last executing test programs: 1m56.624306757s ago: executing program 0 (id=17): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) setsockopt(0xffffffffffffffff, 0x2, 0x42, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/177, 0xb1, 0x0, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/37, 0x25, 0x2, 0x23}, @fda={0x66646185, 0x4, 0x0, 0x37}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}, @exit_looper, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000040)='}.\x00') r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) setsockopt(0xffffffffffffffff, 0x2, 0x42, 0x0, 0x0) (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/177, 0xb1, 0x0, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/37, 0x25, 0x2, 0x23}, @fda={0x66646185, 0x4, 0x0, 0x37}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}, @exit_looper, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000040)='}.\x00') (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) 1m56.523784319s ago: executing program 0 (id=18): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sync_file_range(r0, 0x540, 0x7, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250100"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000080)=0x28) mmap(&(0x7f0000793000/0x2000)=nil, 0x2000, 0x6, 0x12, r1, 0x44d9f000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 1m56.46600182s ago: executing program 0 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0xb}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0xffffffff, 0x3, 0x0, 0x4, 0x1, 0x1, 0x82000}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) sync_file_range(r3, 0xf1ad, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 1m56.45167866s ago: executing program 0 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000140)=[@exit_looper, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r1 = inotify_init1(0x80800) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x221) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x40000408) 1m56.429566361s ago: executing program 0 (id=21): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x4000cdd) close_range(r1, 0xffffffffffffffff, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async, rerun: 32) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m56.349979132s ago: executing program 0 (id=22): syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc010000190001000000000010000000fe8000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000001000000000000000000000000000000000000010000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000300ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000008000000000000ff020000000000000100000000000001000000003200000000000000e00000010000000000000000000000000335000003000100000000000000000000000000ff0100000000000000000000000000010000000032"], 0x1fc}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffd86, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0xb}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/4096, 0x0, 0x2, 0x5}}, &(0x7f0000000100)}}], 0x0, 0x0, 0x0}) 1m56.349211362s ago: executing program 32 (id=22): syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc010000190001000000000010000000fe8000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000001000000000000000000000000000000000000010000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000300ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000008000000000000ff020000000000000100000000000001000000003200000000000000e00000010000000000000000000000000335000003000100000000000000000000000000ff0100000000000000000000000000010000000032"], 0x1fc}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffd86, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x0, 0xb}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/4096, 0x0, 0x2, 0x5}}, &(0x7f0000000100)}}], 0x0, 0x0, 0x0}) 1m26.557259598s ago: executing program 4 (id=450): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs2/custom0\x00', 0x804, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x22, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x1e, 0x805, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r6, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r12 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xe0, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xc0, 0x2, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xff, 0x5}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x5, 0x80, 0x7, 0x20, 0x3}, 0x155, &(0x7f0000000340)={0x5, 0xf, 0x155, 0x4, [@ptm_cap={0x3}, @generic={0x5d, 0x10, 0x3, "cb04c1f5585655f6220ec3c26bed9629aa05a5fcae35742b6566e405d66d6dae87b036b91f0dac937a5ea7c401a6fdaf63b87018d49ab1e7175f034a811cd93c2cd859ebcfef23d7c1a1cdf4359aa34e3dfd31c29b6a39944fd4"}, @generic={0xed, 0x10, 0x4, "3a5a7a01c3bac0777b346c22d692844e6eff6064608fa588113be36566521adb3dfd2a15a5f7ee8a5433f5065d8ac3f295d9357dce55a00fac087719a79fbc2d9fd1eeb8d53439d7b4077e491be05a7ebc77ef1f67c86d1f0faed0f275f3b2c768875b489cef194cb27b24bd12f63c4dab0d6cfda0434953a545880d13c12d0c07c9e0bfb68ed427cfc861e33b0b08594728b368c0f2725b8458cdc54e3f4ea9239a7145f59b9cf208c65721d03708b50d5dfd5ac9d8351188832088e81a9ba77c723f599adb8720fd5f1275b653a5f5d5fad5f8b00bbdbd2e204e6269049b339b86b0a1de75dd492a4e"}, @ptm_cap={0x3}]}, 0x9, [{0x65, &(0x7f00000007c0)=@string={0x65, 0x3, "0d370d4246d7d80c26fc3b465843dd7a7ca588dab53fa7f76b7aae700a79693f17bb2aebc598434d609f359c1323c3245b03a8ea70a13d4116d81a5214762a085b5bb59d5cbedc516b3eb2b5aecbc99ac5bad85412061f99ecb72cd1bff1dc1948e26c"}}, {0x6f, &(0x7f0000000200)=@string={0x6f, 0x3, "24e307d1c292890e1d1d600a537371d69e64d2257d7ced9953e9c3fbb972b624cded8af9aeda06d4eabbec3853a2d56430856ba9fedecd418878abdb1e945d7e6fdd8eddcef7ce7af8d13608fcb1eb5f03f1a5511c000dea6dc192d560deef352515980506fb74250ae96d9446"}}, {0x1b, &(0x7f0000000280)=@string={0x1b, 0x3, "872ccad6e605088de0024768db921a539cbe0b5632ebd81ee4"}}, {0x16, &(0x7f00000004c0)=@string={0x16, 0x3, "8670625ab15571673787f70db824535a7d36cc6c"}}, {0xf8, &(0x7f0000000500)=ANY=[@ANYBLOB="f803a95b0be8684d8ea08a4f8793de82499b92f91d39b7865797f1e0e4b1a6239bd8952faa20dd69d80d66539fe8939c4493e3bb85e98a7cfcc2e38f3c5dd3bd18e9df227782b40cf4b5675eb1b3b575808898bd7dd9a1d5134d41dd899dc283936e70eeb6685173b0b0900a0633a7ca3daf29b2b823c25db988e79c3b0549d7fbebea9b21031f7c1bc61e4a9e2c954ffa54d82f285b2b050ced54bc7b8f89b62a1bb8096e60d296ab0db8354010aa821369f0545cbc797163642c9a1db7f603f9a467ea80afd70aedb5377787497afbec5061a2a9f59c90cc7128d206a958586cf4abec9cd8df9967ad3c4c5823681d00717d808a09def0"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2809}}, {0x28, &(0x7f0000000680)=@string={0x28, 0x3, "ad89120c2fb16fa420b3733c688ab68aa4e03cae0853bda6a28d523c1185ace4a23fe19f34e0"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_usb_disconnect(r12) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9f91f84c4564eb858abedf2282f67", 0x14) 1m23.512690336s ago: executing program 4 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000340)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x7, r7, 0x0, r5}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)={0x2c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME]}]}, 0xfffffffffffffee3}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r10, 0x4008ae48, &(0x7f0000000000)=0x4000) ioctl$KVM_RUN(r11, 0xae80, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1m23.33479602s ago: executing program 4 (id=489): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x130, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x88, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc2}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4f}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x9000) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x130, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x88, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc2}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4f}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x9000) (async) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m23.248818262s ago: executing program 4 (id=490): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @random="a56109da91e9"}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x3, r3}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r3}, 0x14) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x28d}], 0x1}}], 0x1, 0x4000001) r5 = dup(r1) read$FUSE(r5, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r5, 0x1) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r6 = socket$packet(0x11, 0x3, 0x300) sendto(r6, &(0x7f0000000040)="0600000000000000c8a92b0088a8", 0xe, 0x4000846, &(0x7f0000000380)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa81404, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00') 1m23.194032013s ago: executing program 4 (id=491): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) sendfile(r0, r0, &(0x7f0000000280)=0xffffffff, 0x5) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m23.050003066s ago: executing program 4 (id=494): umount2(&(0x7f00000000c0)='./file0\x00', 0x1) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0xffffffffffffffff}, @fda={0x66646185, 0x40000002, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=0x18, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 1m23.049776405s ago: executing program 33 (id=494): umount2(&(0x7f00000000c0)='./file0\x00', 0x1) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0xffffffffffffffff}, @fda={0x66646185, 0x40000002, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=0x18, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 45.673575558s ago: executing program 3 (id=1170): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000580)=""/183, 0x0, 0x0, 0x6000}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r3, 0xffffffffffffffff, 0x0) 44.794909175s ago: executing program 3 (id=1179): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000040)={0xe}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = dup2(r0, r1) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000003c0)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000400), &(0x7f0000000440)={'L+', 0x7}, 0x16, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000480)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "81196e27e19705"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001480)={r4, 0x0, "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", "b40dc83fac545ee052e3a415c5ebecc2504369b92ddc6724cef628d30227ba3d746f34f3657e54ed07edfafda57428eec6aabe47adf6b3fdcc04ac54c1e409eadff07b010fb7534cf67a865450da13a6809467ff9315032d0dcaa38cc3eb8ae3c5b35e3eb05f37d5cfec8c032cf2d3b51274dc3ab5ee03ca631456b94152b1145a36b4e2f3fe86024e93702d380f7f31ba9c5e4015f8c2d240588be2a20bbe329c50444395f2be46c65e923aa8f1de5554cd3c608b796d042f682ac14a2b4a92e3c77f4150b066c77bc8670180021f3e500e7c2475acde516a7dee7dbb493d433614587eb0d763c1f517e7b2faa9ea1dfb9866939ce8354c3cb789ddafcc4efa9bf0e65f15ea397072e594d8540e4e1d2c767e9cee61ff9e5b997e575742cb688f5eb301a346e64bc62c78b6e862afed0c97aef2d087977e9090f91106fd7af37d8279c768196cd62e8f86c5c3e8c6a0f0a6de8ea3dae647a639494bd9fc1c92feeb218d084b03a7d74f42e89578098f6ee49817b5ce6128dba918b10616c6c9f0301b026a5e2cf5df468f549611a6f6d5ad85ebdac6cc593876f4cc1e7800f1fc28c1efc6ee8cf16fa6dd784595e563984282cb7539230e6df4ef45f631d0408aecc758224bd0cc5ec6739f64bdf2a8a9b99be144cd82b63951efe104d85bfd957d7578817cf47451294fb4a61d68f572ce1d960fe391ee658ec320cf1c9d99446af1a11099ddfe1a52fdf170f8e04c03b6f6d80d95f094728bcb87336896f9e98e893d61c3a1eef0b4160c10835f30c802a5ee9185712f20249cd6a8e8e54e7265c11861b870f9917c44330f22d90f8c3a328c03082cc747b5442c07e9bc7baeb8e58ae201ba382a4b4f0f37c5be6cd568a44e696f70d19d0022440f4fb57efea2d7fd9609bc6915d6a6be262f048c73ae77c8f91d5cf9fa8b9a5039a0fc86e650af94a32d12c3d3bfcb45a6321e818564275405c91b9abb1233a164d078ab16f780332bac0ff2fbf9f71c38cae7e3b467277c47261634e1b47fb4f216d14cdf5e9c8fdfcad0d149a97e27f1830a159af4bd8b70444e35ccdc0bf2c064500445b712b289ce2a574df7c86b12ad71f16781ca7c1a7d9e0d664414471dba8bc31482f84788745c6b5cda8d4b8952a6e60865b2fee940150b6cde32d1564dc69644208155c6f447674707d696809205e1e6d8f85e009704adb01a5af4005d1d7400739948773c799faddc8e983a5506e8f12c55d3ece2a016d1a9a3a651022d4ecb886a48954fbb36fe15b60ba7be3dc116ad95a7852d884df90fe7acbba022820fed75dfe165f48b8881515d38ff41ec2cc5df526f8975b8fc1d0aa541c2c41d6ca7f12fa00870f2e9fdfac8196e5fe78faf0f35028cd5eb9c14abfe32fe93d814d06992db731bf67a700816c6980ca6fa64497656ac2308483e759d9ff174063e5be38379fd35bedbaa555187a6c8e946c88387ecacdc974c3c3dbe9de3eefcde2edaedc7eb4afcd3dae478040f63357cb0643c140b2a95bd4cbb9123e5503b647dde337addb46735bc93d8efbe42396461b7903957e3acf50a28a5b31d2c494bd87908f8dd951fffad0ccaece0aa202bf64ba7dd68d1eb2b7864c100d04fef777a69b6978dd090cae8b6b329b132f6517077fccd077fdb5a9aec5ef48d0daf26d7c6f75ff52619c93d43f7ce95b0afbd427a79e80e2d3c40cdad5946f57aefa5114fc25429c2a0044b2c426a002f9a8611f65a9f10da0df20c420a18cfec5e8966ada53fbef5ebc142d3d12d378b07868b9863af376c168215c142b6c31ef3f7a9f8eca4686ff7c714831bd0be73f96b65afe94c9497f0d00f4bba210051dee0c6fcae33fb9fd8914458758984c6a26406ab2113de1f2bb0528fd68fd65c429318404306e5dd733f3c73ad142dfaea2f21084f77c912814441ae543d3fc288f17614405e63af30a3be753a53250e93cb1654948696eafc6313f5298578a3bfa3233dd41b3ad42dc5b8c3ee13a7b75755297953f6ad993d6ffdb90c00f0477616d2c63df0156ec6e331316cf1f96ff4881f36c68e64a2d73424324355ec09b122568af2b561aeda19ce65e7af4cde6c1cfbe53ba5f43f9449a7f17e44984efa22f15a8baa5a47d923a917eac95591030c1f0e32d3c70beffaa9ef8e7250b99bf5fc6b7ac8a4c3f597d372fa42f8b04ab8d7fb67761a216c15d2b9c4de94dce0a15c9550f1bd8781eecbd7642881e7e08ef0fcfe3b08e73bec3c428b741d5cdb72ce9886952fd4999cb969566e9b7d56a6dd8f96f02aed25b2b4da139f8834394513a5824cad88ee2b999236fa0528095174fe01ed3bfbfb6de07d121d4122edc2a5031c7fd092bdd7478cfa39e8ad2070075f52df46d0927a8149e7d363e31bd5345df331ab15cef902d6a8cb422aacd8ce630095d4c164d00bd6e5891e43bacc02282ea32483a28540ee1e24ff0c35a76efe685b864dd9537d9066b8fe3c55e786b27dc975840a7cff5a1b2f778ea06b99ed28922935a2730f080b77d605b7dbd2166e28fae1d52d3da0be2323ff76dd70765489f6e003c3442db9f0bce7555c08994f9139bb25b7411424c40d2e62f197b73460ccca7a8d31d5f03315e071473b953cbc31f4a87ebf0e70c20024e3660b3148be014556ae5dfb20198d8e75ff9fca34fe6022b53a35d0aad212829f9ef5fcf116e49e58fd7653b4364ce409d04d2331fd8d148c40c6560696e4e486f46ec616fa9efb4310661d1bd1952a4138b04a6637bcba10ceee2e5e14ce4e133dde83d5bd432c5910a75713e88ecb1b23ed0fc163450464224545290a98b20fd12096aec48e20e7b57b6a7497c7bfaf59e5421aa32fb41391166ca30d7056927f60d9a82b62b2f307360c5a0c77eea57332d7de3d01f018d3a57bf905e6ca8dd71198a4d2cbd115f95f81f5aa2dd422cd68622bb537d1f9d2292cdc06ce29045142433e43d1cd04cca9bf59bc130851534c23628fa8a5ee23a51b9e45c419ec90566d6803c820ee516d4e81c07c9b1ae0d285faec81f7dc2a21583d18c9d8464cfa07404e20cc3787f4f9af3eaef224fc3445eeae9e668c24d5db7c361e2c72f9cc4c5f3ae4c800c98351ca23f3bf57548cf45b46cf3898fd7abd8cb74febd11fc8473a9125e26cc5a801cde749079426e260d082453258f2a3de521911971c9021effcfd5f4071459f58636b2c8574b4d43c157e574cf82e4176a35c45e730b6b937216074c12f94dbfe3f07f08c2bc7dd530a544031acf6dddfd79d3723c673d6326db2fe65c024aa8a041849a19790ff3f3cc8566d5755e87ea5f5b6637b90ccd1bdb203102477628fe5db4324108a03bf0db4c8dc4a0427c5efd04bb374eb4074b68cc54b19fd2cb193754b7cf4bfa6c49662e59d4e2cf22c72a4c0f3798a56260ef0cd85ba2157db48fa001f354ee64a9979094583789c18bebd6d11e4bbb369a6bb7918f3bdfac50f92168f74ad8f0909902f8d47c0d8f313ca48d7266286d4b35d8b26e7f5f89ad61a45c4ea71e9fc469bb3db1da19553d4e06ae9a68a23d477b5219e2fcf4657159efd1a6769b453ec8911ec81389ba6ef474fb37ae27beb37b47a9a5c5f4c5d4739878720e0011f6fde1a84901dc33a130e5503c9094ab2114e819941544df1c765685347b4829796b2b663870669d4959cca5872b726ae04cbe93d22d2c05c156db566bc61d3e674ed6716a23be3069d5631d5a47064aceb6f67bce4801181d166bef026a6c21eb1b77cde1ebf7926b67940d95405584b976134fa97adade7d6a078e2c0e1ed82dc45c2c758e34e34e1162304707792258e6a470e122d38f5d5d1c5be6430de16f84f61673c98d9980bd4ab0320ca1bf70dd1b11ddfb50f59b48f6663b7f9e880c134556850094d36b3a0f28c10e5782a4b6667ea63119b459182d28ee5dbd01283151badc205aac38e33cb701434b5148ed15212b5048966c9e207a60706d7d63107ed1297d61cd914962458a6e9283cb095c18749391f91215c16ea2aab6a1b355681d98ce4329f0ad9fd85e368a37f95f5f328a8275ecd3fc1223f0c47f43c2c5b17e16c644864b85a54e51d7599f446e8af96aa7e39230d8ee25d9d81c46f002ba113b2c260e91f088a8564fcd930d0af1c3c02c9497e3e001bd76953459414edce8c507f2b52dd8d03f4738db3aa35df56e63ebb733410253b348f7337a0d95646921339f227c520853aa9a5a495a2be9a7a6568496c0e56519fc2c68eb15af26fff4ad1e181fd7483dfed0d1ff6718eba108aa8e49531b3bf28dbf73011a455aceb63ff2a5902ff94b74a994476cdfc2d0f6bbccab955a4c33f1ea33dbfa4bd5e9ad38ef79d3012b92d088ddb8a34bd2dd4089071f3f3595a0fc98fe56ed76370de28df8cf3718c45bd744e80e1d156f4b1a8d33c473d08f465ef98bc9009a6e1746044cd4d148e759c2287322cf1a7f67441b9c1909d3fe275c61e9508d3616c3fb36eb84d326392ab67e734d5be81c5e367ffb3274e885cd139e7946fe28712a4436c9ddf1a08588e8f90024960fd2bf15e10db41bf92f3c055467327989cf5f92222c1118a41fadfa4f31f221041122b1224bbc48e8411abe06cc4564c1e9cb93adf8e00e64e2fa5a41a1225128eec07adf7b9b822765744c1da90fc3c335512f4d8ddc6ac55b82f9f6e1cbe7cec64be189bf5ff2bc7bdf8e729af3dc62e646aa74555d68e00a7e30a399b4a9056db3d4fe2e7ac2d96757126f10e9dbf89257edd56c72493e6e66bf542ba31d53f4ed3efc4241e76441a2b98446003f6ec04b7b65396cb7b09790899a5ac4a615cb89778eaaa97301c357ca3f95e6433deba8e4b5e92d526c298885eee5b469e94e8b678d2ffdaa9484dbd57d103692c3f5b52c89a9fbe014c0d4039dd672a65d6b0bbcba139dca03d4765d584cd2ea477df9856a774949c14771036ee3bba104733a0775c45cf9f6c9f97616962204eb155c5ed720ddbcd180975a8ba9c9405685b9e82835dcc00012599f9e9af2613e11a3d86d84a9645256acad17485c5db931a94cd670cedebe88947a3d70ef615c37e77f80bc3ba20b001679e8cbe51fc60a9cad2f1b1632cdfa06aaa98ebf53d0056250e3164e520b076637f46e77f2b7999af27c2ecf8d8520ec26325545e86812ab1d3191e261d0afb64c4ddbb2e0024fb7074810dec6f3e4897abd7645108bff68b257087daaaea4a3e0a7f84922161b2c21fbc51862f81d16118445d33a90f72119505c67166ef06c20bd8b2d4c021f0032604e2ddc7f5b1fdd8f56d70d0474a11ff99ef4e6b16d96aed08b0bed69aeb2051173812d37e8a3d2fcbf70e1b7c86e60e30a978333218067f953f21a21494bdc5a09a5c6329e9435c3d297f1c180d9e0b206277d5598fb429"}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000002540)={&(0x7f0000002480), 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x1c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x37}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1a091}, 0x4000000) r5 = getpgid(0x0) fcntl$lock(r0, 0x24, &(0x7f0000002580)={0x1, 0x1, 0x11b92dee, 0x101, r5}) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000002600)={{0x3, 0x7}, {0xffffffffffffffff, 0x2}, 0x43c8ac1c}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000002640)={0x7, 0x8, 0xe7160000, 0x8, 0x4, "9ba971692220c3688f55cdd4d84044fc03b51d", 0xffffff81, 0x1}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x8) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000002680), &(0x7f00000026c0)={0x0, 0xfb, 0xc1, 0x3, 0x80, "f399d7f57d2f34e3d2df9f678edd675e", "c543c5abc3d41eb7ce1559f594f27480d7d726863f75f994c863394e108339f9f042a1704cc617e206306195672d837a8d82cbebbc3c5ff5ff080b78d2f33d64e782dab7179948bdb6f6075304dfb9377cd850ecf731fcb39da9b67cf3e14146b0e6e07cc19adccdbc354d2864a93f9b2fd7a92306d6488dc31504338384db0ab4df9dfde8de8e46505248f3d06a1de0a6cd1e2d89bebba51615c9047f7f7042c643fb488b58be8d51018d62"}, 0xc1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x600000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x5, 0x8, 0x3a]}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x10050) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000028c0)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x7, 0x0, "c287ffe0e0ffd30687aabac089fc0325d462594eb6581fc0e9fa3c4cca49447e0cdc9d2c4ab92a09d0d1c87ce7f4e0f77e953dcf1c499474549743f7425c60eb177fff9757bd81a8f045fb7f2b8a0a83"}, 0xd8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1010, r6, 0xb5bb3000) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9) fcntl$setlease(r1, 0x400, 0x0) syz_pidfd_open(r5, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000002a00), r3) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x20, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000002bc0)={&(0x7f0000002b00), 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002c40), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x20048000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), r2) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x6c, r9, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 44.733692926s ago: executing program 3 (id=1180): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 44.732885856s ago: executing program 3 (id=1181): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x80000000008}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = gettid() capget(&(0x7f0000000080)={0x20071026, r3}, &(0x7f00000000c0)={0xee96, 0x8, 0x3, 0x8, 0x7}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="07012951102205ce", @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r2], 0x10}}, 0x4000815) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x400) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000040)=0x8, 0x8) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000640)={0x1, 0x380, 0x9, 0x2, 0x4, 0x3, 0xffff}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 40.473246438s ago: executing program 5 (id=1240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="120100000000004033bc13ee26fc0a15226335393d6d0426a7d2d37d20e754c60000000000546f084d0000000018000904000001030000000921007b00"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0xa, "dbc79ef4"}, @local=@item_4={0x3, 0x2, 0xa, "98706066"}, @global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) syz_usb_connect(0x1, 0x3be, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xb3, 0xa8, 0x59, 0x20, 0x19d2, 0x257, 0xaa25, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ac, 0x3, 0x7, 0x0, 0x80, 0xd, [{{0x9, 0x4, 0x3, 0x81, 0x1, 0x79, 0x9e, 0x51, 0xa9, [], [{{0x9, 0x5, 0xad49bd6df0fd2314, 0x3, 0x8, 0x1, 0x5, 0xb, [@generic={0xfe, 0xa, "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"}]}}]}}, {{0x9, 0x4, 0x81, 0x9, 0x0, 0x4a, 0x18, 0x91, 0x24, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x7fff, 0xcdb9, 0x6}, [@dmm={0x7, 0x24, 0x14, 0xbd, 0x7fff}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x9}]}]}}, {{0x9, 0x4, 0x8e, 0xc1, 0x8, 0xac, 0xa2, 0x92, 0xa, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x10}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "11"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x6, 0x0, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0xca, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0xe, 0x0, [@generic={0xe, 0x5, "3740cd5a9401dbf14ec00021"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xfe, 0xf001}]}}, {{0x9, 0x5, 0x3, 0x18, 0x10, 0x0, 0xff, 0x9, [@generic={0x6e, 0x30, "2fd91bd10c42e00f38870878fd4ee08721867b1989e62f58bbbddb014689946689a00de37cebfc3c4b7a27686b00168cffe1f67bca8f3d27e28db4be34af452bf6dcbd1f9747d588f378a501fac183e080014e2c97df3a2871469780e33b2da65c9d61e7cc8cc1f490f019a7"}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x9, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x4, 0x67, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x170}, @generic={0xe4, 0x9, "7c73bc00c5cf1e3fac51e49481e640cb5619902a28b5d7a426c1c8ac50b1421dd361cfa68248923b11f542a0338be95f68b41c7efc1f04bc5627fad6a9187b2439707cfd61aea7d0d17bc6f331ea7cdac6021fdbd7d6b9816f253c41f4c48e537ec76c51343609ff3b1c84244eaaf8185890a63f1547b90ba464bc20dd8c34144346f4d301502d5e6c1d9e7412e37bdc0cc36ba9a355fbf175cd0c850ec3117bf3521b53cd054d7b39895a3865b958875dc5d70ca3330a8046d8d44bda1ad11aa5bb69a1df44963c1a2b8049acc306935caba8d10a9599fb527c3e1d8033657c9eab"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x84, 0xf7, 0x9d, [@generic={0x1f, 0x9, "41a28b6fa6fd724a557fcf0557789e054d797f55f9adbb8cab8cf0fe02"}]}}, {{0x9, 0x5, 0x7, 0x0, 0xd234b920352449f6, 0x3, 0x5, 0x8d}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x5, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x3fc}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x3, 0x7, 0x3, 0x10, 0x4}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0x6c, &(0x7f00000001c0)=@string={0x6c, 0x3, "8fde67126819b31d4609f038c81e2b0096dc9046d2fb23f2eff1f496dcad704f49edbfaf6352d95634d14ad3143b8f4640f4a0eb35d326ddf3227fe3063559f31bcd6342062c14e00b7ebf86a7890ea3ad2acda8e4dabe5656904319e15141514cf1ef74975f6f26f634"}}, {0x85, &(0x7f0000000240)=@string={0x85, 0x3, "7f70246fd1310eb2ecc39b99e5aad01b69fac11d57d8f165c3e8a3d69e4cae1813d8c7ffb04de782ce1955af72bf79eaadd8fe7b209433cdb9b683f01340b1054c41b332dc59fb919b94a5218898e760a7f3a16bbb821b7b4d34a8c44389c7c5646e1e5d302b102c86fa9d2d7bef7e83dcabb74c5dfb0c5d59be78ab4ff88e7fece609"}}, {0xea, &(0x7f0000000300)=@string={0xea, 0x3, "4f29de89f9f283cb2b0048fafd5d5985817c8d50922a143684b4632a412d393359d8b0aad07c5f5b462b16253c0ad98f7f9d97c3fe2c75a9c3cc880b40e2c9cf77013dcc6e1e308beff61769dd1a5d98512437ba280da233202917f8a86c52510f91f049d24e55324f45389a74a6572413d625969a9280578ecacb46e92152eb1ab3e733d10e35daf9fffc9724e25127abe489ab6b4cd2717dcf7a0dc1111bfe9662dd8eb02f6d8dc6b8c0c3f71527ca56116d67e3756473f709cbb09ac46411725ef1e4172a995f610fc233ff71725c5e8ef7075f68f0ece02416ed73c0dd4f02a6d7d56ea04677"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40b}}, {0x8f, &(0x7f0000000900)=@string={0x8f, 0x3, "aeff95cbdbbc649a62034fefc0c16efae1a3d3d4abf6ddcd9e93f6b6db6e1e7d41675b5e5ae8716d201d5f52fe8706aacf5d4ce91e97c1070205596feddcb3524efbf5ecec741e752eb6bd56d49c814a3a568ca38ea664755f08fa3da092ad2d2a03be10a778b18dbc6adc3e144e96132ec4dd4b7ec2fe902a61c1206f9718812911f07955c82cd57e6d70c949"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_connect$uac1(0x2, 0x7b, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x81, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0x4}, [@mixer_unit={0xa, 0x24, 0x4, 0x2, 0x2, "386eb2d016"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x6, 0x2, {0x7, 0x25, 0x1, 0x0, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x610, 0x9, 0x2, 0x6, {0x7, 0x25, 0x1, 0x0, 0x80, 0x9}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000004c0)=[@request_death, @release], 0x0, 0x0, 0x0}) 37.7731918s ago: executing program 1 (id=1270): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b10) close(r1) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="00c5", 0x2}], 0x1, 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, 0x0, 0x0) mprotect(&(0x7f00005c5000/0x1000)=nil, 0x1000, 0x4) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getpriority(0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000100)={0x0, 0x0, 0xb, 0xfffffffffffffffd}) fcntl$lock(r5, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x48080) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x49b) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x1, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x40009, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x4640, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x1db, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0x11, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18c, 0x6, 0x6, 0x454f, 0x206, 0x4, 0x4, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8001, 0x8, 0xfffffff3, 0x129432f6, 0xc8, 0xef, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0x6, 0x5, 0x4, 0x7, 0x7fff, 0xa, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x8, 0xb, 0x5, 0x9, 0x8, 0x2, 0x6, 0x47, 0x9, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x3d, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x4, 0x3], [0x4, 0x40c, 0x4, 0x5, 0xfffffffd, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x33c9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x8001, 0x3, 0x303c, 0xfffffffa, 0x8000000b, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x3, 0x6d01, 0x6, 0x38, 0x800003, 0x202, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x0, 0xa, 0x3, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ef, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x4, 0xb9, 0x0, 0x1fb, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x1b57d867, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x106, 0x7, 0xffffffff, 0xfffffffd, 0x0, 0x5, 0xc8, 0x40000001, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x107, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0x3, 0x200, 0x0, 0x3]}, 0x45c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@local, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000000, 0xfffffffffffffffb, 0x0, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) r7 = socket(0x10, 0x3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0xffffffffffff8000, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x3, 0x7, 0x4dba, 0x1000000, 0xffdffdfffffffffd], 0x1000, 0x80300}) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) 37.717842842s ago: executing program 1 (id=1271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x7fff, 0x3, @rand_addr=' \x01\x00', 0x80}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b8011"], 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x58a, 0x0) setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x7cab6ced6415603}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 37.415368497s ago: executing program 5 (id=1273): readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4106, 0x94}, {0x0}], 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 37.330936229s ago: executing program 5 (id=1274): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='4\v']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x8, 0x0, 0x100, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x20005}, 0xfffffffffffffec5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20011, r5, 0xf648a000) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) setfsgid(0x0) read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) 37.29973963s ago: executing program 5 (id=1275): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf25140000001c0007800c000300020000000000000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r6, 0x29, 0x50, 0x0, &(0x7f00000034c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x0, 0x8}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xdd, 0x0, &(0x7f0000000240)="17171b37c858ff5974f27801123582aa8920bb2d839390ffc14453d798bf5c6d0c659baf0a1851b78b0cd3b8c2f48c4fe757d94b65213721d0c667dba65591618abeb5cf45a433eaa77a698987c2dffe51a3488570ecd88a44f694671a899ffa36b6031ec9766f7e10b9460e62c553cf73c400f6426f519aae41bceb91184e0e"}) getpid() mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x1000000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10050000000000000000000007000000"], 0x10}}], 0x1, 0x46000) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0)) mkdir(0x0, 0x100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 37.129602173s ago: executing program 2 (id=1277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) (rerun: 64) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (rerun: 64) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 32) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000200)=0x1, 0x4) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, 0x4000, 0x1}) (async) gettid() (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 37.128989123s ago: executing program 2 (id=1278): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x801) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000400)={0x6, 'ip6gretap0\x00', {0xfff}, 0x67}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)={0x16}, 0x8) read$char_usb(r0, &(0x7f0000000480)=""/137, 0x89) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x300, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x81}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff3c3a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x181f}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe71f}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "7134f2d5ac12157ff7b87617cf07cacc549226804008c53a81cb41cceba41da7b33d1f426a393356a2aaddc306ea90e88ebbff98557285b7a6bee52745730387b672a98414a2f6e638037e14f43d7ee2ae17081cadb1deb1d9aeccb3e0738a726d83fb55067631332c17aef1aa06961d5e749c71c4b74eddb828dfd9eda224adccf91329e3d1fcba457d04"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "e14fbed63a2c4fca3c3d0c9fae54e5a2ac5f5f32e82cb174cad628618b6a1b995ca96cda3613c5a343136d83c67953d0f24782092ad726c0d61286a75305ce2abbe9ceb6ca6114abe4be6bbc082963ae2f8c35f107b0df07b042511d811f2536a01382d9133d211ac33a5c039a61d9ee26ab96eb227e5dec45707b4d88074c6de7f00db0d2f2dc918468ba33a4e72b97f577b6395e29c0e22860fbe2c2bffbfe0588e86ec240471d141d960b8e59938ba1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x44801}, 0x4080) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000bc0)={{r3}, r4, 0x0, @inherit={0x78, &(0x7f0000000b40)={0x1, 0x6, 0x0, 0xd387, {0x66, 0x3, 0x10, 0x7fff, 0x3186d622}, [0x93c, 0x7ff, 0x9, 0x17e, 0x57, 0xffffffffffffff7f]}}, @name="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"}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001c00), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x44, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x404c044) recvmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000001d40)=@ax25={{0x3, @netrom}, [@netrom, @netrom, @rose, @netrom, @default, @rose, @netrom, @null]}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001dc0)=""/194, 0xc2}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)=""/254, 0xfe}, {&(0x7f0000002000)=""/251, 0xfb}, {&(0x7f0000002100)=""/109, 0x6d}, {&(0x7f0000002180)=""/204, 0xcc}], 0x6, &(0x7f0000002300)=""/193, 0xc1}, 0x3}, {{&(0x7f0000002400)=@ax25={{}, [@bcast, @null, @rose, @bcast, @null, @bcast, @default, @default]}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002480)=""/205, 0xcd}, {&(0x7f0000002580)=""/125, 0x7d}, {&(0x7f0000002600)=""/51, 0x33}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/84, 0x54}], 0x5, &(0x7f0000003740)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004740)=@ax25={{0x3, @null}, [@null, @default, @default, @rose, @rose, @null, @default]}, 0x80, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/203, 0xcb}, {&(0x7f00000048c0)=""/14, 0xe}, {&(0x7f0000004900)=""/46, 0x2e}], 0x3}, 0x5d0}, {{&(0x7f0000004980)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004a00), 0x0, &(0x7f0000004a40)=""/175, 0xaf}, 0x2}, {{&(0x7f0000004b00)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004b80)=""/92, 0x5c}, {&(0x7f0000004c00)=""/71, 0x47}, {&(0x7f0000004c80)=""/185, 0xb9}], 0x3, &(0x7f0000004d80)=""/112, 0x70}, 0x101}], 0x5, 0x143, &(0x7f0000004f40)={0x0, 0x989680}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000004f80)={0x7, 0x6, 0x1}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000004fc0)) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000005000), 0x101000, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000005040)=0x8) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000005080)={[0x5, 0x1, 0xc, 0x7ff, 0xfffffffffffffffa, 0x7, 0x5, 0x80000001, 0x7, 0xffffffffffffffff, 0xd9, 0x8, 0x10001, 0x4, 0x0, 0x8], 0x4, 0x400c}) r8 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000005140)={0x20000000}) r9 = dup2(r0, r0) lsetxattr$trusted_overlay_upper(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0), &(0x7f0000005200)={0x0, 0xfb, 0xaf, 0x3, 0x0, "42b0df6c56d34a4377d102ebaa28bed2", "602801151808a4bf8de5ecf184c600b56cc60cd8e7f632759dabe93f5c81e5e3341bdc5299e1fd532c5e5a60b6c3e3bad07e48a66efdc2bb28d67659a5401a339f99d2a509124031af8d2bdaa8dc32f33a566e2564db6589ce63a004bec914c17b1c2d5d5f1a9202c87414ace53a1df6d82397c58b745a3de8ac6c0ec54446bbb1fa6d255b744afb2eb1ebb55c8b91a5baa2bad86148c48ebe8f"}, 0xaf, 0x1) ioctl$BLKGETZONESZ(r9, 0x80041284, &(0x7f00000052c0)=0x1) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000005340)={0xffffffffffffff7f, 0x5, 0x0, [{0x2, 0x6, 0xb, 0x5, 0x0, 0x3, 0x80, '\x00', 0xd}, {0x2, 0x2, 0x9, 0xc7, 0x5, 0x1f, 0x40, '\x00', 0x2}, {0x0, 0xffffffff, 0xfffffffffffffffb, 0x2, 0xa, 0x80, 0x7, '\x00', 0x2}, {0x5, 0x3, 0x10, 0x9, 0x40, 0x40, 0xb, '\x00', 0x8}, {0x8000, 0x0, 0x1000, 0x1, 0x3, 0xff, 0xa, '\x00', 0x9}]}) 37.128757653s ago: executing program 2 (id=1279): socket(0x1, 0x2, 0x0) select(0x52, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x178]}}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="0586f1601bbaed68655f01495e1702d5385cf70720ddcc487c4f6fde70c0b3cf76a8e20ad78e62165b2260e37c343176650ea60270bb8553499fdca63bcafc1712fff6684ab48b869ed7d40cf9948185d5faef014b99f12bb0a1c2ed5da4981a8b8c7d4fdaf5975669e704f0de6a2233af1226e89431647a9037ebf76a849dda0cc6cb3ce96b9b0f79cdf12c75cd27e050d47790550a2452", 0x98}], 0x1) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0xc4}], 0x1, 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) (async) select(0x52, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$getregset(0x4205, r2, 0x202, 0x0) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x178]}}) (async) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) (async) close(r1) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="0586f1601bbaed68655f01495e1702d5385cf70720ddcc487c4f6fde70c0b3cf76a8e20ad78e62165b2260e37c343176650ea60270bb8553499fdca63bcafc1712fff6684ab48b869ed7d40cf9948185d5faef014b99f12bb0a1c2ed5da4981a8b8c7d4fdaf5975669e704f0de6a2233af1226e89431647a9037ebf76a849dda0cc6cb3ce96b9b0f79cdf12c75cd27e050d47790550a2452", 0x98}], 0x1) (async) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0xc4}], 0x1, 0x0, 0x0, 0x0) (async) 36.999440355s ago: executing program 2 (id=1280): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c40)={"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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}) setsockopt$sock_linger(r4, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000002d00), 0xffffffffffffff5f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeef0000, 0x1, 0x9, 0xefa0, 0x0, [{0x7, 0x9, 0x7, '\x00', 0xfe}, {0x17, 0x5, 0xfd, '\x00', 0x40}, {0x4, 0x4, 0x2, '\x00', 0x2}, {0x40, 0x4, 0xff, '\x00', 0x59}, {0x0, 0x2, 0xfb, '\x00', 0xf8}, {0xb, 0x6, 0x4, '\x00', 0xa}, {0x1, 0x40, 0x6, '\x00', 0x8}, {0x8, 0x8, 0x6, '\x00', 0xd0}, {0x5, 0x8, 0x40, '\x00', 0x6}, {0x1, 0x6, 0x9, '\x00', 0x1}, {0x8, 0x7, 0xad, '\x00', 0x8}, {0xb, 0x0, 0xa, '\x00', 0x51}, {0x4, 0x6, 0x1, '\x00', 0x28}, {0x2, 0x0, 0x5, '\x00', 0x2}, {0x3, 0x0, 0x5, '\x00', 0x8}, {0x3, 0xfa, 0x8, '\x00', 0x2a}, {0x0, 0x0, 0x1}, {0x2, 0x3, 0x1a, '\x00', 0x4}, {0x9, 0x7, 0x4, '\x00', 0x8}, {0xee, 0x3, 0x6, '\x00', 0xd}, {0x79, 0xe, 0xf9}, {0x80, 0x1, 0xb, '\x00', 0xd1}, {0xae, 0x2, 0x5, '\x00', 0xc}, {0x0, 0xf2, 0x4, '\x00', 0x6}]}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 36.982978466s ago: executing program 2 (id=1281): truncate(&(0x7f0000000040)='./file0\x00', 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x8, 0x20, 0x3, 0xffff0000}, {0x5, 0x40, 0x9c, 0xffffffff}, {0x9, 0x59, 0x9, 0x6}]}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r2, &(0x7f0000000180)='./file0\x00', 0x1, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0100001000130428bd700000000000e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x804) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) write$binfmt_format(r3, &(0x7f0000000240)='-1\x00', 0x58) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x26f) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00"], 0x18) 36.929436917s ago: executing program 2 (id=1282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f00000002c0)="518d090c62a0a9a11ff26593bd52165b011c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d", 0x43}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb", 0xde}, {&(0x7f00000008c0)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb42575f483fe523c9abe644830816977ccba1f493bdfa33d63b1dbfd5dde8b03dfa6162f0849ad9823f4e302f12d77cefff93dae1d25662ce8cfe9cdf57a066565ea4a78f8b0e0379110f8d424740bb27839ccc87e687adf0d23ac64ce9c971e0d3eec711e7d49d051cb97526f79fe31b00421399b4101c763b33224a71d2e0b64c02374fc4f0ebc5fdb156e3b8716cba396ad951a983a24404dddcc37b8b5d32e138185df4c6326f8e9c5e4e5c2088c513b2", 0xeb}, {&(0x7f00000009c0)="d650774632b71a34a88292fcf26ad63f611e11baa9b64a99773dd6fbfe12178987d7b005129705e9d23da9376d714ea8cadc0d1b4f2d7fc2e73242b432015e5e298fd6e2161beacaa75ecb41f6aa8cca9a50239a518873cc1eef5ffcc67226fd8e2386d070a8fadf0e4573f3141917bf0fed3e6d0ba5e600840121a0df8deb37ca310ee1d23869f142d3ac1eda8027bd68f94969e492b24718ba715958516ef3b07f7d52465d66f705e80f816ac9a0a3ab08e8a6f1fa6fae5c12fe1526de3f51f545d49892b6fa2042a163e76a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f00)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)="1a51b7", 0x3}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}}], 0x4, 0x40) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}]}}) socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) 36.928860027s ago: executing program 3 (id=1283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) r3 = syz_pidfd_open(r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 36.616604633s ago: executing program 1 (id=1284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0xa0b01, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e1) sendfile(r6, r6, 0x0, 0x1200000000000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) close_range(r0, 0xffffffffffffffff, 0x0) 35.611867732s ago: executing program 5 (id=1285): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766640c6352a173404fd96e6f55d3cb6c7da40cc82ada1e3f3d", @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00"], 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r4, r3, 0x0, 0x80000000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766640c6352a173404fd96e6f55d3cb6c7da40cc82ada1e3f3d", @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00"], 0x128}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) (async) sendfile(r4, r3, 0x0, 0x80000000) (async) 35.007240874s ago: executing program 1 (id=1286): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x1f) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 33.895695715s ago: executing program 3 (id=1287): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fb, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xb2b9, 0x4) flock(0xffffffffffffffff, 0xb) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffa000) 31.867074755s ago: executing program 1 (id=1288): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4048005) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$sock_linger(r3, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) 28.656556737s ago: executing program 5 (id=1289): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c40)={"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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}) setsockopt$sock_linger(r4, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000002d00), 0xffffffffffffff5f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeef0000, 0x1, 0x9, 0xefa0, 0x0, [{0x7, 0x9, 0x7, '\x00', 0xfe}, {0x17, 0x5, 0xfd, '\x00', 0x40}, {0x4, 0x4, 0x2, '\x00', 0x2}, {0x40, 0x4, 0xff, '\x00', 0x59}, {0x0, 0x2, 0xfb, '\x00', 0xf8}, {0xb, 0x6, 0x4, '\x00', 0xa}, {0x1, 0x40, 0x6, '\x00', 0x8}, {0x8, 0x8, 0x6, '\x00', 0xd0}, {0x5, 0x8, 0x40, '\x00', 0x6}, {0x1, 0x6, 0x9, '\x00', 0x1}, {0x8, 0x7, 0xad, '\x00', 0x8}, {0xb, 0x0, 0xa, '\x00', 0x51}, {0x4, 0x6, 0x1, '\x00', 0x28}, {0x2, 0x0, 0x5, '\x00', 0x2}, {0x3, 0x0, 0x5, '\x00', 0x8}, {0x3, 0xfa, 0x8, '\x00', 0x2a}, {0x0, 0x0, 0x1}, {0x2, 0x3, 0x1a, '\x00', 0x4}, {0x9, 0x7, 0x4, '\x00', 0x8}, {0xee, 0x3, 0x6, '\x00', 0xd}, {0x79, 0xe, 0xf9}, {0x80, 0x1, 0xb, '\x00', 0xd1}, {0xae, 0x2, 0x5, '\x00', 0xc}, {0x0, 0xf2, 0x4, '\x00', 0x6}]}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 27.565100548s ago: executing program 1 (id=1290): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) bind$inet6(r1, 0x0, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000140)) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)={0x2, r5}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet6(r3, 0x0, 0x0, 0x24040014, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$vga_arbiter(r2, 0x0, 0x0) 20.821599008s ago: executing program 34 (id=1282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f00000002c0)="518d090c62a0a9a11ff26593bd52165b011c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d", 0x43}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb", 0xde}, {&(0x7f00000008c0)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb42575f483fe523c9abe644830816977ccba1f493bdfa33d63b1dbfd5dde8b03dfa6162f0849ad9823f4e302f12d77cefff93dae1d25662ce8cfe9cdf57a066565ea4a78f8b0e0379110f8d424740bb27839ccc87e687adf0d23ac64ce9c971e0d3eec711e7d49d051cb97526f79fe31b00421399b4101c763b33224a71d2e0b64c02374fc4f0ebc5fdb156e3b8716cba396ad951a983a24404dddcc37b8b5d32e138185df4c6326f8e9c5e4e5c2088c513b2", 0xeb}, {&(0x7f00000009c0)="d650774632b71a34a88292fcf26ad63f611e11baa9b64a99773dd6fbfe12178987d7b005129705e9d23da9376d714ea8cadc0d1b4f2d7fc2e73242b432015e5e298fd6e2161beacaa75ecb41f6aa8cca9a50239a518873cc1eef5ffcc67226fd8e2386d070a8fadf0e4573f3141917bf0fed3e6d0ba5e600840121a0df8deb37ca310ee1d23869f142d3ac1eda8027bd68f94969e492b24718ba715958516ef3b07f7d52465d66f705e80f816ac9a0a3ab08e8a6f1fa6fae5c12fe1526de3f51f545d49892b6fa2042a163e76a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f00)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)="1a51b7", 0x3}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}}], 0x4, 0x40) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}]}}) socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) 15.712047887s ago: executing program 35 (id=1287): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fb, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xb2b9, 0x4) flock(0xffffffffffffffff, 0xb) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffa000) 12.251470993s ago: executing program 36 (id=1289): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c40)={"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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}) setsockopt$sock_linger(r4, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000002d00), 0xffffffffffffff5f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeef0000, 0x1, 0x9, 0xefa0, 0x0, [{0x7, 0x9, 0x7, '\x00', 0xfe}, {0x17, 0x5, 0xfd, '\x00', 0x40}, {0x4, 0x4, 0x2, '\x00', 0x2}, {0x40, 0x4, 0xff, '\x00', 0x59}, {0x0, 0x2, 0xfb, '\x00', 0xf8}, {0xb, 0x6, 0x4, '\x00', 0xa}, {0x1, 0x40, 0x6, '\x00', 0x8}, {0x8, 0x8, 0x6, '\x00', 0xd0}, {0x5, 0x8, 0x40, '\x00', 0x6}, {0x1, 0x6, 0x9, '\x00', 0x1}, {0x8, 0x7, 0xad, '\x00', 0x8}, {0xb, 0x0, 0xa, '\x00', 0x51}, {0x4, 0x6, 0x1, '\x00', 0x28}, {0x2, 0x0, 0x5, '\x00', 0x2}, {0x3, 0x0, 0x5, '\x00', 0x8}, {0x3, 0xfa, 0x8, '\x00', 0x2a}, {0x0, 0x0, 0x1}, {0x2, 0x3, 0x1a, '\x00', 0x4}, {0x9, 0x7, 0x4, '\x00', 0x8}, {0xee, 0x3, 0x6, '\x00', 0xd}, {0x79, 0xe, 0xf9}, {0x80, 0x1, 0xb, '\x00', 0xd1}, {0xae, 0x2, 0x5, '\x00', 0xc}, {0x0, 0xf2, 0x4, '\x00', 0x6}]}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 0s ago: executing program 37 (id=1290): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) bind$inet6(r1, 0x0, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000140)) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)={0x2, r5}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet6(r3, 0x0, 0x0, 0x24040014, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$vga_arbiter(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): nvalid wMaxPacketSize 0 [ 58.261198][ T9] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 58.270241][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.278724][ T9] usb 6-1: config 0 descriptor?? [ 58.430463][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 58.512622][ T1992] netlink: 'syz.1.542': attribute type 16 has an invalid length. [ 58.549717][ T1998] overlayfs: failed to clone upperpath [ 58.555538][ T1999] overlayfs: failed to clone upperpath [ 58.580198][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 58.586549][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 58.594931][ T31] usb 4-1: config 179 has no interface number 0 [ 58.601277][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 58.612389][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 58.623678][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.634820][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 58.646210][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 58.659528][ T1994] netlink: 'syz.1.543': attribute type 2 has an invalid length. [ 58.663066][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 58.677091][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.691627][ T9] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 58.698926][ T1985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.706569][ T9] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 58.713269][ T2002] pim6reg1: entered promiscuous mode [ 58.722703][ T2002] pim6reg1: entered allmulticast mode [ 58.770217][ T9] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 58.779786][ T9] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 58.787946][ T9] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 58.893061][ T9] usb 6-1: USB disconnect, device number 2 [ 58.901759][ T9] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 59.063222][ T2013] fuse: Bad value for 'fd' [ 59.124275][ T1985] rust_binder: Error while translating object. [ 59.124319][ T1985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.130848][ T1985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 59.211432][ T9] usb 4-1: USB disconnect, device number 15 [ 59.211528][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 59.235218][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 59.431112][ T2048] SELinux: ebitmap: truncated map [ 59.438196][ T2048] SELinux: failed to load policy [ 59.516387][ T2067] netlink: 'syz.2.565': attribute type 4 has an invalid length. [ 59.530264][ T2068] netlink: 'syz.2.565': attribute type 4 has an invalid length. [ 59.756846][ T2075] SELinux: failed to load policy [ 60.285269][ T2113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.285297][ T2113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.361156][ T2117] 9pnet_fd: Insufficient options for proto=fd [ 60.390235][ T45] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 60.541605][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 60.549360][ T45] usb 4-1: can't read configurations, error -61 [ 60.576712][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 60.576727][ T36] audit: type=1400 audit(1756969804.067:460): avc: denied { view } for pid=2131 comm="syz.1.586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.640206][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.680215][ T45] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 60.790193][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 60.796523][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 60.804915][ T31] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 60.813052][ T31] usb 6-1: config 0 has no interface number 0 [ 60.819166][ T31] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 60.830138][ T31] usb 6-1: config 0 interface 88 has no altsetting 0 [ 60.838038][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 60.845696][ T45] usb 4-1: can't read configurations, error -61 [ 60.852073][ T45] usb usb4-port1: attempt power cycle [ 60.857785][ T31] usb 6-1: string descriptor 0 read error: -22 [ 60.864002][ T31] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 60.873031][ T31] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 60.881574][ T31] usb 6-1: config 0 descriptor?? [ 60.887937][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input8 [ 61.146619][ T2126] batadv_slave_0: mtu less than device minimum [ 61.154985][ T31] usb 6-1: USB disconnect, device number 3 [ 61.190260][ T45] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 61.212166][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 61.218992][ T36] audit: type=1400 audit(1756969804.707:461): avc: denied { create } for pid=2165 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.219781][ T45] usb 4-1: can't read configurations, error -61 [ 61.293397][ T2179] netlink: 'syz.2.600': attribute type 27 has an invalid length. [ 61.370267][ T45] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 61.392400][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 61.399986][ T45] usb 4-1: can't read configurations, error -61 [ 61.406503][ T45] usb usb4-port1: unable to enumerate USB device [ 61.695655][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 61.705406][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 61.743121][ T2187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1415652382 (90601752448 ns) > initial count (23233060352 ns). Using initial count to start timer. [ 61.761774][ T2187] rust_binder: Write failure EINVAL in pid:49 [ 61.818717][ T2199] veth1_vlan: entered allmulticast mode [ 62.050210][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.201256][ T45] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.212923][ T45] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 62.223913][ T45] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.235231][ T45] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 62.244282][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.253081][ T2197] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 62.464019][ T45] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 62.472089][ T45] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input9 [ 62.483232][ T45] usb 6-1: USB disconnect, device number 4 [ 62.483289][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 62.976533][ T2219] netlink: 'syz.5.613': attribute type 16 has an invalid length. [ 62.984297][ T2219] netlink: 64122 bytes leftover after parsing attributes in process `syz.5.613'. [ 63.054248][ T36] audit: type=1400 audit(1756969806.547:462): avc: denied { setattr } for pid=2220 comm="syz.5.614" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.080112][ T36] audit: type=1400 audit(1756969806.567:463): avc: denied { getopt } for pid=2220 comm="syz.5.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.131763][ T36] audit: type=1400 audit(1756969806.627:464): avc: denied { append } for pid=2222 comm="syz.5.615" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.148607][ T2226] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 63.166365][ T2226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60 [ 63.179895][ T2228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 63.191623][ T2228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:310 [ 63.202976][ T2237] netlink: 96 bytes leftover after parsing attributes in process `syz.5.619'. [ 63.221277][ T2238] netlink: 96 bytes leftover after parsing attributes in process `syz.5.619'. [ 63.379935][ T2265] rust_binder: 79: no such ref 1 [ 63.459183][ T36] audit: type=1400 audit(1756969806.947:465): avc: denied { create } for pid=2278 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 63.670204][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.800992][ T2303] 9pnet_fd: Insufficient options for proto=fd [ 63.820208][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 63.826673][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 63.841223][ T31] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 63.849707][ T31] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 63.859852][ T31] usb 6-1: config 4 has no interface number 0 [ 63.868081][ T31] usb 6-1: string descriptor 0 read error: -22 [ 63.874424][ T31] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 63.883527][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.906042][ T36] audit: type=1400 audit(1756969807.397:466): avc: denied { mount } for pid=2310 comm="syz.2.645" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.096097][ T2275] rust_binder: Error in use_page_slow: ESRCH [ 64.096125][ T2275] rust_binder: use_range failure ESRCH [ 64.102468][ T2275] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 64.108032][ T2275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 64.116519][ T2275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:82 [ 64.126765][ T31] usb 6-1: USB disconnect, device number 5 [ 64.262883][ T2321] syz.2.648 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.283389][ T36] audit: type=1400 audit(1756969807.777:467): avc: denied { accept } for pid=2323 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.307799][ T2331] netlink: 188 bytes leftover after parsing attributes in process `syz.2.651'. [ 64.498335][ T36] audit: type=1400 audit(1756969807.987:468): avc: granted { setsecparam } for pid=2337 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 64.580687][ T2345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 64.631847][ T2347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 64.900201][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 64.920255][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 64.955278][ T2395] netlink: 'syz.1.672': attribute type 12 has an invalid length. [ 65.061503][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 65.069835][ T9] usb 4-1: config 0 has no interfaces? [ 65.076677][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=80b0, bcdDevice=b3.0a [ 65.080221][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 65.085760][ T9] usb 4-1: New USB device strings: Mfr=35, Product=2, SerialNumber=3 [ 65.093477][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 65.098847][ T9] usb 4-1: Product: syz [ 65.108138][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.112042][ T9] usb 4-1: Manufacturer: syz [ 65.120303][ T31] usb 6-1: Product: syz [ 65.124618][ T9] usb 4-1: SerialNumber: syz [ 65.128678][ T31] usb 6-1: Manufacturer: syz [ 65.138029][ T31] usb 6-1: SerialNumber: syz [ 65.138245][ T9] usb 4-1: config 0 descriptor?? [ 65.344582][ T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 65.368276][ T2398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'. [ 65.377500][ T2398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=2398 comm=syz.2.673 [ 65.517604][ T9] usb 4-1: USB disconnect, device number 20 [ 65.559376][ T36] audit: type=1326 audit(1756969809.047:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.583586][ T36] audit: type=1326 audit(1756969809.047:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.607095][ T36] audit: type=1326 audit(1756969809.077:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.630452][ T36] audit: type=1326 audit(1756969809.077:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.653733][ T36] audit: type=1326 audit(1756969809.077:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.677005][ T36] audit: type=1326 audit(1756969809.077:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.700321][ T36] audit: type=1326 audit(1756969809.077:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.724373][ T36] audit: type=1326 audit(1756969809.077:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.747634][ T36] audit: type=1326 audit(1756969809.077:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.770906][ T36] audit: type=1326 audit(1756969809.077:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.794120][ T36] audit: type=1326 audit(1756969809.077:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 65.930960][ T2428] rust_binder: Failed copying into alloc: EFAULT [ 65.930982][ T2428] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 65.937425][ T2428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.945852][ T2428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:355 [ 66.014748][ T2434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.595386][ T2470] overlayfs: failed to clone upperpath [ 66.626869][ T2472] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 66.657841][ T2483] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 66.717710][ T2496] netlink: 72 bytes leftover after parsing attributes in process `syz.1.707'. [ 66.803346][ T2503] /dev/rnullb0: Can't open blockdev [ 66.816190][ T2505] rust_binder: Error while translating object. [ 66.816214][ T2505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.822452][ T2505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 66.896256][ T2515] tipc: Started in network mode [ 66.910672][ T2515] tipc: Node identity b6c735a60a5e, cluster identity 4711 [ 66.917856][ T2515] tipc: Enabled bearer , priority 0 [ 66.925281][ T2515] syzkaller0: entered promiscuous mode [ 66.930792][ T2515] syzkaller0: entered allmulticast mode [ 66.937387][ T2515] tipc: Resetting bearer [ 66.944431][ T2515] tipc: Disabling bearer [ 67.080051][ T2518] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 67.368824][ T2531] 9pnet_fd: Insufficient options for proto=fd [ 67.558612][ T2550] overlayfs: failed to clone upperpath [ 67.681865][ T9] usb 6-1: USB disconnect, device number 6 [ 67.690811][ T9] usblp0: removed [ 67.696536][ T2560] /dev/rnullb0: Can't open blockdev [ 67.715808][ T2563] loop9: detected capacity change from 0 to 7 [ 67.718936][ T2564] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.730585][ T2563] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.738488][ T2563] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.746332][ T2563] loop9: unable to read partition table [ 67.752170][ T2563] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 67.752170][ T2563] ) failed (rc=-5) [ 67.753070][ T1081] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.777214][ T1081] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.788431][ T1081] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.796591][ T1081] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.804817][ T1081] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.833796][ T2568] rust_binder: Error while translating object. [ 67.833821][ T2568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 67.839994][ T2568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 68.125989][ T2604] 9pnet_fd: Insufficient options for proto=fd [ 68.129188][ T2606] tipc: Enabled bearer , priority 0 [ 68.150271][ T2606] syzkaller0: entered promiscuous mode [ 68.155748][ T2606] syzkaller0: entered allmulticast mode [ 68.164600][ T2606] tipc: Resetting bearer [ 68.181484][ T2606] tipc: Disabling bearer [ 68.252066][ T436] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 68.410205][ T436] usb 6-1: device descriptor read/64, error -71 [ 68.560200][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 68.660210][ T436] usb 6-1: device descriptor read/64, error -71 [ 68.720205][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 68.726376][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 68.734709][ T9] usb 4-1: config 0 has no interface number 0 [ 68.740910][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 68.748996][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 68.758055][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.766038][ T9] usb 4-1: Product: syz [ 68.770267][ T9] usb 4-1: Manufacturer: syz [ 68.774912][ T9] usb 4-1: SerialNumber: syz [ 68.780305][ T9] usb 4-1: config 0 descriptor?? [ 68.785960][ T9] smsc75xx v1.0.0 [ 68.898185][ T2650] overlayfs: failed to clone upperpath [ 68.903754][ T436] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 68.919025][ T2653] tipc: Enabling of bearer rejected, failed to enable media [ 69.040223][ T436] usb 6-1: device descriptor read/64, error -71 [ 69.097166][ T2676] fuse: Bad value for 'user_id' [ 69.102141][ T2676] fuse: Bad value for 'user_id' [ 69.280203][ T436] usb 6-1: device descriptor read/64, error -71 [ 69.390316][ T436] usb usb6-port1: attempt power cycle [ 69.587686][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 69.598983][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 69.608348][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 69.619158][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 69.628815][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 69.639070][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 69.648498][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 69.657743][ T9] usb 4-1: USB disconnect, device number 21 [ 69.730207][ T436] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 69.751176][ T436] usb 6-1: device descriptor read/8, error -71 [ 69.881909][ T436] usb 6-1: device descriptor read/8, error -71 [ 70.127545][ T2715] /dev/sg0: Can't lookup blockdev [ 70.133378][ T436] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 70.163843][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.171171][ T436] usb 6-1: device descriptor read/8, error -71 [ 70.172241][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.185973][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.194181][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.202710][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.210829][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.218782][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.226859][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.234947][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.242927][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.250969][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.258877][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.267188][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.268113][ T2721] EXT4-fs: dax option not supported [ 70.275058][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.275072][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.295973][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.304103][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.312041][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.319881][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.327802][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.335720][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.343670][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.351512][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.359364][ T436] usb 6-1: device descriptor read/8, error -71 [ 70.365631][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.373462][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.381280][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.389079][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.396897][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.404744][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.412588][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.420420][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.428216][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.436064][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.443915][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.451887][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.461964][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.470018][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.477946][ T436] usb usb6-port1: unable to enumerate USB device [ 70.484344][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.492653][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.500524][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.508405][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.516236][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.524057][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.531869][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.539663][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.547490][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.555330][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.563242][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.571068][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.578856][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.586681][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.594545][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.602535][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.610391][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.618174][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.626011][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.633814][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.641661][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.649454][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.657293][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.665099][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.672901][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.680707][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.688489][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.696304][ T2718] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.892351][ T2739] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.784'. [ 71.031048][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 71.040841][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 71.240193][ T36] kauditd_printk_skb: 593 callbacks suppressed [ 71.240210][ T36] audit: type=1326 audit(1756969814.727:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e4058ebe9 code=0x0 [ 71.332212][ T2764] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.424343][ T36] audit: type=1400 audit(1756969814.917:1074): avc: denied { write } for pid=2768 comm="syz.1.796" path="socket:[17045]" dev="sockfs" ino=17045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.497029][ T2775] rust_binder: Write failure EFAULT in pid:411 [ 71.700230][ T1366] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 71.870399][ T1366] usb 6-1: Using ep0 maxpacket: 32 [ 71.876711][ T1366] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.885158][ T1366] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.894046][ T1366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.903087][ T1366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.912790][ T1366] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.922496][ T1366] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.935587][ T1366] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.944671][ T1366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.953875][ T1366] usb 6-1: config 0 descriptor?? [ 72.212330][ T1366] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.226652][ T1366] usb 6-1: USB disconnect, device number 11 [ 72.233261][ T1366] usblp0: removed [ 72.350211][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 72.501223][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.512165][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.522134][ T45] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 72.531199][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.539684][ T45] usb 4-1: config 0 descriptor?? [ 72.650201][ T435] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 72.800208][ T435] usb 6-1: Using ep0 maxpacket: 32 [ 72.806370][ T435] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.814828][ T435] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.823442][ T435] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.833117][ T435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.842806][ T435] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.852464][ T435] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.865434][ T435] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.874470][ T435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.883405][ T435] usb 6-1: config 0 descriptor?? [ 72.947828][ T45] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 72.955293][ T45] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 73.020191][ T45] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 73.029134][ T45] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 73.037135][ T45] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 73.089234][ T2773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.097788][ T2773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.154721][ T1366] usb 4-1: USB disconnect, device number 22 [ 73.163713][ T1366] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 73.308032][ T435] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.320419][ T435] usb 6-1: USB disconnect, device number 12 [ 73.326848][ T435] usblp0: removed [ 73.721036][ T2787] rust_binder: Error while translating object. [ 73.721068][ T2787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.727247][ T2787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 73.737562][ T36] audit: type=1400 audit(1756969817.227:1075): avc: denied { bind } for pid=2785 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.962940][ T2792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.963546][ T2792] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 73.969999][ T2792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 73.978223][ T2792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:121 [ 74.026901][ T2801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.045477][ T2801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.418076][ T36] audit: type=1326 audit(1756969817.907:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 74.441525][ T36] audit: type=1326 audit(1756969817.907:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 74.465002][ T36] audit: type=1326 audit(1756969817.907:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 74.488495][ T36] audit: type=1326 audit(1756969817.907:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 74.519837][ T36] audit: type=1326 audit(1756969817.907:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 74.536638][ T2824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.543393][ T2824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 74.543398][ T36] audit: type=1326 audit(1756969817.907:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 74.543424][ T36] audit: type=1326 audit(1756969817.907:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x7ffc0000 [ 74.707592][ T2833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 74.760685][ T2845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 74.796518][ T2852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2852 comm=syz.1.824 [ 74.829351][ T2860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2860 comm=syz.1.826 [ 75.350052][ T2891] netlink: 'syz.2.837': attribute type 14 has an invalid length. [ 75.358512][ T2891] netlink: 'syz.2.837': attribute type 14 has an invalid length. [ 75.380819][ T2898] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 75.380847][ T2898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 75.390443][ T2898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:426 [ 75.407696][ T2903] /dev/rnullb0: Can't open blockdev [ 75.471891][ T2918] overlayfs: failed to clone upperpath [ 75.685951][ T2948] rust_binder: Write failure EFAULT in pid:441 [ 75.750197][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 75.888110][ T1335] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.910208][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 75.917075][ T9] usb 6-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1120, setting to 1024 [ 75.928278][ T9] usb 6-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 1024 [ 75.938399][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 75.946445][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 75.955542][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.963537][ T9] usb 6-1: Product: syz [ 75.967697][ T9] usb 6-1: Manufacturer: syz [ 75.972309][ T9] usb 6-1: SerialNumber: syz [ 75.977770][ T2924] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 76.301076][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 76.301092][ T36] audit: type=1400 audit(1756969819.797:1110): avc: denied { connect } for pid=2979 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.390938][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 76.403096][ T9] usb 6-1: USB disconnect, device number 14 [ 76.413243][ T9] usblp0: removed [ 76.952437][ T2989] 9pnet_fd: Insufficient options for proto=fd [ 76.974754][ T36] audit: type=1400 audit(1756969820.467:1111): avc: denied { bind } for pid=2994 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.994438][ T36] audit: type=1400 audit(1756969820.467:1112): avc: denied { name_bind } for pid=2994 comm="syz.2.876" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 77.016225][ T36] audit: type=1400 audit(1756969820.467:1113): avc: denied { node_bind } for pid=2994 comm="syz.2.876" saddr=fc01:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 77.046172][ T36] audit: type=1400 audit(1756969820.537:1114): avc: denied { watch_reads } for pid=2997 comm="syz.5.877" path="/49" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.201881][ T3003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.211369][ T36] audit: type=1400 audit(1756969820.707:1115): avc: denied { ioctl } for pid=3005 comm="syz.5.879" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.252769][ T3008] binder: Unknown parameter 's^clabel' [ 77.272068][ T3013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'. [ 77.282101][ T3013] /dev/rnullb0: Can't open blockdev [ 77.287611][ T3013] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 77.306299][ T3015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.882'. [ 77.317306][ T3015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.317329][ T3015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:156 [ 77.402131][ T3021] loop2: detected capacity change from 0 to 7 [ 77.417720][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.426870][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 77.434819][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.443973][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 77.451916][ T3021] loop2: unable to read partition table [ 77.458093][ T3021] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 77.472171][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.481301][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 77.489359][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.498503][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 77.506677][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.515801][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 77.523911][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.533057][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 77.543785][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.552951][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 77.927273][ T36] audit: type=1400 audit(1756969821.417:1116): avc: denied { ioctl } for pid=3033 comm="syz.1.889" path="socket:[18278]" dev="sockfs" ino=18278 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.950217][ T767] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.952410][ T768] Bluetooth: hci0: command 0x1003 tx timeout [ 77.967127][ T36] audit: type=1400 audit(1756969821.447:1117): avc: denied { setattr } for pid=3033 comm="syz.1.889" name="XDP" dev="sockfs" ino=18278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.976480][ T3038] tipc: Enabling of bearer rejected, failed to enable media [ 78.001687][ T3038] veth1: entered allmulticast mode [ 78.007235][ T3038] x_tables: unsorted underflow at hook 3 [ 78.013569][ T3037] veth1: left allmulticast mode [ 78.074288][ T3042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 78.102515][ T36] audit: type=1400 audit(1756969821.597:1118): avc: denied { name_bind } for pid=3048 comm="syz.2.894" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.161561][ T3051] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 78.962447][ T3075] incfs: Options parsing error. -22 [ 78.967684][ T3075] incfs: mount failed -22 [ 79.007737][ T3068] netlink: 596 bytes leftover after parsing attributes in process `syz.1.899'. [ 79.062391][ T1335] tipc: Subscription rejected, illegal request [ 79.071629][ T3078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.902'. [ 79.492562][ T36] audit: type=1400 audit(1756969822.987:1119): avc: denied { create } for pid=3111 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.519617][ T3114] /dev/rnullb0: Can't open blockdev [ 79.633389][ T3120] tipc: Enabling of bearer rejected, failed to enable media [ 79.659191][ T3127] 9pnet_fd: Insufficient options for proto=fd [ 79.682372][ T3135] tipc: Enabling of bearer rejected, failed to enable media [ 79.750206][ T435] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 79.901240][ T435] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 79.912275][ T435] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 79.926203][ T435] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.935259][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.943254][ T435] usb 4-1: SerialNumber: syz [ 80.150344][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.158874][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.167348][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.176200][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.184706][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.193508][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.201569][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.210008][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.218193][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.227575][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.258386][ T435] usb 4-1: USB disconnect, device number 23 [ 80.461275][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.470449][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.479486][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.488638][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.496480][ T109] loop2: unable to read partition table [ 80.788270][ T3220] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 80.790227][ T436] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 80.808427][ T3220] binder: Unknown parameter 'fsmagic' [ 80.835187][ T3226] binder: Bad value for 'stats' [ 80.905327][ T3233] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 80.930220][ T436] usb 6-1: device descriptor read/64, error -71 [ 80.992069][ T3236] rust_binder: Error while translating object. [ 80.992109][ T3236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.998410][ T3236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:489 [ 81.170206][ T436] usb 6-1: device descriptor read/64, error -71 [ 81.236764][ T3244] netlink: 68 bytes leftover after parsing attributes in process `syz.1.959'. [ 81.246485][ T3244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 81.362255][ T3264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.966'. [ 81.420687][ T436] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 81.458475][ T3267] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 81.466396][ T3267] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 81.475836][ T3267] netlink: 'syz.2.967': attribute type 10 has an invalid length. [ 81.492011][ T3270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 81.515267][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 81.515280][ T36] audit: type=1400 audit(1756969825.007:1124): avc: denied { create } for pid=3276 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.550331][ T436] usb 6-1: device descriptor read/64, error -71 [ 81.602100][ T3291] /dev/rnullb0: Can't open blockdev [ 81.790220][ T436] usb 6-1: device descriptor read/64, error -71 [ 81.814095][ T3305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:508 [ 81.832773][ T3311] fuse: Bad value for 'fd' [ 81.895872][ T3317] overlayfs: failed to resolve './file0': -2 [ 81.902031][ T436] usb usb6-port1: attempt power cycle [ 82.240223][ T436] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 82.261200][ T436] usb 6-1: device descriptor read/8, error -71 [ 82.391180][ T436] usb 6-1: device descriptor read/8, error -71 [ 82.525115][ T3340] /dev/rnullb0: Can't lookup blockdev [ 82.630222][ T436] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 82.651186][ T436] usb 6-1: device descriptor read/8, error -71 [ 82.682384][ T3354] rust_binder: Write failure EFAULT in pid:516 [ 82.775730][ T3360] rust_binder: Write failure EFAULT in pid:518 [ 82.791068][ T436] usb 6-1: device descriptor read/8, error -71 [ 82.910297][ T436] usb usb6-port1: unable to enumerate USB device [ 83.647393][ T3371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 83.663454][ T3373] netlink: 'syz.5.1000': attribute type 4 has an invalid length. [ 83.682280][ T3373] netlink: 'syz.5.1000': attribute type 4 has an invalid length. [ 83.710535][ T3376] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 83.717989][ T3376] rust_binder: Write failure EINVAL in pid:177 [ 83.718315][ T36] audit: type=1400 audit(1756969827.207:1125): avc: denied { setopt } for pid=3377 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.749875][ T36] audit: type=1400 audit(1756969827.227:1126): avc: denied { ioctl } for pid=3377 comm="syz.3.1002" path="socket:[19892]" dev="sockfs" ino=19892 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.755870][ T3384] rust_binder: Error while translating object. [ 83.776712][ T3384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 83.783055][ T3384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:179 [ 83.792448][ T3386] rust_binder: 530: no such ref 1 [ 83.822516][ T3391] /dev/sr0: Can't lookup blockdev [ 83.840725][ T3396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.840761][ T3396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:540 [ 83.850618][ T3396] rust_binder: 540: no such ref 2 [ 83.865020][ T3396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:540 [ 83.894161][ T36] audit: type=1400 audit(1756969827.387:1127): avc: denied { create } for pid=3402 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.944657][ T3410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 83.964499][ T36] audit: type=1400 audit(1756969827.387:1128): avc: denied { create } for pid=3402 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.970223][ T3410] rust_binder: 545: no such ref 1 [ 84.095591][ T3440] tipc: Enabling of bearer rejected, failed to enable media [ 84.117221][ T36] audit: type=1400 audit(1756969827.607:1129): avc: denied { setopt } for pid=3443 comm="syz.5.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.138625][ T3440] incfs_lookup_dentry err:-13 [ 84.143366][ T3444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1018'. [ 84.157472][ T3440] incfs: Can't find or create .index dir in ./bus [ 84.164102][ T3440] incfs: mount failed -13 [ 84.188611][ T3440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3440 comm=syz.1.1017 [ 84.262864][ T3448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3448 comm=syz.5.1018 [ 84.362774][ T36] audit: type=1400 audit(1756969827.857:1130): avc: denied { bind } for pid=3461 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.362874][ T3462] rust_binder: Error in use_page_slow: ESRCH [ 84.383971][ T3462] rust_binder: use_range failure ESRCH [ 84.390061][ T3462] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 84.395806][ T3462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 84.404095][ T3462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:558 [ 84.550228][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 84.710231][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 84.716849][ T31] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 84.725359][ T31] usb 6-1: config 0 has no interface number 0 [ 84.732961][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.742282][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.750955][ T31] usb 6-1: Product: syz [ 84.755268][ T31] usb 6-1: Manufacturer: syz [ 84.759876][ T31] usb 6-1: SerialNumber: syz [ 84.768669][ T31] usb 6-1: config 0 descriptor?? [ 84.776289][ T31] smsc95xx v2.0.0 [ 84.851416][ T36] audit: type=1400 audit(1756969828.347:1131): avc: denied { create } for pid=3502 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.937024][ T3506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:579 [ 84.961838][ T3513] rust_binder: Error while translating object. [ 84.971097][ T3513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 84.977401][ T3513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:585 [ 85.025814][ T3527] /dev/rnullb0: Can't lookup blockdev [ 85.122584][ T36] audit: type=1326 audit(1756969828.617:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.3.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ef1f8ebe9 code=0x0 [ 85.187296][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 85.198038][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.582971][ T3544] overlayfs: missing 'lowerdir' [ 85.618544][ T3552] /dev/rnullb0: Can't lookup blockdev [ 85.634152][ T3554] tipc: Enabling of bearer rejected, failed to enable media [ 85.671176][ T3560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 85.680875][ T3560] >: renamed from veth0_vlan [ 85.964468][ T36] audit: type=1400 audit(1756969829.457:1133): avc: denied { create } for pid=3572 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.004471][ T3584] netlink: 'syz.3.1069': attribute type 11 has an invalid length. [ 86.019052][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 86.033095][ T31] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 86.044724][ T31] usb 6-1: USB disconnect, device number 19 [ 86.293874][ T3605] /dev/rnullb0: Can't lookup blockdev [ 86.338153][ T3621] bridge0: port 3(veth0_to_bridge) entered blocking state [ 86.345536][ T435] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 86.353240][ T3621] bridge0: port 3(veth0_to_bridge) entered disabled state [ 86.362254][ T3621] veth0_to_bridge: entered allmulticast mode [ 86.368819][ T3621] veth0_to_bridge: entered promiscuous mode [ 86.374898][ T3621] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.387477][ T31] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 86.395400][ T3621] bridge0: port 3(veth0_to_bridge) entered blocking state [ 86.402538][ T3621] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 86.465579][ T3626] fuseblk: Unknown parameter 'rootmoý7000000000000000001H000' [ 86.473896][ T3626] fuseblk: Unknown parameter 'rootmoý7000000000000000001H000' [ 86.511349][ T435] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 86.522028][ T435] usb 4-1: config 16 has no interface number 0 [ 86.529679][ T435] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 86.539448][ T435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.547784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.559923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.572113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.584140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.596221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.608237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.620321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.632344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.644414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.656431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.696199][ T435] usb 4-1: Product: syz [ 86.710559][ T435] usb 4-1: Manufacturer: syz [ 86.717015][ T435] usb 4-1: SerialNumber: syz [ 86.736241][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 86.752486][ T31] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 86.780822][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.800446][ T31] usb 6-1: config 0 descriptor?? [ 86.809596][ T3588] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 86.957011][ T3595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35178 sclass=netlink_route_socket pid=3595 comm=syz.3.1073 [ 86.970898][ T3595] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 86.983352][ T36] audit: type=1400 audit(1756969830.477:1134): avc: denied { relabelto } for pid=3594 comm="syz.3.1073" name="205" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 87.011140][ T36] audit: type=1400 audit(1756969830.477:1135): avc: denied { associate } for pid=3594 comm="syz.3.1073" name="205" dev="tmpfs" ino=1167 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 87.076599][ T1081] udevd[1081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.084006][ T435] usb 4-1: USB disconnect, device number 24 [ 87.265166][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 87.330903][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 87.482491][ T31] usb 6-1: USB disconnect, device number 20 [ 87.543964][ T3655] binder: Bad value for 'stats' [ 87.812458][ T3668] devpts: called with bogus options [ 87.970196][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 88.595478][ T36] audit: type=1326 audit(1756969832.087:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef1f8ebe9 code=0x7ffc0000 [ 88.659195][ T36] audit: type=1326 audit(1756969832.117:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ef1f8ebe9 code=0x7ffc0000 [ 88.711247][ T36] audit: type=1326 audit(1756969832.117:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef1f8ebe9 code=0x7ffc0000 [ 88.750228][ T36] audit: type=1326 audit(1756969832.117:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9ef1f8ebe9 code=0x7ffc0000 [ 88.789924][ T36] audit: type=1326 audit(1756969832.117:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef1f8ebe9 code=0x7ffc0000 [ 88.854722][ T36] audit: type=1326 audit(1756969832.117:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9ef1f8ebe9 code=0x7ffc0000 [ 88.905488][ T36] audit: type=1326 audit(1756969832.117:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 88.956518][ T36] audit: type=1326 audit(1756969832.117:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef1f8ebe9 code=0x7ffc0000 [ 89.321299][ T3699] can0: slcan on ttyS3. [ 89.350910][ T3699] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 89.887377][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 89.950015][ T3698] can0 (unregistered): slcan off ttyS3. [ 90.177896][ T3750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.290282][ T3767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1119'. [ 90.588171][ T3785] veth1: entered allmulticast mode [ 90.594277][ T3784] veth1: left allmulticast mode [ 90.802070][ T3792] syz.2.1126 (3792): attempted to duplicate a private mapping with mremap. This is not supported. [ 91.130628][ T3811] 9pnet_fd: Insufficient options for proto=fd [ 91.140490][ T3813] 9pnet_fd: Insufficient options for proto=fd [ 91.413463][ T3828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=3828 comm=syz.2.1139 [ 91.550199][ C1] net_ratelimit: 101633 callbacks suppressed [ 91.550220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.568291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.580322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.592425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.604435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.616498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.628511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.640586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.652614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.664676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.260367][ T436] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 92.422759][ T436] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 92.437581][ T436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.447980][ T436] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 92.461438][ T436] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 92.470644][ T436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.479731][ T436] usb 6-1: config 0 descriptor?? [ 92.897895][ T436] holtek_kbd 0003:04D9:A055.000D: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0 [ 92.992217][ T3903] /dev/loop0: Can't lookup blockdev [ 92.997901][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 92.997914][ T36] audit: type=1401 audit(1756969836.487:1170): op=setxattr invalid_context="" [ 93.062087][ T36] audit: type=1400 audit(1756969836.557:1171): avc: denied { write } for pid=3904 comm="syz.3.1170" name="raw6" dev="proc" ino=4026532580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.093910][ T436] usb 6-1: USB disconnect, device number 21 [ 93.220212][ T9] usb 4-1: device descriptor read/64, error -110 [ 93.242920][ T3917] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1173'. [ 93.460206][ T9] usb 4-1: device descriptor read/64, error -32 [ 93.613804][ T36] audit: type=1400 audit(1756969837.107:1172): avc: denied { create } for pid=3918 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.635280][ T3919] incfs: Options parsing error. -22 [ 93.640823][ T3919] incfs: mount failed -22 [ 93.656951][ T3919] fuse: Bad value for 'fd' [ 93.661902][ T36] audit: type=1400 audit(1756969837.147:1173): avc: denied { getopt } for pid=3918 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.695751][ T36] audit: type=1400 audit(1756969837.177:1174): avc: denied { getopt } for pid=3918 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.716669][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 93.763959][ T3922] 9pnet_fd: Insufficient options for proto=fd [ 93.813697][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 93.867351][ T9] usb 4-1: device descriptor read/64, error -32 [ 93.959565][ T36] audit: type=1400 audit(1756969837.447:1175): avc: denied { execute } for pid=3935 comm="syz.1.1182" path="/dev/rnullb0" dev="tmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.008559][ T36] audit: type=1400 audit(1756969837.497:1176): avc: denied { write } for pid=3939 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.039050][ T36] audit: type=1400 audit(1756969837.497:1177): avc: denied { nlmsg_write } for pid=3939 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.061543][ T3942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 94.120220][ T9] usb 4-1: device descriptor read/64, error -32 [ 94.231495][ T9] usb usb4-port1: attempt power cycle [ 94.237747][ T9] raw-gadget.0 gadget.3: failed to queue reset event [ 94.310988][ T9] raw-gadget.0 gadget.3: failed to queue resume event [ 94.318026][ T9] raw-gadget.0 gadget.3: failed to queue reset event [ 94.531257][ T9] raw-gadget.0 gadget.3: failed to queue resume event [ 94.600590][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 94.652480][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 94.668460][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 94.675937][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 94.683168][ T9] usb 4-1: device descriptor read/8, error -32 [ 94.788175][ T3968] __vm_enough_memory: pid: 3968, comm: syz.5.1194, bytes: 18014402804453376 not enough memory for the allocation [ 94.802019][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1194'. [ 94.820369][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 94.827709][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 94.838491][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 94.845616][ T9] usb 4-1: device descriptor read/8, error -32 [ 94.905752][ T3971] /dev/rnullb0: Can't open blockdev [ 94.960210][ T9] raw-gadget.0 gadget.3: failed to queue suspend event [ 94.974706][ T9] raw-gadget.0 gadget.3: failed to queue reset event [ 94.991791][ T3979] /dev/rnullb0: Can't lookup blockdev [ 95.060214][ T9] raw-gadget.0 gadget.3: failed to queue resume event [ 95.130216][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 95.159880][ T3996] futex_wake_op: syz.1.1205 tries to shift op by 144; fix this program [ 95.168584][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 95.175861][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 95.183702][ T436] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 95.191507][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 95.198664][ T9] usb 4-1: device descriptor read/8, error -32 [ 95.300201][ T36] audit: type=1400 audit(1756969838.787:1178): avc: denied { write } for pid=3997 comm="syz.2.1206" name="file0" dev="tmpfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.350692][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 95.357998][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 95.378505][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 95.385615][ T9] usb 4-1: device descriptor read/8, error -32 [ 95.400927][ T436] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 95.411201][ T36] audit: type=1400 audit(1756969838.787:1179): avc: denied { open } for pid=3997 comm="syz.2.1206" path="/453/file0" dev="tmpfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.422987][ T436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.465611][ T436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.475457][ T4001] mmap: syz.2.1208 (4001): VmData 29339648 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 95.498082][ T436] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 95.512018][ T9] raw-gadget.0 gadget.3: failed to queue suspend event [ 95.526021][ T9] usb usb4-port1: unable to enumerate USB device [ 95.542758][ T436] usb 6-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 95.560189][ T436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.579370][ T436] usb 6-1: config 0 descriptor?? [ 95.845607][ T4020] netlink: 'syz.1.1214': attribute type 16 has an invalid length. [ 95.853544][ T4020] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.1214'. [ 95.993514][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.004647][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.014548][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.023908][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.041892][ T436] sony 0003:12BA:074B.000E: hidraw0: USB HID v0.00 Device [HID 12ba:074b] on usb-dummy_hcd.5-1/input0 [ 96.058823][ T436] sony 0003:12BA:074B.000E: failed to claim input [ 96.418001][ T4036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 96.430211][ T436] usb 6-1: USB disconnect, device number 22 [ 96.456438][ T4039] fuse: Bad value for 'rootmode' [ 96.560220][ C1] net_ratelimit: 124334 callbacks suppressed [ 96.560238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.571899][ T4051] netlink: 'syz.2.1224': attribute type 16 has an invalid length. [ 96.578332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.586406][ T4051] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.1224'. [ 96.598032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.619185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.631233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.643301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.655291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.667350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.679419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.691505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.825255][ T4062] 9pnet_fd: Insufficient options for proto=fd [ 97.230202][ T9] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 97.401208][ T9] usb 6-1: config 0 has an invalid descriptor of length 157, skipping remainder of the config [ 97.422174][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.466263][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c121, bcdDevice= 0.fb [ 97.500193][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.530703][ T9] usb 6-1: config 0 descriptor?? [ 97.542956][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 97.565364][ T4080] netlink: 'syz.1.1234': attribute type 2 has an invalid length. [ 97.574471][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4080 comm=syz.1.1234 [ 98.095548][ T9] usb 6-1: USB disconnect, device number 23 [ 98.131083][ T4094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.132905][ T4094] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 98.533111][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 98.621134][ T4104] /dev/loop0: Can't lookup blockdev [ 98.700558][ T9] usb 6-1: too many configurations: 99, using maximum allowed: 8 [ 98.729327][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 98.747084][ T9] usb 6-1: can't read configurations, error -61 [ 98.890230][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 99.084204][ T9] usb 6-1: too many configurations: 99, using maximum allowed: 8 [ 99.103091][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 99.112783][ T9] usb 6-1: can't read configurations, error -61 [ 99.129950][ T9] usb usb6-port1: attempt power cycle [ 99.500215][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 99.554383][ T9] usb 6-1: too many configurations: 99, using maximum allowed: 8 [ 99.568364][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 99.576234][ T9] usb 6-1: can't read configurations, error -61 [ 99.682704][ T4117] overlayfs: failed to resolve 'workdir=./file0/file0': -2 [ 99.700922][ T4117] /dev/rnullb0: Can't lookup blockdev [ 99.740245][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 99.752430][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 99.752445][ T36] audit: type=1400 audit(1756969843.247:1181): avc: denied { accept } for pid=4118 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.784329][ T9] usb 6-1: too many configurations: 99, using maximum allowed: 8 [ 99.807322][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 99.815080][ T9] usb 6-1: can't read configurations, error -61 [ 99.836669][ T9] usb usb6-port1: unable to enumerate USB device [ 99.860429][ T36] audit: type=1326 audit(1756969843.347:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.1.1251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ed8ebe9 code=0x0 [ 100.690517][ T4153] 9pnet_fd: p9_fd_create_tcp (4153): problem binding to privport [ 100.870230][ T4166] tipc: Enabling of bearer rejected, failed to enable media [ 100.892031][ T4168] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 100.944777][ T4174] netlink: 'syz.1.1271': attribute type 27 has an invalid length. [ 101.336405][ T4186] fuseblk: Bad value for 'group_id' [ 101.342388][ T4186] fuseblk: Bad value for 'group_id' [ 101.415634][ T4191] netlink: 'syz.5.1275': attribute type 4 has an invalid length. [ 101.570201][ C1] net_ratelimit: 147224 callbacks suppressed [ 101.570220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.588306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.600277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.612238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.624288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.636342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.648310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.660250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.672286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.684321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.801476][ T4228] 9pnet_fd: Insufficient options for proto=fd [ 103.832518][ T4228] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1285'. [ 106.580180][ C1] net_ratelimit: 197632 callbacks suppressed [ 106.580200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.580268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.586254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.598228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.610231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.622195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.634083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.645957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.657774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.669691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.440172][ C1] sched: DL replenish lagged too much [ 111.590212][ C1] net_ratelimit: 199723 callbacks suppressed [ 111.590232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.590261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.596290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.608315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.620189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.632155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.644101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.655962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.667829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.679759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.600194][ C1] net_ratelimit: 203625 callbacks suppressed [ 116.600214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.600247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.606264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.618224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.630227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.642077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.653953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.665830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.677673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.689647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.610185][ C0] net_ratelimit: 206215 callbacks suppressed [ 121.610206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.610206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.610289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.616268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.628193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.640135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.651982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.663821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.675789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.687642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.620192][ C1] net_ratelimit: 214065 callbacks suppressed [ 126.620214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.620214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.620307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.626334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.638240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.650063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.662027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.673886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.685905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.697715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.630195][ C1] net_ratelimit: 219900 callbacks suppressed [ 131.630215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.630250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.636249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.648196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.659994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.671904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.683856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.695807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.707782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.719760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.640174][ C1] net_ratelimit: 213266 callbacks suppressed [ 136.640195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.640230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.646244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 136.658118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.670074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.682052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.693866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.705901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.717732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.729728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.650180][ C1] net_ratelimit: 201413 callbacks suppressed [ 141.650201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.650214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.650303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.656314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.668203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.680073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 141.691997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.703957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.715951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.727865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.660195][ C1] net_ratelimit: 203792 callbacks suppressed [ 146.660215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.660252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.666289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.678277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.690215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.702170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.714160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.726029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.737841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.749717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.670175][ C0] net_ratelimit: 179232 callbacks suppressed [ 151.670194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.670207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.670250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.676256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.688208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.700210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.712140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.724058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.735877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.747793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.680198][ C0] net_ratelimit: 170592 callbacks suppressed [ 156.680220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.680390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.686264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.698216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.710210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.722067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.734053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.745887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.757868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.769874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.690196][ C0] net_ratelimit: 165907 callbacks suppressed [ 161.690218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.690295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.696316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.708198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.720235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.732069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.744019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.755999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.767912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.779908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.700197][ C1] net_ratelimit: 173006 callbacks suppressed [ 166.700214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.700255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.706243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.718175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.729995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.741895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.753852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.765686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.777647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.789635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.710200][ C1] net_ratelimit: 169709 callbacks suppressed [ 171.710218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.710227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.710281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.716263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.728255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.740232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.752118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.763940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.775838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.787668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.351305][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.358392][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.531381][ T4253] bridge_slave_0: entered allmulticast mode [ 174.551098][ T4253] bridge_slave_0: entered promiscuous mode [ 174.650598][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.657648][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.690564][ T4253] bridge_slave_1: entered allmulticast mode [ 174.701447][ T4253] bridge_slave_1: entered promiscuous mode [ 174.742942][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.749981][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.793504][ T4255] bridge_slave_0: entered allmulticast mode [ 174.823345][ T4255] bridge_slave_0: entered promiscuous mode [ 175.313926][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.342455][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.349558][ T4255] bridge_slave_1: entered allmulticast mode [ 175.384210][ T4255] bridge_slave_1: entered promiscuous mode [ 176.720173][ C0] net_ratelimit: 174900 callbacks suppressed [ 176.720193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.720216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.726269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.738121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.750078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.761889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.773783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.785771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.797589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.809571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.849423][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.921176][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.928276][ T4254] bridge_slave_0: entered allmulticast mode [ 176.961712][ T4254] bridge_slave_0: entered promiscuous mode [ 177.025911][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.097379][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.119503][ T4252] bridge_slave_0: entered allmulticast mode [ 177.158316][ T4252] bridge_slave_0: entered promiscuous mode [ 177.439212][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.602484][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.631085][ T4254] bridge_slave_1: entered allmulticast mode [ 177.665799][ T4254] bridge_slave_1: entered promiscuous mode [ 177.828659][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.847908][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.873059][ T4252] bridge_slave_1: entered allmulticast mode [ 177.901244][ T4252] bridge_slave_1: entered promiscuous mode [ 181.730181][ C0] net_ratelimit: 176229 callbacks suppressed [ 181.730200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.730220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.736251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.748201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.760210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.772064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.784036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.795883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.807833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.819802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.740215][ C0] net_ratelimit: 176580 callbacks suppressed [ 186.740235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.740272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.746342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.758145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.770183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.782076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.793959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.805910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.817930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.829747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.750187][ C1] net_ratelimit: 170236 callbacks suppressed [ 191.750208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 191.750223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.750268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.756394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.768319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.780201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.792084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.804028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.816031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.827880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.760191][ C1] net_ratelimit: 174376 callbacks suppressed [ 196.760210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 196.760216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.760298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.766380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.778249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.790075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.802037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.813995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.825992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.837821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.770187][ C1] net_ratelimit: 171829 callbacks suppressed [ 201.770207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.770220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.770268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.776266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.788160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.800087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.812003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.823935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 201.835807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.847768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.780202][ C1] net_ratelimit: 177872 callbacks suppressed [ 206.780222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.780251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.786245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.798267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.810116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.822097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.834039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.845972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.857954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.869833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.790180][ C0] net_ratelimit: 191643 callbacks suppressed [ 211.790200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.790213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.790250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.796274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.808155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.820012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.831864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.843820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.855787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 211.867749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.800182][ C0] net_ratelimit: 192001 callbacks suppressed [ 216.800202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.800213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.800260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.806238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.818231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.830218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.842165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.854043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.865853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.877755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.810200][ C1] net_ratelimit: 192318 callbacks suppressed [ 221.810220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.810239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.816245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.828180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.840008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.851894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.863872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.875725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.887591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.899564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.820187][ C0] net_ratelimit: 183893 callbacks suppressed [ 226.820208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.820347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.826282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.838108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.850145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.861953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.873847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.885769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.897737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.909703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.830186][ C1] net_ratelimit: 180341 callbacks suppressed [ 231.830206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.830241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.836232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.848136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.860070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.872043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.884002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.895990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.907819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.919771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.840179][ C1] net_ratelimit: 169891 callbacks suppressed [ 236.840201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.840253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.846229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.858152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.870075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.881957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.893930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.905822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.917615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.929567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.850192][ C1] net_ratelimit: 166135 callbacks suppressed [ 241.850209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.850294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.856242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.868239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.880213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.892187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.904059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.916069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.927893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.939773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.860188][ C0] net_ratelimit: 174998 callbacks suppressed [ 246.860209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.860216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.860283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 246.866260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.878393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.890126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.902042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.913952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.925863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.937738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.870172][ C1] net_ratelimit: 177133 callbacks suppressed [ 251.870193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.870247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.876227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.888231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.900178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.912086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.924072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.936057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.947894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 251.959833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.880198][ C1] net_ratelimit: 182345 callbacks suppressed [ 256.880217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.880242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.886242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.898251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.910123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 256.922109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.933951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.945966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.957874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.969793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.890199][ C1] net_ratelimit: 169548 callbacks suppressed [ 261.890218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 261.890232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.890287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.896266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.908299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.920199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.932057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.944022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.956082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.967873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.900186][ C0] net_ratelimit: 176441 callbacks suppressed [ 266.900206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.900241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 266.906266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.918280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.930192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.942262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.954124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.965927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.977995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.989859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.351705][ T37] INFO: task syz.5.1289:4245 blocked for more than 123 seconds. [ 268.359377][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.320641][ T36] audit: type=1400 audit(1756970012.807:1183): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2346]" dev="pipefs" ino=2346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 269.891896][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.903517][ T37] task:syz.5.1289 state:D stack:0 pid:4245 tgid:4239 ppid:1847 flags:0x00004006 [ 269.913742][ T37] Call Trace: [ 269.917020][ T37] [ 269.919952][ T37] __schedule+0x1322/0x1df0 [ 269.924496][ T37] ? __sched_text_start+0x10/0x10 [ 269.929526][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 269.934663][ T37] ? __kasan_check_write+0x18/0x20 [ 269.939772][ T37] ? trace_contention_begin+0xc0/0xc0 [ 269.945182][ T37] schedule+0xc6/0x240 [ 269.949240][ T37] schedule_preempt_disabled+0x14/0x30 [ 269.954725][ T37] __mutex_lock+0x81e/0x1b50 [ 269.959327][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 269.966116][ T37] ? kasan_save_track+0x4f/0x80 [ 269.970963][ T37] ? kasan_save_track+0x3e/0x80 [ 269.975814][ T37] ? kasan_save_free_info+0x4a/0x60 [ 269.981011][ T37] ? kfree+0x15c/0x460 [ 269.985091][ T37] ? kvm_ioapic_destroy+0xa7/0xc0 [ 269.990119][ T37] ? kvm_arch_destroy_vm+0x327/0x410 [ 269.995406][ T37] ? kvm_put_kvm+0xb04/0x12b0 [ 270.000081][ T37] ? kvm_vm_release+0x47/0x70 [ 270.004756][ T37] ? __fput+0x1fb/0xa00 [ 270.008902][ T37] ? ____fput+0x20/0x30 [ 270.013079][ T37] ? get_signal+0x1307/0x14f0 [ 270.017756][ T37] ? arch_do_signal_or_restart+0x96/0x720 [ 270.023484][ T37] ? syscall_exit_to_user_mode+0x58/0xb0 [ 270.029115][ T37] ? xas_start+0x31e/0x3e0 [ 270.033569][ T37] ? xas_load+0x394/0x3d0 [ 270.037908][ T37] __mutex_lock_slowpath+0xe/0x20 [ 270.042943][ T37] mutex_lock+0x102/0x1c0 [ 270.047265][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 270.052135][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 270.058633][ T37] ? xa_find+0x145/0x170 [ 270.062877][ T37] rcu_barrier+0x4d/0x530 [ 270.067196][ T37] ? __kasan_check_write+0x18/0x20 [ 270.072312][ T37] ? kvm_destroy_vcpus+0x1c0/0x250 [ 270.077429][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 270.082808][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 270.087564][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 270.092698][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 270.098323][ T37] ? __kasan_check_write+0x18/0x20 [ 270.103437][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 270.109063][ T37] kvm_put_kvm+0xb04/0x12b0 [ 270.113588][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 270.118786][ T37] kvm_vm_release+0x47/0x70 [ 270.123300][ T37] __fput+0x1fb/0xa00 [ 270.127274][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 270.132849][ T37] ____fput+0x20/0x30 [ 270.136829][ T37] task_work_run+0x1e3/0x250 [ 270.141420][ T37] ? __cfi_task_work_run+0x10/0x10 [ 270.146530][ T37] get_signal+0x1307/0x14f0 [ 270.151035][ T37] arch_do_signal_or_restart+0x96/0x720 [ 270.156585][ T37] ? __fget_files+0x2c5/0x340 [ 270.161262][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 270.167419][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 270.172268][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 270.177715][ T37] do_syscall_64+0x64/0xf0 [ 270.182132][ T37] ? clear_bhb_loop+0x50/0xa0 [ 270.186796][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 270.192725][ T37] RIP: 0033:0x7f5ccd78ebe9 [ 270.197140][ T37] RSP: 002b:00007f5cce68d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.205553][ T37] RAX: fffffffffffffff2 RBX: 00007f5ccd9c6090 RCX: 00007f5ccd78ebe9 [ 270.213520][ T37] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 270.221486][ T37] RBP: 00007f5ccd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 270.229445][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.237592][ T37] R13: 00007f5ccd9c6128 R14: 00007f5ccd9c6090 R15: 00007ffdfeecb098 [ 270.245561][ T37] [ 270.500815][ T37] NMI backtrace for cpu 0 [ 270.500839][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 270.500869][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.500879][ T37] Call Trace: [ 270.500885][ T37] [ 270.500893][ T37] __dump_stack+0x21/0x30 [ 270.500920][ T37] dump_stack_lvl+0x10c/0x190 [ 270.500942][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 270.500965][ T37] dump_stack+0x19/0x20 [ 270.500986][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 270.501009][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 270.501030][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 270.501051][ T37] ? sched_show_task+0x379/0x560 [ 270.501074][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 270.501093][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 270.501115][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 270.501137][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 270.501161][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 270.501182][ T37] watchdog+0xd8f/0xed0 [ 270.501206][ T37] ? __cfi_watchdog+0x10/0x10 [ 270.501227][ T37] ? __kasan_check_read+0x15/0x20 [ 270.501251][ T37] ? __kthread_parkme+0x138/0x180 [ 270.501266][ T37] ? schedule+0xc6/0x240 [ 270.501281][ T37] kthread+0x2c7/0x370 [ 270.501299][ T37] ? __cfi_watchdog+0x10/0x10 [ 270.501320][ T37] ? __cfi_kthread+0x10/0x10 [ 270.501338][ T37] ret_from_fork+0x64/0xa0 [ 270.501360][ T37] ? __cfi_kthread+0x10/0x10 [ 270.501378][ T37] ret_from_fork_asm+0x1a/0x30 [ 270.501402][ T37] [ 270.501410][ T37] Sending NMI from CPU 0 to CPUs 1: [ 270.699478][ C1] NMI backtrace for cpu 1 [ 270.699491][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 270.699510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.699519][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 270.699542][ C1] Code: c3 cc cc cc cc cc cc cc cc cc cc cc cc cc b8 34 9c 17 c5 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 <65> 48 8b 0c 25 40 eb 04 00 65 8b 15 1c 07 7f 7e 81 e2 00 01 ff 00 [ 270.699553][ C1] RSP: 0018:ffffc90000230148 EFLAGS: 00000246 [ 270.699566][ C1] RAX: ffffffff84e518c3 RBX: 0000000000000000 RCX: 0000000000000100 [ 270.699576][ C1] RDX: ffff88810367cc00 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.699586][ C1] RBP: ffffc90000230148 R08: ffffc90000230540 R09: ffffc90000230550 [ 270.699597][ C1] R10: ffffc900002306b0 R11: fffff520000460da R12: dffffc0000000000 [ 270.699608][ C1] R13: ffff88810b729cc0 R14: 0000000000000001 R15: 0000000000000000 [ 270.699617][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 270.699630][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.699640][ C1] CR2: 00005568d9118b90 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 270.699657][ C1] Call Trace: [ 270.699662][ C1] [ 270.699667][ C1] rt6_score_route+0x633/0x8a0 [ 270.699684][ C1] ? kasan_save_track+0x4f/0x80 [ 270.699698][ C1] ? kasan_save_track+0x3e/0x80 [ 270.699710][ C1] ? kasan_save_free_info+0x4a/0x60 [ 270.699726][ C1] ? __kasan_slab_free+0x5f/0x80 [ 270.699739][ C1] ? kmem_cache_free+0x1c1/0x510 [ 270.699757][ C1] ? __kfree_skb+0x18f/0x210 [ 270.699774][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 270.699791][ C1] ? ip_rcv_finish_core+0xc13/0x1440 [ 270.699807][ C1] ? netif_receive_skb+0x1f7/0x7b0 [ 270.699824][ C1] ? br_pass_frame_up+0x126/0x1c0 [ 270.699838][ C1] find_match+0x176/0x10f0 [ 270.699850][ C1] ? __do_softirq+0xf/0x16 [ 270.699862][ C1] ? do_softirq+0xa6/0x100 [ 270.699880][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 270.699897][ C1] ? rcu_do_batch+0x5c6/0xd20 [ 270.699914][ C1] ? rcu_nocb_cb_kthread+0x4dc/0xac0 [ 270.699931][ C1] ? ret_from_fork+0x64/0xa0 [ 270.699948][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 270.699967][ C1] __find_rr_leaf+0x23c/0x790 [ 270.699981][ C1] ? rt6_check_expired+0x250/0x250 [ 270.699993][ C1] ? __siphash_unaligned+0x26e/0x3c0 [ 270.700010][ C1] fib6_table_lookup+0x2c5/0x9b0 [ 270.700025][ C1] ? __cfi_flow_hash_from_keys+0x10/0x10 [ 270.700044][ C1] ? __cfi_fib6_table_lookup+0x10/0x10 [ 270.700059][ C1] ? ip_rcv+0xfa/0x2d0 [ 270.700074][ C1] ip6_pol_route+0x167/0x12c0 [ 270.700089][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 270.700108][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 270.700123][ C1] ? netif_receive_skb+0x161/0x7b0 [ 270.700140][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 270.700161][ C1] ? br_flood+0x67e/0x730 [ 270.700181][ C1] ? br_pass_frame_up+0x126/0x1c0 [ 270.700197][ C1] ip6_pol_route_input+0x5a/0x80 [ 270.700216][ C1] fib6_rule_lookup+0x4cc/0x6b0 [ 270.700233][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 270.700253][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 270.700271][ C1] ? ip6t_do_table+0x1dc/0x14d0 [ 270.700293][ C1] ip6_route_input+0x59f/0x8d0 [ 270.700313][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 270.700334][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 270.700356][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 270.700379][ C1] ip6_rcv_finish+0x15a/0x3c0 [ 270.700399][ C1] ipv6_rcv+0xed/0x220 [ 270.700416][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 270.700434][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 270.700452][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 270.700475][ C1] process_backlog+0x44b/0xae0 [ 270.700500][ C1] __napi_poll+0xd3/0x610 [ 270.700520][ C1] net_rx_action+0x584/0xce0 [ 270.700544][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 270.700566][ C1] ? sched_clock+0x44/0x60 [ 270.700586][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 270.700607][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 270.700626][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 270.700647][ C1] handle_softirqs+0x1ab/0x630 [ 270.700678][ C1] __do_softirq+0xf/0x16 [ 270.700693][ C1] do_softirq+0xa6/0x100 [ 270.700715][ C1] [ 270.700720][ C1] [ 270.700726][ C1] ? __cfi_do_softirq+0x10/0x10 [ 270.700749][ C1] ? put_cred_rcu+0x285/0x310 [ 270.700765][ C1] ? __cfi_put_cred_rcu+0x10/0x10 [ 270.700782][ C1] __local_bh_enable_ip+0x74/0x80 [ 270.700803][ C1] rcu_do_batch+0x5c6/0xd20 [ 270.700826][ C1] ? rcu_core+0xd20/0xd20 [ 270.700846][ C1] ? __kasan_check_write+0x18/0x20 [ 270.700869][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 270.700892][ C1] ? __kasan_check_read+0x15/0x20 [ 270.700914][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 270.700935][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 270.700958][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 270.700981][ C1] ? __kasan_check_write+0x18/0x20 [ 270.701002][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 270.701024][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 270.701044][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 270.701067][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 270.701083][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 270.701101][ C1] ? __kasan_check_read+0x15/0x20 [ 270.701122][ C1] ? __kthread_parkme+0x138/0x180 [ 270.701137][ C1] ? schedule+0xc6/0x240 [ 270.701152][ C1] kthread+0x2c7/0x370 [ 270.701168][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 270.701189][ C1] ? __cfi_kthread+0x10/0x10 [ 270.701206][ C1] ret_from_fork+0x64/0xa0 [ 270.701226][ C1] ? __cfi_kthread+0x10/0x10 [ 270.701243][ C1] ret_from_fork_asm+0x1a/0x30 [ 270.701267][ C1] [ 271.910174][ C0] net_ratelimit: 154234 callbacks suppressed [ 271.910194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.910211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.916258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.928213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.940055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.952005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.963916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.975776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.987629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.999579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.920183][ C1] net_ratelimit: 183999 callbacks suppressed [ 276.920203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:86:81:47:b3, vlan:0) [ 276.920224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.926297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.938238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.950207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.962064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.973995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.986065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.997957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.009771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)