x7f0000000200)={0x2, 0x1a2, {0x0, 0xc, 0x9f, "72365192542958dec48d8c08626568972bfe8367541990314f6ce0f432ce800731d654effdb50cca875179a20003d395aeda6620ccb6a182c9c96d93b1cd0bb989ae33e3d02a0ee38d6eafc00e7ca6dcb09142a400071faf144bb96919b783da0541816e4e037b33bd5d17d8f482185b2ae30ee504eaabaefa0e6d57f1492b3cd5b8d761bf6a4151e5e40815c7cf6cba1e4f9f197ebec613510c5387a4a883", 0xf6, "d5151e2c38ea80f6ee400efaad0c9cb17d542923eff52893ba77644f93a65f494033cc193f78fd33534e87ecbfd2b96b41b80c4f5591113fe92030ee7c516b5014cc2c31797907a80739bbe538817cdb57390a35cf93a6cd3e78f9d76ebd82409b4c06337c8b22d4a21e0669fce06e8a53c23fd086f0b72826ff7dc59bb800a22affba4255a51bfad86262a11e31bc6fcfd3ecaed02d487ce819704ccc0fbd2e59857b47031d641fb793129a6cb99f473be0feefd17c7e82f34db17fe2fdda4bcdca6613d9f6ef0c42ea1b61d1e38ac5cca67776ccf74a17a7270a53f9bc46c2f6ede2581d1ac176d127f04be3e82d526e8826f4873a"}, 0xf7, "48faf87a61ae0f7da35e156aa9f83981ce06a34b63456e6af340c3d56c08c523f0a9055f93d0561825aa0d87c9641883a37ba035fe7c18144b3d0707f7c90461ce57a10392cfca8146dbeee85c4676cf671cf2189973fdcae5103a0f55fcfd14da22305958314660fc2d879614361b5af2a6de1ef6f6d7421dd851066aa26106c99eda1771ca9164a02c4b51aac44aba48fec8df7aa6f25ab39eee2efee1feb2ef28137aa4a00877888f66dab09c339ee2b7c9e92029b52623d81d4e1c1f7d50a13a86e2980c2cd698cd352748b0410c0efbb016e77928d8ce341e80a40a465ced361ceae1d814601abca32d82967e9c914a270e278f6b"}, 0x2a5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x170}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040001) 4m43.829541947s ago: executing program 0 (id=5242): setresgid(0xffffffffffffffff, 0xee01, 0x0) setfsgid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b3418, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 4m43.805941878s ago: executing program 0 (id=5243): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000009a000040"]) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c3c0848bff3ba758b0b95eb5aecc92c000000000000"]) 4m43.7041572s ago: executing program 0 (id=5244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x4, 0x7}, 0x60040011, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x67fffffffffffffd, 0x4, 0x5e, 0xff]}) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x3000, 0xffffffff, 0xc37, 0x3, 0x0, [{0x1, 0x9, 0x0, '\x00', 0x4}, {0xa0, 0x0, 0x80, '\x00', 0x4}, {0x1, 0x9, 0x9, '\x00', 0xb}, {0x2, 0xe, 0x8, '\x00', 0x56}, {0xc, 0x5, 0x80, '\x00', 0x9}, {0x0, 0x88, 0x3}, {0x6, 0x1, 0x3, '\x00', 0x7f}, {0x0, 0x1, 0x2, '\x00', 0xa}, {0x2, 0x9, 0x40, '\x00', 0x9}, {0x6, 0x7, 0x8, '\x00', 0x6}, {0x5, 0x6, 0xb5, '\x00', 0x89}, {0x8, 0x2, 0x7, '\x00', 0x7}, {0x9, 0x2, 0x0, '\x00', 0xff}, {0x5, 0xf9, 0x3a}, {0x8, 0x0, 0x6, '\x00', 0xc}, {0x0, 0x0, 0x40, '\x00', 0x7}, {0x3, 0x7f, 0x9, '\x00', 0x9}, {0x26, 0xff, 0xd, '\x00', 0xea}, {0x3, 0x5, 0xf7, '\x00', 0x87}, {0x0, 0x1, 0x10, '\x00', 0x5}, {0x4, 0x70, 0x2, '\x00', 0x9}, {0x6, 0x5, 0x7, '\x00', 0x80}, {0x2, 0x3, 0x80, '\x00', 0x77}, {0x3, 0x9, 0x8, '\x00', 0x9}]}}) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x4}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m43.70278095s ago: executing program 33 (id=5244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x4, 0x7}, 0x60040011, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x67fffffffffffffd, 0x4, 0x5e, 0xff]}) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x3000, 0xffffffff, 0xc37, 0x3, 0x0, [{0x1, 0x9, 0x0, '\x00', 0x4}, {0xa0, 0x0, 0x80, '\x00', 0x4}, {0x1, 0x9, 0x9, '\x00', 0xb}, {0x2, 0xe, 0x8, '\x00', 0x56}, {0xc, 0x5, 0x80, '\x00', 0x9}, {0x0, 0x88, 0x3}, {0x6, 0x1, 0x3, '\x00', 0x7f}, {0x0, 0x1, 0x2, '\x00', 0xa}, {0x2, 0x9, 0x40, '\x00', 0x9}, {0x6, 0x7, 0x8, '\x00', 0x6}, {0x5, 0x6, 0xb5, '\x00', 0x89}, {0x8, 0x2, 0x7, '\x00', 0x7}, {0x9, 0x2, 0x0, '\x00', 0xff}, {0x5, 0xf9, 0x3a}, {0x8, 0x0, 0x6, '\x00', 0xc}, {0x0, 0x0, 0x40, '\x00', 0x7}, {0x3, 0x7f, 0x9, '\x00', 0x9}, {0x26, 0xff, 0xd, '\x00', 0xea}, {0x3, 0x5, 0xf7, '\x00', 0x87}, {0x0, 0x1, 0x10, '\x00', 0x5}, {0x4, 0x70, 0x2, '\x00', 0x9}, {0x6, 0x5, 0x7, '\x00', 0x80}, {0x2, 0x3, 0x80, '\x00', 0x77}, {0x3, 0x9, 0x8, '\x00', 0x9}]}}) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x4}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.560047221s ago: executing program 5 (id=7895): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x38}, @void, @val={0xc, 0x99, {0x9, 0xd}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000084) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3, 0x7, 0x3, 0x9}]}) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r3, 0x1, r5, 0x101}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x7f, 0x5, 0x2, 0xffff}, {0x40, 0x8, 0x2, 0x8}, {0x485, 0xf1, 0x8, 0x1}, {0x2, 0xf1, 0x3, 0x23}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000580)={r3, 0x3, r8, 0x3ff}) (async) r9 = syz_open_procfs(r4, &(0x7f00000005c0)='status\x00') syz_usb_connect(0x6, 0xdca, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0xc1, 0x50, 0x2a, 0x8, 0x789, 0x163, 0x9090, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb8, 0x4, 0x0, 0xfb, 0x20, 0xa7, [{{0x9, 0x4, 0x6e, 0xb, 0x0, 0x93, 0xe, 0x51, 0x6, [@generic={0x4e, 0xb, "63050a3dbd1c1da5d1c269a9998cb0025c4bcb1d5a29d0662fb4bc270be58666accaf6e8c82d4e17ca1b31f67f61e6ec8d55f5a977a7de218a8e67e7b7b67ab932bd889ba27979579cc2f560"}]}}, {{0x9, 0x4, 0x28, 0x6, 0x8, 0xff, 0x47, 0xd0, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x4}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x2, "82"}]}, @uac_control={{0xa, 0x24, 0x1, 0x8, 0x1}, [@selector_unit={0x7, 0x24, 0x5, 0x4, 0x4, "1fc4"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x6}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x1b7f, 0x0, "e55b4915"}]}], [{{0x9, 0x5, 0x6, 0x8, 0x20, 0x2, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xb64}, @generic={0x22, 0x22, "657b5b9bf9924bd147e0abed79f6e16b14bf8714128d7f2fb6ec029ba3ff2f79"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x3, 0xa, 0xc, [@generic={0xcf, 0x22, "8f87f847ee82bbd9ed4f44ab36f6fff3d2bd2b2865b47ddefad07515004e360a988593acda6f7e17a06649b29214a5919f3b85f2bb2c1c53683d9bf93d592e64071424c09c12ca0adae0412bea8c5bab084feed708b80a249c181edc51e9c80fc0548b0bb1ad30d92aab82cfc247439877840192a570fbfbd22724a26d3a2cc26007c67057631c2427f57d4cf85acfa4ee043ae84a1958f2f406c81dcc80ff5d784145f4bc2bd3a5df63a19d485afd1bc17060b6c55ea841814f053a4ca6243e77e49574958a01b921eb4062bc"}, @generic={0xc0, 0x6, "0ff41c1c3412628acf5e48c6589477e059cd0d4852f1527211cebb0856ae174da2645dc994f2aedd065c07ed43c0a1f39864747d55623e374c0e0c138fb228e64d3f95f91592a7ae095a240a172b8e2d70f13bfb187546d869f8d0964988f0f8a68dd94171cc79664e3cb17725a231bdb114e581b65566156f4faec6ee01b21692bc42b1b802ccb951731261820820959053ad9e166fba9f474aa6d2246d35e2ec765d8efdf60c980890090ab4675249b7bbd23aa13a9cf6561ed270b819"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x0, 0xa8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1, 0x3, 0x7, [@generic={0xe3, 0x31, "bb59b1c4edc6a2f6f7136475b717353f258f5d4ae6f04c9f30262954f67de742e5a8414ff7dfadf5a9da10ec43db5c43bbe098b6caefd9f05bd0831d56ecbf7d2b1ec7b85354812aa5342d3911100cb2cf8e5deac5dc1921f1dfb0264e970641cb3fbeeeb376fe41ad83aa1c336d6972b9e2f2ccc6fd5b3ed1bf8296df36bf35f035d16ba991f56438c3b94545d08daa6ed5136f4e7d132c6f08d551e22c66d147a4610317c3d7af88203e9a2f4590a7237e660a2310d59a77f625bb25e69578b5798015d87e0f9d3908716c975af9c5e10c8c78d06e5c0ee3f341dfaef3908747"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x8, 0x40, 0xa, [@generic={0x42, 0x23, "39fe8e7d5e465a3008bf46d4b1a4b8f38fc0c27713c1eef85c29fc5062022a4a92e9e88b24441666de9e08435083d146e5e8424ffe4f632771d0d946e252d7b6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0x72, 0x9}}, {{0x9, 0x5, 0x6, 0x16, 0x3ff, 0x9, 0xea, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1a50}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x90, 0x7, 0xfe}}]}}, {{0x9, 0x4, 0x28, 0x6, 0x9, 0x7d, 0x43, 0x78, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x56}, {0xd, 0x24, 0xf, 0x1, 0x50, 0x2, 0xfffa, 0x3}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@acm={0x4, 0x24, 0x2, 0xe}, @mdlm={0x15, 0x24, 0x12, 0x5}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x61, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8, 0x2, 0x40, [@generic={0x9a, 0x23, "2fa0238d66bae9ebff081156230cba6af93b237a69ec1405e3f6c8bce6eac9d1407b2fee5c10cbaa35c98b2a8488e339b5004f3dee6e819688dce5b043ca3dd4c1f3905d7ac7a0a457a15a49e71837fb317c250a4149d87c60b3df54bcf5b99f10d0c2545bc4d2ef6ee1aeb72a124e1f837b201417a5a86acb37a00970bf15d2a551f5ab7fc98fb9cda53ffedd2c65680b6942c4a8c63d9d"}, @generic={0x87, 0x1, "85bba4c44a0dea68cf13d8763df8688c7a7214a656f2d5d4cc384ae3cbf6e3b66016f0a815bf872dd9a751900a0d88a8d3c41bd301dcf890df9d8db44888dacf2895320d12c83458fdf4b8f43b3841d60bdad842e95ea51a76f29d8bec699f89b7026c0ac7b4f06e18548fe1e14e7f61857e034aff36942fcd51e0c8855fb9261c356b1543"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x5, 0x3, 0xe, [@generic={0x58, 0x11, "942c19f0e9f1b473fd078b852df2ebbeec76a8818f54c9c02694f3286416f1c8189f785908fbbdee201f50779db1b5bc4d15a98417282028634cc96e6f979c057c2999c2d6ec2f96624a92412d644d1931196419dc4c"}, @generic={0xe2, 0x10, "d26d7baab32c9d773b0988be2764685cc8092abe5554a592ca6223e8071c5d085d13d259707d5e9a7cc605121450262149c7afe37e7cf236c5b1d7695a240697d192df3766ff9c29dc92e67a166f0acf6005d5a179d371d43cbda043d0aa41d352c318c6c16d6cd30b5c2e0eae9472c9cff589ad128a16a1e7ebc36baf4e00bd851e606a14d82908fefa3f7303c8a8db4f187442cf83c2b928ad42af425df4946747fa7b5bf683d93d8a0944dcaed4cdaed5a0fa682b761891d70163c175712cfafd14108263ec888fed3a8f81072e480cb985ff89422a4877ecdd7c301b21d3"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0xfb, 0xb7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xae, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x5, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x691}, @generic={0x7, 0x21, "a7e3bda523"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x9, 0x4, 0x7, [@generic={0x2d, 0x31, "08523b3820a6cf070daf7a1059cd9301f02b0de7776a8605d3e6e5fb803bdbaa94d0f9cc1cec223eb68148"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x4d, 0x9, 0xd, [@generic={0xa9, 0x8, "ed5764e95fb83a3e9b07adcfb0dec74b0bddc680633f24d143f21d0b9bc1efddceef67dc54049c5e7f51513a91a8698a9d681dae5b20ac09938b8b69d9e9cb9351723740a9fc47232ebc28b504ef727f9a4ebb03c60908570ef8a32aa6ec3093dd8a5e236f861e941ec695795c1ac8f92b6d3e7d95f05da0e30ef7d1683f752a4e69396b1393addb20def618601b40a092ef0d1994f4570c1320040410aed1f89a3d6b19e94f3e"}, @generic={0xd4, 0x1, "83e485aa1fc1460881aba5a98683ece5958b3345c0d64ebaca2e9fcb945351ce8b9709b843656b96ece1abebc90c5e8974e85b00d24f9b132a5ddf44da7298448803fe6e054694e8a660851ad92c8de2aa3c41a0c7ce5267776d6df340d54693b02ef69c40983385e8133c0116fa27f658230c4188f5d46c1fcf58029f6f87497fca087ee8e3834da9170451db7dbcf1e0767ae54ec97cf3274a7a5d29f796b5f403b8c4f28baef4baa4e57c1c8b9b87523f8e2bcd36ac8e0efe7111d5c5bafaf966c6b7fea8dc3c5746dffe35e629c910f7"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x438, 0x5, 0x5d, 0x3, [@generic={0x1b, 0xc, "32209920ebba28b94368e3d82be6ef2b7b66545cc767d58288"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xa, 0x3, 0x5}}]}}, {{0x9, 0x4, 0x5b, 0x1, 0x10, 0x32, 0x43, 0xd9, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x6, 0xc1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xfa, 0xd, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x40, 0x4, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0xc8, 0x558}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x5, 0x2f0}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xe, 0x19, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x1e24}, @generic={0x59, 0xa, "781b6899e7a83a5730ae00ccc469af53f1ab0b9e728f046379794d2902bbec33e03562d167b7878f50ee52c0fa72974ccf2f2ae15e630029d54b3cd486cc05d367357272ba3f91fcb81d62d0261e7fc287636f48a59b3d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x3, 0x4, 0x0, [@generic={0x3c, 0xf, "a75e7a6efceb6122ec39e676d8cb020abac66d8c93c2a629b41c7e747f64efcba3d527554501a538f2e97f73b498427a241050f49a76dfa1091f"}, @generic={0x6e, 0xf, "9b5c9b5afa02d6d56c5499593177c110d0101f48c368b7c79a7e56b6abaf6992b9f709f17773b20a36928af25f02a15376397ef5033ba0569311343b9690971930e660045c54b5a02173005379ce52286cad84eae7762b617cb6ef78d8d5ca890e683877809852ab4f6d9e77"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0xf1, 0x2, 0xaa}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xc0, 0x3, 0x7, [@generic={0x24, 0x6, "a57fa6c3fbbdf3be6121441bd01d18df43e6a312dd6e9b69e554264542f2b59b2caf"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xf, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x7f, 0x7, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9f, 0xf}, @generic={0x21, 0x22, "de068b0b863c1b1bc46c9fcb6985571d22f4e88bd1b2b67cea0645a2e41edd"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xf9, 0x6, 0xd9, [@generic={0xd6, 0x27, "930b7149bf5e3e20f173ea8737102cde107fde5c0e288b77a469834e361b05ea14a31e35a60b7db5b806045c982111b27dd7cbd10886b4099463757a4db11097dccb90af2c1216cdf33bd29c92bba0631ac9beba6f94e5df1712ae838563f7f987d22b2daef5ff32c5c593f93ef21068c42f1370372483beda53f4021f006b7ab4e2106cc7dfac54b706e7f1a0a5e435bc8acf77350b9bcc6ec908a8ec476ad4929d433c87363061ac887be2287a3e5624aaea2c2810d279c68cd6e6c8668ce40317dcff20b2fbbcce8b3516149689c1310b84e7"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x7f, 0xf, 0x7, [@generic={0xdd, 0x23, "74bdfd92b8be658a81288bff74bba2f9462c155a0d21351bac3c57a9c4ba93d591945e878a89fa3138eb8ce1f91002a306e5393daff3dab49eb2876d1d8b1608645572fa10858494994b62b6cd6f6339ec35223ca6607f0c4be20844c4d217f3c0dc58765ff78bd0496f6e2a7d9e66b92bf199da6fabd6ae0d254400580f93a71dfa3b91a345e577a904b9f0dde87f7ccd115523641b3b97ccc254526af189c3526fcd46c7eb27277225fc27a2b1f33b6052b38282fe16e14089b1d84ab3505868e0ec1e9dd5455bcbd3129bf79b7310eca2782abc1d1f90d8ef10"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x9309}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x6, 0xf7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xce, 0x800}, @generic={0x1c, 0x8, "151ea67def0e25aec1d87876b33c99ca90115909824447fe728d"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x7, 0xf9, 0x3, [@generic={0x6e, 0xa, "8b7d94a16683e4c38bde471369a23e070aafa67e97b5f543cf3d7a28b4e059bf7acd42cb507e0ec899ac79925da355c2bc427b0c3fa5e67de2f1485f0733fbf806287bee666938e5c496ee0288e62a06f0e52c95900d81c905eae4d716797c86e90c6e37a7d87c7816ec621f"}]}}, {{0x9, 0x5, 0x8, 0x86f30d6f659d260a, 0x10, 0x1, 0xfc, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x3, 0x9}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0xa, 0x8, 0x9, [@generic={0xa1, 0x22, "f6386121a28eebfcbfa3709d8a6ff32b4b23cba7f892f961c015ba9ab2847b9799110cde63695014df4bd6695a71fed490c383355f721a3ed6bf20a528526c15cf1646a0c7d53d662116b955203ccf9ef29d7040f63b8778a8b89849b576b8d7a8bb0d5d2c54b0e9db94162def1f73a2e228ea5c08a531daaf09206a1814840668b30843e830c0b338802ca5a1ef65628072fb4f605456132f733bf4f784bf"}]}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x300, 0xd7, 0x40, 0x9d, 0x10, 0x7f}, 0x24, &(0x7f0000001440)={0x5, 0xf, 0x24, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x8, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xb9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0xe0, 0x17, 0x2}]}, 0x7, [{0xbc, &(0x7f0000001480)=@string={0xbc, 0x3, "3676ff01e554dabee344e534ed1db6e46315e2ef32ccd379686982afca4a7880ce761a456ddf180a8700c87d205097cc5389d0318a990bf0d19b965fd176d2c04f010e055d7c20c166305c3f85d78a964497fc0c0aecb55808a1887daaf5deeb0c087243786f1f389f9f81caf8d6daa1ed9e7f06d10fa3859718e6d1c0be8568d2cf9c80248b386346218cd8f71ab25b0059c741cafdbfdeae8a86da3b07fc72e69e29b70a42357298dafaca099044fb9e59bd5bcd4f70105a9d"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x415}}, {0xbb, &(0x7f00000015c0)=@string={0xbb, 0x3, "f611b783ced0b4d835001844fc7eec5ced344ee1f56fe5890cec00682d99565cb5256a45e54aa9bd1926f166a4c2b324f703ac48d44109d780211042d98edb073382af65dbbd0f7eb378bf1822b51ca606d77b09b2a30685807aa1c0ffc48c352aa85c44d941e330b5f7f25ab0a4980da6e189a0abab9e603a8cfc97e081941fcbbf449110970f22b32eafe835907c76fc065b15f0b75b51522c47bc544aa511c973e67c5794c5a1bcf9ef27f6e05aaddef74c87c37c81b4ad"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x6e}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x409}}]}) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000001880)=@urb_type_bulk={0x3, {0xa, 0x1}, 0x401, 0x60, &(0x7f00000017c0)="4b573ea8156a8b33205b211481", 0xd, 0x6, 0x3, 0xe63, 0xa962, 0x5, &(0x7f0000001800)="537ec17930222a8f8baa6a581cfe3046d7c84f032d08300a3309b970cb50ea834c7900608ca9f7a588145fde7ad616626b426d1d2d0b3ea44ae90c3270fb79f60eb2ddfcb36512eac41522e57646fc18add425f475913e95e9df2c73b6914cd8483909835ec88796110707096ecc7975b1641abc3f78059a4b831f"}) (rerun: 32) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb0, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc8195a121cbc31c3, 0x3, 0x6, 0x0, {0xff8000000000000, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x8, 0x8, 0x6}}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="0e9b80d70f299fbab8a29c465c0f0674ce7ce8ea59fadb69779c56"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x14, 0x34, @random="96cc795e30832e5c5ecfdb892da3dbf8"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x1, {0x1, 0x2, 0x96a0, 0x100}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x10, 0x3fb, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x440c5) (async, rerun: 64) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (rerun: 64) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)={0xf4, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x88}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40800a0}, 0x20004040) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d00), r9) (async) ioctl$BLKALIGNOFF(r9, 0x127a, &(0x7f0000001d40)) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001dc0), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r11, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x2041) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x44, r10, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4042010) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002040)={0x5, &(0x7f0000002000)=[{0x9, 0x9, 0x3, 0x2}, {0x8, 0xa, 0x14, 0x4}, {0x4, 0x3, 0x4}, {0x7, 0x7, 0x9, 0x8a}, {0x3ff, 0x3, 0xf8, 0x9}]}, 0x10) (async) ioctl$BLKSECTGET(r9, 0x1267, &(0x7f0000002080)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002100)={0x3, &(0x7f00000020c0)=[{0x8, 0x0, 0xff}, {0x4, 0x3, 0x2, 0xfffffbff}, {0x5, 0x8, 0x9, 0x4}]}) 2m19.498779902s ago: executing program 5 (id=7910): ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x419, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '[\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000882}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4080, 0x1) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x8010) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r6, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfffffffc, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000800) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000a80)={0x7, 0x244d, 0x2, 0x4, 0x8, 0x0, [{0x2, 0x8, 0x0, '\x00', 0x1}, {0xc, 0xd8c, 0xff, '\x00', 0x3808}, {0xffffffffffffff54, 0x8000, 0x4, '\x00', 0x80}, {0xfffffffffffffffe, 0xffffffffffffffff, 0x4}, {0x9, 0x2, 0x8001, '\x00', 0x3b83}, {0x5, 0x7ff, 0x200000000000}, {0x7, 0x0, 0x3}, {0x2, 0x9, 0x0, '\x00', 0xf0fecff86cf024ee}]}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r3, 0x9, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) fchdir(r5) socketpair(0x63484dce900a1433, 0xa, 0x7, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x20008000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x40, r2, 0x5352a386e3dcdeb2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x4000890) mkdirat(r5, &(0x7f0000001100)='./file1\x00', 0x142) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x40084) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000001480)={&(0x7f0000001380), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, r11, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) 2m19.447134223s ago: executing program 5 (id=7912): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x11) readlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=""/63, 0x3f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000845000/0x4000)=nil, &(0x7f0000137000/0xa000)=nil, 0x4000}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000200), 0x804000, &(0x7f0000000280)=ANY=[@ANYBLOB="7494616e733d66652c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r6, 0x29, 0xcb, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0xc8) read(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101200, 0x20) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) read$char_usb(r2, &(0x7f0000000140)=""/37, 0x25) write(r7, &(0x7f00000003c0)="f31f8c6d96a04e2a0385ac17ebb63296ac7814a51104d36999646fc15573540e6417aaeb0b016a9254f34dd64e33ec0130149ba01dbd86e0844bd91f01e40ba0f42127618764216ee1fa087245e8ae0bed0337cdb5290237780f9860d447820e2e7129b498c8200f8e6cd4f406dac4536aded85924fba066f00e806cfcdfa39aaf", 0x81) 2m19.198058058s ago: executing program 5 (id=7919): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x103) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000021000040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x40a200, 0x0) 2m18.390293124s ago: executing program 5 (id=7927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000f00)=ANY=[@ANYBLOB="201352000000c34a5e"], 0x0, 0x0}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r5, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002"], 0x150}}, 0x0) ftruncate(r3, 0xffff) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)={0x40, 0x11, 0xa, "7144a39994855c9207b8"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x31, 0xb6, {0xb6, 0x1, "554e00f2857fd93198f78938a6a6f6c29df3ee8cc982ca9e95f5e834561b4ca66290cfbf3abc3b12161c0cffc5142e4f51c43c6a61a9fed29be769122effc854b69c0e060d65acb7b7680e2d33be4ef46150c8a47da97441af268251f2e2c9a82b7e2ccf8f444b714a83b2379b426c6b27beeb9e285b2a72137b5525a1f022296204b81a12b3887de635daa924c686ead0c9f5811e0a7732061cc926143448347763fe55a309ade6943c5de351057cfcdb120eb0"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000000880)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="4017a4000000780e82ce77799fd441501b7c2c9283bd7117b004cbb9ddb4d4c129be603f08f81ef7add0789fe7f3ac8f88fcaa1187b8c48ef9de24d586278da74df475daf999866b83368a60dcc109b3ee9d2056324eb22620466bfd624eca8c3e6da659cf0945e4fd3bb7b87633d20a94a78070849d4bb3ce1b3b21d1b5ab03223a50f97ccd647d4a79eaac67643c6fd2392a356b7423060b28ba50fdd5f4cfb6c43a0ee639c395e195"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000800)={0x40, 0xa0, 0x4, 0xf2000}, &(0x7f0000000840)={0xc0, 0xa2, 0x2f, "5635e26de7536e369c22123443ae9a5c9735ad44d09ce4187ea9cddded1f7f97f59e57bc3ddf52447f38b387683e6a"}}) setns(r7, 0x0) fcntl$addseals(r3, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000440)=0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)={0x44, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2c}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffff424, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044}, 0xc0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x1}, {0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.310341485s ago: executing program 5 (id=7929): mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[], 0x138) rt_sigprocmask(0x1, &(0x7f0000000140)={[0x1000]}, 0x0, 0x8) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket(0x5, 0x3, 0x97) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000010201040000000000001b000000000eeaef0c6ebf09"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="3057a1b9fd509fc9417533d9fcfe2189d3611cbfc87c3e8f64fb94434e78b698108a8a17982c396dca15b2a498588b9ac59b44c56565be5408d42d10a78e1eadbad1ce517564da9f0026c5a58496bb4b0d55b21cca9f656a29d39750e3a2bef0c164b911fda8250fe0e20e5a6a729acc8458196b4202a33ce4b75915", @ANYRESHEX=r2, @ANYBLOB=',access=any,\x00']) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x80040, 0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 2m18.283591675s ago: executing program 34 (id=7929): mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[], 0x138) rt_sigprocmask(0x1, &(0x7f0000000140)={[0x1000]}, 0x0, 0x8) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket(0x5, 0x3, 0x97) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000010201040000000000001b000000000eeaef0c6ebf09"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="3057a1b9fd509fc9417533d9fcfe2189d3611cbfc87c3e8f64fb94434e78b698108a8a17982c396dca15b2a498588b9ac59b44c56565be5408d42d10a78e1eadbad1ce517564da9f0026c5a58496bb4b0d55b21cca9f656a29d39750e3a2bef0c164b911fda8250fe0e20e5a6a729acc8458196b4202a33ce4b75915", @ANYRESHEX=r2, @ANYBLOB=',access=any,\x00']) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x80040, 0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 48.332673795s ago: executing program 4 (id=9742): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000180)=""/91, &(0x7f0000000200)=0x5b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 48.205555468s ago: executing program 4 (id=9743): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x60a00, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4044400) socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback, 0x2000000}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 47.370959354s ago: executing program 4 (id=9757): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) r2 = fcntl$getown(r1, 0x9) sched_setscheduler(r2, 0x3, &(0x7f0000000040)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 47.008407971s ago: executing program 4 (id=9758): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000008400)=ANY=[@ANYBLOB="902800003b0001"], 0x2890}], 0x1}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500030000", 0x39}], 0x1) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/78, 0x4e}], 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904", @ANYRES8=r1, @ANYRES64=0x0], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x98000, 0x0) sendfile(r3, r0, 0x0, 0x2fe4) 46.421608712s ago: executing program 4 (id=9759): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) unshare(0x22020600) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 42.90049652s ago: executing program 4 (id=9774): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x103) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0x2) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000021000040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x40a200, 0x0) 40.970446888s ago: executing program 3 (id=9780): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002100010027bd7000fbdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 40.953098518s ago: executing program 3 (id=9781): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet(r0, &(0x7f0000002080)=')4dL', 0x4, 0x20048091, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 40.813550561s ago: executing program 3 (id=9782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x4b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x4b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) 40.436204378s ago: executing program 1 (id=9784): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r0, 0x0, 0xc, 0x8045, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @local}, 0x1c) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 40.34557119s ago: executing program 1 (id=9785): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x60a00, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4044400) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback, 0x2000000}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 40.193981663s ago: executing program 3 (id=9786): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x6, 0xe, {0xe, 0x31, "e8a8556f42624de4d747afcf"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000300)={0x0, 0x31, 0x58, "441ce69be63382a4b8bdf9f1a0492bfd90f8a51f9d59225ec14809203ea23f9195e7bce69646bf4106bc047d4a5350b367bda15c61a15f7da3e6d34a7ca76f933b220c495bf95409039c535000a4d6e576b4d9fc604b2151"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)={0x1e4, 0x16, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @generic="3aef458cce15225c1a2bb8e2ef92502839622cd12e16969efa39bb90dd7c363b770a9f3bb5bb0ed829e3d729f3d4fe736fc856ab333ad44e0fa00f31974ea0bacd2e015b2a4dc994fdbc5b02ef118ae7aed867c1e0ba17207d304ab33a052f461a38b697190a48378823f6609c71d0e7389ba42967fd909baf66406bf4c02ea6506ba76cd0f125971705d5573a7d97f63e90b0fd09a8ab51f355eb720d28ece58890dc74218128ec5ed21b09d729e66ff0c09106d958e1e056dad1dbf4dc39034706a6cd7616", @nested={0xfb, 0x8e, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@empty}, @generic="7cc916e5b51e6b99746f576a40fac0a7d1821badbe2af2b58c76940bc1e6bced2f36b2a426ccd3f6c3a152a007fbe3aa36dead7bfe4be50b1d5d68c9968f40d68c55cbc5588a6e8f3de9439debd2786b0cbd1b236951ff734fb5145969edf88e1ea5352f0b3b527f85152b30a3107c0b28ffb48fb83fd3f3cbe76a80443da48e57450b57e5b583aaef73e3f04cb81547e0daf23100449e422dbd47fedecc790698bfd542917f548f6dfff77cf40a9cac56ac9574f37aae6484db39740d8d0ad3157d2cdc4155102c523e79b2b9bec2a3bedb1c53347db7628baa00"]}]}, 0x1e4}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getpriority(0x1, 0xffffffffffffffff) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRES64=r1]) 40.009619436s ago: executing program 6 (id=9791): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) time(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000900000000004000"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f00000028c0), 0x0) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000140)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 39.929524208s ago: executing program 6 (id=9792): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000090) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000280)="650f01c30fc7ae227e3a29660fe78a030066b80500000066b90d0000000f01d90f32360f01c20f79c30fc7b76de7f02196ef2d", 0x33}], 0x1, 0x40, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f0000000000)=0x3, 0x4) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r9, 0x28, 0x6, 0xfffffffffffffffc, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r8, 0x29, 0xff, 0x3, 0xfffffffc, 0x64, @rand_addr=' \x01\x00', @mcast1, 0x8, 0x700, 0xb, 0x7}}) r10 = syz_open_dev$mouse(&(0x7f0000000080), 0x4878, 0x101000) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000000000000bc0800000000000007000000000000000b08000000000000c10e0000000000004c030000000000002ccdfa7c00000000d00400000000000004000000000000004e0900000000000004000100000000002d000000000000008100000000000000"]) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "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", "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 39.928834858s ago: executing program 6 (id=9793): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000001880)) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 39.901215919s ago: executing program 6 (id=9794): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x40d7, 0x7}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080), 0x54, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1"}) r1 = socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='s', 0x1}], 0x1, 0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x28) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0xb4, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x100001, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/149, 0x95}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/213, 0xd5, 0x0, 0x20}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x2}, @release], 0xf6, 0x0, &(0x7f0000000780)="05bccaf4dc6afc6fed830001c87c8ed2961f95dad4fb93ae7ce684e867a57cb3b5f9c0e8b7396713573bf8d769e36732c3d85ff1df98ddcd9f3c71c36c1f9302e163f3f6bd1de4dc55f4ed9d44b9d8058ea84e5086c308e7429ff9d9bda0bea5e6a587ff65a0c2e3f239e053eb4ef407bb1d6dc75159a9ea55d79aa9daadc7e15596a6052c4e9ce9f9976cdc2796fb364baac9dd970bb0784ae8d1f54c914300e8122445d0f17419ce2d4c68722577034833cb3ded9d81164fdafc180627be4e806d9cc5dec6167ef7b086d170625c8f9a488884d627c087ab0dfa64c561e048e0e1073c3e351ee4d71854e93a619e160dd99913ad11"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 39.586751174s ago: executing program 3 (id=9795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETLINK(r1, 0x400454ce, 0xfffe) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'netdevsim0\x00', 0x800}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000002bbbbbbbbbbbbaaaaaaaaaabb0f06907064010102ac1414bbf4224e2200"/42, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5101800190780002"], 0x3a) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x80700a, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r9, &(0x7f00000000c0)="bba99475105094568ada45167329fd08a88d0d1c94a8d5b6c84db0a187738549e998e09c27e34a450ca7eb503cb9844ee14eb0b7fc2d21a50f4ec99adff0bd2b48cf6cd7d4dbeb4a35d81a91add5f351b63dc21a155f642a5534aff81a1433a6fc394f73bd6541ef031ea87c2fbc1d9c", 0x70) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup3(r10, r11, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 39.508876106s ago: executing program 1 (id=9796): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x80, 0x1, [@m_ipt={0x50, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x27, 0x6, "a3ff70cc5ea43af9389600932a12cd9e8641d1ac468b8d7ae67b017ad2530e095a3d5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x10, 0x6, 0xa, 0xee21}, {0x5, 0x1e, 0x6, 0x4}, {0x3, 0x3, 0x5f, 0x23d}, {0x41d, 0x3, 0x1, 0x2}]}) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f00000000c0)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x26f) 39.333389679s ago: executing program 3 (id=9797): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fcntl$setflags(r0, 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x40400) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x2000044) syz_open_procfs(0x0, &(0x7f0000001b00)='net/fib_trie\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000001b00)='net/fib_trie\x00') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000001240)="660f388198fa55b800008ed866b9ad0300000f32f30f38f6c4ba2000b857ebef66b9170b00000f32ba200066ed0f01c8650fc73a66b9800000c00f326635001000000f30", 0x44}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000001240)="660f388198fa55b800008ed866b9ad0300000f32f30f38f6c4ba2000b857ebef66b9170b00000f32ba200066ed0f01c8650fc73a66b9800000c00f326635001000000f30", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clock_gettime(0x0, 0x0) pread64(r2, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 39.333160149s ago: executing program 1 (id=9798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 38.925485487s ago: executing program 1 (id=9799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x209, 0x70bd22, 0x25dfdbff, {{{@in6=@empty, @in=@private=0xa010102, 0x4e22, 0x81, 0x4e24, 0x3, 0x2, 0x20, 0xa0, 0x3a}, {@in6=@private0, 0x4d5, 0x32}, @in=@multicast2, {0x1, 0xf, 0x2, 0x8001, 0x8, 0x7f9, 0xaaec, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc90a, 0x1, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x1, 0x4, 0x10}, 0xff, 0x80000805}}, 0xf8}, 0x1, 0x0, 0x0, 0x2}, 0x48000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80400) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f0000000440)="ef37090745f1901727ad3c8d11f636729f03bf078a8485b944c90a24eaacf8afeede5c514e01209199770e6cead6c272f47969ec1df9b051242167bf81f585202fa252164e5cc497a1243184edf99a4aae5b6f3c67f65e66eded5a0e566c87693e7e4aa5e795772fbe6f209f2e0085ba8b7669a8c2a2", 0x76) r5 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(r5, 0x0, r5, 0x0, 0x20000000000b64, 0x0) r6 = eventfd2(0xffffffff, 0x80001) write$eventfd(r6, &(0x7f0000000080)=0xffffffff00000000, 0x8) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b35, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg(r8, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) capset(&(0x7f0000000200)={0x20080522, r3}, &(0x7f0000000240)={0xa, 0x2001, 0xfffffff9, 0x2, 0x1, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/122, 0x7a, 0x0, 0x20}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/166, 0xa6, 0x2, 0x20}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 37.964749606s ago: executing program 6 (id=9800): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0, 0x0) timer_create(0x5, 0x0, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x503b81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000151000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x3c, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000380)={{0x1, 0x0, 0x80, {0x1000, 0xdddd1000, 0x3}}, "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", "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"}) r7 = gettid() r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a00", @ANYRES32], 0x1c}], 0x1}, 0x4040000) recvmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0xe, 0x10040, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7}) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 33.389425975s ago: executing program 6 (id=9801): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e21, 0xd, 0x4e24, 0x8, 0xa, 0x20, 0x0, 0x73}, 0x6e6bbf, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0xfffffff7, 0xffff, 0x5, 0xb, 0x6, "18233372b675f8fc2ad2a13f494b2489a4a50b", 0x6}) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x4, 0x0, 0x5, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x50) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x200000, 0x0) 29.762649435s ago: executing program 1 (id=9802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 24.701071082s ago: executing program 35 (id=9774): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x103) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0x2) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000021000040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x40a200, 0x0) 7.28159703s ago: executing program 36 (id=9801): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e21, 0xd, 0x4e24, 0x8, 0xa, 0x20, 0x0, 0x73}, 0x6e6bbf, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0xfffffff7, 0xffff, 0x5, 0xb, 0x6, "18233372b675f8fc2ad2a13f494b2489a4a50b", 0x6}) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x4, 0x0, 0x5, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x50) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x200000, 0x0) 2.179894228s ago: executing program 37 (id=9802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 38 (id=9797): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fcntl$setflags(r0, 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x40400) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x2000044) syz_open_procfs(0x0, &(0x7f0000001b00)='net/fib_trie\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000001b00)='net/fib_trie\x00') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000001240)="660f388198fa55b800008ed866b9ad0300000f32f30f38f6c4ba2000b857ebef66b9170b00000f32ba200066ed0f01c8650fc73a66b9800000c00f326635001000000f30", 0x44}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000001240)="660f388198fa55b800008ed866b9ad0300000f32f30f38f6c4ba2000b857ebef66b9170b00000f32ba200066ed0f01c8650fc73a66b9800000c00f326635001000000f30", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clock_gettime(0x0, 0x0) pread64(r2, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') kernel console output (not intermixed with test programs): k: 32 bytes leftover after parsing attributes in process `syz.3.7005'. [ 403.074231][ T7406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.091369][ T7406] usb 2-1: Product: syz [ 403.095614][ T7406] usb 2-1: Manufacturer: syz [ 403.100513][ T7406] usb 2-1: SerialNumber: syz [ 403.111280][T20932] overlayfs: failed to clone upperpath [ 403.304447][T20962] netlink: 'syz.3.7017': attribute type 12 has an invalid length. [ 403.514007][ T7406] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 403.591991][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7032'. [ 403.601117][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7032'. [ 403.716715][T21020] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7040'. [ 403.909254][T21038] cgroup: fork rejected by pids controller in /syz3 [ 404.095643][T21176] netlink: 'syz.5.7047': attribute type 28 has an invalid length. [ 404.118937][T20880] fuse: Bad value for 'user_id' [ 404.124123][T20880] fuse: Bad value for 'user_id' [ 404.132110][ T7406] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 404.153076][ T7406] usb 2-1: USB disconnect, device number 38 [ 404.251174][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 404.251193][ T36] audit: type=1400 audit(2000000007.910:1591): avc: denied { execute_no_trans } for pid=21182 comm="syz.3.7050" path="/file0" dev="ramfs" ino=80173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 405.225715][T21256] tipc: Enabling of bearer rejected, failed to enable media [ 405.471884][T21280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7082'. [ 405.490954][T21281] netlink: 'syz.5.7080': attribute type 4 has an invalid length. [ 408.622736][T21294] overlayfs: failed to clone upperpath [ 408.697245][T21299] overlayfs: failed to clone upperpath [ 408.703514][T21299] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 408.735683][ T36] audit: type=1400 audit(2000000012.390:1592): avc: denied { relabelto } for pid=21298 comm="syz.1.7087" name="file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_exec_t:s0" [ 408.799152][ T36] audit: type=1400 audit(2000000012.390:1593): avc: denied { associate } for pid=21298 comm="syz.1.7087" name="file0" dev="tmpfs" ino=253 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_exec_t:s0" [ 408.882559][ T36] audit: type=1400 audit(2000000012.440:1594): avc: denied { rmdir } for pid=20069 comm="syz-executor" name="file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_exec_t:s0" [ 410.849764][T21389] fuse: Bad value for 'fd' [ 411.102971][T21406] overlayfs: failed to clone upperpath [ 411.540467][T21443] fuse: Bad value for 'fd' [ 411.778308][T21450] 9pnet_fd: Insufficient options for proto=fd [ 412.177359][T21494] fuse: Bad value for 'fd' [ 412.209700][ T36] audit: type=1326 audit(2000000015.870:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.1.7159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 412.729597][T21502] tmpfs: Invalid uid '0x00000000ffffffff' [ 412.846813][ T36] audit: type=1326 audit(2000000016.500:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.7165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b5d58ebe9 code=0x0 [ 413.576426][T21565] netlink: 'syz.4.7183': attribute type 4 has an invalid length. [ 413.643657][T21570] fuse: Bad value for 'rootmode' [ 413.659712][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7186'. [ 413.686887][T21579] cgroup2: Unknown parameter 'net_cls' [ 413.713436][T21587] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 413.828715][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7190'. [ 413.837871][T21590] erspan0: default FDB implementation only supports local addresses [ 413.846800][T21590] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 413.857406][ T36] audit: type=1400 audit(2000000017.520:1597): avc: denied { relabelto } for pid=21589 comm="syz.5.7190" name="file0" dev="tmpfs" ino=2532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 413.905092][ T36] audit: type=1400 audit(2000000017.520:1598): avc: denied { associate } for pid=21589 comm="syz.5.7190" name="file0" dev="tmpfs" ino=2532 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 414.018413][ T36] audit: type=1400 audit(2000000017.670:1599): avc: denied { unlink } for pid=15752 comm="syz-executor" name="file0" dev="tmpfs" ino=2532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 414.278077][T21627] overlay: ./file0 is not a directory [ 414.412709][ T36] audit: type=1400 audit(2000000018.070:1600): avc: denied { lock } for pid=21649 comm="syz.1.7210" path="socket:[81378]" dev="sockfs" ino=81378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 415.233258][ T36] audit: type=1326 audit(2000000018.890:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21649 comm="syz.1.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed178ebe9 code=0x7fc00000 [ 415.418730][T21729] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7238'. [ 415.462061][T21734] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.484470][T21736] veth0: entered promiscuous mode [ 415.498375][T21736] veth0: left promiscuous mode [ 415.529262][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7244'. [ 416.436782][T21759] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.464370][T21759] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.484639][T21759] bridge_slave_0: entered allmulticast mode [ 416.500523][T21759] bridge_slave_0: entered promiscuous mode [ 416.519206][T21759] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.526281][T21759] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.549229][T21759] bridge_slave_1: entered allmulticast mode [ 416.560901][T21759] bridge_slave_1: entered promiscuous mode [ 416.826016][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.833249][ T7949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.864144][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.871277][ T7949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.921526][T21759] veth0_vlan: entered promiscuous mode [ 416.985957][T21759] veth1_macvtap: entered promiscuous mode [ 417.206303][T21803] rust_binder: Error while translating object. [ 417.206350][T21803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 417.229448][T21803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 417.239554][T21803] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 417.248539][T21803] rust_binder: Read failure Err(EFAULT) in pid:4 [ 417.261115][T21808] netlink: 'syz.5.7261': attribute type 4 has an invalid length. [ 417.284913][T21808] netlink: 'syz.5.7261': attribute type 4 has an invalid length. [ 417.621864][ T7406] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 417.740064][T21825] overlayfs: failed to clone lowerpath [ 417.791513][ T7948] bridge_slave_1: left allmulticast mode [ 417.797738][ T7948] bridge_slave_1: left promiscuous mode [ 417.803763][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.818597][ T7406] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 417.849951][ T7406] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.864403][ T7406] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.873754][ T7406] usb 5-1: config 1 has no interface number 0 [ 417.899297][ T7406] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 417.910476][ T7406] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 417.942160][ T7948] tipc: Left network mode [ 417.959271][ T7406] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.968468][ T7406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.994884][ T7406] usb 5-1: Product: syz [ 418.009223][ T7406] usb 5-1: Manufacturer: syz [ 418.013901][ T7406] usb 5-1: SerialNumber: syz [ 418.359965][ T7406] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 418.387486][ T7406] usb 5-1: USB disconnect, device number 24 [ 418.639729][T21855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7278'. [ 418.933845][T21864] kvm: kvm [21863]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x80fe [ 418.944546][T21864] rust_binder: Write failure EFAULT in pid:10 [ 419.075723][T21866] netlink: 37 bytes leftover after parsing attributes in process `syz.4.7283'. [ 419.325999][ T36] audit: type=1400 audit(2000000022.980:1602): avc: denied { listen } for pid=21897 comm="syz.1.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 420.618416][T21933] overlayfs: failed to clone upperpath [ 420.703998][T21945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 420.704038][T21945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 420.750728][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7314'. [ 420.788543][ T36] audit: type=1400 audit(2000000024.440:1603): avc: denied { create } for pid=21949 comm="syz.1.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 421.102682][ T36] audit: type=1326 audit(2000000024.750:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed178ebe9 code=0x7fc00000 [ 421.734588][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7330'. [ 421.982724][T22025] fuseblk: Unknown parameter 'rode' [ 421.982724][T22026] fuseblk: Unknown parameter 'rode' [ 422.246297][T22037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22037 comm=syz.3.7341 [ 422.478404][T22047] binder: Bad value for 'stats' [ 422.676244][T22060] fuse: Bad value for 'fd' [ 422.789174][ T7407] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 422.950614][ T7407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.964184][ T7407] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 422.973568][ T7407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.983047][ T7407] usb 5-1: config 0 descriptor?? [ 423.278678][ T36] audit: type=1326 audit(2000000026.930:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 423.392823][ T7407] apple 0003:05AC:027A.0016: hidraw1: USB HID v5.01 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 423.607298][ T7407] usb 5-1: USB disconnect, device number 25 [ 424.120157][T22103] tipc: Started in network mode [ 424.125213][T22103] tipc: Node identity 7f000001, cluster identity 4711 [ 424.132746][T22103] tipc: Enabled bearer , priority 10 [ 424.257371][T22110] netlink: 'syz.3.7365': attribute type 4 has an invalid length. [ 424.275503][T22110] netlink: 'syz.3.7365': attribute type 5 has an invalid length. [ 424.289172][T22110] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7365'. [ 424.439170][ T390] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 424.599156][ T390] usb 5-1: Using ep0 maxpacket: 16 [ 424.605684][ T390] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 424.617381][ T390] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.627339][ T390] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.640147][ T390] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.649518][ T390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.657671][ T390] usb 5-1: Product: syz [ 424.661908][ T390] usb 5-1: Manufacturer: syz [ 424.666555][ T390] usb 5-1: SerialNumber: syz [ 425.081388][ T390] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 425.249205][ T7406] tipc: Node number set to 2130706433 [ 425.689953][T22108] fuse: Bad value for 'user_id' [ 425.694889][T22108] fuse: Bad value for 'user_id' [ 425.711373][ T390] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 425.732217][ T390] usb 5-1: USB disconnect, device number 26 [ 425.943623][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7374'. [ 426.649200][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 426.739908][T22185] 9pnet_fd: Insufficient options for proto=fd [ 426.876949][T22190] fuseblk: Bad value for 'rootmode' [ 426.894232][T22195] fuse: Bad value for 'fd' [ 427.169779][T22200] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7389'. [ 427.228449][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7390'. [ 427.843101][T22245] fuse: Bad value for 'fd' [ 428.419308][T22259] netlink: 'syz.1.7407': attribute type 27 has an invalid length. [ 428.445423][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.452577][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.210111][ T13] ip6_tunnel: M xmit: Local address not yet configured! [ 429.217519][ T13] ip6_tunnel: M xmit: Local address not yet configured! [ 429.239359][ T45] ip6_tunnel: M xmit: Local address not yet configured! [ 429.799248][ T390] ip6_tunnel: M xmit: Local address not yet configured! [ 429.811668][T22285] fuse: Bad value for 'fd' [ 429.993862][T22267] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.018982][T22267] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.039319][T22267] bridge_slave_0: entered allmulticast mode [ 430.056088][T22267] bridge_slave_0: entered promiscuous mode [ 430.075831][T22267] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.098201][T22267] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.117892][T22267] bridge_slave_1: entered allmulticast mode [ 430.136165][T22267] bridge_slave_1: entered promiscuous mode [ 430.169205][ T45] ip6_tunnel: M xmit: Local address not yet configured! [ 430.284247][ T13] bridge_slave_1: left allmulticast mode [ 430.292247][ T13] bridge_slave_1: left promiscuous mode [ 430.304711][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.320048][ T13] bridge_slave_0: left allmulticast mode [ 430.332428][ T13] bridge_slave_0: left promiscuous mode [ 430.351517][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.677932][T22267] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.685071][T22267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.692423][T22267] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.697994][T22337] fuse: Bad value for 'fd' [ 430.699776][T22267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.735629][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.743295][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.754338][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.761463][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.780905][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.788179][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.815474][T22267] veth0_vlan: entered promiscuous mode [ 430.831239][T22267] veth1_macvtap: entered promiscuous mode [ 430.841403][ T13] veth1_macvtap: left promiscuous mode [ 430.846948][ T13] veth0_vlan: left promiscuous mode [ 430.971721][T22341] rust_binder: Error while translating object. [ 430.971762][T22341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 430.978057][T22341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 431.505637][T22369] 9pnet_fd: Insufficient options for proto=fd [ 431.583045][T22375] fuse: Bad value for 'fd' [ 431.882950][T22385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.969371][T22395] devpts: called with bogus options [ 431.999113][ T36] audit: type=1326 audit(2000000035.650:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22396 comm="syz.3.7450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd038ebe9 code=0x0 [ 432.102874][ T36] audit: type=1107 audit(2000000035.760:1607): pid=22396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 432.104110][T22401] rust_binder: Write failure EFAULT in pid:21 [ 432.214940][T22405] tipc: Enabling of bearer rejected, failed to enable media [ 432.246177][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7453'. [ 432.327517][T22424] fuse: Bad value for 'fd' [ 432.958981][T22467] fuse: Bad value for 'fd' [ 433.079223][ T45] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 433.219189][ T45] usb 4-1: device descriptor read/64, error -71 [ 433.479205][ T45] usb 4-1: device descriptor read/64, error -71 [ 433.511414][T22517] overlayfs: failed to clone upperpath [ 433.719232][ T45] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 433.760622][T22530] overlayfs: failed to clone upperpath [ 433.803608][T22537] fuse: Bad value for 'fd' [ 433.849154][ T45] usb 4-1: device descriptor read/64, error -71 [ 434.021301][T22541] netlink: 'syz.4.7504': attribute type 4 has an invalid length. [ 434.031072][T22542] netlink: 'syz.4.7504': attribute type 4 has an invalid length. [ 434.099209][ T45] usb 4-1: device descriptor read/64, error -71 [ 434.209290][ T45] usb usb4-port1: attempt power cycle [ 434.450048][T22585] fuse: Bad value for 'fd' [ 434.549180][ T45] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 434.570423][ T45] usb 4-1: device descriptor read/8, error -71 [ 434.710203][ T45] usb 4-1: device descriptor read/8, error -71 [ 434.718659][T22590] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28437 sclass=netlink_xfrm_socket pid=22590 comm=syz.1.7521 [ 434.949187][ T45] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 434.980830][ T45] usb 4-1: device descriptor read/8, error -71 [ 435.110477][ T45] usb 4-1: device descriptor read/8, error -71 [ 435.219435][ T45] usb usb4-port1: unable to enumerate USB device [ 435.409693][T22646] 9pnet_fd: Insufficient options for proto=fd [ 436.101629][T22686] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7556'. [ 436.128344][ T36] audit: type=1400 audit(2000000039.780:1608): avc: denied { getattr } for pid=22692 comm="syz.5.7558" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=85360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 436.259490][ T7410] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 436.309481][T22718] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7566'. [ 436.419156][ T7410] usb 4-1: Using ep0 maxpacket: 16 [ 436.425743][ T7410] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 436.438214][ T7410] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.448626][ T7410] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.464639][ T7410] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.474539][ T7410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.482857][ T7410] usb 4-1: Product: syz [ 436.487174][ T7410] usb 4-1: Manufacturer: syz [ 436.492578][ T7410] usb 4-1: SerialNumber: syz [ 436.885594][T22766] veth1: entered allmulticast mode [ 436.893881][T22765] veth1: left allmulticast mode [ 436.900132][ T7410] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 437.031447][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7588'. [ 437.253193][T22799] overlay: ./file0 is not a directory [ 437.507352][ T7410] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 437.519912][ T7410] usb 4-1: USB disconnect, device number 69 [ 437.535476][T22816] udevd[22816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 437.622270][T22819] fuse: Unknown parameter 'roo' [ 437.628892][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7603'. [ 438.049454][T22843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.121460][T22845] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 438.127948][T22845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:43 [ 438.137889][T22846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.262306][T22863] netlink: 'syz.3.7616': attribute type 28 has an invalid length. [ 438.293790][T22869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.293991][T22870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.498006][T22882] fuseblk: Bad value for 'rootmode' [ 438.881868][T22897] cannot load conntrack support for proto=3 [ 438.891024][T22897] binder: Unknown parameter '' [ 439.339130][ T45] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 439.510698][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 439.528825][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 439.547504][ T45] usb 4-1: config 1 has an invalid interface number: 121 but max is 0 [ 439.563128][ T45] usb 4-1: config 1 has no interface number 0 [ 439.571898][ T45] usb 4-1: config 1 interface 121 has no altsetting 0 [ 439.580333][ T45] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 439.590901][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.599133][ T45] usb 4-1: Product: syz [ 439.603397][ T45] usb 4-1: Manufacturer: ,êŠå©§ì—½ä®‘í é³´ìˆ©îž§î„³ê”²í‚„ᢩ辬졘ꚯ뫭ãŒé§”질⛸䫕ྃﱵ薶ç‡á„胬ã›áŽç¦‚⮘紒栢í€ä©°ï±»ä®¥é£²à§€ì¾˜è¨í•™ì¦áœ¹å¬¥ï ½ãª‘à´‡ã€‚è€‰æ£ [ 439.622149][ T45] usb 4-1: SerialNumber: syz [ 439.837820][ T45] usb_ehset_test 4-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 439.858282][ T45] usb 4-1: USB disconnect, device number 70 [ 440.022677][T22917] 9pnet_fd: Insufficient options for proto=fd [ 440.773066][ T36] audit: type=1400 audit(2000000044.430:1609): avc: denied { nlmsg_tty_audit } for pid=22938 comm="syz.3.7644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 440.873776][T22950] overlayfs: failed to clone upperpath [ 440.910737][T22958] 9pnet_fd: Insufficient options for proto=fd [ 440.917532][T22956] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7650'. [ 440.926937][T22956] netlink: 59 bytes leftover after parsing attributes in process `syz.1.7650'. [ 440.937463][T22956] netlink: 59 bytes leftover after parsing attributes in process `syz.1.7650'. [ 440.947946][ T36] audit: type=1326 audit(2000000044.600:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.1.7650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 441.289268][T22960] overlayfs: failed to clone upperpath [ 441.417320][ T36] audit: type=1326 audit(2000000045.070:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.3.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd038ebe9 code=0x7fc00000 [ 441.475797][ T36] audit: type=1326 audit(2000000045.130:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22973 comm="syz.4.7655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f989858ebe9 code=0x0 [ 441.520481][T22983] netlink: 'syz.1.7658': attribute type 2 has an invalid length. [ 441.530979][T22983] netlink: 'syz.1.7658': attribute type 46 has an invalid length. [ 441.539599][T22983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7658'. [ 442.084946][T22993] fuse: Bad value for 'fd' [ 442.141188][T23006] fuseblk: Bad value for 'fd' [ 442.457070][ T36] audit: type=1326 audit(2000000046.110:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.3.7673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bd038ebe9 code=0x0 [ 442.649424][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 443.520969][T23056] overlayfs: failed to clone upperpath [ 443.623415][T23065] overlayfs: failed to clone upperpath [ 443.681067][T23069] /dev/loop0: Can't lookup blockdev [ 444.558808][T23105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=23105 comm=syz.3.7691 [ 444.847709][T23142] netlink: 25 bytes leftover after parsing attributes in process `syz.3.7707'. [ 445.156514][T23171] overlayfs: failed to clone upperpath [ 445.163214][T23171] overlayfs: failed to clone upperpath [ 445.228108][T23193] 2N: renamed from vcan0 (while UP) [ 445.326682][ T36] audit: type=1400 audit(2000000048.980:1614): avc: denied { shutdown } for pid=23202 comm="syz.1.7727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 445.360224][T23208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7729'. [ 445.592194][T23223] overlayfs: failed to clone upperpath [ 447.461303][T23278] cgroup: Unknown subsys name 'measure' [ 447.522969][T23289] overlayfs: failed to clone upperpath [ 447.728344][T23318] virtiofs: Unknown parameter 'always' [ 449.690989][ T13] bridge_slave_1: left allmulticast mode [ 449.696735][ T13] bridge_slave_1: left promiscuous mode [ 449.702689][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.710591][ T13] bridge_slave_0: left allmulticast mode [ 449.716371][ T13] bridge_slave_0: left promiscuous mode [ 449.722434][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.835040][ T13] tipc: Left network mode [ 450.278939][T23370] overlayfs: failed to clone upperpath [ 451.096575][T23436] netlink: 'syz.3.7803': attribute type 4 has an invalid length. [ 451.261907][T23450] fuse: Unknown parameter 'f]>zøŽš8…tî”qo' [ 451.268301][ T36] audit: type=1400 audit(2000000054.920:1615): avc: denied { mounton } for pid=23449 comm="syz.4.7809" path="/" dev="configfs" ino=1753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 451.962736][ T36] audit: type=1326 audit(2000000055.620:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz.1.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed178ebe9 code=0x7fc00000 [ 452.093917][ T36] audit: type=1326 audit(2000000055.750:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.159129][ T36] audit: type=1326 audit(2000000055.750:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.211861][ T36] audit: type=1326 audit(2000000055.750:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.267009][ T36] audit: type=1326 audit(2000000055.750:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.309127][ T36] audit: type=1326 audit(2000000055.750:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.379132][ T36] audit: type=1326 audit(2000000055.750:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.419472][T23471] fuseblk: Bad value for 'fd' [ 452.433070][ T36] audit: type=1326 audit(2000000055.750:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.476928][ T36] audit: type=1326 audit(2000000055.750:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x7fc00000 [ 452.532074][T23475] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 452.559189][T23475] overlayfs: missing 'lowerdir' [ 453.253689][T23489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7822'. [ 453.306509][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7825'. [ 454.396010][T23579] netlink: 'syz.5.7851': attribute type 27 has an invalid length. [ 454.403194][T23581] overlayfs: failed to clone upperpath [ 454.451627][T23579] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.458948][T23579] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.842848][T23619] overlayfs: failed to clone upperpath [ 455.701193][T23672] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7885'. [ 455.813568][T23675] 9pnet_fd: Insufficient options for proto=fd [ 456.571965][T23701] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.579048][T23701] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.609172][T23701] bridge_slave_0: entered allmulticast mode [ 456.626270][T23701] bridge_slave_0: entered promiscuous mode [ 456.643219][T23701] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.679132][T23701] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.698421][T23701] bridge_slave_1: entered allmulticast mode [ 456.716588][T23701] bridge_slave_1: entered promiscuous mode [ 456.725944][T23722] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7903'. [ 456.863902][T23701] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.871017][T23701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.878328][T23701] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.885417][T23701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.031580][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.059567][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.094306][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.101444][ T7949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.133968][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.141120][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.207084][T23701] veth0_vlan: entered promiscuous mode [ 457.233502][T23701] veth1_macvtap: entered promiscuous mode [ 457.457052][T23757] netlink: 'syz.5.7912': attribute type 64 has an invalid length. [ 457.765277][T23786] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7922'. [ 457.774614][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7922'. [ 457.787067][T23786] netlink: 'syz.4.7922': attribute type 11 has an invalid length. [ 458.542941][ T7949] bridge_slave_1: left allmulticast mode [ 458.556111][ T7949] bridge_slave_1: left promiscuous mode [ 458.563011][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.571012][ T7949] bridge_slave_0: left allmulticast mode [ 458.576704][ T7949] bridge_slave_0: left promiscuous mode [ 458.582746][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.686830][T23810] tipc: Enabling of bearer rejected, failed to enable media [ 458.726086][ T7949] veth1_macvtap: left promiscuous mode [ 458.731814][ T7949] veth0_vlan: left promiscuous mode [ 458.789514][T23808] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.796702][T23808] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.804097][T23808] bridge_slave_0: entered allmulticast mode [ 458.810727][T23808] bridge_slave_0: entered promiscuous mode [ 458.817777][T23808] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.825143][T23808] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.832504][T23808] bridge_slave_1: entered allmulticast mode [ 458.839325][T23808] bridge_slave_1: entered promiscuous mode [ 458.903329][T23808] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.910439][T23808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.917769][T23808] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.925038][T23808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.947962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.955848][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.967547][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.974693][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.985024][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.992153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.015727][T23844] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7939'. [ 459.037975][T23808] veth0_vlan: entered promiscuous mode [ 459.054786][T23808] veth1_macvtap: entered promiscuous mode [ 459.369141][ T88] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 459.519132][ T88] usb 7-1: Using ep0 maxpacket: 16 [ 459.525728][ T88] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.536139][ T88] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.546932][ T88] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.556146][ T88] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.564297][ T88] usb 7-1: Product: syz [ 459.568480][ T88] usb 7-1: Manufacturer: syz [ 459.573150][ T88] usb 7-1: SerialNumber: syz [ 459.617826][T23867] veth1_macvtap: left promiscuous mode [ 459.668883][T23868] overlayfs: failed to resolve './file0:/': -2 [ 459.851909][T23895] futex_wake_op: syz.3.7954 tries to shift op by -1; fix this program [ 459.980236][ T88] usb 7-1: 0:2 : does not exist [ 459.986347][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7957'. [ 460.150707][T23912] fuse: Unknown parameter 'd' [ 460.427366][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7963'. [ 460.569706][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 461.043228][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 461.043248][ T36] audit: type=1326 audit(2016777509.705:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23972 comm="syz.1.7982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 461.145858][T23974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7982'. [ 461.819982][T24007] 9pnet_fd: Insufficient options for proto=fd [ 462.028958][ T36] audit: type=1400 audit(2016777517.683:1660): avc: denied { name_bind } for pid=24024 comm="syz.1.8002" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 462.043200][T24029] x_tables: unsorted underflow at hook 4 [ 462.143317][ T7417] usb 7-1: USB disconnect, device number 2 [ 462.197879][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.208363][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.384521][T24058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 462.384549][T24058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 462.819136][ T7413] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 462.989226][ T7413] usb 7-1: Using ep0 maxpacket: 16 [ 462.995757][ T7413] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 463.004556][ T7413] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 463.014669][ T7413] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.025015][ T7413] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.034131][ T7413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.042464][ T7413] usb 7-1: Product: syz [ 463.046989][ T7413] usb 7-1: Manufacturer: syz [ 463.052051][ T7413] usb 7-1: SerialNumber: syz [ 463.177199][T24115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8034'. [ 463.217379][T24122] overlayfs: failed to resolve './file1': -2 [ 463.275409][T24134] overlay: filesystem on ./bus is read-only [ 463.408277][T24144] overlayfs: failed to resolve './file0': -2 [ 463.455211][T24147] overlayfs: failed to clone upperpath [ 463.460566][ T7413] usb 7-1: 0:2 : does not exist [ 463.537540][T24161] netlink: 'syz.4.8051': attribute type 16 has an invalid length. [ 463.546639][T24161] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8051'. [ 463.898037][T24189] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8061'. [ 464.607113][T24221] fuse: Unknown parameter 'ff' [ 464.612512][T24221] overlayfs: failed to clone upperpath [ 464.619198][T24221] overlayfs: failed to clone upperpath [ 464.931465][ T36] audit: type=1400 audit(2016777520.593:1661): avc: denied { listen } for pid=24241 comm="syz.1.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 465.597465][ T7417] usb 7-1: USB disconnect, device number 3 [ 465.989467][ T36] audit: type=1400 audit(2016777521.653:1662): avc: denied { map } for pid=24361 comm="syz.1.8120" path="socket:[90237]" dev="sockfs" ino=90237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 466.049724][T24369] tipc: Enabling of bearer rejected, failed to enable media [ 466.076934][T24369] incfs: Options parsing error. -22 [ 466.085413][T24369] incfs: mount failed -22 [ 466.121907][T24374] overlayfs: missing 'lowerdir' [ 466.121907][T24375] overlayfs: missing 'lowerdir' [ 466.152491][T24381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8127'. [ 466.185611][T24391] /dev/loop0: Can't lookup blockdev [ 466.324638][T24399] netlink: 165 bytes leftover after parsing attributes in process `syz.6.8132'. [ 466.349239][T24403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8134'. [ 467.037775][ T36] audit: type=1326 audit(2016777522.693:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.4.8141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f989858ebe9 code=0x0 [ 467.119926][T24431] netlink: 'syz.6.8144': attribute type 1 has an invalid length. [ 467.322484][T24442] rust_binder: Write failure EFAULT in pid:70 [ 467.339898][T24444] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 467.346675][T24444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 467.356387][T24444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:73 [ 467.434506][T24450] 2N: renamed from vcan0 (while UP) [ 467.523409][T24453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 467.523498][T24452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 467.553337][T24452] rust_binder: Error in use_page_slow: ESRCH [ 467.553368][T24452] rust_binder: use_range failure ESRCH [ 467.559510][T24452] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 467.565132][T24452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 467.573546][T24452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:81 [ 467.596559][T24460] 8021q: VLANs not supported on ip_vti0 [ 467.928302][T24481] netlink: 'syz.1.8162': attribute type 4 has an invalid length. [ 467.994960][T24491] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 468.411433][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8172'. [ 469.459150][ T36] audit: type=1400 audit(2016777525.103:1664): avc: denied { accept } for pid=24603 comm="syz.6.8204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 469.637172][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.644712][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.654303][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.661945][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.668260][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.674960][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.682294][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.688575][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.694969][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.701385][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.707641][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.716550][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.723048][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.729576][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.736028][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.742435][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.748727][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.755035][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.761736][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.768033][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.774311][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.780576][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.786900][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.793188][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.799547][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.806001][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.812394][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.819018][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.825312][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.831602][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.837901][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.844263][T24643] 9pnet_fd: Insufficient options for proto=fd [ 469.850617][T24643] 9pnet_fd: Insufficient options for proto=fd [ 470.088191][T24692] overlayfs: missing 'lowerdir' [ 470.685876][T24719] overlayfs: failed to clone upperpath [ 471.439176][ T7413] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 471.589157][ T7413] usb 7-1: Using ep0 maxpacket: 16 [ 471.595901][ T7413] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.606212][ T7413] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.616767][ T7413] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.625973][ T7413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.634038][ T7413] usb 7-1: Product: syz [ 471.638367][ T7413] usb 7-1: Manufacturer: syz [ 471.643050][ T7413] usb 7-1: SerialNumber: syz [ 471.767639][T24765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8265'. [ 472.051884][ T7413] usb 7-1: 0:2 : does not exist [ 473.864672][T24812] netlink: 'syz.3.8278': attribute type 4 has an invalid length. [ 473.872811][T24812] netlink: 'syz.3.8278': attribute type 4 has an invalid length. [ 474.208341][ T7417] usb 7-1: USB disconnect, device number 4 [ 474.283103][ T36] audit: type=1326 audit(2016777529.943:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24821 comm="syz.6.8282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81d6f8ebe9 code=0x0 [ 474.353158][ T36] audit: type=1326 audit(2016777530.013:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.1.8284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 474.660348][T24832] fuse: Unknown parameter 'rootmoee' [ 474.660348][T24831] fuse: Unknown parameter 'rootmoee' [ 474.660738][T24832] overlayfs: failed to clone upperpath [ 474.677781][T24831] overlayfs: failed to clone upperpath [ 475.167198][ T36] audit: type=1326 audit(2016777530.823:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24840 comm="syz.6.8289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81d6f8ebe9 code=0x0 [ 475.862054][T24888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8306'. [ 475.899185][T24885] netlink: 'syz.6.8305': attribute type 1 has an invalid length. [ 475.940380][T24898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8309'. [ 476.014959][T24907] netlink: 'syz.1.8312': attribute type 4 has an invalid length. [ 476.492707][T24936] fuseblk: Bad value for 'fd' [ 476.573092][T24955] netlink: 'syz.6.8327': attribute type 3 has an invalid length. [ 476.936047][ T36] audit: type=1400 audit(2016777532.593:1668): avc: denied { map } for pid=24983 comm="syz.3.8338" path="socket:[92309]" dev="sockfs" ino=92309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 477.112045][T24993] netlink: 'syz.6.8341': attribute type 4 has an invalid length. [ 477.121942][T24993] netlink: 'syz.6.8341': attribute type 4 has an invalid length. [ 477.144280][T24995] veth0_vlan: entered allmulticast mode [ 477.260247][T25018] fuse: Bad value for 'fd' [ 477.264911][T25017] fuse: Bad value for 'fd' [ 477.385939][T25027] overlayfs: failed to clone upperpath [ 477.561826][T25050] netlink: 'syz.1.8362': attribute type 4 has an invalid length. [ 477.580208][T25050] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8362'. [ 477.630969][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8365'. [ 477.866200][T25077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8372'. [ 477.879203][T25077] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8372'. [ 477.926726][ T36] audit: type=1326 audit(2016777533.579:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25084 comm="syz.3.8375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd038ebe9 code=0x0 [ 477.978962][T25087] netlink: 'syz.3.8375': attribute type 12 has an invalid length. [ 478.372624][T25132] 9pnet_fd: p9_fd_create_tcp (25132): problem connecting socket to 127.0.0.1 [ 478.689065][T25168] netlink: 300 bytes leftover after parsing attributes in process `syz.1.8404'. [ 478.699019][T25168] 9pnet_fd: Insufficient options for proto=fd [ 479.784681][T25242] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8432'. [ 479.811807][T25245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25245 comm=syz.4.8434 [ 479.846729][T25251] overlayfs: failed to clone upperpath [ 479.853009][T25252] overlayfs: failed to clone upperpath [ 479.969735][T25287] incfs: Error accessing: ./file0. [ 479.974941][T25287] incfs: mount failed -20 [ 479.980575][T25287] overlay: ./file0 is not a directory [ 479.993604][T25291] overlayfs: failed to resolve './cgroup': -2 [ 480.448101][ T36] audit: type=1326 audit(2016777536.080:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25040 comm="syz.6.8359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d6f8ebe9 code=0x7fc00000 [ 480.480136][T25313] netlink: 'syz.6.8460': attribute type 6 has an invalid length. [ 480.488044][T25313] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.068027][T25346] netlink: 'syz.6.8472': attribute type 4 has an invalid length. [ 481.290894][T25380] fuse: Unknown parameter '000000000000000000000030x00000000000000040x000000000000000300000000000000000000' [ 481.315284][ T36] audit: type=1326 audit(2016777536.943:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.1.8487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 481.338723][ T36] audit: type=1326 audit(2016777536.943:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.1.8487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 481.431718][T25397] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 481.736326][T25424] overlayfs: failed to clone upperpath [ 481.870908][T25442] netlink: 'syz.1.8509': attribute type 4 has an invalid length. [ 481.879553][T25442] netlink: 'syz.1.8509': attribute type 17 has an invalid length. [ 481.905004][T25444] x_tables: duplicate underflow at hook 1 [ 482.519314][T25470] tmpfs: Unknown parameter 'noswZ_x§]~¦ap' [ 482.537404][T25472] netlink: 288 bytes leftover after parsing attributes in process `syz.1.8521'. [ 482.646699][T25491] overlayfs: failed to clone upperpath [ 482.740144][T25515] fuse: Unknown parameter 'f' [ 482.756081][T25518] fuse: Unknown parameter 'dd' [ 482.979298][T25581] 9pnet: Could not find request transport: unex [ 482.980393][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8563'. [ 483.012319][T25584] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8561'. [ 483.029215][T25572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14576 sclass=netlink_route_socket pid=25572 comm=syz.4.8561 [ 483.436706][T25608] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8574'. [ 483.445770][T25608] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8574'. [ 483.454861][T25608] netlink: 'syz.6.8574': attribute type 6 has an invalid length. [ 483.462887][T25608] netlink: 'syz.6.8574': attribute type 5 has an invalid length. [ 483.470811][T25608] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8574'. [ 483.497349][T25610] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8575'. [ 483.522667][T25614] overlayfs: failed to clone upperpath [ 483.666370][T25633] overlayfs: failed to resolve './file1': -2 [ 483.947584][T25660] 9pnet_fd: Insufficient options for proto=fd [ 483.954398][T25660] 9pnet: Could not find request transport: f…/rfdno=0xffffffffffffffff [ 484.027181][T25681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25681 comm=syz.4.8600 [ 484.246056][T25704] netlink: 393 bytes leftover after parsing attributes in process `syz.4.8607'. [ 484.458380][T25708] fuseblk: Bad value for 'group_id' [ 484.463955][T25708] fuseblk: Bad value for 'group_id' [ 484.521463][ T36] audit: type=1400 audit(2016777540.120:1673): avc: denied { accept } for pid=25707 comm="syz.6.8609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 484.544955][T25724] 9pnet_fd: Insufficient options for proto=fd [ 484.625620][T25737] tmpfs: Bad value for 'mode' [ 484.718153][ T36] audit: type=1326 audit(2016777540.328:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25742 comm="syz.1.8621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ed178ebe9 code=0x0 [ 484.800690][T25751] 9pnet_fd: Insufficient options for proto=fd [ 485.566508][T25786] fuse: Unknown parameter 'rootmodem00000000000000000040000' [ 485.892177][T25806] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.899452][T25806] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.906829][T25806] bridge_slave_0: entered allmulticast mode [ 485.918617][T25806] bridge_slave_0: entered promiscuous mode [ 485.925481][T25806] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.933377][T25806] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.940559][T25806] bridge_slave_1: entered allmulticast mode [ 485.947178][T25806] bridge_slave_1: entered promiscuous mode [ 486.044076][T25806] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.051183][T25806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.058534][T25806] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.065710][T25806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.176133][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.194652][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.236883][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.243970][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.275806][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.282895][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.330375][T25806] veth0_vlan: entered promiscuous mode [ 486.354344][T25806] veth1_macvtap: entered promiscuous mode [ 486.411955][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8641'. [ 486.609327][T25855] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 487.382396][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 487.535872][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 487.545409][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.553632][ T9] usb 2-1: Product: syz [ 487.557925][ T9] usb 2-1: Manufacturer: syz [ 487.562562][ T9] usb 2-1: SerialNumber: syz [ 487.600046][ T36] audit: type=1400 audit(2016777543.179:1675): avc: denied { map } for pid=25906 comm="syz.6.8672" path="/122/file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 487.675741][T25916] 9pnet_fd: Insufficient options for proto=fd [ 487.682132][T25916] 9pnet_fd: Insufficient options for proto=fd [ 487.690353][T25916] 9pnet_fd: Insufficient options for proto=fd [ 487.696818][T25916] 9pnet_fd: Insufficient options for proto=fd [ 487.706024][T25916] 9pnet_fd: Insufficient options for proto=fd [ 487.712605][T25916] 9pnet_fd: Insufficient options for proto=fd [ 487.719778][T25916] 9pnet_fd: Insufficient options for proto=fd [ 487.734749][T25916] 9pnet_fd: Insufficient options for proto=fd [ 488.207537][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 488.217892][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 488.230376][ T9] usb 2-1: USB disconnect, device number 39 [ 488.246430][T25968] netlink: 'syz.6.8693': attribute type 4 has an invalid length. [ 488.259574][T25968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=25968 comm=syz.6.8693 [ 488.851474][ T9] rust_binder: 26011: removing orphan mapping 0:24 [ 489.577647][T26067] 9pnet: p9_errstr2errno: server reported unknown error [ 489.770489][T26075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8727'. [ 489.787692][T26077] 2N: renamed from vcan0 (while UP) [ 489.939464][T26086] netlink: 92 bytes leftover after parsing attributes in process `syz.6.8732'. [ 490.029889][T26092] netlink: 37 bytes leftover after parsing attributes in process `syz.6.8733'. [ 490.080086][ T62] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 490.252245][ T62] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 490.270648][ T62] usb 2-1: config 0 has no interface number 0 [ 490.278212][ T62] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 490.301918][ T62] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 490.311148][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.324674][ T62] usb 2-1: Product: syz [ 490.333277][ T62] usb 2-1: Manufacturer: syz [ 490.343365][ T62] usb 2-1: SerialNumber: syz [ 490.353712][ T62] usb 2-1: config 0 descriptor?? [ 490.366681][T26079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 490.374915][ T62] usb-storage 2-1:0.20: USB Mass Storage device detected [ 490.395244][ T62] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 490.580393][ T62] scsi host1: usb-storage 2-1:0.20 [ 490.603037][ T62] usb 2-1: USB disconnect, device number 40 [ 491.121704][T26134] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8747'. [ 491.551931][T26155] fuse: Unknown parameter '000000000000000000000050x0000000000000007' [ 491.706294][T26186] 2N: renamed from vcan0 (while UP) [ 491.723133][T26188] bpf: Bad value for 'mode' [ 491.809865][T26193] cgroup: noprefix used incorrectly [ 492.076288][T26236] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8781'. [ 492.087364][T26236] 9pnet_fd: Insufficient options for proto=fd [ 492.272604][T26260] netlink: 'syz.3.8789': attribute type 4 has an invalid length. [ 492.751323][T26316] 9pnet_fd: Insufficient options for proto=fd [ 492.751350][T26317] 9pnet_fd: Insufficient options for proto=fd [ 492.889112][T26339] overlay: ./file0 is not a directory [ 493.443198][T26365] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8825'. [ 493.551497][T26381] netlink: 'syz.4.8832': attribute type 12 has an invalid length. [ 493.560960][T26383] overlayfs: failed to clone upperpath [ 493.649503][T26393] 9pnet_virtio: no channels available for device syz [ 493.656539][T26393] overlay: ./file0 is not a directory [ 495.604191][ T36] audit: type=1400 audit(2016777551.138:1676): avc: denied { open } for pid=26500 comm="syz.3.8869" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 495.632710][ T36] audit: type=1400 audit(2016777551.138:1677): avc: denied { write } for pid=26500 comm="syz.3.8869" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 495.658960][ T36] audit: type=1326 audit(2016777551.198:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26503 comm="syz.4.8870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989858ebe9 code=0x80000000 [ 495.896276][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 496.030972][T26522] netlink: 'syz.6.8879': attribute type 4 has an invalid length. [ 496.038985][T26522] netlink: 'syz.6.8879': attribute type 4 has an invalid length. [ 496.048386][T26523] netlink: 'syz.6.8879': attribute type 4 has an invalid length. [ 496.374520][T26564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8893'. [ 496.676130][T26591] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8903'. [ 497.177555][T26609] overlayfs: failed to clone upperpath [ 497.183567][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 498.079076][T26651] tipc: Started in network mode [ 498.083990][T26651] tipc: Node identity 4, cluster identity 4711 [ 498.090460][T26651] tipc: Node number set to 4 [ 498.575732][T26656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8928'. [ 498.739988][ T36] audit: type=1400 audit(2016777554.250:1679): avc: denied { mounton } for pid=26657 comm="syz.1.8929" path="/33/file0" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 499.492935][T26702] overlayfs: failed to clone upperpath [ 499.726358][T26731] 9pnet_fd: Insufficient options for proto=fd [ 500.645810][T26784] overlayfs: failed to clone upperpath [ 500.666947][T26786] netlink: 'syz.3.8973': attribute type 63 has an invalid length. [ 500.675078][T26786] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8973'. [ 500.690432][T26786] gretap0: entered allmulticast mode [ 500.697152][T26786] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 501.145990][T26823] x_tables: duplicate entry at hook 2 [ 501.165837][T26825] netlink: 'syz.4.8988': attribute type 3 has an invalid length. [ 501.249801][T26827] netlink: 1327 bytes leftover after parsing attributes in process `syz.3.8989'. [ 501.311318][ T36] audit: type=1326 audit(2016777556.816:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.6.8990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81d6f8ebe9 code=0x0 [ 502.778841][T26929] netlink: 'syz.1.9028': attribute type 16 has an invalid length. [ 504.072869][T26966] netlink: 'syz.6.9040': attribute type 4 has an invalid length. [ 504.207312][T26982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9046'. [ 504.231723][T26980] 9pnet_fd: Insufficient options for proto=fd [ 504.799279][T27005] /dev/loop0: Can't lookup blockdev [ 504.855689][ T36] audit: type=1400 audit(2016777560.347:1681): avc: denied { connect } for pid=27012 comm="syz.6.9058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.100646][ T36] audit: type=1326 audit(2016777560.586:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27035 comm="syz.3.9067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd038ebe9 code=0x0 [ 506.055503][T27086] netlink: 'syz.6.9086': attribute type 15 has an invalid length. [ 506.077859][ T36] audit: type=1326 audit(2016777561.551:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27087 comm="syz.6.9087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81d6f8ebe9 code=0x0 [ 506.830020][T27131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9100'. [ 506.839462][T27131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=27131 comm=syz.3.9100 [ 506.939625][T27159] fuseblk: Unknown parameter 'fÄÍ0x0000000000000004' [ 506.972094][T27163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=27163 comm=syz.4.9112 [ 506.999010][T27168] netlink: 'syz.4.9113': attribute type 4 has an invalid length. [ 507.006852][T27168] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9113'. [ 507.080512][T27181] netlink: 'syz.4.9118': attribute type 4 has an invalid length. [ 507.507625][T27208] netlink: 316 bytes leftover after parsing attributes in process `syz.3.9126'. [ 507.517634][T27209] netlink: 316 bytes leftover after parsing attributes in process `syz.3.9126'. [ 507.549487][ T36] audit: type=1326 audit(2016777563.024:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27215 comm="syz.3.9128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd038ebe9 code=0x0 [ 507.650969][T27217] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9128'. [ 507.934704][T27241] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27241 comm=syz.1.9138 [ 508.415982][T27270] cgroup: fork rejected by pids controller in /syz1 [ 509.185585][T27376] overlayfs: failed to clone upperpath [ 509.258262][T27385] /dev/loop0: Can't lookup blockdev [ 510.434947][T27435] tipc: Started in network mode [ 510.439868][T27435] tipc: Node identity fffffffa, cluster identity 4 [ 510.446486][T27435] tipc: Node number set to 4294967290 [ 510.467290][T27437] overlayfs: failed to clone upperpath [ 510.488599][T27440] overlayfs: failed to resolve './file1/file0': -2 [ 510.612072][T27453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9189'. [ 510.790471][T27475] 9pnet_fd: Insufficient options for proto=fd [ 510.855710][T27489] overlayfs: failed to clone upperpath [ 511.058186][T27520] overlayfs: failed to clone upperpath [ 511.101534][T27526] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9215'. [ 511.235031][T27548] x_tables: unsorted underflow at hook 2 [ 511.239389][T27550] veth1: entered allmulticast mode [ 511.249630][T27549] veth1: left allmulticast mode [ 511.453829][T27593] fuseblk: Unknown parameter 'obj_role' [ 511.476487][ T36] audit: type=1326 audit(2016777566.925:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27594 comm="syz.6.9238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81d6f8ebe9 code=0x0 [ 512.308743][T27629] tipc: Enabling of bearer rejected, failed to enable media [ 512.675191][T27655] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9256'. [ 513.474401][T27707] overlayfs: failed to clone lowerpath [ 513.489818][T27710] cgroup: Need name or subsystem set [ 513.701987][T27735] netlink: 'syz.3.9285': attribute type 6 has an invalid length. [ 513.710188][T27735] netlink: 'syz.3.9285': attribute type 4 has an invalid length. [ 513.718638][T27735] netlink: 'syz.3.9285': attribute type 6 has an invalid length. [ 513.726593][T27735] netlink: 'syz.3.9285': attribute type 13 has an invalid length. [ 513.734694][T27735] netlink: 'syz.3.9285': attribute type 15 has an invalid length. [ 513.742720][T27735] netlink: 'syz.3.9285': attribute type 19 has an invalid length. [ 513.755948][T27735] netlink: 3684 bytes leftover after parsing attributes in process `syz.3.9285'. [ 514.093042][T27751] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9290'. [ 515.085580][ T36] audit: type=1400 audit(2016777570.530:1686): avc: denied { create } for pid=27816 comm="syz.4.9313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 515.108372][T27818] veth1: entered allmulticast mode [ 515.123848][T27816] veth1: left allmulticast mode [ 515.179604][T27825] 9pnet_fd: Insufficient options for proto=fd [ 516.122847][T27853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9325'. [ 516.292647][T27859] overlayfs: missing 'lowerdir' [ 516.706677][T27881] syz.6.9334: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 516.721690][T27881] CPU: 0 UID: 0 PID: 27881 Comm: syz.6.9334 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 516.721722][T27881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.721741][T27881] Call Trace: [ 516.721750][T27881] [ 516.721763][T27881] __dump_stack+0x21/0x30 [ 516.721797][T27881] dump_stack_lvl+0x10c/0x190 [ 516.721827][T27881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 516.721860][T27881] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 516.721896][T27881] dump_stack+0x19/0x20 [ 516.721924][T27881] warn_alloc+0x1bc/0x2a0 [ 516.721954][T27881] ? stack_depot_save_flags+0x38/0x800 [ 516.721984][T27881] ? __cfi_warn_alloc+0x10/0x10 [ 516.722014][T27881] ? kasan_save_track+0x4f/0x80 [ 516.722053][T27881] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 516.722089][T27881] ? xskq_create+0x68/0x2a0 [ 516.722112][T27881] ? xsk_init_queue+0xb6/0x120 [ 516.722134][T27881] ? xsk_setsockopt+0x43f/0x6f0 [ 516.722155][T27881] ? do_sock_setsockopt+0x26d/0x400 [ 516.722179][T27881] ? __x64_sys_setsockopt+0x1b8/0x250 [ 516.722202][T27881] ? x64_sys_call+0x2adc/0x2ee0 [ 516.722236][T27881] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 516.722264][T27881] __vmalloc_node_range_noprof+0x135/0x1420 [ 516.722303][T27881] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 516.722335][T27881] ? avc_has_perm+0x144/0x220 [ 516.722367][T27881] ? kasan_save_alloc_info+0x40/0x50 [ 516.722398][T27881] ? __kasan_kmalloc+0x96/0xb0 [ 516.722423][T27881] vmalloc_user_noprof+0x77/0x90 [ 516.722453][T27881] ? xskq_create+0xdb/0x2a0 [ 516.722475][T27881] xskq_create+0xdb/0x2a0 [ 516.722498][T27881] xsk_init_queue+0xb6/0x120 [ 516.722520][T27881] xsk_setsockopt+0x43f/0x6f0 [ 516.722542][T27881] ? __cfi_xsk_setsockopt+0x10/0x10 [ 516.722564][T27881] ? do_futex+0x309/0x500 [ 516.722588][T27881] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 516.722617][T27881] ? security_socket_setsockopt+0x33/0xd0 [ 516.722639][T27881] ? __cfi_xsk_setsockopt+0x10/0x10 [ 516.722662][T27881] do_sock_setsockopt+0x26d/0x400 [ 516.722684][T27881] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 516.722711][T27881] __x64_sys_setsockopt+0x1b8/0x250 [ 516.722735][T27881] x64_sys_call+0x2adc/0x2ee0 [ 516.722767][T27881] do_syscall_64+0x58/0xf0 [ 516.722799][T27881] ? clear_bhb_loop+0x50/0xa0 [ 516.722826][T27881] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 516.722852][T27881] RIP: 0033:0x7f81d6f8ebe9 [ 516.722874][T27881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.722895][T27881] RSP: 002b:00007f81d59f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.722934][T27881] RAX: ffffffffffffffda RBX: 00007f81d71c6090 RCX: 00007f81d6f8ebe9 [ 516.722953][T27881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 516.722968][T27881] RBP: 00007f81d7011e19 R08: 0000000000000004 R09: 0000000000000000 [ 516.722985][T27881] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.723008][T27881] R13: 00007f81d71c6128 R14: 00007f81d71c6090 R15: 00007ffc5f491cb8 [ 516.723093][T27881] [ 517.074791][T27881] Mem-Info: [ 517.077975][T27881] active_anon:70244 inactive_anon:44 isolated_anon:0 [ 517.077975][T27881] active_file:7597 inactive_file:19331 isolated_file:0 [ 517.077975][T27881] unevictable:17393 dirty:61 writeback:0 [ 517.077975][T27881] slab_reclaimable:6875 slab_unreclaimable:80365 [ 517.077975][T27881] mapped:23996 shmem:62192 pagetables:1362 [ 517.077975][T27881] sec_pagetables:0 bounce:0 [ 517.077975][T27881] kernel_misc_reclaimable:0 [ 517.077975][T27881] free:1332308 free_pcp:2559 free_cma:0 [ 517.125053][T27881] Node 0 active_anon:264776kB inactive_anon:176kB active_file:30388kB inactive_file:77324kB unevictable:69572kB isolated(anon):0kB isolated(file):0kB mapped:95984kB dirty:244kB writeback:0kB shmem:232668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB writeback_tmp:0kB kernel_stack:7436kB pagetables:5448kB sec_pagetables:0kB all_unreclaimable? no [ 517.158411][T27881] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965948kB mlocked:0kB bounce:0kB free_pcp:5736kB local_pcp:5736kB free_cma:0kB [ 517.188442][T27881] lowmem_reserve[]: 0 3921 3921 [ 517.194446][T27881] Normal free:2396720kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:244576kB inactive_anon:176kB active_file:30388kB inactive_file:77324kB unevictable:69572kB writepending:244kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:12972kB local_pcp:328kB free_cma:0kB [ 517.226619][T27881] lowmem_reserve[]: 0 0 0 [ 517.231250][T27881] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 517.247465][T27881] Normal: 370*4kB (UME) 576*8kB (UME) 963*16kB (UME) 317*32kB (UME) 1004*64kB (UME) 343*128kB (UME) 148*256kB (UME) 66*512kB (UME) 42*1024kB (ME) 9*2048kB (ME) 524*4096kB (UM) = 2419224kB [ 517.266896][T27881] 94240 total pagecache pages [ 517.271677][T27881] 93 pages in swap cache [ 517.276108][T27881] Free swap = 123852kB [ 517.280298][T27881] Total swap = 124996kB [ 517.284522][T27881] 2097051 pages RAM [ 517.288359][T27881] 0 pages HighMem/MovableOnly [ 517.293117][T27881] 351534 pages reserved [ 517.297488][T27881] 0 pages cma reserved [ 517.304650][T27881] Memory allocations: [ 517.308713][T27881] 0 B 0 init/main.c:1370 func:do_initcalls [ 517.317782][T27881] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 517.326065][T27881] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 517.333786][T27881] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 517.341891][T27881] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 517.349874][T27881] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 517.358542][T27881] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 517.366755][T27881] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 517.374847][T27881] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 517.382907][T27881] 0 B 0 init/initramfs.c:101 func:find_link [ 517.528636][T27915] can: request_module (can-proto-0) failed. [ 517.567510][ T36] audit: type=1400 audit(2016777573.010:1687): avc: denied { create } for pid=27916 comm="syz.6.9346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 517.629827][T27919] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9347'. [ 518.245201][T27977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9368'. [ 518.403727][T27987] overlayfs: failed to clone upperpath [ 518.512889][T27989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9372'. [ 518.522091][T27989] netlink: 'syz.6.9372': attribute type 3 has an invalid length. [ 519.180288][T28023] fuse: Bad value for 'rootmode' [ 519.834917][T28047] bridge0: port 3(veth0_to_bridge) entered blocking state [ 519.852135][T28047] bridge0: port 3(veth0_to_bridge) entered disabled state [ 519.859347][T28047] veth0_to_bridge: entered allmulticast mode [ 519.883163][T28047] veth0_to_bridge: entered promiscuous mode [ 519.889422][T28047] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 519.912141][T28047] bridge0: port 3(veth0_to_bridge) entered blocking state [ 519.919315][T28047] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 520.272089][ T36] audit: type=1326 audit(2016777575.700:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28062 comm="syz.3.9393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd038ebe9 code=0x0 [ 520.983532][T28082] netlink: 'syz.1.9398': attribute type 13 has an invalid length. [ 521.144413][T28088] 9pnet_fd: Insufficient options for proto=fd [ 521.863724][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9406'. [ 522.194098][T28133] overlayfs: failed to clone upperpath [ 523.156344][T28199] /dev/loop0: Can't lookup blockdev [ 524.237405][T28226] /dev/loop0: Can't lookup blockdev [ 524.809949][T28250] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9461'. [ 526.204707][T28310] netlink: 'syz.6.9479': attribute type 17 has an invalid length. [ 526.633096][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9486'. [ 526.839366][T28344] netlink: 'syz.3.9491': attribute type 11 has an invalid length. [ 527.369992][T28391] netlink: 'syz.1.9506': attribute type 16 has an invalid length. [ 527.378037][T28391] netlink: 'syz.1.9506': attribute type 3 has an invalid length. [ 527.385847][T28391] netlink: 64058 bytes leftover after parsing attributes in process `syz.1.9506'. [ 527.593667][T28401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28401 comm=syz.3.9509 [ 529.626674][ T36] audit: type=1400 audit(2016777585.070:1689): avc: denied { watch_reads } for pid=28476 comm="syz.6.9536" path="/352/file0" dev="tmpfs" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 529.912161][T28488] netlink: 'syz.6.9539': attribute type 2 has an invalid length. [ 530.793827][T28509] bpf: Bad value for 'uid' [ 530.991926][T28524] /dev/loop0: Can't lookup blockdev [ 531.408686][T28545] overlayfs: failed to clone upperpath [ 531.948915][T28581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=28581 comm=syz.1.9570 [ 532.525997][ T36] audit: type=1400 audit(2016777587.970:1690): avc: denied { relabelto } for pid=28589 comm="syz.3.9574" name="file0" dev="tmpfs" ino=2993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 532.582682][ T36] audit: type=1400 audit(2016777587.970:1691): avc: denied { mounton } for pid=28589 comm="syz.3.9574" path="/550/file0" dev="tmpfs" ino=2993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 532.642164][ T36] audit: type=1400 audit(2016777588.080:1692): avc: denied { unlink } for pid=22267 comm="syz-executor" name="file0" dev="tmpfs" ino=2993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 532.885336][T28609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28609 comm=syz.6.9580 [ 533.003630][T28617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28617 comm=syz.6.9583 [ 533.549688][T28645] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9592'. [ 536.107008][T28696] overlayfs: missing 'lowerdir' [ 536.263461][T28711] 9pnet_fd: Insufficient options for proto=fd [ 536.435379][ T36] audit: type=1400 audit(2016777591.880:1693): avc: denied { create } for pid=28722 comm="syz.3.9615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 537.509872][T28767] 9pnet_fd: Insufficient options for proto=fd [ 537.567411][T28773] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9633'. [ 538.295282][T28815] 9pnet: p9_errstr2errno: server reported unknown error [ 540.547038][T28876] x_tables: duplicate underflow at hook 1 [ 540.553097][T28877] x_tables: duplicate underflow at hook 1 [ 542.769979][T28870] overlayfs: failed to clone upperpath [ 542.893522][T28913] overlayfs: missing 'lowerdir' [ 543.140446][T28924] netlink: 'syz.6.9684': attribute type 4 has an invalid length. [ 543.184366][T28924] netlink: 'syz.6.9684': attribute type 17 has an invalid length. [ 543.436187][T28939] fuse: Bad value for 'fd' [ 544.027185][T28965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9696'. [ 544.294706][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9697'. [ 544.892433][T28974] netlink: 'syz.4.9698': attribute type 4 has an invalid length. [ 544.911523][T28974] netlink: 'syz.4.9698': attribute type 17 has an invalid length. [ 545.657621][T29005] 9pnet_fd: Insufficient options for proto=fd [ 545.823256][T29011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=29011 comm=syz.4.9714 [ 547.451332][T29070] netlink: 'syz.1.9733': attribute type 17 has an invalid length. [ 547.484036][T29069] netlink: 'syz.1.9733': attribute type 4 has an invalid length. [ 548.372192][T29095] veth1_to_batadv: entered promiscuous mode [ 548.378161][T29095] veth1_to_batadv: entered allmulticast mode [ 548.450543][T29078] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.492319][T29078] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.499666][T29078] bridge_slave_0: entered allmulticast mode [ 548.532591][T29078] bridge_slave_0: entered promiscuous mode [ 548.563719][T29101] netlink: 57 bytes leftover after parsing attributes in process `syz.4.9742'. [ 548.600116][T29078] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.617928][T29078] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.652139][T29078] bridge_slave_1: entered allmulticast mode [ 548.659678][T29078] bridge_slave_1: entered promiscuous mode [ 548.759655][T29111] netlink: 'syz.1.9745': attribute type 29 has an invalid length. [ 548.802188][T29114] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9746'. [ 548.910046][T29078] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.917181][T29078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.924541][T29078] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.931615][T29078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.015029][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.022629][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.045282][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.052382][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.073010][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.080097][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.153571][T29078] veth0_vlan: entered promiscuous mode [ 549.177622][T29078] veth1_macvtap: entered promiscuous mode [ 549.880577][T29157] sit0: entered promiscuous mode [ 549.887414][T29157] netlink: 'syz.4.9758': attribute type 1 has an invalid length. [ 549.895484][T29157] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9758'. [ 550.234996][ T36] audit: type=1400 audit(2016777605.680:1694): avc: denied { mounton } for pid=29078 comm="syz-executor" path="/root/syzkaller.Uigozp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=103085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 552.277686][T29163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9760'. [ 552.307478][T29163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29163 comm=syz.1.9760 [ 553.292083][ T7417] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 553.516085][ T7417] usb 4-1: Using ep0 maxpacket: 8 [ 553.529944][ T7417] usb 4-1: unable to get BOS descriptor or descriptor too short [ 553.540635][ T7417] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 553.549056][ T7417] usb 4-1: config 0 has no interface number 0 [ 553.561251][ T7417] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 553.577057][ T7417] usb 4-1: config 0 interface 88 has no altsetting 0 [ 553.588966][ T7417] usb 4-1: string descriptor 0 read error: -22 [ 553.595502][ T7417] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 553.609063][ T7417] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 553.642262][ T7417] usb 4-1: config 0 descriptor?? [ 553.663579][ T7417] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input28 [ 553.880801][ T7417] usb 4-1: USB disconnect, device number 71 [ 554.408762][T29222] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 554.672113][ T401] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 554.842096][ T401] usb 4-1: Using ep0 maxpacket: 16 [ 554.852806][ T401] usb 4-1: config 1 interface 0 altsetting 129 bulk endpoint 0x1 has invalid maxpacket 32 [ 554.872091][ T401] usb 4-1: config 1 interface 0 has no altsetting 0 [ 554.883933][ T401] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 554.902112][ T401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.920327][ T401] usb 4-1: Product: syz [ 554.930427][ T401] usb 4-1: Manufacturer: syz [ 554.940527][ T401] usb 4-1: SerialNumber: syz [ 554.951687][T29224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 555.236832][T29224] rust_binder: 6: no such ref 0 [ 555.252361][T29224] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 555.265557][T29224] rust_binder: 6: no such ref 0 [ 555.397906][ T401] usb 4-1: USB disconnect, device number 72 [ 555.623860][T29234] /dev/rnullb0: Can't lookup blockdev [ 556.993308][ T36] audit: type=1326 audit(2016777612.440:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29272 comm="syz.6.9794" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81d6f8ebe9 code=0x0 [ 557.422945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 557.423140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.435187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 557.447047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.459167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 557.471108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.483386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 557.495123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.507239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 557.519074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.846082][T29281] overlay: filesystem on ./bus not supported as upperdir [ 562.432100][ C0] net_ratelimit: 109298 callbacks suppressed [ 562.432124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.432231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 562.438244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.450349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 562.462118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.474394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 562.486188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.498329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 562.510157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.522333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 567.442067][ C0] net_ratelimit: 123891 callbacks suppressed [ 567.442092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.442180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 567.448329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.460510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.472493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.484671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 567.496519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.508571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.520424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.532637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 568.802063][ C0] sched: DL replenish lagged too much [ 572.452095][ C1] net_ratelimit: 125743 callbacks suppressed [ 572.452120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 572.452139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.458366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.470268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.482272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 572.494043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.506117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.518048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.530041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 572.541781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.782331][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 577.462102][ C1] net_ratelimit: 125505 callbacks suppressed [ 577.462162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 577.462167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.462404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.468673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.480427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.492555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 577.504529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.516419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.528223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.540420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 582.472054][ C0] net_ratelimit: 121854 callbacks suppressed [ 582.472078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.472176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.478305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.490346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 582.502208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.514232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.526237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.538239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 582.549989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.562190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.482054][ C0] net_ratelimit: 123872 callbacks suppressed [ 587.482078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.482227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 587.488172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.500353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.512397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.524358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 587.536102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.548190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.560198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.572249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 592.492075][ C0] net_ratelimit: 122204 callbacks suppressed [ 592.492101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.492181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.498218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.510331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 592.522119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.534301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.546370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.558354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 592.570131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.582220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.502066][ C0] net_ratelimit: 120798 callbacks suppressed [ 597.502091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.502172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.508233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.520283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 597.532071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.544164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.556060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.568085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 597.579850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.591933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.512107][ C1] net_ratelimit: 130450 callbacks suppressed [ 602.512133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.512154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.518382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 602.530241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.542193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.554038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.566173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 602.578010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.589981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.601844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.522083][ C0] net_ratelimit: 129946 callbacks suppressed [ 607.522109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.522178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.528482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.540547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 607.552336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.564406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.576415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.588469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 607.600222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.612306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.532095][ C0] net_ratelimit: 125360 callbacks suppressed [ 612.532120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.532189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.538224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.550418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 612.562826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.574743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.586668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.598894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 612.610625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.622718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.542051][ C0] net_ratelimit: 125491 callbacks suppressed [ 617.542076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.542083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.542253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 617.548193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.560361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.572247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.584534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 617.596303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.608386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.620429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.552096][ C0] net_ratelimit: 125783 callbacks suppressed [ 622.552119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.552153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 622.558246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.570402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.582446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.594411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 622.606219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.618287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.630260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.642283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 627.562050][ C0] net_ratelimit: 124107 callbacks suppressed [ 627.562075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.562202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 627.568248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.580298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.592496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.604756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 627.616542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.628524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.640411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.652599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 632.572041][ C0] net_ratelimit: 125558 callbacks suppressed [ 632.572065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.572117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 632.578172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.590265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.602215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.614288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 632.625989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.638071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.650125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.662195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 637.582095][ C0] net_ratelimit: 129029 callbacks suppressed [ 637.582119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.582246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 637.588208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.600413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.612384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.624485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 637.636265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.648377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.660287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.672290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 639.342403][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 642.592068][ C0] net_ratelimit: 121961 callbacks suppressed [ 642.592092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.592220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.598309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.610356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 642.622314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.634992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.647063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.659129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 642.670937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.683084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.602029][ C1] net_ratelimit: 125899 callbacks suppressed [ 647.602053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 647.602107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.608286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.620180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.632299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 647.644189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.656205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.668058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.680179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 647.691985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.612081][ C0] net_ratelimit: 120919 callbacks suppressed [ 652.612105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.612198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.618199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.630352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 652.642156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.654107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.665973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.678118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 652.689952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.701910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.334193][ T7954] bridge_slave_1: left allmulticast mode [ 653.972444][ T7954] bridge_slave_1: left promiscuous mode [ 654.242920][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.993582][ T7954] bridge_slave_0: left allmulticast mode [ 657.500502][ T7954] bridge_slave_0: left promiscuous mode [ 657.622089][ C0] net_ratelimit: 124381 callbacks suppressed [ 657.622113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.622155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 657.628185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.640292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.652219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.664197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 657.675990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.688110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.700033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.712039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 658.922845][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.632056][ C0] net_ratelimit: 123263 callbacks suppressed [ 662.632082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.632206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 662.638248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.650451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.662597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.674848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 662.686703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.698658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.710813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.722920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 667.642038][ C0] net_ratelimit: 124658 callbacks suppressed [ 667.642062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.642141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 667.648206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.660366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.672286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.684421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 667.696226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.708221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.720288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.732363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 672.652027][ C0] net_ratelimit: 124535 callbacks suppressed [ 672.652055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.652118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.658252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.670526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 672.682348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.694271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.706508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.718741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 672.730883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.742978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.662048][ C0] net_ratelimit: 127260 callbacks suppressed [ 677.662073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.662083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 677.662206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.668165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.680326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 677.692465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.704409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.716269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.728509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 677.740374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.672038][ C1] net_ratelimit: 115851 callbacks suppressed [ 682.672063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 682.672093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.678486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.690396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.702491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 682.714313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.726567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.738508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.750608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 682.762495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.682044][ C0] net_ratelimit: 112512 callbacks suppressed [ 687.682066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.682141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 687.688161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.700613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 687.712268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.724279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.736502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.748638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 687.760544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.772895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 692.692025][ C0] net_ratelimit: 118575 callbacks suppressed [ 692.692057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.692086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.698197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.710274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 692.722135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.734437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 692.746122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.758089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.770146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.782289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 697.702020][ C0] net_ratelimit: 122846 callbacks suppressed [ 697.702044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.702217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 697.708157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.720081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.732374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.744273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.756153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.768273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 697.780122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.792417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 698.864373][ T37] INFO: task syz.3.9797:29280 blocked for more than 123 seconds. [ 698.874056][ T37] Not tainted syzkaller #0 [ 698.879032][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.094734][ T37] task:syz.3.9797 state:D stack:0 pid:29280 tgid:29280 ppid:29078 flags:0x00004004 [ 699.105045][ T37] Call Trace: [ 699.108378][ T37] [ 699.111345][ T37] __schedule+0x1322/0x1df0 [ 699.115915][ T37] ? __sched_text_start+0x10/0x10 [ 699.121013][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 699.126923][ T37] ? wake_nocb_gp+0x120/0x1b0 [ 699.131693][ T37] ? rcu_barrier_entrain+0x35f/0x4d0 [ 699.137045][ T37] schedule+0xc6/0x240 [ 699.141154][ T37] schedule_timeout+0xb2/0x3a0 [ 699.145987][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 699.151569][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 699.157216][ T37] ? generic_exec_single+0x20a/0x500 [ 699.162569][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 699.168249][ T37] wait_for_common+0x359/0x630 [ 699.173078][ T37] ? wait_for_completion+0x40/0x40 [ 699.178225][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 699.184791][ T37] wait_for_completion+0x1c/0x40 [ 699.189760][ T37] rcu_barrier+0x415/0x530 [ 699.194271][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 699.199688][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 699.204513][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 699.209668][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 699.215364][ T37] ? __kasan_check_write+0x18/0x20 [ 699.220515][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 699.226215][ T37] kvm_put_kvm+0xb04/0x12b0 [ 699.230757][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 699.235917][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 699.241595][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 699.246851][ T37] kvm_vm_release+0x47/0x70 [ 699.251486][ T37] __fput+0x1fb/0xa00 [ 699.255522][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 699.261116][ T37] ____fput+0x20/0x30 [ 699.265164][ T37] task_work_run+0x1e3/0x250 [ 699.269788][ T37] ? __cfi_task_work_run+0x10/0x10 [ 699.274954][ T37] ? __kasan_check_write+0x18/0x20 [ 699.280104][ T37] resume_user_mode_work+0x36/0x50 [ 699.285369][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 699.290864][ T37] do_syscall_64+0x64/0xf0 [ 699.295338][ T37] ? clear_bhb_loop+0x50/0xa0 [ 699.300047][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 699.305989][ T37] RIP: 0033:0x7ffae9d8ebe9 [ 699.310431][ T37] RSP: 002b:00007ffd3e6d0818 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 699.319077][ T37] RAX: 0000000000000000 RBX: 00007ffae9fc7da0 RCX: 00007ffae9d8ebe9 [ 699.327112][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 699.335138][ T37] RBP: 00007ffae9fc7da0 R08: 0000000000000000 R09: 000000263e6d0b0f [ 699.343171][ T37] R10: 000000000003fc68 R11: 0000000000000246 R12: 0000000000088378 [ 699.351700][ T37] R13: 00007ffd3e6d0910 R14: ffffffffffffffff R15: 00007ffd3e6d0930 [ 699.359735][ T37] [ 700.493570][ T37] NMI backtrace for cpu 0 [ 700.493591][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 700.493618][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.493633][ T37] Call Trace: [ 700.493640][ T37] [ 700.493650][ T37] __dump_stack+0x21/0x30 [ 700.493683][ T37] dump_stack_lvl+0x10c/0x190 [ 700.493710][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 700.493742][ T37] dump_stack+0x19/0x20 [ 700.493769][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 700.493799][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 700.493827][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 700.493857][ T37] ? sched_show_task+0x379/0x560 [ 700.493886][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 700.493913][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 700.493941][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 700.493969][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 700.494001][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 700.494029][ T37] watchdog+0xd8f/0xed0 [ 700.494061][ T37] ? __cfi_watchdog+0x10/0x10 [ 700.494089][ T37] ? __kasan_check_read+0x15/0x20 [ 700.494120][ T37] ? __kthread_parkme+0x138/0x180 [ 700.494140][ T37] ? schedule+0xc6/0x240 [ 700.494161][ T37] kthread+0x2c7/0x370 [ 700.494183][ T37] ? __cfi_watchdog+0x10/0x10 [ 700.494213][ T37] ? __cfi_kthread+0x10/0x10 [ 700.494244][ T37] ret_from_fork+0x64/0xa0 [ 700.494274][ T37] ? __cfi_kthread+0x10/0x10 [ 700.494298][ T37] ret_from_fork_asm+0x1a/0x30 [ 700.494331][ T37] [ 700.494340][ T37] Sending NMI from CPU 0 to CPUs 1: [ 700.691546][ C1] NMI backtrace for cpu 1 [ 700.691562][ C1] CPU: 1 UID: 0 PID: 62 Comm: kworker/1:2 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 700.691584][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.691597][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 700.691627][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x33/0x70 [ 700.691653][ C1] Code: 8b 45 08 65 48 8b 0c 25 40 eb 04 00 65 8b 15 1c 07 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 0b 00 00 00 <74> 2c 8b 91 c8 0b 00 00 83 fa 02 75 21 48 8b 91 d0 0b 00 00 48 8b [ 700.691667][ C1] RSP: 0018:ffffc900002302b0 EFLAGS: 00000246 [ 700.691682][ C1] RAX: ffffffff84e7232b RBX: 0000000000000100 RCX: ffff888101fa3900 [ 700.691695][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000100 [ 700.691706][ C1] RBP: ffffc900002302b0 R08: ffffc90000230540 R09: ffffc90000230550 [ 700.691719][ C1] R10: ffffc900002306b0 R11: fffff520000460da R12: 0000000000000100 [ 700.691731][ C1] R13: dffffc0000000000 R14: ffff88812f610800 R15: ffffc90000230518 [ 700.691744][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 700.691759][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.691771][ C1] CR2: 00007fd415e84ff8 CR3: 0000000180f58000 CR4: 00000000003526b0 [ 700.691787][ C1] Call Trace: [ 700.691793][ C1] [ 700.691801][ C1] __find_rr_leaf+0x14b/0x790 [ 700.691820][ C1] ? rt6_check_expired+0x250/0x250 [ 700.691836][ C1] ? __siphash_unaligned+0x26e/0x3c0 [ 700.691857][ C1] fib6_table_lookup+0x2c5/0x9b0 [ 700.691877][ C1] ? __cfi_flow_hash_from_keys+0x10/0x10 [ 700.691903][ C1] ? __cfi_fib6_table_lookup+0x10/0x10 [ 700.691924][ C1] ? ipv6_rcv+0xed/0x220 [ 700.691944][ C1] ip6_pol_route+0x167/0x12c0 [ 700.691965][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 700.692001][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 700.692025][ C1] ? netif_receive_skb+0x161/0x7b0 [ 700.692057][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 700.692087][ C1] ? br_flood+0x67e/0x730 [ 700.692118][ C1] ? br_pass_frame_up+0x126/0x1c0 [ 700.692139][ C1] ip6_pol_route_input+0x5a/0x80 [ 700.692166][ C1] fib6_rule_lookup+0x4cc/0x6b0 [ 700.692188][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 700.692215][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 700.692246][ C1] ? ip6t_do_table+0x1dc/0x14d0 [ 700.692284][ C1] ip6_route_input+0x59f/0x8d0 [ 700.692312][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 700.692340][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 700.692369][ C1] ? ip6_mc_input+0x4f3/0x670 [ 700.692397][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 700.692429][ C1] ip6_rcv_finish+0x15a/0x3c0 [ 700.692455][ C1] ipv6_rcv+0xed/0x220 [ 700.692480][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 700.692563][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 700.692598][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 700.692628][ C1] process_backlog+0x44b/0xae0 [ 700.692661][ C1] __napi_poll+0xd3/0x610 [ 700.692689][ C1] net_rx_action+0x584/0xce0 [ 700.692722][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 700.692753][ C1] ? sched_clock+0x44/0x60 [ 700.692780][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 700.692809][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 700.692834][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 700.692863][ C1] handle_softirqs+0x1ab/0x630 [ 700.692897][ C1] __do_softirq+0xf/0x16 [ 700.692915][ C1] do_softirq+0xa6/0x100 [ 700.692945][ C1] [ 700.692953][ C1] [ 700.692961][ C1] ? __cfi_do_softirq+0x10/0x10 [ 700.692991][ C1] ? _raw_write_lock_bh+0x90/0xf0 [ 700.693010][ C1] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 700.693031][ C1] __local_bh_enable_ip+0x74/0x80 [ 700.693062][ C1] _raw_write_unlock_bh+0x33/0x70 [ 700.693081][ C1] neigh_periodic_work+0xa73/0xbc0 [ 700.693113][ C1] process_scheduled_works+0x7d5/0x1020 [ 700.693150][ C1] worker_thread+0xc58/0x1250 [ 700.693174][ C1] kthread+0x2c7/0x370 [ 700.693242][ C1] ? __cfi_worker_thread+0x10/0x10 [ 700.693270][ C1] ? __cfi_kthread+0x10/0x10 [ 700.693292][ C1] ret_from_fork+0x64/0xa0 [ 700.693321][ C1] ? __cfi_kthread+0x10/0x10 [ 700.693343][ C1] ret_from_fork_asm+0x1a/0x30 [ 700.693377][ C1] [ 702.712025][ C0] net_ratelimit: 116688 callbacks suppressed [ 702.712057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.712113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 702.718248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.730462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 702.742168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.754218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.766245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.778330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.790191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.802342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 707.722026][ C0] net_ratelimit: 128198 callbacks suppressed [ 707.722049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.722299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 707.728158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.740109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.752264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.764127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.776244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.788345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0) [ 707.800068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.812433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:60:e1:72:2b:92, vlan:0)