last executing test programs: 7m17.694111396s ago: executing program 3 (id=1753): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000400)="b93fe504852bd23589322d4b917a66ca11bf65cf8e8963ba2032353afaa4b96ef2") (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r3, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = eventfd(0x5) (async) mount$fuse(0x0, 0x0, &(0x7f0000000600), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) (async, rerun: 32) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6, 0x7, 0x2, r6}) (async, rerun: 64) read$eventfd(r6, &(0x7f0000000200), 0x8) (async, rerun: 64) readv(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) 7m17.643978976s ago: executing program 3 (id=1754): mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', &(0x7f00000000c0), 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x2, 0x2) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) mount$9p_rdma(&(0x7f00000003c0), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x100000, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) linkat(r3, &(0x7f00000001c0)='./file1\x00', r3, 0x0, 0x1000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012020, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="8c34b506199f5fb4", 0x8}], 0x1}}], 0x1, 0x4008040) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRES64=0x0, @ANYBLOB="5bc14676e1707a97eba5281508c46aa55bc75cef504ac02d9ff7a817ca6111c809076e4612bd557d99ee3618934541be6a856002f618b9ed034265fe0e00b59af987bd249e65d1a1623ee5867205cad8bef14f23aefaa42e60954a615b4821a898c4dc804f28215c3cdf9e9367cdb8f62c4d67bcd27ef4e291bd3b91b73114a180b94717e0e4f71bb1ad0a12c031ec4827456c338cbb5b3de58c6c1e56285175ce117f758f799234088ef647702ecbc0290a3e2c02023f20595c62bf49c30385f94d0ea2e62409c18c2d6c", @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYBLOB="6f983cfeab34f7a0376491f3db136a179ea120f9285d24716a5c68f788", @ANYRESHEX=r4], 0x54}, 0x1, 0x0, 0x0, 0x20000041}, 0x10010) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0xfffff, r7) readv(r8, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/177, 0xb1}], 0x1) 7m16.795701171s ago: executing program 3 (id=1761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x3}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x52100, 0x51) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 7m16.781320871s ago: executing program 3 (id=1762): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12e1ff00000000104c05c40000ffff000109022400010000000009040035f60674ae062f355d8f707bfa33a4090581030200000000"], 0x0) unshare(0x22020400) r5 = syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack\x00') pread64(r5, 0x0, 0x0, 0x7ffffffffffff7) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) dup(r6) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) 7m16.119583105s ago: executing program 1 (id=1770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r1, &(0x7f0000000440)={@val={0x0, 0x18}, @val={0x4, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2b, 0x28, 0x65, 0x0, 0x1, 0x6, 0x0, @local, @remote}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x80}}}}, 0x36) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r0, 0x60ac}], 0x1, &(0x7f0000000240), 0x0, 0x0) eventfd(0x401) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, 0x0) 7m16.119039955s ago: executing program 1 (id=1771): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0x4000000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x66053000) 7m16.112701855s ago: executing program 1 (id=1772): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x0, 0xdddd1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 7m16.112033755s ago: executing program 1 (id=1773): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @private1, 0x22}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ea", 0x1}], 0x1}}], 0x2, 0x4000001) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) r4 = dup(r1) read$FUSE(r4, &(0x7f00000075c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rmdir(&(0x7f00000001c0)='./cgroup/file0\x00') fcntl$setown(r4, 0x8, r5) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2b637075fa0928e90b63657420"], 0x8) bind$unix(r4, &(0x7f0000000140)=@file={0x1, './cgroup\x00'}, 0x6e) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x16, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '', 0x3a, 'c-}', 0x3a, './cgroup', 0x3a, [0x46]}, 0x2c) 7m15.985491426s ago: executing program 3 (id=1774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2000040000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x1}]}]}, 0x13c}}, 0x48014) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0xfff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x8fe69000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x50aa22bd) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000700)=[@rdmsr={0x32, 0x18, {0x400003b2}}, @uexit={0x0, 0x18, 0x8001}, @code={0xa, 0x4a, {"450f0f4b47b7400fc72e660f3837243ef3426c420f07364234070fc79cf0006000000fc7780bb805000000b90a0000000f01c136430fc76801"}}, @wr_crn={0x46, 0x20, {0x1176afa3d2e70d55}}, @out_dx={0xaa, 0x28, {0x5c63, 0x2, 0x84}}, @set_irq_handler={0xbe, 0x20, {0xbb, 0x2}}, @wr_drn={0x6e, 0x20, {0x4, 0x3}}, @rdmsr={0x32, 0x18, {0x2f0}}, @wrmsr={0x1e, 0x20, {0x833, 0x6}}, @out_dx={0xaa, 0x28, {0x582b, 0x3, 0x200}}, @wr_drn={0x6e, 0x20, {0x5, 0x7}}, @set_irq_handler={0xbe, 0x20, {0x88, 0x1}}, @rdmsr={0x32, 0x18, {0x387}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @rdmsr={0x32, 0x18, {0x2d3}}, @set_irq_handler={0xbe, 0x20, {0x40, 0x1}}, @out_dx={0xaa, 0x28, {0x3ac2, 0x1, 0x547}}, @in_dx={0x82, 0x20, {0x1da3, 0x1}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @rdmsr={0x32, 0x18, {0x351}}, @code={0xa, 0x79, {"66ba6100b0d7eec744240064000000c744240200000000ff1c24c4e2f3f6eac462790e3948b84f000000000000000f23c80f21f8350800c0000f23f8660f676f0566baf80cb88df28381ef66bafc0cec420f30b9800000c00f3235000100000f30b9e70800000f32"}}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @rdmsr={0x32, 0x18, {0x33e}}, @cpuid={0x14, 0x18, {0x6702, 0x7}}, @rdmsr={0x32, 0x18, {0x249}}, @wr_crn={0x46, 0x20, {0x2, 0x1}}, @rdmsr={0x32, 0x18, {0x25a}}], 0x3b3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000b00)={"079cbcc1caaa237721472b4529c42dad", 0x0, 0x0, {0x401, 0x2}, {0x8, 0xcc}, 0xda, [0x9, 0xffff, 0x3, 0x3, 0x3, 0x5, 0x2, 0x2, 0x2, 0x6d, 0x8, 0x1ee3c, 0x4, 0x1, 0x10000, 0x40000000000000]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000c00)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000c40)={"805b769a02fdbfc7a77455300a2d2387", r7, r8, {0xffffffff, 0x2}, {0x6, 0xd2f}, 0x6, [0x10001, 0xfffffffffffeffff, 0x6, 0x4, 0xd9b8094, 0x5, 0xff, 0x1, 0x10001, 0x259, 0x46, 0x7fffffffffffffff, 0x7, 0x5, 0xfffffffffffffff8, 0x6]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xbef, 0x8, 0x1, {0x22, 0x1bf}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0xd, 0x7c}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x7, 0xfa}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x40, 0x3, 0x20, 0x1}, 0x59, &(0x7f00000000c0)={0x5, 0xf, 0x59, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x4, 0x1ef00, 0x7fff, [0xffc0cf]}, @ssp_cap={0x1c, 0x10, 0xa, 0xf4, 0x4, 0x7, 0xf00f, 0x9, [0xff0000, 0xff0000, 0xff0030, 0xc0cf]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0bbbe5687a6c5bf5686019fc61b29519"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e7b372c071b5b403d494df06f90899c9"}]}, 0x1, [{0xe1, &(0x7f0000000380)=@string={0xe1, 0x3, "9d63d722688f2bfe6444e412ca0137ff31ea895f183711a86ee1072de6c74f454b97f8163002583173747effe3a4510dab33998771fbd56d5f5b6d3ba4c03ac46775f29ad42cf9954456f291c0687cb830fdcfc659ad673a67f9a01c196d676a96f6d9b9a921916aa7bb06f232afa6219c963c90a328eb89542c0af99d1ee5746ba51f48005068422bf1bf863a6136fa0ecd16398b41efed337c68261e47db9309d355bc1d5d1df9d13ba19e71a29bf75a734d18e8ed44932c3cf3cb5526a89581fbe97f3059235947f3d417faf3b50bab2874fefc7ceb8e7a864372c223c2"}}]}) syz_usb_control_io$hid(r9, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x20, 0x23, 0x53, {0x53, 0x23, "d8da32e8df436ebbef6eeb4dd9e3f38f40bc740e8ade91cf929489a71f8aa1d4b82f5afb8447bfd406f8fbe132061f99dff05a2178a94295a257823698bbd5ec698ecda3ad3701028046a222f7e7f81328"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x4, 0x3, "b810"}}, &(0x7f0000000200)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x9, "c4f0"}, @global=@item_4={0x3, 0x1, 0x0, "c35f9d0d"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0xd, 0x1, {0x22, 0x6ce}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0xc6, "0ceeb40b6261cb77adf5d26a22bd5852e948fcb06134d91f225139bab89a88756c96e5ea4630231d9a5c482cd0ae8c68aa74bec927774fd49413b7d54c5dfff66197e13568234dc84345e104908d0ff79be882465619f2481823b8045c8bd857be9b735bb6921626992b108d702eef26d6e3dcf9de3000c3dee3e675d8d6fb49ddef2e6d1dd897a85fcd54ffe8ac2f033b5f1d625ba6e8e8a6dc64ba2433d90b073f2c274f7253f04993201bfb918573e7e6166e4597c9a31e4b2e955e1e42d177421708fb89"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x35}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x1, 0x2d, "d3be417191bc2308aa3bd657b694f596a313a5e8a5a5513662673b4923b2517642d9845b31f82147209e1d91db"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x4}}) 7m15.399577979s ago: executing program 1 (id=1779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') (async) exit(0xfffffffffffffff7) close_range(r0, 0xffffffffffffffff, 0x0) 7m15.317851999s ago: executing program 2 (id=1781): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) (async) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x22020fc, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1f}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044801}, 0x9000) (async) read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 7m15.317143639s ago: executing program 2 (id=1782): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) sendfile(r0, r0, &(0x7f0000001040)=0x7, 0x3) preadv2(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) 7m15.317002479s ago: executing program 2 (id=1783): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000300)) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/18, &(0x7f0000000040)=0x12) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 7m15.284484459s ago: executing program 2 (id=1785): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008f0030400406cedfbb3c640e4c1864d000102030109022400010107c00409040005020701020109050102ff030107"], &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x6, 0x4, 0xff, 0x6}, 0x35, &(0x7f0000000140)={0x5, 0xf, 0x35, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "22d3ba26bd63c6e292237342204a7995"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x40, 0x80, 0x200, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x9, 0x5, 0x4, 0x60}]}, 0x4, [{0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="9e0300e0211a74e5014c3a09a0e2bfd83e8d26cdc9e5a1720210daa374c0f7ac17fd5ae986012a8d852132c2d626eb4a213da30b5015e30766e743fe83c647c38a30eaae507fca4dc2a29f1f2cf30edfac5b8ea19cd7dc72a6a1f059eb9d93ced088314e283315ba748770ef03bdde84954b4798e42ae629d1f7be073c0de4551cc664c60006099ff71d7456c751cca4c78e01716adb69630363a3747950"]}, {0x2d, &(0x7f0000000240)=@string={0x2d, 0x3, "e2e5b6111cbaebf5c3307bc585ff090a0652484e8619acf8d5e85c16525a5179506541e68dde1fdd620b8d"}}, {0x44, &(0x7f0000000280)=@string={0x44, 0x3, "fea1ed72568837ac398b0932536995cbf9f2fbf00ecc96149dc4eb85a7d763a8159e716f63463f189d0a7d08442f2687f8f129b64e74d7cff853450f7d2dece9317d"}}, {0x47, &(0x7f0000000300)=@string={0x47, 0x3, "1e1a87b49bbbd42739a4a314fee6316f090952589220a06f0876a4d4c8380ffe1fbda528e019ed854a62cc600484ab9260eab342804c70ec21cfa584644019ed112de9a39b"}}]}) mount(&(0x7f00000008c0)=@sr0, &(0x7f0000000900)='./cgroup\x00', &(0x7f0000000940)='ramfs\x00', 0x0, &(0x7f0000000980)='/selinux/status\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000013c00)) syz_usb_control_io$printer(r0, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x60, 0x1, 0xc6, {0xc6, 0xb, "c7aba65f896937ed6f6fa0126ecac1cad85fb956621e3f22491cf25c066d2cc74740879cc08fc3b33f05f76bc6bfdc80dd5e74e2ea19e1bff3039811acf056c063d06b67ecdf35cdcf065b4f412c871b802ef6fce3af1d4cafc5a589f9bfd15459c93278d2a1f1b2adbabbf49249d518546b1ce88cc5c9250de4a75810ff091c1fb4ea0820ec615760fdf85a3660da666702e0adb654ef98e0984b11199ebfa57cf0436d0396b1903a5ac45fd6cfe3e914830c6a25dcf49acd9169dc75d81bbe525b2d5f"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="000350000000500365a157f3d01ad4db618524717244916b513f5550a28af51de48886a57eb5ffef5e68f3447eeadccaea460400d3184e06e8f526b294128c9797ec105628164205a171f08d13e11be8e94a6bd97f00"]}, &(0x7f0000000880)={0x34, &(0x7f00000005c0)={0x20, 0xe, 0x83, "153d5c67a025e6a7e7c5b25d6f4eaee6a531134cf679678b0800afad3544f91cb215320a1bf7a1fd19577d3a6c709cf45bc2e3b627eca7e31ae0c1109df9205833ea3d7d5b15b11e5f680b9933b579baffce42d6e5e0f9da6a888cc58f1b28bff15a693ae8700df5ce4293762dc0b87c3112f73a7c770075ad1ca75aed0e6befe45b76"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)=ANY=[@ANYBLOB="2000df00000000dd30e22e2ec7fa7ff221fb70cbd141c6b4905503abd5fc144afb625a764d28c0b8693a49929a5f1fb7e2071506cf363faed319761304af18a623806ef744eb324322575841874753041b023b6bb548652636ffaaca52097a982c7db44a4eef84117bde8999645c627d2a5e09140945cc8a1b9df6622da637ec90c72ad304b5386b774069e5bbdf93dd09e0d6b6cb1dc8cc76b89542f5f68075e1eb59a51c4d1f798a97b36ce4184712cc2af2577a0205ff43df04ea870c8958dd80bd18c3aef0bc600d1ce51e448c7791295ba4187b4ddb0f10cb3dc1a150b44c63315a04"], &(0x7f0000000800)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x6}}) 7m14.748390263s ago: executing program 2 (id=1788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0xb5d6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, &(0x7f0000000140)) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r1) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r8, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0xfebf}}, 0x4044057) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000540)={0xa, 0x0, [{0xc0000001, 0x0, 0x1, 0x0, 0x80000000, 0xda63, 0x9}, {0x4, 0x5, 0x4, 0x5, 0x8, 0xffffffc0, 0x80000000}, {0x80000001, 0xf10, 0x5, 0xffff, 0x9, 0x4, 0x6}, {0xc0000001, 0x5, 0x1, 0x7, 0xb54e, 0xbc, 0x1f7}, {0x6, 0x2, 0x0, 0x10000, 0x3d, 0x8001, 0x5}, {0x80000019, 0x1, 0x1, 0xa, 0x6, 0x1000, 0xc}, {0xc0000000, 0x1, 0x2, 0xffff4943, 0x3ff, 0xfff, 0xf86}, {0x0, 0xac, 0x7, 0xffffffff, 0x5, 0x1, 0x7}, {0x80000019, 0x5, 0x2, 0x1, 0x7, 0x9, 0x200}, {0x7, 0x10000000, 0x3, 0x80000001, 0x4, 0x1, 0xff}]}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x200, 0x4, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0xe6cd0c4f39d26774) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m14.690361333s ago: executing program 2 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x34}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x5000, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 7m10.502090156s ago: executing program 1 (id=1790): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) write(0xffffffffffffffff, &(0x7f0000000180)="3604bfe2dedfc257535bb317539c73ee5f8462dee64d0096f1da3a1bce3bd207cb10ec72a9e30d6043960f6e542cfff5d21083e61a86a27c4fd2a070656c359417ce0f23f852ab00041d14e6852be7f40f9f4accc252dd49792a2c23f276974cec2146aa18e1761b7f1f0ce1b630d2d351802fbfaaf468c972aca4c3231c00be1e6befe017a009bf61d55986e5f30536721e42cc513968b8b8967f4fd4bd955d3a474e5f6dc578339059adb0f73d038a3bcfb2144ebe9e785b76021ffb767219db297e77d08bf4745ec2e83daf3731891a02027d805d12ab435e37", 0xdb) 7m1.571195606s ago: executing program 3 (id=1791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x29, 0x5, 0xfffffffd) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcc776000) socket(0x28, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m53.039846474s ago: executing program 32 (id=1787): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000000)="0f01c40f01dfbaa000ed360fc7b50090660f383a2f6464640f38f6b70bf2f30f09260fc7720066b8a60000000f23c80f21f866350800b0000f23f80f08", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10000000) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x200000000, 0x2004cb, 0x40000003, 0x3, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2, 0x6], 0x0, 0x240306}) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1e, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000240)='\'%\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m55.041376439s ago: executing program 33 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x34}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x5000, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 5m36.506926953s ago: executing program 34 (id=1790): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) write(0xffffffffffffffff, &(0x7f0000000180)="3604bfe2dedfc257535bb317539c73ee5f8462dee64d0096f1da3a1bce3bd207cb10ec72a9e30d6043960f6e542cfff5d21083e61a86a27c4fd2a070656c359417ce0f23f852ab00041d14e6852be7f40f9f4accc252dd49792a2c23f276974cec2146aa18e1761b7f1f0ce1b630d2d351802fbfaaf468c972aca4c3231c00be1e6befe017a009bf61d55986e5f30536721e42cc513968b8b8967f4fd4bd955d3a474e5f6dc578339059adb0f73d038a3bcfb2144ebe9e785b76021ffb767219db297e77d08bf4745ec2e83daf3731891a02027d805d12ab435e37", 0xdb) 5m28.723820857s ago: executing program 35 (id=1791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x29, 0x5, 0xfffffffd) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcc776000) socket(0x28, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.543894868s ago: executing program 7 (id=3202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f0000000040)) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x20, {0x2, 0x4e21, @empty}, 'veth1_to_batadv\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r3, 0x8, r4) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 2m41.480585238s ago: executing program 7 (id=3203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m41.477402508s ago: executing program 7 (id=3204): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x8002, 0x80) write$FUSE_ENTRY(r0, &(0x7f00000023c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x100, 0x6, 0x7, 0x0, {0x1, 0x244, 0xd, 0x6, 0x4e03, 0x3, 0x6, 0x7ff, 0x3, 0x8000, 0x8, 0x0, 0x0, 0x6, 0x103e}}}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3, 0xfffffffd}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r7, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2m41.385934829s ago: executing program 7 (id=3205): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x50040) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000640)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0xfffffff7, 0xd, 0x0, 0x0, 0x0, 0x80}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0xfffffff7, 0xd, 0x0, 0x0, 0x0, 0x80}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8914, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000540), 0xa, &(0x7f0000000580)=ANY=[@ANYRES8=0x0, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES64=r2]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x60) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x60) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000002c0)={0x4, 0x200, 0x4, 0x0, 0x6}) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000340)="43a14968bf0ac07825f4cbf725495850ebf12f06777a9813c284cec6300d1efd91abb50eadc8d5d89468f7b929387e14002656b4d09bfa392b42a4ff9d16597d1a76aa69b8c9d70e9c5fe3b075baa14060a9db4e94878aa0122487f3cc09d8acf57a8bd51ec21789ef44709e27ac9822", 0x70}, {&(0x7f0000000440)="079233622402ed5cfcccbe2344f02c1bbca00d4eeaf8aeeaee7b142d6d94059f8c7f4dd8911cf125ece17e6d6fc091b2a527250e5a37e9f6073e2fabf5f43d3d8616d88679d76532317b0f6d696756e791dd35551709721c291e853836932f26b5e894b11e488b6e413b161f57d589e1cd6523f2a12462ec4edaefcf87c3ef83f654a91571c06367562035682bc116c5ea848fabcaf96d0ba95dbf9bacdd7a8c14a277283eef11520965f47187fedd85d663fd0bfa3048f18f", 0xb9}], 0x2) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x24004894}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x24004894}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xcb, 0x2, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xcb, 0x2, 0x0}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1, 0x1004, 0xffffffffffffffff, 0xc592, 0x0, 0x100001, 0xffffffffffffffff, 0x1ffffffffffffffd, 0x3, 0x2], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace$peekuser(0x3, r5, 0x0) 2m41.327342119s ago: executing program 7 (id=3206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c010, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000180)={'syz0\x00', {0x9, 0x3, 0x40, 0x4}, 0x12, [0x3ff, 0x9, 0xd730f1f1, 0x7, 0x0, 0x6498, 0xe8a9, 0x6, 0xa, 0x5, 0x10001, 0xea9, 0x9, 0x8, 0xffff, 0xfff, 0xff, 0x2, 0x5, 0xe, 0x7fff, 0xf, 0x0, 0x3, 0x8, 0x2, 0xf90, 0x4a66, 0x5, 0x9, 0x7fff, 0x3, 0x6, 0x9, 0x2, 0x837, 0x3, 0x0, 0xfff, 0x8001, 0x1, 0x40000002, 0x6, 0xfffffffa, 0x1000, 0x162f, 0x35, 0x1000, 0x6, 0x9, 0x3, 0x6dd, 0x3, 0x3ff, 0x7ff, 0xa0, 0x0, 0xffff, 0x803, 0x7, 0xfff, 0x2, 0x8], [0x8, 0x9, 0x81, 0x6, 0xbd18, 0xb209, 0xb4a, 0x8, 0x7, 0xa, 0xfffffffe, 0x98, 0x8, 0x5bd, 0x5, 0x9, 0x9, 0xd4, 0x7, 0x6, 0x800, 0x81, 0xffff, 0x4, 0x29bf8f75, 0x5, 0xffffff81, 0xf4, 0x100, 0x8001, 0x4, 0x200, 0x800000, 0x2, 0xd8c, 0xd7, 0x401, 0x7, 0x9, 0x99f6, 0x3, 0xffff9a87, 0xd, 0x4, 0x2, 0x3, 0x1, 0x80000001, 0x22f6, 0x1000, 0x0, 0xa702, 0x5, 0x5, 0x6, 0x7ff, 0x8, 0x7, 0x40, 0x9, 0xa, 0x1, 0xe, 0x3919], [0x1, 0xffffffff, 0xc, 0x2, 0x6, 0x2, 0x8001, 0x9, 0x401, 0x3, 0xe, 0x7f8, 0x4, 0x2b, 0xffffffff, 0x6, 0x9, 0x100, 0x6, 0x4, 0x2, 0xfffffff7, 0x5, 0x7fff, 0xd, 0x7, 0x2, 0x0, 0x5, 0xf, 0x101, 0x9, 0x5, 0x8, 0xfffffe00, 0xffffffff, 0x0, 0x1000000, 0xd00e, 0x0, 0x3, 0x5, 0x12, 0x2, 0xfffffffe, 0x0, 0x2, 0x5, 0xfffffffc, 0x80000001, 0x7fff, 0x1000, 0x16dde1f, 0x2, 0x81, 0x5, 0x1, 0x8001, 0x7, 0x4, 0x2, 0x1000, 0x3, 0x71], [0x3, 0x7fffffff, 0x80000000, 0x7, 0xe, 0x5, 0x7, 0x2, 0xf7e1, 0x9, 0x0, 0x3, 0x94f, 0xc, 0x7, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff, 0x1000, 0x9, 0x1ff, 0x4e810ce9, 0x5, 0x6, 0x1000, 0x90c, 0x80, 0x6, 0x1a, 0x9, 0x2, 0xffff, 0x80000000, 0xff, 0x6cf, 0x8, 0x7, 0x101, 0x7, 0x1, 0x2, 0x6, 0xfffffffd, 0x5, 0x7d0, 0x8, 0x7, 0x3, 0xfffffff8, 0x6, 0xbb, 0xd0, 0x4, 0x5, 0x2, 0x6, 0xffff, 0xb, 0x1, 0x7, 0x4]}, 0x45c) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000026c0), &(0x7f0000002700)=0x4) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 2m41.13476788s ago: executing program 7 (id=3209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) ioprio_get$pid(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xac, 0x0, &(0x7f00000004c0), 0x6, 0x0, &(0x7f0000000380)="65240c31f4f2"}) (rerun: 32) 2m41.13103112s ago: executing program 36 (id=3209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) ioprio_get$pid(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xac, 0x0, &(0x7f00000004c0), 0x6, 0x0, &(0x7f0000000380)="65240c31f4f2"}) (rerun: 32) 2m33.950410999s ago: executing program 5 (id=3401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x1) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) r4 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r4, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040}, 0x8000) ftruncate(r3, 0x10000) fcntl$addseals(r3, 0x409, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004000) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r3, 0x2000, 0x0, 0xfffffffff0000000}) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.949311689s ago: executing program 5 (id=3402): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x7, 'veth1_macvtap\x00', {}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f00000004c0), 0xf) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x1000, 0x90000) ioctl$LOOP_SET_FD(r6, 0x4c00, r3) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7fffffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r2}, @decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 2m33.930546879s ago: executing program 5 (id=3403): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000000)={0x1, [0x0]}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x20c00) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) fcntl$addseals(r1, 0x409, 0x6) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8580, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000100)=0x8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x5, 0x7fffffff, 0x8, 0xff, 0x9, "8f7e8fb3052baa71d5d046ad20609fa2345375", 0x0, 0x3}) ioctl$KDSKBLED(r2, 0x4b65, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffff0000}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x72f4}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x880) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c008045}, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0x301080, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) setns(r6, 0x8000000) openat$cgroup_subtree(r6, &(0x7f0000000500), 0x2, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) read$FUSE(r6, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000025c0)={'\x00', 0x6, 0x5, 0x1, 0x5, 0x7608, r9}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002640)={0x4, 0x0, "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"}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000002780)={0xa8, 0x0, 0x1}) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f00000029c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002980)={&(0x7f0000002880)={0xc4, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008804}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000002a80)={'tunl0\x00', &(0x7f0000002a40)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x1, 0x2, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x67, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x90, [@private=0xa010101]}]}}}}}) sendmsg$nl_route_sched_retired(r10, &(0x7f0000002b40)={&(0x7f0000002a00), 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xb, 0x9}, {0xa}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000000) sendto$unix(r8, &(0x7f0000002b80)="86cae725a9a8ab9bccd967bd2a5c89deb4153dd9e7dae6bfcdd7e5136d16abf0cfcefdaabcef9c323839d3c4db701b9818d63a5c73763fe8e346e0ba89b7e6b73b5e218bd462136a7e4d6c3c4b507192f07051c5dad12a0f2c9982b58122aa39dfd06e03d0da7214fac06e88b10a9bb06f019fa7f1a36ea92bc405f09284b51bb9c2c92e", 0x84, 0x0, &(0x7f0000002c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2m33.917748629s ago: executing program 5 (id=3404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat2(r2, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)={0x2380}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r4, &(0x7f0000003740)={0x90, 0x0, r5, {0x4, 0x2, 0x2, 0x100, 0x9001, 0x10000, {0x3, 0xe, 0x3ff, 0x7, 0xa, 0x7c, 0x80000000, 0x400, 0x1, 0x8000, 0x8, r6, r7, 0x80008bb, 0x1}}}, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000001580)=[@acquire, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x3, 0xfffffffffffffffe, 0x11}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/130, 0x82, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}}], 0x1000, 0x0, &(0x7f0000000580)="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"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r10, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 2m33.861019039s ago: executing program 5 (id=3405): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x64cb80, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @local}}}, 0x108) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast2}, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0xeeee8000, 0x4000}) fadvise64(r0, 0x81, 0xc, 0x2) (async) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10) (async) r7 = socket$inet6(0xa, 0x1, 0x707a) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) (async) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="f26f3e653e0fc775020f01c9baf80c66b8fa859c8c66efbafc0ced65f30fae770266b9800000c00f326635010000000f300f20c06635040000000f22c00f01dfbaf80c66b88162778d66efbafc0cb087eeba4100b00aee", 0x57}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) uname(0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r10, 0x4068aea3, &(0x7f0000000500)={0xed, 0x0, 0x1000000000005}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x3d, 0x0, 0xf, 0xfffffffc}, {0x204, 0x2}, {0x6, 0xfc, 0x0, 0x6}]}) 2m33.860521629s ago: executing program 5 (id=3406): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0xfd48, 0x0, 0x0}) 2m33.85130793s ago: executing program 37 (id=3406): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0xfd48, 0x0, 0x0}) 47.693819258s ago: executing program 4 (id=4637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x55898145d8530e29, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000080)) 47.693195688s ago: executing program 4 (id=4638): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000900)={0x6, 0x3f60b569, 0x3ff, 0x200, 0x5, "cf17bc00", 0x5}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001d80)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 47.688423907s ago: executing program 4 (id=4639): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x7}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000100)={@val={0xa, 0x88a8}, @val={0x1, 0x0, 0x7, 0x5, 0x7ff}, @eth={@multicast, @random="d5452f466ac3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x5, 0x14, 0x68, 0x0, 0xfc, 0x5e, 0x0, @remote, @broadcast}}}}}}, 0x30) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 47.628726508s ago: executing program 4 (id=4643): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4b32, 0x8, 0x0, 0x7fff0000}, {0x6, 0x6, 0x5, 0x8}]}) close_range(r1, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r7, 0x2}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r2) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x60000009, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x3cb143, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r10, 0xc030128a, &(0x7f0000000140)={&(0x7f00000000c0)=""/30, 0x1e}) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x41007701, 0x0) 47.13711727s ago: executing program 4 (id=4652): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600010000000000000000000003003e"], 0xb0) close(r2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000440)=[@out_dx={0xaa, 0x28, {0xc5ce, 0x0, 0x3}}, @wrmsr={0x1e, 0x20, {0x33f, 0x2}}, @wr_drn={0x6e, 0x20, {0x4, 0x10000}}, @out_dx={0xaa, 0x28, {0xeda7, 0x2, 0x573}}, @wr_crn={0x46, 0x20, {0x2, 0x6}}], 0xb0}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000580)) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001dc0), 0x40041, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000002480)=0x16) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) 46.741993472s ago: executing program 4 (id=4671): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32, @ANYBLOB="05010e0080000000080211000001080211000000a968dcf6a1cb1cac92e653759e82003bd9ed8b651b00000000000000000000640001000106818209988b06030134040603070200fc0005b40fa6087b0dc7d970f3776a19960a4c018c5f44236601cf3ddba58218f0a1e32f6c8f76de669b0261d74bda500d6a1636efa17b9e5a64ddd2b0a421a49877c5a5855f09fbfb1dfcdd3ca510e01deb"], 0x160}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c81, 0xffffffffffffffb6) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendfile(r5, r6, 0x0, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 64) r7 = socket$inet6(0xa, 0x802, 0x88) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84010000100001000000000800000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000010000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003c000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007a050000000000008a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000002b0d00000000000000000000000000000a00010000000000000000004c001200726663343330392861757468656e6365736e286e68706f6c79313330352c637472286361737435292929000000000000000000000000000000000000000000000000000080010000480001"], 0x184}, 0x1, 0x0, 0x0, 0x60040000}, 0x0) (async) sendto$inet6(r7, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @empty, 0x8}, 0x1c) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020301030000000000f30d000000000508000340000000090800034000000002"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, 0x0) 46.711203012s ago: executing program 38 (id=4671): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32, @ANYBLOB="05010e0080000000080211000001080211000000a968dcf6a1cb1cac92e653759e82003bd9ed8b651b00000000000000000000640001000106818209988b06030134040603070200fc0005b40fa6087b0dc7d970f3776a19960a4c018c5f44236601cf3ddba58218f0a1e32f6c8f76de669b0261d74bda500d6a1636efa17b9e5a64ddd2b0a421a49877c5a5855f09fbfb1dfcdd3ca510e01deb"], 0x160}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c81, 0xffffffffffffffb6) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendfile(r5, r6, 0x0, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 64) r7 = socket$inet6(0xa, 0x802, 0x88) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84010000100001000000000800000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000010000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003c000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007a050000000000008a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000002b0d00000000000000000000000000000a00010000000000000000004c001200726663343330392861757468656e6365736e286e68706f6c79313330352c637472286361737435292929000000000000000000000000000000000000000000000000000080010000480001"], 0x184}, 0x1, 0x0, 0x0, 0x60040000}, 0x0) (async) sendto$inet6(r7, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @empty, 0x8}, 0x1c) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020301030000000000f30d000000000508000340000000090800034000000002"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, 0x0) 37.588581628s ago: executing program 8 (id=4817): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r1 = inotify_init1(0x800) sync_file_range(r1, 0xfffffffffffff800, 0x10004, 0x5) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x3) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async, rerun: 64) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000081) (async, rerun: 64) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa", 0xc01) (rerun: 64) 37.587476728s ago: executing program 8 (id=4819): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006000000000000000000000001000000000000000000000000200d0001"], 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000600000000000000000000006909000000000000000000000000000000000000000000000000000002000000000000000e0000000000000000000000000000000000000200000000400000000020000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0020000000000000000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000000843550400000000000001090224000100008000090400800103000300092100000001220700090581031a123fff03"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x8, {0x8, 0x0, "3d7da32915f8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 37.466818419s ago: executing program 6 (id=4825): r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) ftruncate(r0, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x1e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x40, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x58, 0x6, 0x3, 0xd, {0x7, 0x25, 0x1, 0x1, 0x5, 0xe919}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x58, 0x8, 0x8c, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6e}}}}}}}]}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 35.661065056s ago: executing program 9 (id=4842): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000) mount$9p_xen(0x0, &(0x7f0000004580)='.\x00', &(0x7f00000045c0), 0x1000000, &(0x7f0000004940)={'trans=xen,', {[{@version_L}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_gt}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@pcr={'pcr', 0x3d, 0x23}}, {@fsname={'fsname', 0x3d, '/dev/md0\x00'}}, {@uid_eq}, {@obj_role={'obj_role', 0x3d, '&&'}}, {@fowner_lt}, {@obj_user={'obj_user', 0x3d, 'rlimit'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f0000000080)=""/86, 0x56}, {&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/194, 0xc2}], 0x7, &(0x7f0000002480)=""/77, 0x4d}, 0x8001}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/142, 0x8e}], 0x2, &(0x7f00000035c0)=""/114, 0x72}, 0x6}, {{&(0x7f0000003640)=@can, 0x80, &(0x7f0000003b00)=[{&(0x7f00000036c0)=""/207, 0xcf}, {&(0x7f00000037c0)=""/4, 0x4}, {&(0x7f0000003800)=""/15, 0xf}, {&(0x7f0000003840)=""/229, 0xe5}, {&(0x7f0000003940)=""/241, 0xf1}, {&(0x7f0000003a40)=""/149, 0x95}], 0x6}}, {{&(0x7f0000003b80)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003c00)=""/131, 0x83}, {&(0x7f0000003cc0)=""/222, 0xde}, {&(0x7f0000003dc0)=""/13, 0xd}], 0x3, &(0x7f0000003e40)=""/97, 0x61}, 0x4}, {{&(0x7f0000003ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003f40)=""/83, 0x53}, {&(0x7f0000003fc0)=""/35, 0x23}, {&(0x7f0000006a80)=""/149, 0x95}, {&(0x7f0000004000)=""/1, 0x1}, {&(0x7f0000004100)=""/6, 0x6}], 0x5, &(0x7f00000041c0)=""/64, 0x40}, 0x27dbe87b}, {{&(0x7f0000004200)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004280)=""/203, 0xcb}, {&(0x7f0000004380)=""/64, 0x40}, {&(0x7f00000043c0)=""/171, 0xab}, {&(0x7f0000004480)=""/88, 0x58}], 0x4, &(0x7f0000004540)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005540)=@caif, 0x80, &(0x7f0000006740)=[{&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/164, 0xa4}, {&(0x7f0000006680)=""/191, 0xbf}], 0x3, &(0x7f0000006780)=""/195, 0xc3}, 0xc64}], 0x7, 0x1, &(0x7f0000006a40)={0x0, 0x3938700}) 35.658842386s ago: executing program 9 (id=4843): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000400)={0xfffffffe, 0xe7, 0x6, 0x9357, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 35.656468476s ago: executing program 9 (id=4844): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect(0x3, 0x7f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240f01030000000600050081051d01000309050904100000050f090582e64103060c0309050a03300607"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000002c0)="a42143ba557fc0f08e9a98c33d9e3a57", 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ea", 0x1}], 0x1}}], 0x2, 0x4000001) r2 = dup(r1) read$FUSE(r2, &(0x7f00000075c0)={0x2020}, 0x2020) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000001c0)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x2, 0x0, 0x9, 0x109e96, 0x20000000200, 0xb6, 0x4d, 0x401, 0x5, 0xfffffffffffffff8, 0x48d6, 0xfc, 0x6, 0x4, 0x9], 0xd5d5c004, 0x4004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd(0xa) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$eventfd(r8, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) 34.576712851s ago: executing program 8 (id=4856): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) fcntl$addseals(r0, 0x409, 0xc) write(r0, &(0x7f00000002c0)="5b806084", 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readahead(r3, 0x4, 0x4058) 34.538591171s ago: executing program 8 (id=4857): syslog(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00002003010104000000000000000005000009060012400001000033c031ea8acc1148e75815471fd744d065282a6562e93272e8e84f34ff123a39ad075125af8125"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) r2 = syz_clone(0x8000, &(0x7f0000000180)="8196e0bf51aad444b837f8cd1c07cade6931ea0afaf76e1096e60de4693aff51f3c8ba2035db640ede53e1e88e383e051a5b30163d1fccf9a9d1149bcfb31df0c63fcec12e3294f376626f4ad4c2454f26b934efd1eae41d43d449a4aa36b6700fa198f4b58ba480a6ed3a81d4dbf82116c3c5f9d5d44ffd465812dea7bd21b93381c60185c110a4cdc6ce6ac2e37d5ecc8d22e81874a6a159a1b126fe63ab087f7d3d80a7a64e38cadd1d69070bf669941e3e60a0c436e29b0cca05", 0xbc, &(0x7f0000000080), &(0x7f0000000280), &(0x7f00000003c0)="4c4e47b1b446fbb99a84a78623ea9ba0510d7814c0bd5c9a51f9bcbdbef20775c5e665c4dea333a1ad5790487d4ca7de0c154ecb3b5e6bc7fde395a45cfb3554f84648344e2f9b79c62dbd33bdf218c7d1e466ed2380642c042940059a6b") tkill(r2, 0x3a) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x47, 0x2, 0x40, 0xfa, "00000002", "f466e6af"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x4, 0xff, 0x2, 0xaeb2, 0x8000}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 34.292274022s ago: executing program 6 (id=4868): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xeeee8000, 0x4000}) madvise(&(0x7f0000297000/0x2000)=nil, 0x2000, 0x2) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xd, 0x4) fadvise64(r0, 0x81, 0xc, 0x2) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffffffffffffffff) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000000500)={0xed, 0x0, 0x1000000000005}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4400) write$tun(r7, &(0x7f0000000580)={@val, @val={0x1, 0x0, 0x5, 0xfff, 0x8000, 0x6}, @eth={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x34, 0x4, 0x2, 0x24, 0x1c2, 0x64, 0x0, 0xff, 0x2, 0x0, @empty, @local, {[@rr={0x7, 0x7, 0x74, [@loopback]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x3, "0e"}, {0x0, 0xd, "281e0bd9d702614a310f27"}]}, @timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x1ff}]}, @timestamp_addr={0x44, 0xc, 0x53, 0x1, 0xb, [{@rand_addr=0x64010101, 0x1}]}, @generic={0x7, 0x11, "e4a6a15c8ef694568f351dd5c09d1e"}, @noop, @cipso={0x86, 0x74, 0x3, [{0x1, 0xf, "e85074bc07e59b4071f5ee59b7"}, {0x7, 0xb, "e7f1a35a1f73e01e5f"}, {0x7, 0xa, "4b62a4ed0b1be52a"}, {0x2, 0x12, "bb9ceeed1e00e6a7eadd5bab6cf00580"}, {0x0, 0xc, "585e0770630ffee21cbc"}, {0x5, 0xc, "45b13c68bf3e19f46b14"}, {0x5, 0x4, "f7f7"}, {0x2, 0x9, "6b8b32120935a5"}, {0x5, 0x10, "0404c6521ee63c798f8a436a4bc5"}, {0x2, 0x3, "f2"}]}]}}, {0x22, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, "1adef1f504c76a61e6a85849c8b26551df478bdfefb0613fe91ce02df143605c248a3721eba4d8298deb41e129bd604bd292aa9f14d86a37ac5197c61519af79f7a72c5eae618107e3bb3780bb0cbb67e7624afba031bfd93d8eaacecbca6a91b03ff6af927de0500b6b69c559a8a52bfd1b12f2b52a327cba09441873ff21f23d7f4b7230e3bbbfd9bed544b66b6bb8d996a38adde210fd460cfd4716e770d15d8843ea4cdf4a70427725c487c944692649e9859e3ce2aea3aa42a146787363878896af7f97a3a65cd8c41b42e0a7801d2ec13e58458be728044be7529d100661d181f45f1f29285a34"}}}}}}, 0x1de) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000080)={0x3, 0x0, 0x98, &(0x7f0000000300)={0x9, 0x3, 0xc}}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) 34.057516703s ago: executing program 0 (id=4871): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)=0x5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x0, 0x40, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x24040004) 34.057245633s ago: executing program 0 (id=4872): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:shadow_t:s0\x00', 0x1e, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r1, 0xca639000) 34.054944843s ago: executing program 0 (id=4873): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f00000001c0)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x82cd}], 0x1, 0x3) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x7, 0x81}) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x1, 0x4}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async, rerun: 64) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32) r5 = eventfd(0x5) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x2, r5}) write$eventfd(r5, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) (async) close_range(r2, 0xffffffffffffffff, 0x0) 34.010192083s ago: executing program 0 (id=4874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b00010003100309045808"], 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getpid() r1 = socket(0x80000000000000a, 0x2, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x147bfe28ad63f12, 0x4}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x5) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0xfd}) umount2(0x0, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') lseek(r7, 0xffffffffffff0000, 0x0) readahead(r6, 0x4, 0x4058) syz_usb_connect(0x3, 0x5f, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0xe4, 0x8a, 0xb2, 0x8, 0x77d, 0x410, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0xe, 0x7, 0x0, 0x5, [{{0x9, 0x4, 0xb6, 0x0, 0x0, 0x23, 0x7d, 0xcb, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'ht'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x345, 0x71ab, 0x5, 0xe7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xe, 0x7}, @dmm={0x7, 0x24, 0x14, 0x9, 0x100}, @dmm={0x7, 0x24, 0x14, 0x2, 0x8fc}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0x5}]}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0x8, 0x9, 0x8, 0x9}, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="050f4000030b1001000c0002fa0400051410040922e94892f1bf4b204adcbd1c100a082400f0ff00000400f0ff0000300000ffdc7f82003f0000000000000000"], 0x3, [{0xd1, &(0x7f0000000480)=@string={0xd1, 0x3, "2eeb1138a5edc2dab2a9983622b0e97ce3bb9fc9796aa585f79c407215349619d41ffcc16cb55cdb179f5003dad926995ae3d19b26f0cd99b53f36f997df37a4646faa2cbbc64bb1cbb6d9a38972a10e3670272efb8f4ad428e220cfa98d5b7cb6ea2e35627ddf659dcbc77ed50d717ef99a1971e4f3d76ff7e708df62770d64b83ab91cdcff4ee2299ec0730a0ba7086803a7fcfc9503ed1e5163fad3d5f9e34d182e431311dc9c4ffdd6800f745301d3471fd86efeddd61cd4d619aaba04780f5ec2330ec412eb2c8be8660cfe32"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x443}}]}) 33.929950393s ago: executing program 6 (id=4875): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000)=0xf62, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4d01", 0x2, 0x4000085, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x40000, 0x0) 33.837195484s ago: executing program 6 (id=4876): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x1, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@\aV\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r1, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 33.428469525s ago: executing program 0 (id=4877): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) 33.408898785s ago: executing program 0 (id=4878): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0069f793b60c714796416f3632ff352f41cf7e30"]) add_key$user(0x0, 0x0, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)={0x1, 0x0, @b}, 0x48, r1) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) wait4(r2, &(0x7f00000000c0), 0x1000001, &(0x7f0000000180)) ptrace$cont(0x20, r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 31.864283481s ago: executing program 9 (id=4879): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x804, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000080)=[@decrefs], 0x0, 0x0, 0x0}) 31.270944254s ago: executing program 8 (id=4880): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000000c0)={{'\x00', 0x2}, {0x8001}, 0xa8, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000021c0)="c5ec2012e70a8a9e58f9b3f075602e60cf93da12dac4545c8a5e5a9bcb3b1dbe14a44f7ef8e06e00b857877bc3b6b186d9b9d4328f090379c076d8f0c8801d795798b49a95de436b75d5828ec06b50234925decd02b88d66eed58ba9ac0f3d8b8719eeae49eac1f1d1665e910d6758fc85e3ce2892fbb1420c72a9920ad1f9b0f43b5d7040bfc63ac53cb1d24479798a6410f84eafe5d2464271fd16397ff21529dfc5b1a9b63ad6aba5efa39e9c21f3d504e4e41702d1fd176913329f07fc0f402cd5e1033410f3323dfb4894dd2035dee8a2a5e3576a1d45ea", 0xda, 0x0, &(0x7f00000022c0)={0x2, 0xe8, {0x1, 0xc, 0xb5, "f8161be4e4c7983e2415e50599bddf10c0bbdf69e9da0b55eea897e8c269add6de7ccd67a368bd000a02da178bfaee5c0a5fd421def2db74b2d4a0ffcc10d659c1e257ba4200867ec6e8d7b01cd84b9dea6700bba8f83c26dee92cb1deaee0d68bc8595d37a70b497382757409cb46722f441acab6242c44eaf31caa2bdabfcc4e34090fc01571797ad3e637444ee1b5172e94367ce3af5cd639f2892a2d34d658142b0a75ddfde126009af9ffa3e393ac421e9664", 0x26, "7f38a1bfc6277a7f2ce5a567029f6778e73481ea296668823482ed1b110902752c982144b065"}, 0x1000, "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"}, 0x10f4}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000033c0)={0x13, 0x5, {0x2b78c6ce, @usage=0x1, 0x0, 0x100000001, 0x2, 0x9, 0x5, 0x83, 0x0, @usage=0x4, 0x5, 0x7, [0x9, 0x4, 0x4, 0x5, 0x0, 0xbf8f]}, {0x5, @struct={0x9, 0x54}, 0x0, 0x166, 0x3, 0x6, 0x0, 0x3, 0x4b8, @struct={0x2, 0x803}, 0x7, 0x4, [0xba, 0x7f, 0x0, 0xdd2, 0x3ff, 0x5]}, {0x9, @struct={0x100, 0x400}, 0x0, 0x81, 0x3, 0x8, 0x1, 0xd730, 0xf7, @usage=0x4, 0x1, 0xcb9, [0x21, 0x4, 0x0, 0x5, 0x6, 0x5]}, {0x9, 0x0, 0x6}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000037c0)={r2, "f0fa672e8ef48bec91ea9ae088a038cd"}) ioctl$KVM_CREATE_VCPU(r0, 0x7709, 0x0) 30.755490496s ago: executing program 6 (id=4881): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x7032, 0xffffffffffffffff, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f00000003c0)={0x1, 0x0, 0x1}, &(0x7f0000000dc0)=[{}]) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @remote, 0x7}, 0x18) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x28011, r3, 0x1c823000) 25.720280186s ago: executing program 9 (id=4882): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x2fc}], 0x1}}], 0x2, 0x4) sendto$inet(r1, &(0x7f00000002c0)="d7f0fcc5819f12ed780b80f87505bfe5a0109e5ffc756f3593a84cfd650fff6fd7fe3c6cf2ec30abed8e8157b8f52cf9bf9151c0d649c55312b1f122ad5535fb2524a62a86157173253e8473aa97a0890c4885c07358555d5c10e36acc448a299998caff3235339d0f90a4dbd5978b6e21d2e54e70338450d816ea738b7074ddd3446865486b2064fa39a36e90e5d51300c84d669f66c3da40586102b6629c5058d6483f3e6d383cdec27abdec404f06487adc4c8ffdff1864bc3aa80c2ce4f584a0eb", 0xc3, 0x20000800, 0x0, 0x0) sendmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="955b8b3930901eae1ad11803cb82fe9d661596bcea7642fadf242083df7bc4444cf028312c946a0f80881d22bf8771937fdf654955673cf59412b9865bb7c5ec5dfe84ac6c969fe126b8c2a7eab499744be143132e662571a47c49699d51a2b4c613752e971905f6608fe7b716ae53a35b4e822bd7560323983c47bba301f30335254fefb914", 0x86}, {&(0x7f00000000c0)="653164a40d00bf2aa4ea7941c9e1d112a31b028f65c8cbefbd96d199fe2d84017fd845050528f1c54265bc3633b417e9c1", 0x31}, {&(0x7f00000005c0)="3eaa4a8ac2f7bdd0af7f98838bfa639a147ed3b95790e08998fa15fd454ccbdd3773e4914b9fd711de0aa24be4b2de5a3b6c02b432877c0596506d6ae6e477040a1946c1c6741631964b14c98cd8eb53e12d0567ac3485dfa09d7584f15ebecc2069634e8e493d5604228a77742e5ee39d64f8e5c41f6f4bee5a3e8e68ed44f1eb65779c7f5b85e51c722e8d8f8c08b36b863a4931582a0a4ff5a812e598db3eb35157b4d1171d8c8f8640557061b9f5f65c8b6910ffee", 0xb7}, {&(0x7f0000000680)="a728173825ba0585d9dfe748bdd3f3adf8fa036861cea60a9fbdfe3a821ad2eadd13718e4be3e6267b2c3cf1a204fa90c4e1d2d0eb633dd7284caa894a1c526aa74d470ac276f7535ccba7d3bf6a95c937f2805f9f1476e0a9904e28c4d52e68119f004c82a48d929c24523e190e7d0d4c817d9d59e719d963288416127efd9c086ce58da0ef10df3a6e132b9c87462f7ef21573c6096d", 0x97}, {&(0x7f0000000880)="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", 0x1bd}], 0x5}}], 0x1, 0x4080) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"0cd179745c15df8c0fbd9d0b7fb142ecc9d64c7743abba6ba8896841d1e1048c7a621d271d004c68fa8c1d404d6cba9f84af15ce2b429b3e09ce63eccba965967106324fee45bcd3fe5c79d7b43144a4cf565c6abafe9384b445506dce404514b815adf4de14b906ad8f631c6f863c38ebc1fa13b8cf95d712073c8a819aafcaa28b43328312fbadb7d75b91208d894c1be5427467d8b2f28dea5644cea175c2d4cb7a15c25e0e1cd5a632b9dfaf1f09ce9cdc60cebfd14ad1d8de11c794614741007d79bd0cac54110e13d7dc3a51b94c388e2021bf0ba6f78b7fe69f81d3c9702dae4f14299b8156f0db0d4c2110dafe3ee516bfd2eda049104d678f77d55b88bfcd8a33bf69c68168831af1bf040d44d1ac51ebd6633ba630f0a1de0fb3868d7b3e25d9f98ae9e16e86d36b51aafd8ce28313b5e5a00eb970e7fdb5c390fdc29f38e873f295dc06ae8142268113c549c2b8a7e089c2131add789dd254ea2340cfb096f4303f2ba353b4a5b3b697104ffa11f4c4d8ba468e8df4224ac19e643d57c26a6905d689749fbd3add6c0098a39ebe758266f86418eae06098835dc3ee6381c16eefb9d50c98973831cb79b7d9c900092a48799deb5a887f87cb98167d6455acf166fd095fef8bde0568baa5dd81de94e6db1ef2ee301be620ac334f0155fda8d42769fe22d00433887dfbb1595d494bd7de8f8589aad385e922252517a3d0d91e8d7eee80cd1d57c56286e4c94e3609e9092bfc9585f311fe69fb2d17d18742eeea10c008562bfee5df53ef712b297ac59fabc7d5ad6d792161294877bf13a484959773fa4d6d72e60558071df8caab5ff830efa58737b2d221a31f96c33715bdbf15d1d1b8e9f74f1440b3f98d46f341ae9ce7b50b948687b84212736d222ef51140b4d2accd428e056022135226edac0443e058d78c89e44302719fd6edadba3e39f7c092c29492dd272c194bce3cbf02746d1b5c05667877e031cc87bddf1de44e262c4e76f705c40383d778780e7c873e0f109b7a0c79b4325d3121b462a7e189d6ca49c23c74a9f94f3443ca64818619f6e97915d2d4fe3fcf7cd3730caae6fb652cbc64b234092bf3c1f3039e99efd84fc75edfe5eb27aac7e446c8f315965e3d0aa85cd04c50234766a6f1a802fa90084b883cca7fb9a8c41c207a3ea3602001b8b1bbb99a323c27875dd5d3777236e08347b5fceabc60e1c7ea83fd6ac9bfb15829a22971d72fe8f1431522ec20fabc01c159c707029bce2f38b220edcb977e553bdf00d831b5cef4f681d814951ffa25baaa82051e0223c24b3b9ae042e04a8ed919b30af7084c34577dcd367d5254d4383094e97c0068fcc9e2c26cff2e17c1cf02b91c0f872f2cde7c81b7d82bddb32171c0b8a32841db99e2e1145210b2aeced55878794dd6fbef9736c8a046a2c1aaaa5abfd16de8"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0x100000000, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x9, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x4, 0x49, 0x3ff, 0x5, 0x9020, 0x1, 0x8, 0x7, 0xc1, 0x5, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x4, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x3, 0x8, 0x1ff, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0x200e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0x7, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xab6, 0x97, 0x8, 0x0, 0x3007, 0x9, 0x0, 0x6, 0x28000000, 0x5, 0x8061f, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x9, 0x2293332f, 0x6, 0x105, 0x1e, 0x0, 0x2, 0x5, 0xfffffffffefffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xa693, 0xcc, 0x1, 0x3]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.583240667s ago: executing program 9 (id=4883): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x10000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ppoll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x104}, {r0, 0x9004}, {r0, 0x1204}, {r0, 0x662e}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000280)={[0x5]}, 0x8) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x10000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) (async) ppoll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x104}, {r0, 0x9004}, {r0, 0x1204}, {r0, 0x662e}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000280)={[0x5]}, 0x8) (async) 20.465140278s ago: executing program 8 (id=4884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/186, 0xba, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}, @exit_looper, @acquire], 0x0, 0x0, 0x0}) 18.550431885s ago: executing program 6 (id=4885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f00000007c0)={0x83b, 0x8000006, 0x3}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2020) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/215) 15.731305316s ago: executing program 39 (id=4878): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0069f793b60c714796416f3632ff352f41cf7e30"]) add_key$user(0x0, 0x0, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)={0x1, 0x0, @b}, 0x48, r1) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) wait4(r2, &(0x7f00000000c0), 0x1000001, &(0x7f0000000180)) ptrace$cont(0x20, r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 3.389931156s ago: executing program 40 (id=4883): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x10000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ppoll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x104}, {r0, 0x9004}, {r0, 0x1204}, {r0, 0x662e}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000280)={[0x5]}, 0x8) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x10000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) (async) ppoll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x104}, {r0, 0x9004}, {r0, 0x1204}, {r0, 0x662e}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000280)={[0x5]}, 0x8) (async) 1.776953123s ago: executing program 41 (id=4884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/186, 0xba, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}, @exit_looper, @acquire], 0x0, 0x0, 0x0}) 0s ago: executing program 42 (id=4885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f00000007c0)={0x83b, 0x8000006, 0x3}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2020) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/215) kernel console output (not intermixed with test programs): 455.879864][T11752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 455.915751][T11770] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3617'. [ 455.964578][T11778] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.3620'. [ 455.982553][ T7623] hid-generic 0003:045E:00DA.0020: ignoring exceeding usage max [ 456.003328][ T7623] hid-generic 0003:045E:00DA.0020: unbalanced collection at end of report description [ 456.013285][T11787] netlink: 'syz.6.3624': attribute type 5 has an invalid length. [ 456.021032][T11787] netlink: 'syz.6.3624': attribute type 5 has an invalid length. [ 456.029284][ T7623] hid-generic 0003:045E:00DA.0020: probe with driver hid-generic failed with error -22 [ 456.039259][T11787] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3624'. [ 456.066027][T11789] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3625'. [ 456.471777][ T7623] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 456.510767][T11801] rust_binder: Write failure EFAULT in pid:226 [ 456.562734][T11804] input: syz1 as /devices/virtual/input/input45 [ 456.633025][ T7623] usb 9-1: unable to get BOS descriptor or descriptor too short [ 456.641190][ T7623] usb 9-1: not running at top speed; connect to a high speed hub [ 456.662390][ T7623] usb 9-1: config 1 has an invalid interface number: 138 but max is 0 [ 456.670587][ T7623] usb 9-1: config 1 has no interface number 0 [ 456.691746][ T7623] usb 9-1: config 1 interface 138 has no altsetting 0 [ 456.702721][ T7623] usb 9-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 456.721744][ T7623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.729986][ T7623] usb 9-1: Product: syz [ 456.751759][ T7623] usb 9-1: Manufacturer: syz [ 456.756404][ T7623] usb 9-1: SerialNumber: syz [ 456.803599][T11815] rust_binder: Fixups oob 178 180 369 186 [ 456.803623][T11815] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 456.809509][T11815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 456.817862][T11815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 457.161543][ T7623] usb 9-1: USB disconnect, device number 7 [ 457.182078][ T331] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 457.332963][ T331] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.343289][ T331] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 457.354165][ T331] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.363349][ T331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.371442][ T331] usb 10-1: Product: syz [ 457.376133][ T331] usb 10-1: Manufacturer: syz [ 457.380920][ T331] usb 10-1: SerialNumber: syz [ 457.589450][ T331] usb 10-1: 0:2 : does not exist [ 457.595734][ T331] usb 10-1: cannot find UAC_HEADER [ 457.601494][ T331] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 457.611639][ T331] usb 10-1: USB disconnect, device number 7 [ 457.619076][T11826] udevd[11826]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 457.941771][ T31] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 458.071762][ T31] usb 9-1: device descriptor read/64, error -71 [ 458.124699][ T66] usb 5-1: USB disconnect, device number 38 [ 458.142848][T11836] binder: Unknown parameter '›ÁÑ'' [ 458.154608][T11839] binder: Unknown parameter 'defcontext01777777777777777777777' [ 458.154688][T11840] binder: Unknown parameter 'defcontext01777777777777777777777' [ 458.311771][ T31] usb 9-1: device descriptor read/64, error -71 [ 458.340283][T11850] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 458.348602][T11850] rust_binder: Write failure EINVAL in pid:975 [ 458.431788][ T331] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 458.551797][ T31] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 458.571824][ T331] usb 10-1: device descriptor read/64, error -71 [ 458.681874][ T31] usb 9-1: device descriptor read/64, error -71 [ 458.811796][ T331] usb 10-1: device descriptor read/64, error -71 [ 458.921735][ T31] usb 9-1: device descriptor read/64, error -71 [ 459.031964][ T31] usb usb9-port1: attempt power cycle [ 459.051758][ T331] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 459.189896][ T331] usb 10-1: device descriptor read/64, error -71 [ 459.227585][T11865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:986 [ 459.240883][T11869] incfs: Error accessing: ./file0. [ 459.255510][T11869] incfs: mount failed -20 [ 459.262231][T11869] fuse: Bad value for 'fd' [ 459.391876][ T31] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 459.413110][ T31] usb 9-1: device descriptor read/8, error -71 [ 459.511763][ T331] usb 10-1: device descriptor read/64, error -71 [ 459.542937][ T31] usb 9-1: device descriptor read/8, error -71 [ 459.631775][ T331] usb usb10-port1: attempt power cycle [ 459.647813][T11880] input: syz1 as /devices/virtual/input/input46 [ 459.782111][ T31] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 459.822431][ T31] usb 9-1: device descriptor read/8, error -71 [ 459.966505][ T31] usb 9-1: device descriptor read/8, error -71 [ 459.972866][ T331] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 460.002722][ T331] usb 10-1: device descriptor read/8, error -71 [ 460.091875][ T31] usb usb9-port1: unable to enumerate USB device [ 460.142748][ T331] usb 10-1: device descriptor read/8, error -71 [ 460.391729][ T331] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 460.412763][ T331] usb 10-1: device descriptor read/8, error -71 [ 460.419961][T11907] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3664'. [ 460.552860][ T331] usb 10-1: device descriptor read/8, error -71 [ 460.661903][ T331] usb usb10-port1: unable to enumerate USB device [ 461.295249][T11912] input: syz0 as /devices/virtual/input/input47 [ 461.323379][T11918] rust_binder: Write failure EINVAL in pid:266 [ 461.394431][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.407759][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.415029][T11919] bridge_slave_0: entered allmulticast mode [ 461.421566][T11919] bridge_slave_0: entered promiscuous mode [ 461.427730][T11918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 461.428224][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.444487][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.452298][T11919] bridge_slave_1: entered allmulticast mode [ 461.458640][T11919] bridge_slave_1: entered promiscuous mode [ 461.497636][T11934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 461.501359][T11934] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 461.508134][T11934] rust_binder: Error while translating object. [ 461.520469][T11934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 461.536800][T11934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 461.570212][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.586452][T11919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.593740][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.600814][T11919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.620005][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3676'. [ 461.657816][T11919] veth0_vlan: entered promiscuous mode [ 461.670301][T11919] veth1_macvtap: entered promiscuous mode [ 461.728508][T11960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 461.728537][T11960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 461.929358][T11976] rust_binder: validate_parent_fixup: fixup_min_offset=63, parent_offset=42 [ 461.939254][T11976] rust_binder: Error while translating object. [ 461.949359][T11976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 461.956234][T11976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 462.081549][T11998] 9pnet_fd: p9_fd_create_unix (11998): problem connecting socket: ./file0: -111 [ 462.096590][T12001] rust_binder: 308: no such ref 1 [ 462.102337][T11998] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 462.114475][T12001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 462.144034][T12007] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 462.149929][T12009] incfs: mount failed -22 [ 462.184882][T12017] netlink: 328 bytes leftover after parsing attributes in process `syz.9.3696'. [ 462.195031][T12017] fuse: Bad value for 'fd' [ 462.215071][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 462.215087][ T36] audit: type=1326 audit(1761760232.430:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.4.3699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4df3f8efc9 code=0x0 [ 462.250706][T12027] rust_binder: Write failure EFAULT in pid:1034 [ 462.270356][T12032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1039 [ 462.498251][ T36] audit: type=1400 audit(1761760232.710:1511): avc: denied { unlink } for pid=12045 comm="syz.8.3706" name="file0" dev="incremental-fs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 462.599747][T12053] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3709'. [ 462.840459][T12079] random: crng reseeded on system resumption [ 462.858579][T12079] Restarting kernel threads ... done. [ 462.866510][T12079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 462.876177][T12083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 462.885548][T12083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 462.886969][T12084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 462.892220][T12083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:255 [ 462.902956][T12084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:255 [ 463.161766][ T31] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 463.220943][ T36] audit: type=1400 audit(1761760233.430:1512): avc: denied { setattr } for pid=12095 comm="syz.6.3723" name="icmp" dev="proc" ino=4026532753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 463.323786][ T31] usb 9-1: unable to get BOS descriptor or descriptor too short [ 463.332446][ T31] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 463.341165][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.351348][ T31] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 463.366293][ T31] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.373118][T12108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=12108 comm=syz.9.3727 [ 463.376498][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.401753][ T31] usb 9-1: Product: syz [ 463.424465][ T31] usb 9-1: Manufacturer: syz [ 463.425997][T12116] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3730'. [ 463.431753][ T31] usb 9-1: SerialNumber: syz [ 463.483609][T12121] 9pnet_fd: Insufficient options for proto=fd [ 463.552308][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.552333][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.560437][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.567129][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.575311][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.582048][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.590161][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.596939][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.605200][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.613092][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.621170][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.627803][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.636006][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.642703][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.650820][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.657695][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.666094][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.668650][ T31] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 463.673100][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.680930][ T31] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 463.689298][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.696129][ T31] usb 9-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 463.703079][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.710878][ T31] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 463.718415][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.730655][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.732999][ T31] usb 9-1: USB disconnect, device number 12 [ 463.738764][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.754213][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.767976][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.774670][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.782892][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.789502][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.797640][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.804394][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.812440][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.819032][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.827121][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.833834][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.842709][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.849555][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.857662][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.864403][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.872438][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.879047][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.887076][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.893825][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.901881][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.908461][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.916522][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.923141][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.931229][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.937939][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.946010][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.952721][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.960882][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.967547][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.975927][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 463.982726][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 463.984945][T12137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=12137 comm=syz.9.3735 [ 463.990746][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 464.010106][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 464.018479][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 464.025224][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 464.033260][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 464.039859][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 464.049330][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 464.055964][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 464.064048][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 464.070799][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 464.078942][T12130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 464.085616][T12130] rust_binder: Read failure Err(EFAULT) in pid:1059 [ 464.127419][T12159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.134609][T12158] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 464.134625][T12159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 464.134647][T12159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1067 [ 464.141164][T12158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 464.168606][T12158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1067 [ 464.228135][T12172] rust_binder: Error while translating object. [ 464.238122][T12172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 464.248229][T12172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1079 [ 464.338323][T12179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.347978][T12179] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3752'. [ 464.364535][T12179] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 464.374383][T12182] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 464.390699][T12182] rust_binder: Write failure EINVAL in pid:1082 [ 464.409333][T12187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.416279][T12187] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 464.440629][T12189] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3756'. [ 464.632701][T12198] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.683435][T12201] incfs_lookup_dentry err:-13 [ 464.719265][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3759'. [ 464.794975][T12213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.933612][T12222] SELinux: Context KN is not valid (left unmapped). [ 464.947572][ T36] audit: type=1400 audit(2000000001.680:1513): avc: denied { create } for pid=12221 comm="syz.8.3770" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 464.970098][ T36] audit: type=1400 audit(2000000001.680:1514): avc: denied { associate } for pid=12221 comm="syz.8.3770" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10 [ 464.993730][ T36] audit: type=1400 audit(2000000001.680:1515): avc: denied { mounton } for pid=12221 comm="syz.8.3770" path="/99/bus" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 465.018212][ T36] audit: type=1400 audit(2000000001.690:1516): avc: denied { write } for pid=12221 comm="syz.8.3770" name="bus" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 465.042163][ T36] audit: type=1400 audit(2000000001.690:1517): avc: denied { add_name } for pid=12221 comm="syz.8.3770" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 465.065349][ T36] audit: type=1400 audit(2000000001.690:1518): avc: denied { setattr } for pid=12221 comm="syz.8.3770" name="work" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10 [ 465.093199][ T36] audit: type=1400 audit(2000000001.690:1519): avc: denied { write open } for pid=12221 comm="syz.8.3770" path=2F202864656C6574656429 dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10 [ 465.161136][T12230] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 465.168567][T12230] rust_binder: 294: no such ref 1 [ 465.173830][T12230] rust_binder: Failed to allocate buffer. len:3136, is_oneway:true [ 465.222186][T12238] rust_binder: 300: no such ref 1 [ 465.235199][T12238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 465.260317][T12246] rust_binder: 1090: no such ref 3 [ 465.274985][T12246] rust_binder: 1090: no such ref 1 [ 465.280257][T12246] rust_binder: Write failure EFAULT in pid:1090 [ 465.444821][T12283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 465.452789][T12283] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 465.478950][T12300] 9pnet_fd: Insufficient options for proto=fd [ 465.494541][T12300] 9pnet_fd: Insufficient options for proto=fd [ 465.538237][T12311] rust_binder: Write failure EFAULT in pid:62 [ 465.602077][T12315] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 465.628712][T12336] can0: slcan on ttyS3. [ 465.702680][T12335] can0 (unregistered): slcan off ttyS3. [ 466.457729][T12391] overlayfs: failed to resolve './file0': -2 [ 466.468924][T12384] rust_binder: Error while translating object. [ 466.468953][T12384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 466.475215][T12384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 467.081975][T12410] cgroup: none used incorrectly [ 467.114477][T12412] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 467.166101][T12413] @0Ù: renamed from bond_slave_1 (while UP) [ 467.791632][T12416] 9pnet_fd: Insufficient options for proto=fd [ 467.952785][T12421] overlayfs: failed to clone upperpath [ 467.976062][T12424] binder: Bad value for 'max' [ 468.017112][T12428] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 468.026286][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 468.026302][ T36] audit: type=1400 audit(2000000004.760:1534): avc: denied { relabelto } for pid=12427 comm="syz.6.3831" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 468.036251][T12428] input: syz1 as /devices/virtual/input/input49 [ 468.060099][ T36] audit: type=1400 audit(2000000004.760:1535): avc: denied { associate } for pid=12427 comm="syz.6.3831" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 468.093285][ T36] audit: type=1400 audit(2000000004.810:1536): avc: denied { map } for pid=12427 comm="syz.6.3831" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 468.120251][ T36] audit: type=1400 audit(2000000004.810:1537): avc: denied { read write } for pid=12427 comm="syz.6.3831" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 468.199153][ T36] audit: type=1400 audit(2000000004.930:1538): avc: denied { open } for pid=12429 comm="syz.6.3832" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 468.227367][ T36] audit: type=1400 audit(2000000004.930:1539): avc: denied { execute } for pid=12429 comm="syz.6.3832" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 468.339444][T12438] /dev/rnullb0: Can't open blockdev [ 468.357415][T12442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 468.357439][T12442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 468.399739][T12445] binder: Unknown parameter 'defù‰ËÐfò×ýæ±ëÌP88Cï-eµ¯UÒ„¼çÔîǪ†³_éBê1e^C¥V¥ö' [ 468.434109][T12447] kvm: user requested TSC rate below hardware speed [ 468.493714][T12450] kvm: pic: non byte read [ 468.498149][T12450] kvm: pic: non byte read [ 468.502516][T12450] kvm: pic: non byte read [ 468.506964][T12450] kvm: pic: non byte read [ 468.511343][T12450] kvm: pic: non byte read [ 468.515773][T12450] kvm: pic: non byte read [ 468.520128][T12450] kvm: pic: non byte read [ 468.574252][T12461] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 468.581573][T12461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 468.613001][T12463] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 468.629448][T12463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 468.642517][T12465] netlink: 'syz.4.3844': attribute type 5 has an invalid length. [ 468.738541][T12473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.738722][T12473] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 468.792232][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3849'. [ 468.806510][T12484] netlink: 'syz.4.3851': attribute type 2 has an invalid length. [ 468.862096][T12491] fuse: Bad value for 'fd' [ 468.878581][T12495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.878933][T12495] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 468.909500][T12501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.926402][T12501] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 468.946055][T12511] netlink: 182 bytes leftover after parsing attributes in process `syz.8.3863'. [ 468.967933][T12511] netfs: Couldn't get user pages (rc=-14) [ 468.975974][T12511] netfs: Zero-sized read [R=1] [ 469.079673][T12534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 469.080000][T12534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 469.089612][T12534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:126 [ 469.195387][ T36] audit: type=1400 audit(2000000005.930:1540): avc: denied { watch watch_reads } for pid=12546 comm="syz.4.3876" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 469.394719][ T36] audit: type=1400 audit(2000000006.130:1541): avc: denied { ioctl } for pid=12587 comm="syz.8.3891" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 469.588828][T12614] __vm_enough_memory: pid: 12614, comm: syz.8.3898, bytes: 18014402804453376 not enough memory for the allocation [ 469.609219][T12616] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 469.625750][T12618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 469.643949][T12623] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 469.661668][T12623] SELinux: failed to load policy [ 469.682222][ T36] audit: type=1326 audit(2000000006.420:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.8.3903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x0 [ 469.791472][T12633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.791581][T12633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.798574][T12633] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 469.820892][T12637] /dev/rnullb0: Can't open blockdev [ 469.851958][T12641] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.903331][T12642] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 471.218210][T12712] fuse: Unknown parameter '01777777777777777777777' [ 471.391608][T12718] netlink: 'syz.4.3935': attribute type 16 has an invalid length. [ 471.399558][T12718] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.3935'. [ 471.447478][T12728] overlayfs: failed to clone upperpath [ 472.032060][T12751] IPv6: syztnl0: Disabled Multicast RS [ 472.243730][T12757] rust_binder: Error in use_page_slow: ESRCH [ 472.243746][T12757] rust_binder: use_range failure ESRCH [ 472.249811][T12757] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 472.255563][T12757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 472.263722][T12757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:131 [ 472.288795][T12759] fuse: Unknown parameter 'rootmod%' [ 473.719099][T12816] netlink: 'syz.4.3970': attribute type 2 has an invalid length. [ 473.748778][T12823] netlink: 11 bytes leftover after parsing attributes in process `syz.9.3972'. [ 473.759702][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3972'. [ 473.769310][T12823] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3972'. [ 474.322348][T12857] VFS: Mount too revealing [ 474.392287][ T36] audit: type=1400 audit(2000000011.130:1543): avc: denied { accept } for pid=12874 comm="syz.4.3989" path="socket:[66579]" dev="sockfs" ino=66579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 474.657297][T12904] rust_binder: Failed to allocate buffer. len:200, is_oneway:true [ 474.729633][T12911] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 474.880608][T12920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.880719][T12920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.921684][ T36] audit: type=1326 audit(2000000011.650:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.8.4007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x0 [ 474.973081][ T36] audit: type=1400 audit(2000000011.710:1545): avc: denied { setattr } for pid=12931 comm="syz.4.4009" path="socket:[66686]" dev="sockfs" ino=66686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 475.005489][T12937] rust_binder: 451: no such ref 1 [ 475.010772][T12937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 475.322761][T12958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.341073][T12962] netlink: 'syz.9.4021': attribute type 1 has an invalid length. [ 475.420565][T12968] rust_binder: 139: no such ref 0 [ 475.425780][T12968] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 6 [ 475.433319][T12968] rust_binder: 139: no such ref 2 [ 475.438385][T12968] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 475.459905][ T36] audit: type=1326 audit(2000000012.190:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.9.4027" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1230f8efc9 code=0x0 [ 476.235211][T12996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=12996 comm=syz.6.4033 [ 476.249773][T12996] binder: Unknown parameter '00000000000000000000003' [ 476.275588][T12999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:150 [ 476.422958][T13009] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4038'. [ 476.443460][T13010] 9pnet_fd: Insufficient options for proto=fd [ 476.701997][T13009] rust_binder: Error in use_page_slow: ESRCH [ 476.702023][T13009] rust_binder: use_range failure ESRCH [ 476.708128][T13009] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 476.713841][T13009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 476.721937][T13009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:157 [ 476.735945][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4038'. [ 476.767748][T13021] overlayfs: empty lowerdir [ 476.773777][T13022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.782619][T13022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.791359][ T36] audit: type=1400 audit(2000000013.520:1547): avc: denied { map } for pid=13020 comm="syz.6.4041" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 476.791605][T13022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 478.078930][T13066] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4057'. [ 478.342782][T13075] tipc: MTU too low for tipc bearer [ 478.387583][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4065'. [ 478.775426][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4074'. [ 479.134649][T13127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.134929][T13127] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 479.283554][T13144] overlayfs: failed to clone upperpath [ 479.584165][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4082'. [ 479.862884][T13174] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 479.881986][T13174] binder: Unknown parameter 'max9ÝÌ>ñ؃Njž' [ 479.993763][T13184] rust_binder: Error in use_page_slow: ESRCH [ 479.993787][T13184] rust_binder: use_range failure ESRCH [ 479.993798][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.000794][T13184] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 480.005937][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.013626][T13184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 480.027092][T13184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:178 [ 480.030465][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.045781][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.053129][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.059774][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.066530][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.073260][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.079808][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.086793][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.093624][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.100329][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.107219][ T36] audit: type=1401 audit(2000000016.830:1548): op=setxattr invalid_context="" [ 480.113279][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.122665][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.129149][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.134788][ T36] audit: type=1400 audit(2000000016.860:1549): avc: denied { map } for pid=13198 comm="syz.4.4101" path="socket:[67605]" dev="sockfs" ino=67605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 480.136244][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.165627][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.173094][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.179935][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.186838][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.195374][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.202194][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.208926][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.215583][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.222104][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.228872][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.235389][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.241448][ T36] audit: type=1326 audit(2000000016.970:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.4.4105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4df3f8efc9 code=0x0 [ 480.241920][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.272879][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.279605][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.286114][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.293057][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.299760][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.339835][ T9261] Bluetooth: hci0: Frame reassembly failed (-84) [ 480.352733][ T36] audit: type=1400 audit(2000000017.070:1551): avc: denied { lock } for pid=13221 comm="syz.6.4108" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 480.987115][ T36] audit: type=1400 audit(2000000017.720:1552): avc: denied { shutdown } for pid=13251 comm="syz.9.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 481.009331][ T36] audit: type=1326 audit(2000000017.740:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.4.4118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4df3f8efc9 code=0x0 [ 481.714492][ T36] audit: type=1326 audit(2000000018.450:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.9.4131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1230f8efc9 code=0x0 [ 481.810786][T13286] 9pnet_fd: Insufficient options for proto=fd [ 482.411784][ T1246] Bluetooth: hci0: command 0x1003 tx timeout [ 482.411860][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 482.443959][T13293] syzkaller0: entered promiscuous mode [ 482.450076][T13293] syzkaller0: entered allmulticast mode [ 482.695742][T13305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 482.695819][T13305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:490 [ 482.706405][T13305] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 482.725009][T13308] netlink: 'syz.4.4143': attribute type 5 has an invalid length. [ 482.753529][T13314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 482.753907][T13314] netlink: 'syz.8.4145': attribute type 19 has an invalid length. [ 482.768625][T13314] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4145'. [ 482.778331][T13314] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 482.797007][ T36] audit: type=1400 audit(2000000020.531:1555): avc: denied { append } for pid=13319 comm="syz.8.4148" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 482.835349][T13323] 9pnet_fd: Insufficient options for proto=fd [ 483.414906][ T36] audit: type=1326 audit(2000000021.151:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.9.4156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1230f8efc9 code=0x0 [ 483.714969][T13367] /dev/rnullb0: Can't open blockdev [ 483.731013][T13369] /dev/rnullb0: Can't open blockdev [ 483.750467][T13371] 9pnet_fd: Insufficient options for proto=fd [ 484.088057][T13394] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.088146][T13394] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.205728][T13399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.212539][T13399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.219684][T13399] rust_binder: Error in use_page_slow: ESRCH [ 484.226338][T13399] rust_binder: use_range failure ESRCH [ 484.232372][T13399] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 484.237849][T13399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 484.245875][T13399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:229 [ 484.312904][T13418] rust_binder: 241: no such ref 3 [ 484.327214][T13418] rust_binder: 241: no such ref 1 [ 484.332424][T13418] rust_binder: Write failure EFAULT in pid:241 [ 484.379274][T13425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 484.389559][T13425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 484.408129][T13427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 484.435284][ T36] audit: type=1400 audit(2000000022.171:1557): avc: denied { create } for pid=13433 comm="syz.6.4188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 484.436616][T13434] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4188'. [ 484.993863][T13456] netlink: 'syz.4.4195': attribute type 4 has an invalid length. [ 485.001603][T13456] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4195'. [ 485.011329][T13456] netlink: 'syz.4.4195': attribute type 1 has an invalid length. [ 485.019989][T13456] netlink: 'syz.4.4195': attribute type 2 has an invalid length. [ 505.399576][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4214'. [ 505.550324][T13538] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 505.550494][T13539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 505.557609][T13538] rust_binder: 515: no such ref 3 [ 506.088431][ T36] audit: type=1400 audit(2000000043.821:1558): avc: denied { create } for pid=13554 comm="syz.9.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 506.225432][T13563] 9pnet_fd: Insufficient options for proto=fd [ 506.232826][T13563] rust_binder: Write failure EINVAL in pid:266 [ 506.244767][T13565] /dev/rnullb0: Can't open blockdev [ 506.266443][T13567] input: syz1 as /devices/virtual/input/input51 [ 506.308786][T13573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 506.309313][T13573] rust_binder: Error in use_page_slow: ESRCH [ 506.316041][T13573] rust_binder: use_range failure ESRCH [ 506.322280][T13573] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 506.327799][T13573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 506.336019][T13573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:272 [ 506.734556][T13594] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4244'. [ 506.753710][T13594] netlink: 43 bytes leftover after parsing attributes in process `syz.9.4244'. [ 506.764298][T13594] netlink: 'syz.9.4244': attribute type 5 has an invalid length. [ 506.772239][T13594] netlink: 43 bytes leftover after parsing attributes in process `syz.9.4244'. [ 507.207672][T13601] 9pnet_fd: Insufficient options for proto=fd [ 507.223689][T13603] 9pnet_fd: Insufficient options for proto=fd [ 508.582944][T13669] veth0_vlan: left promiscuous mode [ 508.699146][ T36] audit: type=1400 audit(2000000046.431:1559): avc: denied { write } for pid=13686 comm="syz.4.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 509.258542][T13699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13699 comm=syz.4.4279 [ 509.406487][T13716] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 509.414876][T13717] incfs: Options parsing error. -22 [ 509.420212][T13717] incfs: mount failed -22 [ 509.456210][T13724] netlink: 'syz.8.4288': attribute type 46 has an invalid length. [ 509.456565][ T36] audit: type=1400 audit(2000000047.191:1560): avc: denied { compute_member } for pid=13722 comm="syz.8.4288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 509.481983][T13724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.520176][T13730] syz.8.4290: attempt to access beyond end of device [ 509.520176][T13730] loop8: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 509.539812][T13730] EXT4-fs (loop8): unable to read superblock [ 509.592524][T13746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.592552][T13746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.600607][T13748] 9pnet_fd: p9_fd_create_unix (13748): problem connecting socket: ./file0: -111 [ 509.708759][T13769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.805081][ T36] audit: type=1400 audit(2000000047.541:1561): avc: denied { append } for pid=13778 comm="syz.8.4309" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 509.851023][T13780] rust_binder: Write failure EFAULT in pid:292 [ 510.620374][T13805] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 510.629569][T13805] overlayfs: missing 'lowerdir' [ 510.647442][T13807] rust_binder: Write failure EFAULT in pid:295 [ 511.812134][T13847] can: request_module (can-proto-0) failed. [ 513.880245][T13930] overlayfs: failed to clone lowerpath [ 513.880245][T13929] overlayfs: failed to clone lowerpath [ 513.902264][T13932] overlay: ./file0 is not a directory [ 514.047564][ T36] audit: type=1400 audit(2000000051.781:1562): avc: denied { name_bind } for pid=13949 comm="syz.9.4370" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 514.264750][T13969] netlink: 188 bytes leftover after parsing attributes in process `syz.9.4377'. [ 514.500929][ C0] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 514.559972][T14000] overlayfs: failed to clone lowerpath [ 514.702211][T14016] overlayfs: failed to resolve './bus': -2 [ 514.709024][T14015] tmpfs: Unknown parameter './file0' [ 515.426812][T14037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 515.430847][T14039] 9pnet_fd: Insufficient options for proto=fd [ 515.478112][T14043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:313 [ 515.601790][T14054] Invalid ELF header type: 2 != 1 [ 515.689266][ T36] audit: type=1326 audit(2000000053.421:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.9.4409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1230f8efc9 code=0x0 [ 515.791513][T14091] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4412'. [ 515.811944][T14092] tipc: Enabling of bearer rejected, failed to enable media [ 515.820969][T14091] tipc: Enabling of bearer rejected, failed to enable media [ 515.850538][T14094] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4413'. [ 516.017198][T14102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 516.039964][T14106] netlink: 'syz.4.4418': attribute type 4 has an invalid length. [ 516.055264][T14106] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4418'. [ 516.245794][T14110] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.253206][T14110] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.260464][T14110] bridge_slave_0: entered allmulticast mode [ 516.267497][T14110] bridge_slave_0: entered promiscuous mode [ 516.276367][T14110] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.284233][T14110] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.291561][T14110] bridge_slave_1: entered allmulticast mode [ 516.298181][T14110] bridge_slave_1: entered promiscuous mode [ 516.366862][T14110] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.373961][T14110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.381213][T14110] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.388250][T14110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.408014][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.415532][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.425103][ T2005] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.432185][ T2005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.441219][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.448287][ T9259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.474225][T14110] veth0_vlan: entered promiscuous mode [ 516.485178][T14110] veth1_macvtap: entered promiscuous mode [ 516.538085][T14129] netlink: 'syz.4.4421': attribute type 16 has an invalid length. [ 516.546034][T14129] netlink: 'syz.4.4421': attribute type 2 has an invalid length. [ 516.554924][T14129] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.4421'. [ 516.581851][ T36] audit: type=1400 audit(2000000054.321:1564): avc: denied { watch watch_reads } for pid=14138 comm="syz.9.4425" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 516.821817][ T7636] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 516.981716][ T7636] usb 5-1: Using ep0 maxpacket: 8 [ 516.988501][ T7636] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 516.999795][ T7636] usb 5-1: config 1 interface 0 has no altsetting 0 [ 517.007977][ T7636] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.40 [ 517.017396][ T7636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.025582][ T7636] usb 5-1: Product: ÑŒ [ 517.029726][ T7636] usb 5-1: Manufacturer: 匕凪햖攌﬛简磤躤핚怈輤䷖æ˜è‹ê§±ä¨Žï¡â¯³ë«Ž [ 517.039751][ T7636] usb 5-1: SerialNumber: 䀊 [ 517.045596][T14168] 9pnet_fd: Insufficient options for proto=fd [ 517.079218][T14173] rust_binder: 326: no such ref 0 [ 517.084625][T14172] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 517.091938][T14172] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 517.120790][T14177] netlink: 'syz.6.4435': attribute type 15 has an invalid length. [ 517.129232][T14177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.131403][T14177] rust_binder: Error in use_page_slow: ESRCH [ 517.138143][T14177] rust_binder: use_range failure ESRCH [ 517.144301][T14177] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 517.149844][T14177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 517.157734][T14177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:331 [ 517.246584][ T36] audit: type=1400 audit(2000000054.981:1565): avc: denied { create } for pid=14136 comm="syz.4.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 517.252270][ T7636] usbhid 5-1:1.0: can't add hid device: -71 [ 517.255874][ T36] audit: type=1400 audit(2000000054.981:1566): avc: denied { getattr } for pid=14136 comm="syz.4.4424" path="net:[4026533096]" dev="nsfs" ino=4026533096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 517.275720][ T7636] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 517.314106][ T7636] usb 5-1: USB disconnect, device number 39 [ 517.761682][T14199] netlink: 'syz.4.4444': attribute type 1 has an invalid length. [ 518.021962][T14211] fuse: Bad value for 'group_id' [ 518.027059][T14211] fuse: Bad value for 'group_id' [ 518.341715][ T2201] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 518.491850][ T2201] usb 5-1: Using ep0 maxpacket: 32 [ 518.498184][ T2201] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.508170][ T2201] usb 5-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 518.518224][ T2201] usb 5-1: config 1 interface 0 altsetting 254 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 518.530144][ T2201] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x88 has invalid wMaxPacketSize 0 [ 518.540476][ T2201] usb 5-1: config 1 interface 0 altsetting 254 bulk endpoint 0x88 has invalid maxpacket 0 [ 518.551101][ T2201] usb 5-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 518.564336][ T2201] usb 5-1: config 1 interface 0 has no altsetting 0 [ 518.571900][ T2201] usb 5-1: New USB device found, idVendor=7fff, idProduct=a4a1, bcdDevice= 0.40 [ 518.580947][ T2201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 518.588962][ T2201] usb 5-1: SerialNumber: syz [ 518.594909][T14214] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 518.602806][ T2201] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 518.803389][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.812870][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.821662][ T66] usb 5-1: USB disconnect, device number 40 [ 519.517988][ T36] audit: type=1400 audit(2000000057.251:1567): avc: denied { map } for pid=14247 comm="syz.4.4459" path="socket:[71315]" dev="sockfs" ino=71315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 519.997506][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4466'. [ 520.007065][T14270] /dev/rnullb0: Can't open blockdev [ 520.181767][T14284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 520.184705][T14284] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 520.231329][T14291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 520.231408][T14291] rust_binder: Error in use_page_slow: ESRCH [ 520.238114][T14291] rust_binder: use_range failure ESRCH [ 520.244392][T14291] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 520.249876][T14291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 520.258515][T14291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:337 [ 520.269877][T14291] rust_binder: Error in use_page_slow: ESRCH [ 520.275203][T14296] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 520.278979][ T36] audit: type=1400 audit(2000000058.011:1568): avc: denied { bind } for pid=14294 comm="syz.8.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 520.311471][T14295] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 520.311667][T14292] rust_binder: Error in use_page_slow: ESRCH [ 520.318528][T14292] rust_binder: use_range failure ESRCH [ 520.318696][T14296] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 520.325820][T14291] rust_binder: use_range failure ESRCH [ 520.340157][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4476'. [ 520.341896][T14292] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 520.345814][T14296] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 520.354971][ T36] audit: type=1400 audit(2000000058.071:1569): avc: denied { ioctl } for pid=14298 comm="syz.4.4476" path="socket:[71877]" dev="sockfs" ino=71877 ioctlcmd=0xaea5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 520.381974][T14291] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 520.400218][T14292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 520.408167][T14292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:337 [ 520.423152][T14291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 520.434284][T14291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:337 [ 520.444767][T14305] netlink: 312 bytes leftover after parsing attributes in process `syz.8.4478'. [ 520.484128][T14308] can0: slcan on ptm1. [ 520.501371][T14312] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 520.501894][T14313] rust_binder: inc_ref_done called when no active inc_refs [ 520.552653][T14307] can0 (unregistered): slcan off ptm1. [ 520.590296][T14330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 520.590433][T14330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 520.611693][T14330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:344 [ 520.621903][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4483'. [ 521.011717][ T7636] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 521.193335][ T7636] usb 5-1: Using ep0 maxpacket: 32 [ 521.208449][ T7636] usb 5-1: unable to get BOS descriptor or descriptor too short [ 521.220516][ T7636] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 521.230692][ T7636] usb 5-1: can't read configurations, error -71 [ 521.239009][T14398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 521.264953][T14398] rust_binder: Error in use_page_slow: ESRCH [ 521.271544][T14398] rust_binder: use_range failure ESRCH [ 521.277585][T14398] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 521.283242][T14398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 521.291501][T14398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:369 [ 521.331422][T14407] rust_binder: Write failure EFAULT in pid:375 [ 521.438449][T14422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 521.515222][T14424] devpts: called with bogus options [ 522.112444][T14457] rust_binder: Error while translating object. [ 522.112490][T14457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 522.118908][T14457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 522.271737][ T7636] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 522.433310][ T7636] usb 5-1: unable to get BOS descriptor or descriptor too short [ 522.441612][ T7636] usb 5-1: not running at top speed; connect to a high speed hub [ 522.450213][ T7636] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.460367][ T7636] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 522.469296][ T7636] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 522.482262][ T7636] usb 5-1: config 1 interface 0 has no altsetting 0 [ 522.490886][ T7636] usb 5-1: string descriptor 0 read error: -22 [ 522.497181][ T7636] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.506361][ T7636] usb 5-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 522.719784][ T7636] usb 5-1: USB disconnect, device number 42 [ 523.243103][T14482] rust_binder: Write failure EINVAL in pid:56 [ 524.261236][T14530] /dev/rnullb0: Can't open blockdev [ 524.295756][T14523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14523 comm=syz.4.4541 [ 524.310192][T14523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=14523 comm=syz.4.4541 [ 524.335114][T14523] binder: Unknown parameter 'uid<18446744073709551615' [ 524.460503][T14557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 524.506378][ T36] audit: type=1400 audit(2000000062.241:1570): avc: denied { mounton } for pid=14553 comm="syz.4.4554" path="/22/file0/file2" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 524.558568][T14559] rust_binder: Error while translating object. [ 524.558600][T14559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 524.564854][T14559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:65 [ 525.200664][T14569] 9pnet_fd: Insufficient options for proto=fd [ 525.240764][ T36] audit: type=1326 audit(2000000062.971:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.6.4559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabb8f8efc9 code=0x0 [ 525.264243][ T36] audit: type=1326 audit(2000000063.001:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.6.4559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabb8f8efc9 code=0x0 [ 525.331120][T14578] input: syz1 as /devices/virtual/input/input56 [ 525.356506][T14583] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 525.374937][T14585] rust_binder: Write failure EINVAL in pid:78 [ 525.376836][T14585] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 525.383157][T14585] rust_binder: Read failure Err(EFAULT) in pid:78 [ 525.412662][T14589] /dev/rnullb0: Can't open blockdev [ 525.434019][T14593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4567'. [ 525.455388][ T331] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 525.463646][ T331] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 525.582480][ T36] audit: type=1400 audit(2000000063.321:1573): avc: denied { map } for pid=14600 comm="syz.6.4570" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 525.606868][ T36] audit: type=1400 audit(2000000063.321:1574): avc: denied { execute } for pid=14600 comm="syz.6.4570" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 525.675392][T14608] rust_binder: 444: no such ref 0 [ 525.680997][T14608] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 525.688338][T14608] rust_binder: 444: no such ref 2 [ 525.691780][ T7636] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 525.694147][T14608] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 525.710708][T14608] rust_binder: Write failure EINVAL in pid:444 [ 525.741150][T14610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14610 comm=syz.6.4573 [ 525.882819][ T7636] usb 5-1: config 0 has no interfaces? [ 525.889298][ T7636] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.898427][ T7636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 525.906452][ T7636] usb 5-1: SerialNumber: syz [ 525.911707][ T7636] usb 5-1: config 0 descriptor?? [ 525.928671][T14626] netlink: 'syz.6.4578': attribute type 4 has an invalid length. [ 525.938407][T14626] netlink: 'syz.6.4578': attribute type 4 has an invalid length. [ 526.045384][T14628] rust_binder: Write failure EINVAL in pid:450 [ 526.212990][ T331] usb 5-1: USB disconnect, device number 43 [ 526.227060][ T36] audit: type=1400 audit(2000000063.961:1575): avc: denied { setattr } for pid=14657 comm="syz.6.4581" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 526.301209][T14664] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 526.302394][T14664] 9pnet_fd: Insufficient options for proto=fd [ 526.329443][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4584'. [ 526.401700][T14670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 526.411539][T14673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 526.418201][T14673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:472 [ 526.634506][T14692] 2N: renamed from vcan0 (while UP) [ 526.651198][T14692] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4592'. [ 526.663518][T14692] x_tables: duplicate underflow at hook 1 [ 526.699942][T14700] overlayfs: failed to clone upperpath [ 526.772386][T14705] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 526.867369][ T36] audit: type=1326 audit(2000000064.601:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.9.4599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1230f8efc9 code=0x0 [ 526.922021][T14729] __vm_enough_memory: pid: 14729, comm: syz.4.4603, bytes: 18014402804453376 not enough memory for the allocation [ 527.568146][T14740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:646 [ 527.615102][T14740] rust_binder: Read failure Err(EFAULT) in pid:646 [ 527.654368][T14759] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß8ùa‘™¿œ,nB2³ԓn [ 527.654368][T14759] y÷K¤dØ:´BÑgvÜyµÅ [ 527.654368][T14759] È-¨ùä tµ¶’û!ç –Fi¾S—‘ã醇î˜S) failed with errno=-22 [ 527.673995][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4614'. [ 527.692076][T14761] rust_binder: Write failure EFAULT in pid:650 [ 527.727086][T14763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 527.733766][T14763] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 527.908820][T14771] rust_binder: Error while translating object. [ 527.916962][T14771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 527.923224][T14771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:111 [ 528.988626][T14799] netlink: 'syz.9.4625': attribute type 13 has an invalid length. [ 529.163842][T14814] rust_binder: Write failure EFAULT in pid:134 [ 529.270669][T14818] binder: Unknown parameter 'contextÌðÔð[7’' [ 529.283301][T14818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14818 comm=syz.4.4633 [ 529.332076][T14820] rust_binder: Got transaction with invalid offset. [ 529.332106][T14820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 529.338736][T14820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 529.351770][T14822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.367005][T14825] netlink: 'syz.4.4635': attribute type 9 has an invalid length. [ 529.381392][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4635'. [ 529.508861][T14843] rust_binder: Write failure EFAULT in pid:492 [ 529.622530][T14855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14855 comm=syz.6.4647 [ 529.643011][T14855] loop2: detected capacity change from 0 to 7 [ 529.651119][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.664247][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.673470][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 529.675374][T14861] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4648'. [ 529.682174][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.699486][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 529.708161][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.717335][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 529.725477][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.734742][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 529.742927][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 529.752084][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 529.811178][T14864] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4649'. [ 529.832662][T14864] rust_binder: Write failure EINVAL in pid:505 [ 530.211804][T14894] /dev/rnullb0: Can't open blockdev [ 530.223252][ T36] audit: type=1400 audit(2000000067.941:1577): avc: denied { mounton } for pid=14893 comm="syz.6.4660" path="/proc/516/cgroup" dev="nsfs" ino=4026532609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 530.317777][T14907] rust_binder: Write failure EFAULT in pid:521 [ 530.340067][T14907] rust_binder: Write failure EFAULT in pid:521 [ 530.397220][T14926] kernel profiling enabled (shift: 34) [ 530.409096][T14926] profiling shift: 34 too large [ 530.541540][T14935] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.548644][T14935] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.555884][T14935] bridge_slave_0: entered allmulticast mode [ 530.562199][T14935] bridge_slave_0: entered promiscuous mode [ 530.568514][T14935] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.575683][T14935] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.582973][T14935] bridge_slave_1: entered allmulticast mode [ 530.589355][T14935] bridge_slave_1: entered promiscuous mode [ 530.629234][T14935] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.636384][T14935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.643690][T14935] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.650711][T14935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.673101][T14639] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.680458][T14639] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.689950][T14638] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.697032][T14638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.706082][T14639] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.713169][T14639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.737925][T14935] veth0_vlan: entered promiscuous mode [ 530.748817][T14935] veth1_macvtap: entered promiscuous mode [ 530.902031][T14956] random: crng reseeded on system resumption [ 530.926249][T14960] rust_binder: Write failure EFAULT in pid:658 [ 530.928949][T14956] Restarting kernel threads ... [ 530.942172][T14965] rust_binder: Write failure EFAULT in pid:12 [ 530.944264][T14956] done. [ 530.953824][T14972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.957350][T14972] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 531.195937][T14992] 9pnet_fd: Insufficient options for proto=fd [ 531.251743][ T7623] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 531.402785][ T7623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.413798][ T7623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.424332][ T7623] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 531.433621][ T7623] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.441658][ T7623] usb 1-1: Manufacturer: syz [ 531.446894][ T7623] usb 1-1: config 0 descriptor?? [ 531.631889][T15014] fuse: Bad value for 'user_id' [ 531.636838][T15014] fuse: Bad value for 'user_id' [ 531.854130][ T7623] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 531.861006][ T7623] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 531.867934][ T7623] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 531.874793][ T7623] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 531.881606][ T7623] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 531.888509][ T7623] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 531.895373][ T7623] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 531.902936][ T7623] pyra 0003:1E7D:2CF6.0022: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 532.922688][T15053] virtiofs: Unknown parameter 'always' [ 532.939824][T15055] overlayfs: missing 'workdir' [ 533.456530][ T7623] pyra 0003:1E7D:2CF6.0022: couldn't init struct pyra_device [ 533.465199][ T7623] pyra 0003:1E7D:2CF6.0022: couldn't install mouse [ 533.474094][ T7623] pyra 0003:1E7D:2CF6.0022: probe with driver pyra failed with error -71 [ 533.486183][ T7623] usb 1-1: USB disconnect, device number 47 [ 533.508971][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4716'. [ 533.519237][T15065] binder: Unknown parameter 'defcontext0x0000000000000000' [ 533.519615][T15064] fido_id[15064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 533.704295][T15093] rust_binder: Error while translating object. [ 533.704337][T15093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 533.710984][T15093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:555 [ 533.971990][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4726'. [ 534.030771][ T36] audit: type=1326 audit(2000000071.761:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15110 comm="syz.6.4729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabb8f8efc9 code=0x0 [ 534.089070][T14638] Bluetooth: hci0: Frame reassembly failed (-84) [ 534.221701][ T31] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 534.373542][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 534.384543][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 534.394080][T15115] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 534.394508][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 534.401970][T15115] rust_binder: Write failure EINVAL in pid:679 [ 534.414359][ T31] usb 1-1: string descriptor 0 read error: -22 [ 534.426778][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.435869][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.447665][T15105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 534.656312][ T31] cdc_ncm 1-1:1.0: bind() failure [ 534.662248][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 534.669065][ T31] cdc_ncm 1-1:1.1: bind() failure [ 534.675700][ T31] usb 1-1: USB disconnect, device number 48 [ 535.177169][T15121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4732'. [ 535.233749][T15125] __vm_enough_memory: pid: 15125, comm: syz.8.4733, bytes: 18014402804453376 not enough memory for the allocation [ 535.302505][T15129] rust_binder: 30: no such ref 1 [ 535.686705][ T36] audit: type=1400 audit(2000000073.421:1579): avc: denied { setattr } for pid=15184 comm="syz.0.4752" name="AF_VSOCK" dev="sockfs" ino=76166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 536.092018][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 536.092802][ T1246] Bluetooth: hci0: command 0x1003 tx timeout [ 536.618018][T15199] 9pnet: Unknown protocol version 9p2 [ 536.658101][T15207] veth1: entered allmulticast mode [ 536.667223][T15207] veth1: left allmulticast mode [ 536.761365][T15225] 9pnet_fd: Insufficient options for proto=fd [ 537.128455][T15238] rust_binder: 574: no such ref 3 [ 537.133578][T15238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:574 [ 537.691552][T15266] 9pnet_fd: Insufficient options for proto=fd [ 537.786193][T15269] futex_wake_op: syz.0.4782 tries to shift op by 144; fix this program [ 537.859639][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4789'. [ 537.869585][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4789'. [ 537.878782][T15290] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 538.017135][T15293] x_tables: unsorted underflow at hook 3 [ 538.117002][T15295] rust_binder: 585: no such ref 0 [ 538.260195][T15297] rust_binder: Error while translating object. [ 538.260239][T15297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 538.266545][T15297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 538.296911][T15304] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.314851][ T36] audit: type=1400 audit(2000000076.051:1580): avc: denied { setattr } for pid=15303 comm="syz.8.4793" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 538.343048][ T36] audit: type=1326 audit(2000000076.051:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x7ffc0000 [ 538.367679][ T36] audit: type=1326 audit(2000000076.051:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x7ffc0000 [ 538.397258][ T36] audit: type=1326 audit(2000000076.051:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x7ffc0000 [ 538.441763][ T36] audit: type=1326 audit(2000000076.051:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f6c4458efc9 code=0x7ffc0000 [ 538.462599][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4798'. [ 538.465410][ T36] audit: type=1326 audit(2000000076.051:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x7ffc0000 [ 538.511666][ T36] audit: type=1326 audit(2000000076.051:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x7ffc0000 [ 538.542298][ T36] audit: type=1326 audit(2000000076.051:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4458efc9 code=0x7ffc0000 [ 538.600469][T15324] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 538.663024][T15326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 538.663365][T15326] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 538.846752][T15350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15350 comm=syz.0.4806 [ 539.473048][T15362] binfmt_misc: register: failed to install interpreter file ./file0 [ 539.498293][T15364] rust_binder: Error while translating object. [ 539.498334][T15364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 539.504589][T15364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 539.530716][T15367] rust_binder: Error while translating object. [ 539.540080][T15367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 539.543679][T15370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 539.546558][T15367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:603 [ 539.737456][T15376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 539.746860][T15376] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 541.816303][T15459] overlayfs: failed to clone upperpath [ 541.831293][T15459] bridge0: port 3(veth0_to_bridge) entered blocking state [ 541.838890][T15459] bridge0: port 3(veth0_to_bridge) entered disabled state [ 541.846535][T15459] veth0_to_bridge: entered allmulticast mode [ 541.854737][T15459] veth0_to_bridge: entered promiscuous mode [ 541.860809][T15459] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.873111][T15459] bridge0: port 3(veth0_to_bridge) entered blocking state [ 541.880233][T15459] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 541.941530][T15475] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4851'. [ 541.951940][T15475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=15475 comm=syz.0.4851 [ 542.011838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.024008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.036175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.048230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.060523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.072704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.084847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.096944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.109043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.769017][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 542.769035][ T36] audit: type=1107 audit(2000000080.501:1601): pid=15506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 542.881669][ C0] net_ratelimit: 13055 callbacks suppressed [ 542.881689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.899674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.906763][T15521] vcan0: entered allmulticast mode [ 542.911798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.925633][T15521] vcan0: left allmulticast mode [ 542.929013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.945808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.957906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.970282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.982362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.994470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.006534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.069165][T15533] SELinux: Context system_u:object_r:shadow_t:s0 is not valid (left unmapped). [ 543.078866][ T36] audit: type=1400 audit(2000000080.811:1602): avc: denied { relabelto } for pid=15532 comm="syz.0.4872" name="rnullb0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:shadow_t:s0" [ 543.119885][ T36] audit: type=1400 audit(2000000080.811:1603): avc: denied { associate } for pid=15532 comm="syz.0.4872" name="rnullb0" dev="tmpfs" ino=112 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:shadow_t:s0" [ 543.184944][ T36] audit: type=1400 audit(2000000080.921:1604): avc: denied { read write } for pid=15539 comm="syz.0.4874" name="rnullb0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:shadow_t:s0" [ 543.293366][ T36] audit: type=1400 audit(2000000080.951:1605): avc: denied { open } for pid=15539 comm="syz.0.4874" path="/dev/rnullb0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:shadow_t:s0" [ 547.891642][ C0] net_ratelimit: 119679 callbacks suppressed [ 547.891663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 547.891670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.891743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.897824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.909808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.921833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.933805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.945792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.957659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.969680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.901656][ C1] net_ratelimit: 126042 callbacks suppressed [ 552.901678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.901735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.907792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.919709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.931682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.943645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.955567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.967455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.979320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.991200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.911651][ C0] net_ratelimit: 123911 callbacks suppressed [ 557.911674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.911723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.917776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.929673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.941713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.953555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.965451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.977326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.989262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.001109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.921669][ C0] net_ratelimit: 128932 callbacks suppressed [ 562.921691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.921734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.927868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.939769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.951781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.963690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.975680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.987504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.999615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.011449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.931669][ C1] net_ratelimit: 125087 callbacks suppressed [ 567.931690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.931853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 567.937876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.949811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.961779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.973634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.985624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.997780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.009627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.021740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.941629][ C0] net_ratelimit: 124439 callbacks suppressed [ 572.941651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.941693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.947906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.959916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.971937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.983793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.995765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.007704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.019697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.031544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.137440][T14639] bridge_slave_1: left allmulticast mode [ 576.232944][T14639] bridge_slave_1: left promiscuous mode [ 576.773446][T14639] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.957474][T14639] bridge_slave_0: left allmulticast mode [ 577.951644][ C1] net_ratelimit: 137204 callbacks suppressed [ 577.951666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.951714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 577.957752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.969849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.981871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.993678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.005699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.017666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.029527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.041545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.141853][T14639] bridge_slave_0: left promiscuous mode [ 580.144876][T14639] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.961608][ C1] net_ratelimit: 173667 callbacks suppressed [ 582.961630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.961648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.967775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.979712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 582.991548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.003532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.015471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.027466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.039515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.051433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.971638][ C1] net_ratelimit: 176905 callbacks suppressed [ 587.971660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.971748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.977727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.989659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.001553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.013578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.025468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.037501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 588.049404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.061411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.981617][ C1] net_ratelimit: 171925 callbacks suppressed [ 592.981638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.981640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.981730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.987727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.999615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.011617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.023536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.035383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.047313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.059294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.991614][ C1] net_ratelimit: 171597 callbacks suppressed [ 597.991636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.991646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.991741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.997718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.009647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 598.022018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.034035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.045863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.057887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 598.069974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.001612][ C0] net_ratelimit: 169639 callbacks suppressed [ 603.001633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.001652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.007726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.019643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.031515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 603.043356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.055337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.067257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.079304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.091248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.011595][ C1] net_ratelimit: 168919 callbacks suppressed [ 608.011617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.011635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.017701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.029690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.041641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.053702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.065708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.077573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.089477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.101447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 613.021617][ C1] net_ratelimit: 175330 callbacks suppressed [ 613.021638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.021666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.027734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.039778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.051670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.063684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.075571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.087469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.099516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.111612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 618.031588][ C0] net_ratelimit: 172712 callbacks suppressed [ 618.031610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.031627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.037719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.049666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.061517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.073505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.085499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.097399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.109551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.121515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.041610][ C1] net_ratelimit: 171484 callbacks suppressed [ 623.041632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.041651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.047695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.059648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.071680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.083715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.095740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.107656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.119593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.131582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 628.051575][ C0] net_ratelimit: 166049 callbacks suppressed [ 628.051596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.051622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.057714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.069570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.081504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.093387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.105309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.117153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.129033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 628.140966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.061604][ C1] net_ratelimit: 166642 callbacks suppressed [ 633.061626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.061665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.067718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.079634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.091500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.103444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 633.115253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.127142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.139142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.151065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.071565][ C0] net_ratelimit: 165176 callbacks suppressed [ 638.071587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.071593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.071642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.077743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 638.089636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.101511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.113375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.125337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.137303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.149411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.081575][ C1] net_ratelimit: 165685 callbacks suppressed [ 643.081597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.081652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.087748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.100074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.111827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.123838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.135786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.147705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.159606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.171586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.091566][ C0] net_ratelimit: 171250 callbacks suppressed [ 648.091587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 648.091622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.097703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.109716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.121817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 648.133659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.145556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.157492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.169377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.181344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.101586][ C1] net_ratelimit: 173945 callbacks suppressed [ 653.101607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.101745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.107701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.119622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.131571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.143581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.155524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.167525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.179360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.191329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 658.111568][ C1] net_ratelimit: 165155 callbacks suppressed [ 658.111589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.111673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.117671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.129644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 658.141553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.153429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.165575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.177463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.189492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.201360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.121561][ C1] net_ratelimit: 161879 callbacks suppressed [ 663.121582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.121639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.127650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.139592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.151443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.163319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 663.175296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.187348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.199238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.211276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 668.131573][ C1] net_ratelimit: 163098 callbacks suppressed [ 668.131593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.131633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.137662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.149600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.161463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.173464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.185305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.197286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.209117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.221041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.141559][ C1] net_ratelimit: 169702 callbacks suppressed [ 673.141579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.141629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.147837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.159781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.171655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.183616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.195591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.207483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.219418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.231407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.151583][ C1] net_ratelimit: 165261 callbacks suppressed [ 678.151605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.151621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.157760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.169800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 678.181614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.193694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.205550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.217550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.229438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.241330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.161569][ C0] net_ratelimit: 170074 callbacks suppressed [ 683.161590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 683.161619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.167712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.179650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.191699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 683.203590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.215623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.227542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.239409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.251386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.171544][ C1] net_ratelimit: 160968 callbacks suppressed [ 688.171566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.171571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0) [ 688.171736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.177650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.189649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.201619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.213566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.225511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.237454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.249407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.493440][ T37] INFO: task kworker/1:3:331 blocked for more than 129 seconds. [ 688.501125][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 688.622783][ T36] audit: type=1400 audit(2000000226.322:1606): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2510]" dev="pipefs" ino=2510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 688.773782][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.788620][T15573] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 688.845969][ T37] task:kworker/1:3 state:D stack:0 pid:331 tgid:331 ppid:2 flags:0x00004000 [ 688.856229][ T37] Workqueue: events fqdir_free_fn [ 688.861377][ T37] Call Trace: [ 688.864689][ T37] [ 688.867639][ T37] __schedule+0x1322/0x1df0 [ 688.872329][ T37] ? __sched_text_start+0x10/0x10 [ 688.877371][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 688.882512][ T37] ? wake_up_process+0x14/0x20 [ 688.887421][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 688.892714][ T37] schedule+0xc6/0x240 [ 688.896801][ T37] schedule_timeout+0xb2/0x3a0 [ 688.901631][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 688.907012][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 688.912592][ T37] ? generic_exec_single+0x20a/0x500 [ 688.918050][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 688.923773][ T37] wait_for_common+0x359/0x630 [ 688.928558][ T37] ? wait_for_completion+0x40/0x40 [ 688.933715][ T37] ? _raw_spin_unlock+0x45/0x60 [ 688.938584][ T37] ? __switch_to_asm+0x3d/0x70 [ 688.943600][ T37] wait_for_completion+0x1c/0x40 [ 688.948552][ T37] rcu_barrier+0x415/0x530 [ 688.953005][ T37] fqdir_free_fn+0x36/0x150 [ 688.957531][ T37] process_scheduled_works+0x7d2/0x1020 [ 688.963207][ T37] worker_thread+0xc58/0x1250 [ 688.967908][ T37] kthread+0x2ca/0x370 [ 688.972093][ T37] ? __cfi_worker_thread+0x10/0x10 [ 688.977222][ T37] ? __cfi_kthread+0x10/0x10 [ 688.981853][ T37] ret_from_fork+0x67/0xa0 [ 688.986325][ T37] ? __cfi_kthread+0x10/0x10 [ 688.990924][ T37] ret_from_fork_asm+0x1a/0x30 [ 688.995739][ T37] [ 689.234287][ T37] INFO: task syz.0.4878:15550 blocked for more than 130 seconds. [ 689.404986][ T37] Not tainted syzkaller #0 [ 689.409973][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.418687][ T37] task:syz.0.4878 state:D stack:0 pid:15550 tgid:15548 ppid:14935 flags:0x00004004 [ 689.428906][ T37] Call Trace: [ 689.432208][ T37] [ 689.435170][ T37] __schedule+0x1322/0x1df0 [ 689.439705][ T37] ? __sched_text_start+0x10/0x10 [ 689.444778][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 689.450210][ T37] ? __kasan_check_write+0x18/0x20 [ 689.455554][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 689.460875][ T37] ? __kasan_check_write+0x18/0x20 [ 689.466044][ T37] ? trace_contention_begin+0xc0/0xc0 [ 689.471435][ T37] schedule+0xc6/0x240 [ 689.475568][ T37] schedule_preempt_disabled+0x14/0x30 [ 689.481052][ T37] __mutex_lock+0x81e/0x1b50 [ 689.485679][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 689.492573][ T37] ? kasan_save_track+0x4f/0x80 [ 689.497441][ T37] ? kasan_save_track+0x3e/0x80 [ 689.502321][ T37] ? kasan_save_free_info+0x4a/0x60 [ 689.507534][ T37] ? __kasan_slab_free+0x5f/0x80 [ 689.512515][ T37] ? kfree+0x15c/0x460 [ 689.516681][ T37] ? setup_net+0x81b/0x990 [ 689.521291][ T37] ? copy_net_ns+0x513/0xa30 [ 689.525917][ T37] ? create_new_namespaces+0x3b5/0x720 [ 689.531457][ T37] ? copy_namespaces+0x25d/0x2b0 [ 689.536458][ T37] ? kernel_clone+0x23f/0x830 [ 689.541207][ T37] ? __x64_sys_clone+0x18c/0x1f0 [ 689.546203][ T37] ? x64_sys_call+0x2b3c/0x2ee0 [ 689.551077][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 689.557276][ T37] __mutex_lock_slowpath+0xe/0x20 [ 689.562346][ T37] mutex_lock+0x102/0x1c0 [ 689.566690][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 689.571576][ T37] rcu_barrier+0x4d/0x530 [ 689.575918][ T37] ? kfree+0x15c/0x460 [ 689.580012][ T37] ? setup_net+0x81b/0x990 [ 689.584537][ T37] setup_net+0x8cf/0x990 [ 689.588810][ T37] ? copy_net_ns+0xa30/0xa30 [ 689.593455][ T37] ? down_read_killable+0x79/0xf0 [ 689.598609][ T37] ? __cfi_down_read_killable+0x10/0x10 [ 689.604196][ T37] copy_net_ns+0x513/0xa30 [ 689.608632][ T37] create_new_namespaces+0x3b5/0x720 [ 689.613961][ T37] copy_namespaces+0x25d/0x2b0 [ 689.618744][ T37] copy_process+0x126d/0x3220 [ 689.623453][ T37] ? __cfi___futex_wait+0x10/0x10 [ 689.628507][ T37] ? __cfi_copy_process+0x10/0x10 [ 689.633567][ T37] ? futex_wait+0x29a/0x7a0 [ 689.638184][ T37] ? __cfi_futex_wait+0x10/0x10 [ 689.643071][ T37] kernel_clone+0x23f/0x830 [ 689.647597][ T37] ? __cfi_kernel_clone+0x10/0x10 [ 689.652663][ T37] __x64_sys_clone+0x18c/0x1f0 [ 689.657443][ T37] ? __cfi___x64_sys_clone+0x10/0x10 [ 689.662767][ T37] ? __kasan_check_write+0x18/0x20 [ 689.667903][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 689.673565][ T37] ? switch_fpu_return+0x12/0x20 [ 689.678517][ T37] x64_sys_call+0x2b3c/0x2ee0 [ 689.683241][ T37] do_syscall_64+0x58/0xf0 [ 689.687764][ T37] ? clear_bhb_loop+0x50/0xa0 [ 689.692518][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 689.698426][ T37] RIP: 0033:0x7f1a6d78efc9 [ 689.702893][ T37] RSP: 002b:00007f1a6e5eefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 689.711321][ T37] RAX: ffffffffffffffda RBX: 00007f1a6d9e6090 RCX: 00007f1a6d78efc9 [ 689.719389][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000 [ 689.727500][ T37] RBP: 00007f1a6d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 689.735511][ T37] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 689.743526][ T37] R13: 00007f1a6d9e6128 R14: 00007f1a6d9e6090 R15: 00007ffe749fda28 [ 689.751546][ T37] [ 690.194344][ T37] NMI backtrace for cpu 1 [ 690.194371][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 690.194398][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 690.194410][ T37] Call Trace: [ 690.194417][ T37] [ 690.194426][ T37] __dump_stack+0x21/0x30 [ 690.194462][ T37] dump_stack_lvl+0x10c/0x190 [ 690.194486][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 690.194512][ T37] dump_stack+0x19/0x20 [ 690.194534][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 690.194629][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 690.194653][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 690.194675][ T37] ? sched_show_task+0x379/0x560 [ 690.194697][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 690.194719][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 690.194743][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 690.194766][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 690.194787][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 690.194810][ T37] watchdog+0xd8f/0xed0 [ 690.194892][ T37] ? __cfi_watchdog+0x10/0x10 [ 690.194915][ T37] ? __kasan_check_read+0x15/0x20 [ 690.194942][ T37] ? __kthread_parkme+0x138/0x180 [ 690.194959][ T37] ? schedule+0xc6/0x240 [ 690.194984][ T37] kthread+0x2ca/0x370 [ 690.195002][ T37] ? __cfi_watchdog+0x10/0x10 [ 690.195025][ T37] ? __cfi_kthread+0x10/0x10 [ 690.195044][ T37] ret_from_fork+0x67/0xa0 [ 690.195069][ T37] ? __cfi_kthread+0x10/0x10 [ 690.195088][ T37] ret_from_fork_asm+0x1a/0x30 [ 690.195116][ T37] [ 690.195124][ T37] Sending NMI from CPU 1 to CPUs 0: [ 690.381376][ C0] NMI backtrace for cpu 0 [ 690.381391][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 690.381412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 690.381421][ C0] RIP: 0010:__rcu_read_unlock+0x33/0xc0 [ 690.381446][ C0] Code: 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 8b 3c 25 00 eb 04 00 48 8d 9f c4 04 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 33 ff 0b 75 1c 48 8d 9f c8 04 00 00 48 89 d8 48 c1 e8 03 [ 690.381459][ C0] RSP: 0018:ffffc900000073b0 EFLAGS: 00000a07 [ 690.381473][ C0] RAX: 0000000000000000 RBX: ffff888103663dc4 RCX: ffff888103663900 [ 690.381485][ C0] RDX: 0000000000000100 RSI: 0200000000000000 RDI: ffff888103663900 [ 690.381503][ C0] RBP: ffffc900000073c8 R08: 0000000000000000 R09: ffff88818c5cddc0 [ 690.381513][ C0] R10: 0000000000000000 R11: ffffffff84e2fdf0 R12: 0200000000000000 [ 690.381523][ C0] R13: 0000000000000300 R14: dffffc0000000000 R15: 00000000000002ff [ 690.381534][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 690.381547][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.381559][ C0] CR2: 00007f3c718e0020 CR3: 000000010bb2c000 CR4: 00000000003526b0 [ 690.381575][ C0] Call Trace: [ 690.381581][ C0] [ 690.381590][ C0] ipv6_chk_mcast_addr+0x3be/0x3e0 [ 690.381726][ C0] ip6_mc_input+0x257/0x670 [ 690.381747][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 690.381766][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 690.381815][ C0] ip6_rcv_finish+0x360/0x3e0 [ 690.381834][ C0] ipv6_rcv+0xed/0x220 [ 690.381852][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 690.381870][ C0] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 690.381938][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 690.381957][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 690.381981][ C0] netif_receive_skb+0x147/0x7b0 [ 690.382037][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 690.382059][ C0] ? br_flood+0x67e/0x730 [ 690.382081][ C0] br_pass_frame_up+0x126/0x1c0 [ 690.382105][ C0] br_handle_frame_finish+0x12d9/0x1720 [ 690.382132][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 690.382158][ C0] br_handle_frame+0x5a6/0xba0 [ 690.382181][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 690.382205][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 690.382251][ C0] ? dst_release+0xe3/0x240 [ 690.382268][ C0] ? arp_process+0xd81/0x1740 [ 690.382290][ C0] ? qdisc_run_end+0x120/0x120 [ 690.382312][ C0] ? __cfi_arp_process+0x10/0x10 [ 690.382330][ C0] ? NF_HOOK+0x157/0x1b0 [ 690.382348][ C0] ? __cfi_arp_process+0x10/0x10 [ 690.382367][ C0] ? arp_xmit+0x1f0/0x1f0 [ 690.382384][ C0] ? __cfi_arp_process+0x10/0x10 [ 690.382403][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 690.382423][ C0] process_backlog+0x3e5/0xae0 [ 690.382447][ C0] __napi_poll+0xd3/0x610 [ 690.382468][ C0] net_rx_action+0x584/0xce0 [ 690.382492][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 690.382513][ C0] ? sched_clock+0x44/0x60 [ 690.382535][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 690.382608][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 690.382628][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 690.382680][ C0] handle_softirqs+0x1ab/0x630 [ 690.382698][ C0] __do_softirq+0xf/0x16 [ 690.382747][ C0] do_softirq+0xa6/0x100 [ 690.382772][ C0] [ 690.382779][ C0] [ 690.382786][ C0] ? __cfi_do_softirq+0x10/0x10 [ 690.382811][ C0] ? dst_destroy+0x37d/0x460 [ 690.382828][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 690.382845][ C0] __local_bh_enable_ip+0x74/0x80 [ 690.382870][ C0] rcu_do_batch+0x5c6/0xd20 [ 690.382895][ C0] ? rcu_core+0xd20/0xd20 [ 690.382917][ C0] ? __kasan_check_write+0x18/0x20 [ 690.382942][ C0] ? _raw_spin_lock+0x8c/0x120 [ 690.382959][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 690.382976][ C0] ? __kasan_check_read+0x15/0x20 [ 690.382995][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 690.383034][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 690.383054][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 690.383073][ C0] ? __kasan_check_write+0x18/0x20 [ 690.383092][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 690.383109][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 690.383126][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 690.383143][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 690.383157][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 690.383171][ C0] ? __kasan_check_read+0x15/0x20 [ 690.383190][ C0] ? __kthread_parkme+0x138/0x180 [ 690.383203][ C0] ? schedule+0xc6/0x240 [ 690.383221][ C0] kthread+0x2ca/0x370 [ 690.383235][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 690.383253][ C0] ? __cfi_kthread+0x10/0x10 [ 690.383267][ C0] ret_from_fork+0x67/0xa0 [ 690.383285][ C0] ? __cfi_kthread+0x10/0x10 [ 690.383299][ C0] ret_from_fork_asm+0x1a/0x30 [ 690.383320][ C0] [ 691.183167][T15573] CPU: 1 UID: 0 PID: 15573 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 691.183202][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 691.183215][T15573] Call Trace: [ 691.183221][T15573] [ 691.183230][T15573] __dump_stack+0x21/0x30 [ 691.183261][T15573] dump_stack_lvl+0x10c/0x190 [ 691.183284][T15573] ? __cfi_dump_stack_lvl+0x10/0x10 [ 691.183316][T15573] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 691.183342][T15573] dump_stack+0x19/0x20 [ 691.183365][T15573] warn_alloc+0x1bc/0x2a0 [ 691.183492][T15573] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 691.183512][T15573] ? __cfi_warn_alloc+0x10/0x10 [ 691.183535][T15573] ? __get_vm_area_node+0x1dc/0x3a0 [ 691.183559][T15573] ? kcov_ioctl+0x5d/0x5c0 [ 691.183585][T15573] __vmalloc_node_range_noprof+0x68e/0x1420 [ 691.183614][T15573] ? locks_remove_posix+0x38b/0x580 [ 691.183672][T15573] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 691.183696][T15573] ? expand_files+0xd7/0x710 [ 691.183757][T15573] vmalloc_user_noprof+0x77/0x90 [ 691.183781][T15573] ? kcov_ioctl+0x5d/0x5c0 [ 691.183803][T15573] kcov_ioctl+0x5d/0x5c0 [ 691.183826][T15573] ? bpf_lsm_file_ioctl+0xd/0x20 [ 691.183903][T15573] ? security_file_ioctl+0x34/0xd0 [ 691.183993][T15573] ? __cfi_kcov_ioctl+0x10/0x10 [ 691.184016][T15573] __se_sys_ioctl+0x135/0x1b0 [ 691.184081][T15573] __x64_sys_ioctl+0x7f/0xa0 [ 691.184101][T15573] x64_sys_call+0x1878/0x2ee0 [ 691.184126][T15573] do_syscall_64+0x58/0xf0 [ 691.184149][T15573] ? clear_bhb_loop+0x50/0xa0 [ 691.184171][T15573] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 691.184189][T15573] RIP: 0033:0x7faac6b8ebcb [ 691.184207][T15573] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 691.184225][T15573] RSP: 002b:00007ffe32448d60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.184247][T15573] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007faac6b8ebcb [ 691.184262][T15573] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 691.184275][T15573] RBP: 00007faac6de64e8 R08: 00000000000000da R09: 0000000000000000 [ 691.184288][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.184300][T15573] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 691.184323][T15573] [ 691.184337][T15573] Mem-Info: [ 692.162879][T15573] active_anon:6982 inactive_anon:25 isolated_anon:0 [ 692.162879][T15573] active_file:7595 inactive_file:14724 isolated_file:0 [ 692.162879][T15573] unevictable:16394 dirty:9 writeback:0 [ 692.162879][T15573] slab_reclaimable:3788 slab_unreclaimable:381424 [ 692.162879][T15573] mapped:16022 shmem:3032 pagetables:446 [ 692.162879][T15573] sec_pagetables:0 bounce:0 [ 692.162879][T15573] kernel_misc_reclaimable:0 [ 692.162879][T15573] free:1212609 free_pcp:4467 free_cma:0 [ 692.922891][T15573] Node 0 active_anon:26632kB inactive_anon:100kB active_file:30288kB inactive_file:50724kB unevictable:65576kB isolated(anon):0kB isolated(file):0kB mapped:61308kB dirty:36kB writeback:0kB shmem:12128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7652kB pagetables:1656kB sec_pagetables:0kB all_unreclaimable? no [ 693.132130][T15573] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:13788kB local_pcp:7072kB free_cma:0kB [ 693.181530][ C1] net_ratelimit: 134576 callbacks suppressed [ 693.181551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.181568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.187627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.199568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.211441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.223566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.235368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.247383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.259253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.271274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.243985][T15573] lowmem_reserve[]: 0 3921 3921 [ 694.248906][T15573] Normal free:1952236kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26632kB inactive_anon:100kB active_file:30288kB inactive_file:50724kB unevictable:65576kB writepending:36kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1940kB local_pcp:1416kB free_cma:0kB [ 697.593112][T15573] lowmem_reserve[]: 0 0 0 [ 697.597504][T15573] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 698.191530][ C0] net_ratelimit: 166891 callbacks suppressed [ 698.191552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.191557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.191618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.197659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.209542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.221536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.233371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.245391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.257272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.269129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:5b:34:0e:e7:51, vlan:0)