last executing test programs: 5m0.084289857s ago: executing program 3 (id=433): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r0, &(0x7f0000000040)=""/36, 0x24) getdents64(r0, 0xfffffffffffffffe, 0x64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149004006040800", 0x58}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) r8 = socket(0x1d, 0x3, 0x5) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x4f, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e61aa0a5dc9acf9faa546bc64a135ae84f667c8275177d2f704ae4"], 0x24}}, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0xc, &(0x7f0000002300)=ANY=[@ANYBLOB="0800000452c8a5011af440d3"]) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, 0x24) r11 = gettid() rt_tgsigqueueinfo(r11, r11, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat6\x00') read$FUSE(r12, &(0x7f0000000240)={0x2020}, 0xffffffffffffff7b) 4m57.088262295s ago: executing program 3 (id=494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2802) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x6, {0x6, 0xa, "ddd9c977"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2802) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x6, {0x6, 0xa, "ddd9c977"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 4m55.903814148s ago: executing program 3 (id=517): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x78eb34fd3bd735d, 0x4010, r1, 0x100000000) (async, rerun: 64) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f00000003c0)=@ethtool_wolinfo={0x5, 0xaaf, 0x7, "a0eb5784910f"}}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) r4 = userfaultfd(0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000300)=""/179, &(0x7f00000001c0)=0xb3) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000461000/0x3000)=nil, 0x3000}, 0xce9423071d8387d4}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) mount$overlay(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0xd8ff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x80a0000, 0x2000, &(0x7f00004e4000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="0b036c0372ed199b6f0c15ecbd", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x4, r9}, 0x14) 4m55.8181295s ago: executing program 3 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x3) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010100}, 0x184, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000180)='lo\x00', 0x0, 0x0, 0x7ff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x10, 0x8001, {0x50, 0x200, 0x40, {0x4, 0x6}, {0x2, 0xb}, @cond=[{0x400, 0xb0cc, 0x3, 0xb, 0x2, 0x6}, {0x400, 0x3, 0x800, 0x6, 0x52d, 0x1}]}, {0x52, 0x2, 0x1, {0x5, 0x6}, {0x5, 0x6}, @period={0x5b, 0x7, 0x7fff, 0xc, 0x10, {0x8f, 0xfcbd, 0x4, 0x9}, 0x0, 0x0}}}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 4m55.741771932s ago: executing program 3 (id=520): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x4c44c2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) exit(0x3) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x9, 0x8804}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200) r5 = syz_open_dev$usbfs(&(0x7f0000000400), 0xab85, 0x70d042) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f0000000200)={0x0, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) exit(0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000041c0)={0x2020}, 0x2020) 4m55.634501973s ago: executing program 3 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000300)=@req3={0x40, 0x7, 0x7f, 0x7, 0x9, 0x10000, 0x7}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x6, {{0xa, 0x4e22, 0xa, @loopback, 0x7fff}}, {{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}}, 0x108) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/92, 0x5c, 0x0, 0x34}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000300)=@req3={0x40, 0x7, 0x7f, 0x7, 0x9, 0x10000, 0x7}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) write(r1, &(0x7f0000000200)="89", 0xffe3) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x6, {{0xa, 0x4e22, 0xa, @loopback, 0x7fff}}, {{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}}, 0x108) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/92, 0x5c, 0x0, 0x34}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) (async) 4m55.605190054s ago: executing program 32 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000300)=@req3={0x40, 0x7, 0x7f, 0x7, 0x9, 0x10000, 0x7}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x6, {{0xa, 0x4e22, 0xa, @loopback, 0x7fff}}, {{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}}, 0x108) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/92, 0x5c, 0x0, 0x34}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000300)=@req3={0x40, 0x7, 0x7f, 0x7, 0x9, 0x10000, 0x7}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) write(r1, &(0x7f0000000200)="89", 0xffe3) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x6, {{0xa, 0x4e22, 0xa, @loopback, 0x7fff}}, {{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}}, 0x108) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/92, 0x5c, 0x0, 0x34}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) (async) 2m57.303082996s ago: executing program 1 (id=2562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005e0001"], 0x18}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000091}, 0x20000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/241, 0xf1, 0x0, 0xe}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x0, 0x100106, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x7a71a92d821dbfb7, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xdfa0, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x0, 0x5a, 0x5, 0x0}, {0x1, 0x0, 0x8, 0x0}]}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x12, r6, 0x918f0000) close_range(r0, 0xffffffffffffffff, 0x0) 2m57.302356486s ago: executing program 1 (id=2563): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) readlink(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x8004, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff2, 0x1, 0x7e, 0x2, 0x3, 0x7f, 0x2, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xfffff807, 0x0, 0x5, 0x48, 0x0, 0x2ab, 0x4, 0x5, 0x4, 0x3c5b, 0x7fff, 0xa, 0x9, 0x1, 0x4, 0x7, 0xe661, 0x7fff, 0x66, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0xfffffffe, 0x71, 0x1, 0x7, 0x3, 0xe, 0x5, 0x4, 0x8f, 0x6, 0x6, 0x3, 0x80092aa, 0x4, 0x1, 0x30000000, 0x80, 0x1, 0x7, 0x6, 0x8, 0x800004, 0x1, 0x40], [0x4, 0xffff, 0x12b, 0x6, 0x10, 0x8, 0x4f6, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x40, 0xfffffffc, 0x3, 0x7a35e85d, 0x7, 0x5, 0x2f, 0xe, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8cd, 0x5f31, 0x4, 0x900000, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x5, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400005], [0x6, 0x3, 0x80000400, 0xf79, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x400, 0x800001, 0xb, 0x5, 0x5, 0x1005, 0x0, 0x3, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x6, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x6, 0x38, 0x800003, 0x440, 0x80, 0x3, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0x3f, 0x10001, 0xba9, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x1, 0x6, 0x1d, 0x7, 0x3, 0x6, 0xaaed, 0x6, 0xff], [0x81, 0xbb31, 0x203, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x81, 0x1ff, 0x3, 0x7, 0x71, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0xc, 0x2, 0x1, 0x2, 0x14c, 0x100009, 0x6, 0x4, 0xffffffff, 0x80000000, 0x6, 0x8, 0xc6, 0xee1, 0x0, 0xffff, 0x3, 0x40000004, 0x100, 0x20009602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x400, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x7, 0x800, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd0) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (rerun: 32) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x4000, 0x800, 0x0, 0x3}, 0x20) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001a80)={'IDLETIMER\x00'}, &(0x7f0000001ac0)=0x1e) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 2m57.301237786s ago: executing program 1 (id=2564): ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x800001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[], 0x20}], 0x1, 0x0, 0x0, 0x8080}, 0x840) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2006}, 0x1c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x41, 0x1, {0xa, 0x2e, 0x5, 0xa, 0x7, 0xfe3, 0x0, 0x151}}) syz_open_dev$loop(&(0x7f0000000140), 0x93a, 0x580) close_range(r3, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mprotect(&(0x7f00006cd000/0x3000)=nil, 0x3000, 0x93d9c6c741670c01) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0xffffb000) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(0xffffffffffffffff, 0xfffffffc) connect$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x402}}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1007, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000140)='./file0\x00', 0x4) 2m57.299090286s ago: executing program 1 (id=2566): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) tkill(r1, 0x12) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x7, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 2m57.265694987s ago: executing program 1 (id=2569): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/xfrm_stat\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0x2, 0x0, 0x6, 0x2, 0x3}, 0x3, 0x0, 0xfff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x448c4) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x28802}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x403, &(0x7f0000000440)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f747970653d002c726f6f74636f6e746578743d73746166665f752c736d61636b6673726f6f743d6d6f756e7469ee666f002c00"]) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) keyctl$revoke(0x3, r3) keyctl$read(0xb, r3, 0x0, 0x0) keyctl$set_timeout(0xf, r3, 0xfffffffffffffc00) sendfile(r1, r0, 0x0, 0x80000000) 2m57.1308907s ago: executing program 1 (id=2576): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000340)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000000c0)={0xc0000008}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, &(0x7f0000001740)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x40800) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000300)=0x76e) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) r6 = getpid() ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/140) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x12, 0x800, 0x70bd2c, 0x25dfdbfe, {0x1d}, [@nested={0xa9, 0xdc, 0x0, 0x1, [@nested={0x4, 0x3d}, @generic="dd1f13c1ea1e06687e6089d1f1a39f140f69316bc8acdd09c07c0c5aa032a6843d850fc4d6b649c4c675cc152ae366873cad03fee84bcfa90e3c2e5ab217bf178b8d3adf9d8d4d8e7e93aa97819661f5567faecacfe8231f7d641fab5854f13326af9080009cb5c9d49d3338762cefef20e236d756cd11a5ca85e5a64d11bf73cea0394f803df483daa360ff6784e6a4ec", @nested={0x4, 0x83}, @nested={0x4, 0x44}, @typed={0x8, 0xe9, 0x0, 0x0, @pid=r6}]}, @typed={0xc, 0x5d, 0x0, 0x0, @u64}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0xe}, @typed={0x6, 0x6e, 0x0, 0x0, @str='\'\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x80) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m57.09444192s ago: executing program 33 (id=2576): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000340)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000000c0)={0xc0000008}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, &(0x7f0000001740)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x40800) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000300)=0x76e) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) r6 = getpid() ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/140) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x12, 0x800, 0x70bd2c, 0x25dfdbfe, {0x1d}, [@nested={0xa9, 0xdc, 0x0, 0x1, [@nested={0x4, 0x3d}, @generic="dd1f13c1ea1e06687e6089d1f1a39f140f69316bc8acdd09c07c0c5aa032a6843d850fc4d6b649c4c675cc152ae366873cad03fee84bcfa90e3c2e5ab217bf178b8d3adf9d8d4d8e7e93aa97819661f5567faecacfe8231f7d641fab5854f13326af9080009cb5c9d49d3338762cefef20e236d756cd11a5ca85e5a64d11bf73cea0394f803df483daa360ff6784e6a4ec", @nested={0x4, 0x83}, @nested={0x4, 0x44}, @typed={0x8, 0xe9, 0x0, 0x0, @pid=r6}]}, @typed={0xc, 0x5d, 0x0, 0x0, @u64}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0xe}, @typed={0x6, 0x6e, 0x0, 0x0, @str='\'\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x80) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m52.590705408s ago: executing program 5 (id=2676): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) socket(0x10, 0x3, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="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", 0x2d2}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d54b6f86f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a284d5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f", 0x1e6}, {&(0x7f0000000600)="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", 0x1b1}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) splice(r4, 0x0, r2, 0x0, 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7fa962bfffff, 0x13012, r7, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) close_range(r5, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f00000001c0)=[{0x4, 0x4, 0x2}, {0xffff, 0x4, 0x81}, {0x7, 0x81, 0x7f, 0x10001}, {0xff74, 0x4, 0x1, 0x8}, {0x3, 0xac, 0x30, 0x8}, {0xfff, 0x34, 0x6, 0xb0}, {0xd, 0x0, 0x0, 0x7000}, {0x4, 0x6, 0x4, 0x5}, {0x1, 0x0, 0x5, 0x9}, {0x9, 0xd0, 0x87, 0x1}]}) 2m51.764974323s ago: executing program 5 (id=2699): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) r5 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) close_range(r0, 0xffffffffffffffff, 0x0) 2m51.750552004s ago: executing program 5 (id=2700): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000002c00)={0x0, 0xea60}, 0x10) recvfrom(r0, &(0x7f0000002cc0)=""/105, 0x69, 0x10000, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = epoll_create(0xa880) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x10}) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000002c00)={0x0, 0xea60}, 0x10) (async) recvfrom(r0, &(0x7f0000002cc0)=""/105, 0x69, 0x10000, 0x0, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) (async) epoll_create(0xa880) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x10}) (async) 2m51.615937177s ago: executing program 5 (id=2701): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000340)=0x80000001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000140)={0x4, &(0x7f0000000380)=[{@none}, {@none}, {@none}, {@fixed}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1100000, &(0x7f0000000100)={[{@index_on}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) 2m51.556064508s ago: executing program 5 (id=2702): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x26) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x103003, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x26) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x103003, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) 2m51.533462868s ago: executing program 5 (id=2703): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) r2 = socket$unix(0x1, 0x2, 0x0) flistxattr(r2, &(0x7f0000000000)=""/36, 0x24) (async) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m51.484501839s ago: executing program 34 (id=2703): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) r2 = socket$unix(0x1, 0x2, 0x0) flistxattr(r2, &(0x7f0000000000)=""/36, 0x24) (async) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m18.47221171s ago: executing program 0 (id=3224): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x4, 0x80000, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 2m18.415789181s ago: executing program 0 (id=3225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xa4, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x26}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x9286f9ce86a82d0b}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/6, 0x6, 0x1, 0x8000000000000e}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) accept4$vsock_stream(r4, &(0x7f0000000380)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001e80)={'ip6tnl0\x00', &(0x7f0000001e00)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0x6, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x0, 0x4dd}}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x3, 0x5, 0x6, 0x1, 0x1, 0xf, 0x7d, 0x7, 0x9, 0x1, 0x3, 0x1ff, 0x38, 0x3, 0x5e9d, 0x4], 0x3000, 0x128000}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) 2m18.411326431s ago: executing program 0 (id=3226): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U-', 0xfff0000}, 0x16, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x3, 0xf4, "3db4306e32fc12a312726c06b69ea5a09c7ea3c7b45a630a1d9464df2e0f2f948ad02a6bdfdbab23fd97c27ac7eb8d685661a334a52df43e3348a307228770d05a57583f32fdadac2363776069c46e16693abc0dcc6287a1da11b2225ef38a225df3c2bcda0ff581e43ab4469f13bf61bd68c5aa532f3f3252afef73b1f5f1c7d581d07542d6d4daa20fd48cd81971f22e865bc06d119c9dada6ec8c7f76f52b81a2f52e1248cbe670cf10cb23e6bc7b6ab43315efcf43ae98b17e739ab72f2ff2ba4f06a1b9cf1698b77c5ef1f670b908a80eb0fcef58bef498979540b33df6c51e44885e013fb972e9cc455beb06aa87475cbb"}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x0, 0x4, 0xf7, 0x7, 0x3, 0x6}, @x25={0x0, 0x39, 0x1, "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"}}, 0x100d) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000001200)) sync_file_range(r0, 0xf1, 0x5, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000001240)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000001280)) read$ptp(r0, &(0x7f00000012c0)=""/59, 0x3b) read$FUSE(r0, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r3, &(0x7f0000003340)={0xde, 0x6, 0x3, 0x9, 0x557, 0x6af, 0x6, 0x1, 0x1442}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000033c0)={0x2, 0x3ff}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000003400), 0x4000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000003440)={r4, 0x7b5993d2, 0x1, 0x9}) r6 = socket$netlink(0x10, 0x3, 0x5) sendto$inet(r5, &(0x7f0000003480), 0x0, 0x10, &(0x7f00000034c0)={0x2, 0x4e24, @local}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000003500), 0x2) r7 = syz_create_resource$binfmt(&(0x7f0000003540)='./file0\x00') execveat$binfmt(r5, r7, &(0x7f00000035c0)={[&(0x7f0000003580)='%$*\\\x00']}, &(0x7f0000003780)={[&(0x7f0000003600)='U-', &(0x7f0000003640)='$]\x00', &(0x7f0000003680)='/dev/ashmem\x00', &(0x7f00000036c0)='trusted.overlay.nlink\x00', &(0x7f0000003700)='+\x00', &(0x7f0000003740)='U-']}, 0x1000) write$FUSE_GETXATTR(r5, &(0x7f00000037c0)={0x18, 0xfffffffffffffff5, r2, {0x7f}}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x10100140}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x46}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000844) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000003900)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0), r6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000003e00)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a00)={0x390, r8, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1f8, 0x2, 0x8, 0x9, 0xc00, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x54, 0x24, 0x6, 0x2, 0xb, 0x60, 0x48, 0xb7378beb848f12f8, 0x5, 0x5, 0x3, 0x6, 0x48, 0x6c, 0x16, 0x6, 0x2, 0x5, 0xb, 0x6c, 0xc, 0x16, 0x36, 0x3, 0x3, 0x2, 0x10, 0x48, 0xc, 0x30, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1, 0x6, 0x7, 0x7, 0x81, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9e, 0x7, 0x100, 0x9, 0x800, 0x9, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x3, 0x55, 0x0, 0x2, 0x5, 0x2a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x0, 0xffff, 0x8, 0x8, 0xa7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1}, {}, {0x4, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x7}, {0x5, 0x4}, {0x5}, {0x1, 0x3}, {0x6, 0xa}, {0x5, 0x8}, {0x2, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x4}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x4, 0x12, 0x4, 0x30, 0x6, 0x6c, 0x9, 0x12, 0x18, 0x1, 0x16]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x16, 0x12, 0xc, 0x48, 0x30, 0x48, 0xc, 0x24, 0x6, 0x1, 0x4, 0x9, 0x36, 0x12, 0x18, 0x2, 0x2, 0x1, 0x1b, 0x5a, 0x1, 0x1, 0x1b, 0x6, 0x30]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x8}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x7, 0x8}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x8}, {0x6, 0x5}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x5}, {0x6, 0x7}, {0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4}, {0x6, 0x3}, {0x5, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {0x3, 0xa}, {0x6, 0xa}, {0x7, 0x6}, {0x4, 0x8}, {0x6}, {0x1, 0x9}, {0x4, 0x9}, {0x6, 0x8}, {0x4, 0x4}, {0x1}, {0x6, 0x9}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xb, 0x9, 0x9, 0xcc, 0x6, 0x2, 0xded]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x6, 0x8dab, 0xd, 0x7f, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xfffc, 0x3, 0x0, 0x8, 0x6, 0x27]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x5, 0x9}, {}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xfffe, 0x6, 0x53, 0x3, 0xfffe, 0x1290]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x9, 0x10, 0xfff, 0x0, 0x7, 0x6]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x2]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x7}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x2}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x2}, {0x3, 0x4}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x5}, {0x6, 0x1}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x1b, 0x1]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x9, 0x12, 0x16, 0x6c, 0xc, 0x67, 0x4, 0x6c]}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x1, 0x1, 0xb, 0x66f1f992a9bf048d, 0xf]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x10, 0xf1d, 0x3, 0x80, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x0, 0x0, 0x4, 0x200, 0x0, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x9, 0x9, 0x2, 0x7, 0x401, 0x9ed8]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x3}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x4}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x8}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x2}, {0x5}, {0x2, 0x4}, {0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x5, 0x3, 0x9, 0xfff, 0x7e, 0x9628]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x4d4, 0x8, 0x3, 0x4b2b, 0x8, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x74, 0x9, 0xce, 0xb01, 0x5c]}}]}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x840}, 0x20008040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003fc0)={'syztnl2\x00', &(0x7f0000003e40)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x80000001, 0xa, {{0x55, 0x4, 0x0, 0xc, 0x154, 0x64, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@lsrr={0x83, 0xb, 0xd4, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast]}, @noop, @cipso={0x86, 0x51, 0x7, [{0x2, 0xb, "318dfa1b92578ee59d"}, {0x2, 0x5, "d1d16c"}, {0x7, 0xa, "fd23179b04bf7009"}, {0x1, 0xd, "f0f59383a56ba9ea9ceaf4"}, {0x5, 0x10, "4c75e731ed4e73c63df56641b829"}, {0x5, 0x10, "eb7e78261a48602a7fefae6f5a01"}, {0x5, 0x4, "7ca3"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x3, [{@private=0xa010100, 0x101}]}, @end, @rr={0x7, 0x13, 0xbd, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x21}, @local, @private=0xa010102]}, @cipso={0x86, 0x70, 0x0, [{0x0, 0xb, "2ccd32b29b4f1f008a"}, {0x5, 0x12, "d71e3786c94216d3110b10e9f26f55be"}, {0x0, 0xe, "9f6244ff3ad8d92d2b5c5f88"}, {0x0, 0xa, "a2b671071f6c1089"}, {0x1, 0xc, "69d501d87ea2e01ec2fb"}, {0x0, 0x7, "8f5dcdd18a"}, {0x1, 0xa, "bc17d572467ad034"}, {0x1, 0x10, "b47c00a20a305706e52462abcc00"}, {0x1, 0x8, "460246dde30a"}]}, @timestamp_addr={0x44, 0x4c, 0xe, 0x1, 0xc, [{@loopback, 0x81}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x7fffffff}, {@remote, 0x3}, {@private=0xa010100, 0x5}, {@remote, 0x8}, {@multicast2, 0x1f14ea5c}, {@remote, 0xf}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004080)={'syztnl0\x00', &(0x7f0000004000)={'syztnl0\x00', r9, 0x29, 0x8, 0xf8, 0x1, 0x2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7820, 0x40, 0xdde, 0x5}}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000004100), r0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x24, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}}, 0x24000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000004200), 0xffffffffffffffff) 2m17.555798718s ago: executing program 0 (id=3232): r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0x1, 0x70bd29, 0x25cfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r2) ioctl$TCSBRK(r0, 0x5409, 0x1000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x401) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000050000000000000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000020000000403"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000002100010028bd7000ffdb2ac0cb04a921b95beadd6653d6077ad5df25fc0200000000000000000000000000006401010200"/77, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040008000000000050001100fc0100000000000000000000000000007f000001000000000000000000000000e0000002000000000000000000000000ac1414150000000000000000000000003c0400000200000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) r6 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x12, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m17.546008858s ago: executing program 0 (id=3234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x21) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r7, 0x1, 0x13, r6, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r7, 0x100000c, 0x4000012, r8, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b070b, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x814) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r2, 0x0) ioctl$HIDIOCGRDESC(r10, 0x90044802, &(0x7f0000000440)={0x8cf, "68baf99d578834a7f57b723bdc2343d205ae710c3f9d2c3b33a7502ce9f3f7fb66f79f5e03abec53002206551f6795c7a2433065a4ef6efbb1bbe2f12d2eed8443c68d20be7fef28f01f1aa4dafdbb29ede95122eedb9520094ae6e290d43c445fe4c7bb646e6d4f3c0ef6c5b7a503e3d4e363302167bbea0309872e158b5b78cb004172b03106ae19d31b9e47acc0ffcab71718c20e039fbc1a48627b68c925e9e8f6314fe674e8ce9152849412796671cb3c74b0ec11014f3ffd160da1df865f5c291f856f69b15427bf4a26843ce1a7bb4b1970a1af991c12fcfba0f125f477940abd851d0d9588fa0956664957979e4d5fe2aea3f0ab8b053403c65df3bfc09e54d6a218fd483e0fb6455633301823dd1965c3941b4959cbf1490ad37d6a5b287a5de713fa51a2ae4819b6bd8273b988b3b2fa84a8b6c30e6f5a1d1187f7a652299490665123ad301016ab4b9b4e6bc1188794b17ecdc955272b60350319182b411e73c3a8337f77630b24a7f7707dacf9205ddfd8784c135093fbd7da7fc8dc308eb3d376dc8af505fe0e88d4cb9813f4e17341dfade26c6f49af9c6e82789539d2174f4f0f9bbd29ba4d6e45385ebaa30dc03f24401f7babd121a7aab00c4423c3fa7ff34ed707f7f9b8e806bb623cdbbd9f90736b3834b83b4849af3432b95e8abad806942539241b71f9c0296c1282befacded5ebbcf24e2051db6f0f7c5e0b3d5212dff50abfcb98f30cfac8f4c5350ee715f42d7bf619d29b0c51dc6134ed76beec260565821a1191d4700c4b0baf274a6d0b8d983784af8ddf0807adcdba334256beb331e9f45647838324e6393a3a469cbc7f9d7291ff07f2e0408655e6f0fc85974483b90044ea40808c8893781bba0fedcdbd0a44dff1ca25d681d0bfdcb4a33d89b526870fa919e7cc3f842d57d22cf27986de7322dfb0d18912633b361626ad0cdfd104a476ac65c6bcab727adac6f5959829fba8f89b2a41d2675087c2e8e614f15416376258b7f936f75442ab56af6585e360c851461d2bca4ae8ceea63e8c3e53d2ffe709497aeb49d22199be78c3af6e9c9f833b1ea9116344d1a46fb5bcef0e54b8f57e8428bc343a919fe7227c3e4dc2095b6fb62e09b96cd9bf5823b46a960a872266916dd9122cbf791b87df725253c1933f12be95cf6d3f10813b59b3e3dade934f748fcddabe894625d0f7f1682266a25838f9d1a33936bca2b109d7b01c8052219852e221ca21032b12b3403a849ad7cc0f633043e71f94b6f2a18a23e95b0a818f5be51ccf06817401f7e70aad8681828844cfed8cd33bce457d57a983927ec94979d9a9adc864e02f3325f428707f4a83de87ade82beb56e0efd0bd8dc46186fa30511746d3e854a6da749fa83d3a51a4535cc3fe2818a192f4ec5e5d459559e0fae5b08522cece5321f9ae9d829c568bc10f251ce970e8cd1380d828e90ec8747d63b5700410c9b0d4379bdf7660a02f906ddff734109236fa8435477bf2622b196ae4770c6933c45be823d153d1d29bc426379ce7977fafad18976dc5ba53687fd0178d680dfddff728d7c6e0fc4a406c54ae8d94ab742421a2ed22b1967204c84624f428a81be588c9384e4630183f5f6530f93610c68b680b61dc9eb71ecdd414eb355bc5656fcb24036de238fb020a38c1c0042bed5f3516864f11ffb9b4d7a76390313d06963f5481c87412accd52df3819bd91bd54786fb6f8771588534b68bf2ea4cbea32bbbf750a8ce003e4624e5c14121d1b2d412ddd0fa3ced8ce684c9f987b4ae7c82a62d3908a41a27171201963e684399e211e09f8e4ec63b2f78cc74dca96e04127962092b772c06c91a3d8bded329f2affea79ff569beb1fc200e22422e97a898e58bb42cc8f5434e7be197166b2a7c002afbb23b95c1a4d870df95935a50f425e1bb537f000d9fc7ae214e832d8c2bacf067d8fbb5e8072fca08e3f2d7bcef1626e64f77e214da10d81b2fdb481cccf4f1fd3c071adc285187191ef725298a5feba5f226fddcadd62a3812b45dc01be22aefee20131ad8bd0e4f74b072afce4509d38edf16a37b2867be0994cd4ee106def71011a96aafeaf74a95a1de8a37094b3f350d04324eb838e4fdec25bbd8bbcdea9d0140d705fca7f1e6295861f13144cda649025571c9d55d972d44a90641fd3e5660e538b1b4b1bcee1c8c6b46cc315477a782f6f4139a475f2382076cf11e423e4f33e6df0bea8eaaca642d8799e9f92b639a7403f7c86fe0a3cc37c6f75ecb600d7266f4e1997433b403406c9bab14c3dbf0fe8dc5cac2ae2ca1d7223c237439e45b9745760305319f9fb8897f26be5f3f05c8d11dfdb97c350c0b1c87698b6e0eae04c670cf2f8be66e84527b873f02791434986ac500e7987f10145be952724ddc34649ad7931ea3843bcf9e7fa75dede4b7119df7e718cf67b4e1d873ec0ea83646efff8aa70094268b977daa63eb83232d50964e06de06ae3730b7cf58f9208ef10f8ff6fc3aba427ca89afc04c8b08100f7a988b3f228e83e654299b9bec634ada2ec300e50bafdae0cfb9a19c5a78bb21ddfa83348b72851b2ddb790ebe900083bba9f8d219be2252318e87eeb0c4f723d03e1abdfccac26f1aa77cae36841275a88c1b1f7a55248ba6d1487d40417a97e16e32fb2ac079d228e8c4a9312922c1e06824f9f478aa5e9ab9e2c9fb11052606fb39ee404b982688816b6a3c8fdc7b5012c2ffbaadcb49402131da836f3e15332525635e710ea848d77396a984ac90d094a5a9431e9634606073cc1825b7c0c12bc26263c2fbfd8bff648a303d5fbd6db96ebe9e08c56db18cec363e0bd1057c81aba8248a0e380996ae66af66f4b8ee7bf6d0df32028971c5db18ff6fd2cc729b819a0888a6e5ed38aea24dbcb69be05e8fd6464c8b6837f262888d569afd60aaa49a32df9eeb4dbf2ba2b6f023bad151a4de527316f6afe1cfcade01b4ec0649f9d794757cad0f0f385703be3456ed4f5d7d5283e9d5846681e03f5bdb2e13fe658df3c4e589ab7ab7ae8c94cd96e2fd3d14c3f175e5963e2f3e22609964fa84dd173215ee7a707eddc7bd3a7ef6e4afe5e594822312c4271421a3e4cf1bf7d611cc3c7d293bbe2dd732b2a9df8c2ecb6861a39378d862fa23b055b96c88ed7dbe88736191b9f798a41211d19a0e21"}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x201, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000011c0)={0x5c, 0x0, &(0x7f0000003200)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000031c0)={0xfffffffffffffde4, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2m17.447857401s ago: executing program 0 (id=3237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {r2, r3+60000000}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002400070dfeffffff00000000017c000004008e000c0001800600"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) timer_create(0x7, 0x0, &(0x7f0000001400)=0x0) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000200)={0x8, 0x550}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m17.44760372s ago: executing program 35 (id=3237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {r2, r3+60000000}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002400070dfeffffff00000000017c000004008e000c0001800600"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) timer_create(0x7, 0x0, &(0x7f0000001400)=0x0) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000200)={0x8, 0x550}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 53.842577284s ago: executing program 2 (id=5059): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}], 0x1, 0x2000040) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x40000005, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14020000100001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000ffff"], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x5411, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000018c0)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@generic='&']}, 0x14}], 0x1, 0x0, 0x0, 0x4050}, 0x40) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r3, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r10) 53.742435756s ago: executing program 2 (id=5067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x78, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r2}, @enter_looper], 0x54, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) r4 = socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 53.655227178s ago: executing program 2 (id=5069): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000380)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x40000000000002}}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x3, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 53.444428112s ago: executing program 2 (id=5073): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$int_out(r0, 0x7e50, &(0x7f0000000040)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000100)={0x2, 0x200, 0x100, 0x0, 0x4, 0x7f}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x881) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2900, 0x0) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f00000002c0)={0x1, 0x1, 0x8, 0x2, 0x3, 0x0, 0x0, 0x4, 0x585, 0x401, 0x1, 0xe9, 0x6, 0x5}) r5 = getuid() statx(r4, &(0x7f0000000380)='./file0\x00', 0x4000, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200800, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@fscache}, {@cache_readahead}, {@msize={'msize', 0x3d, 0x6}}, {@loose}, {@dfltgid}, {@debug={'debug', 0x3d, 0x3}}], [{@smackfshat={'smackfshat', 0x3d, '-}'}}, {@permit_directio}, {@seclabel}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r6}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\''}}, {@dont_hash}]}}) sendto$inet6(r2, &(0x7f0000000600)="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", 0xfe, 0x40000, &(0x7f0000000700)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) socket$inet6(0xa, 0x6, 0xeb6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000780)) r8 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xe0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x26, {0x9, 0x21, 0x9, 0xf, 0x1, {0x22, 0xd9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x7cf, 0x7f, 0xf0, 0x5}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0xb3, 0x18, 0x5, 0xff, 0x7}, 0x2c, &(0x7f0000000840)={0x5, 0xf, 0x2c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x4, 0x19, 0x3, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0xc, 0x8000}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x9, 0x10, 0x7ff, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xa, 0x9, 0x5}]}, 0x7, [{0x61, &(0x7f0000000880)=@string={0x61, 0x3, "afdb7f1d9371240ed3e722930064b87f2f366f0101f068e00489a8f144030a1fe7f614e4bb7b45065634df218f47b5a87c71467e146fe7fc1b989908c23eddfdecf3d0675f72d46cf9e1759399028a4e39bdb078565ed0f398444bda53d2ed"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x500a}}, {0xc6, &(0x7f0000000a00)=@string={0xc6, 0x3, "1d9c54bbc8b3bcd3222c03689ffaec3a1a3d67072b87132d03777eeb54f895c9a0c30a958a8c64991c88773006da7ba83858ae88cd07e70d78573f562c308aefe3252e5b2eb6f73984007dc15cd05d70c637815fb71ebe36ba9d07e37d5641ef3c40c5975af2e2f18dddfcaf63533482a18c0379098f722be312361915a823241acd3b85371632215276eaa1983c6e268f308b04432d31664c4e23c633257d3cdd0fa998ccacd47e5975972482783d78c6ab66b39734a60bd8e1f6612fcfb94eb048ae49"}}, {0x6c, &(0x7f0000000b00)=@string={0x6c, 0x3, "207e29ab4bcc851b61e5e273a44322012bab791052dbf665eca36bee6c5bbaaf7fd8615b857b26e940b4d2a6666085b6d11924aa49a68b0af6553753f841875036af93364636847959a42d537896bc3eb89957e7069c413db6105efbbc014fb9ca7ce0758b9eb0ff2e58"}}]}) syz_usb_control_io$hid(r8, &(0x7f0000000e00)={0x24, &(0x7f0000000c00)={0xa0, 0x6, 0xe8, {0xe8, 0x33, "772bd3325827ad24170fdc3c1bcb2443be3c8121757d6e8edbcf7fda4bec4d6ffbed85f721961b473b264898cb6677dde216f4993c07a46abe2a22a6e5316b096edd432fc0baaadc5a1bd674cb1810f2925d837392ff5277672b0d54896832f994e0311e91d94c8f166e2c5a9684795b24a420ae516c22be65035353a6b1072a96a3c4000539d4c5feeed11339dfb648625c76e407eeca5cc3ea6a6aa49dc82e0866c5ec91602a3558e33ff62fcda8f6124bb61d8194f23e3616b673b92bac6abe477870ae369886f195bf8b9ef3872d59cce96fa49873a49ea63e6cd5610ef252b60b23087b"}}, &(0x7f0000000d00)={0x0, 0x3, 0x52, @string={0x52, 0x3, "84bd8e18dd3bc259edc113ed58ebe23fc9b70b96ec0feac44f88a95c310d119965b3ef0857d96fc19cd21c3242afa3747658a443554999b82959cd2cf65ce3b78d53a22ca39b2b7875da46c57675f11e"}}, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0xb, "88"}, @global=@item_012={0x2, 0x1, 0x1, "87c4"}]}}, &(0x7f0000000dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4c, 0x5, 0x1, {0x22, 0x65a}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000e40)={0x20, 0x16, 0x22, "0f3d0455395e14d2c62da14dac0d6e1af36112473d81f827029235b99ff5d4ce5dbc"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000f00)={0x20, 0x1, 0xb8, "efabb2547df4f891754286942a5dd820139cda0f74f5198e0117aef75342ded0d27e677765e27a39b89f64a5bcbd9a3dde5d51a187f34c506e0b7755e2b3d5f3d3b0586a1a0bff2bf43dee85b93bf94115195eb20b53ac329ebb6c214e247246d247664141d0829f7d8151637ef3ab2b0105990857ee0e6053302fcf7ee27820c0cb2be085ae2d2869f8cbd523f9452cf6fc5dcf0964e0e83e21a942d90c84cfef0e7769f4f96b86fe14a03bd4104e21df598956128a5a8d"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x5}}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001040)) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r10 = openat$incfs(r9, &(0x7f0000001080)='.log\x00', 0x0, 0x2) sendto$packet(r10, &(0x7f00000010c0)="2ceffd2abca9014c1add747f280a8ef7b1ece96926e22173248590091cf8638c213fa126dc6835cde069a68f3b5f819a431731179f75c4608a4ec2bfb83f29b9fac17ab52d057569d092061d8e2001", 0x4f, 0x4, &(0x7f0000001140)={0x11, 0xf6, r7, 0x1, 0x5b, 0x6, @broadcast}, 0x14) socket$inet6(0xa, 0x6, 0x21a) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000001180)={'veth0\x00', {0x2, 0x0, @initdev}}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) syz_usb_connect$cdc_ncm(0x1, 0x93, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xdf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x2, 0xc0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x8, 0x5e}, {0x6, 0x24, 0x1a, 0xb, 0x22}, [@country_functional={0x6, 0x24, 0x7, 0x23, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xfd, 0x40, 0x4}, @mbim={0xc, 0x24, 0x1b, 0xcc4, 0x1ff, 0xe, 0x2, 0x9c0, 0x9}, @obex={0x5, 0x24, 0x15, 0xa}, @dmm={0x7, 0x24, 0x14, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x41, 0xa, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x6, 0x4}}}}}}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x250, 0x78, 0x4, 0x6, 0x20, 0xf6}, 0x25, &(0x7f00000012c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x6, 0xff00, 0x6, [0x3f00, 0xffc03f, 0xcf, 0x7f80c0, 0x3f3f]}]}, 0x7, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x43f}}, {0x2c, &(0x7f0000001340)=@string={0x2c, 0x3, "e8f8d163ac84315f0ac215fa239a33d084b651b43f19f122431c45dce5775af9ac8fee1a4da9b8d978d5"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x421}}, {0x30, &(0x7f0000001400)=@string={0x30, 0x3, "d6d9e2050862d7d3a1ab73b1c920d6503b095ef2016b17ab9caa98a1194a1a7fae089f8bebb055bb08bbc072a93c"}}, {0x4f, &(0x7f0000001440)=@string={0x4f, 0x3, "4661aa43789bd7a7c76a693554da3ab8386211d2f05e50e72774de0adee1fb07ee90c7272eae9e894abd837522228480ab9ff29bbd9627cdcf5fe44b8eeeec13c40d41638bfa570d83bda8ce48"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x424}}]}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000001700)={&(0x7f0000001580), 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x7a}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9c3e95cedb39378d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24009000}, 0x8000) 51.894495922s ago: executing program 4 (id=5108): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x412101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x802, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x8, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r4) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x412101, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x802, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x8, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socket(0x28, 0x5, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r4) (async) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) (async) 51.889895362s ago: executing program 4 (id=5110): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffc020000000000000000000000000000fe80000000000000000000000000002b000000000000000002000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x1a0, 0x24, 0x7806b7333a42c67, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x2}, {0x7, 0x3}, {0x4, 0xffff}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x7}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x388}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x1a0}}, 0x20000804) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = dup(r5) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x0, 0x0}) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffc020000000000000000000000000000fe80000000000000000000000000002b000000000000000002000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x1a0, 0x24, 0x7806b7333a42c67, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x2}, {0x7, 0x3}, {0x4, 0xffff}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x7}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x388}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x1a0}}, 0x20000804) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) (async) 51.864917423s ago: executing program 4 (id=5112): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x1000c80, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa81404, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) sendmmsg$sock(r0, &(0x7f0000000540)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x80000000, @empty, 0xd2, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)="f201123c0a757a9229c036b21340eebb357c5078b291e5e5f4f59708348e48aad74adb16f229cc9500e6df8c3b82de141d8dcd84199a332bfc55904c76755e9a36a6dabc22378dadf7fe8f94d2c134a0f1a06580c4fb0e59c9466edb4fa221076e380a5ca030f5b458cbc6e9d43853165c9ce8f657b3f25e39b24c73cef49b2cf5009eafad5e0ed61af5f51687280d60bc564026a230f5396f116aee", 0x9c}, {&(0x7f0000000400)="9f84143b698fd4f2a4fdd293a9cea678359ac207f9d500253c6d18c48d06dbdd935e08274403de31ade96c6fba7ca9b7ce69e882c19e9c22019dbeca93e578fff4ab72767c4808564ad2882ccad881d9f9c4e4f0cbbf7f36ffc055c4b0b9195856bd16f643c7a9bacafaccbaa2cfb3ff993674fa5d64393f14ba5c51de49cbcfef7f2368f9962937832109e56cf21b72ea641d62e6e3c91448ba53eb3ebc", 0x9e}, {&(0x7f0000000340)="4615586f16c2bc1c9f167014e5d26684e7d45e48def1506eaf165674d40a0a208fe064efa114218c2c1fc69e47fab480593a0dea3014131f73a45fd748d7db6e26949ec20964b2f0980a215a6e3a753552af6385", 0x54}], 0x3, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}}], 0x1, 0x40001) 51.864640443s ago: executing program 4 (id=5113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) syz_usb_disconnect(r5) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="0fc76d0026660f3829300f06660f3882a366810f380a40a10f01c40f20e06635010000000f22e00f014abc66b9800000c06635010000000f300f01cb", 0x3c}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)=ANY=[@ANYBLOB="240000002c030000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="09000280976b640868000000"], 0x24}], 0x1}, 0xcc000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) 51.799558904s ago: executing program 7 (id=5115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r1, &(0x7f0000000700)="7082d35d1d0d42c323d376486845f5af668f884a951c1a6284398437a1de938e39a53f74a33bc5a9db6cb386014a3ed64542a5a09ffc31c8989c7f4fff7142790ad50fc3fb33f50d17080a1ff93ac26d45bb28dd8056146c9d031c6c349c3e1c19173ad9bef84444188dbae93ac572f8ad81dcce5000e1d11545e427d4ba63bcb29ab07decf2aa706aaba41619f37dd5e00080183b466d68114a01e19659d2721b9f758d7f2ab94a54b866494ee7366c1095f2048ed59687e0", 0xb9, 0x80, &(0x7f00000007c0)={0xa, 0x4e23, 0x9b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x1, 0x8, 0x0, 0x3, {{0x30, 0x4, 0x2, 0x6, 0xc0, 0x64, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x7a]}, @rr={0x7, 0x17, 0x4c, [@remote, @multicast2, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x59, 0x3, 0x7, [{@multicast1, 0x7}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x2c, 0x4e, 0x0, 0x7, [0x0, 0xffff, 0xb, 0x3f91, 0x5, 0x5, 0x0, 0x1, 0x5, 0x0]}, @rr={0x7, 0x7, 0x4d, [@private=0xa010101]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x3, 'P'}, {0x1, 0x7, "7933f05169"}, {0x2, 0xc, "fdaabc6ce2e6af65f5f2"}, {0x2, 0x9, "36562ebd735338"}, {0x2, 0x5, "366391"}, {0x5, 0xc, "4237058c2291f54c8b26"}, {0x6, 0xf, "2062df875019ad9e2b3476a39e"}]}]}}}}}) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r5, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x5, 0x6, 0x19, @private0, @remote, 0x80, 0x7, 0xffff, 0x510}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff8001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xa000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) r8 = socket(0x10, 0x3, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xc2ca70811247cd71, 0x0, {0x7, 0x1f, 0xfffffffe, 0x640184, 0x1, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x8, 0x7}}, 0x50) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002000000090001"], 0x20}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000140), 0x12) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x3667c33d44f34555, 0x21, 0x15, {0x15, 0xe, "2221becfbdfec99f3b63424554ed235b9d4172"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000ce4000000e0e3fd48d8f7c6caa6a318f901aeff75dd16e5bf0d7ff71bab8a777416807a955e225e20db7db4cd4b47d93b95481e112e517033559c9b9c5eb4822d3e44190089ec43c34e87c6c909a1b1909d5e3bae95f23d9e090000000000000037934d6daf1014d45441d340421c4b7ce9e0f7387c547f61213195d67fad245333b39729d7b80015ac423a2f40ad8692b6253e5ae8d548cff85f3f7dc53b1dcc91bc3214d224a4eba85d6d4b85827fcaf35b8f3a16660e25349a24789ecfcb0db9856ec29215c2274a733a24eaafe6a93958904bcf4128f5738ff3eb631de1021814c990caea4ae5"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x9, 0xffff, 0x4, 0x4, 0xd65b, 0x6, 0x0, 0xd, 0x7, 0xd, 0x401, 0xc110}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) sendto$inet(r11, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r11, &(0x7f0000000440)="00103343e899ae6c", 0x8, 0x800, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) 51.791821044s ago: executing program 7 (id=5116): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2000000) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="400101000000f9986c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) r1 = request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='./binderfs\x00', 0xfffffffffffffffe) (rerun: 32) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', r2) (async) keyctl$instantiate(0xc, r1, &(0x7f0000000240)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643ac1292d5b203030303030303030303030303030b0343736393600"], 0x2e, r2) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x40045402) (async, rerun: 32) r4 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x269010000, 0xffffffffffffffff}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) 51.391878562s ago: executing program 6 (id=5117): r0 = socket$unix(0x1, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x6ea75f99, 0x97d, &(0x7f0000000000)="28d1d11922b562b70c5163d46cc803c497e095f7c56fbc", &(0x7f0000000480)="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", 0x17, 0x1000}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x15, "f42a637b0000dda5b89a02db8deea00b06ee73e9da"}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x1, @multicast}, 0x0, {0x2, 0x4e21, @loopback}, 'batadv_slave_0\x00'}) mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='btrfs\x00', 0x121c00, 0x0) 51.255921414s ago: executing program 7 (id=5118): r0 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x20, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0xc, 0x7, '\x00', 0xd}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0xc, 0x7, '\x00', 0xd}) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r1, 0x3ed04000) 51.255417855s ago: executing program 7 (id=5119): execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000100)=0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x4, 0x1, 0x80000c}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 51.254872494s ago: executing program 7 (id=5120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0x0, 0x80000001}, {0x1, 0x0, 0x7}, {0x807, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x5, 0x0, 0x20000000000000}, {0x3, 0x0, 0x4}, {0x8402, 0x0, 0x4}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x8}, {0xfe, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x74}, {0x8, 0x0, 0x6}, {0x2, 0x0, 0x8}, {0x43, 0x0, 0x4}, {0x7761, 0x0, 0x3}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0xe8, 0xe8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@broadcast, @local, 0x0, 0xff000001, 0xa, 0xe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8002, 0x3, 0x401, 0x79f, 0x0, 0x1000, 'syz_tun\x00', 'nr0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @private}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @empty, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x49, 0x0, &(0x7f0000000180)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [], {}, [{}], {0x10, 0x2}}, 0x2c, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x7f}}}}}]}}]}}, 0x0) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r10, r10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000340)='rxrpc\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r9}) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r11, &(0x7f0000000080)='id_legacy\x00', 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)="335c1991a23af40508e9c2", 0xb, r11) keyctl$KEYCTL_MOVE(0x1e, r10, 0xffffffffffffffff, r11, 0x0) syz_usb_control_io(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@rnullb, 0x0, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) syz_usb_control_io(r8, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x25, 0x2c, {0x2c, 0x6, "ab02bfcee8914c8bd3a8995189b3426e800d9ec1c42ef303a1cd11ce7f22dc3ee2457db67fc3e026c671"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000040)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, &(0x7f0000000100)=0x1) 51.228172056s ago: executing program 6 (id=5121): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000845000/0x4000)=nil, &(0x7f0000137000/0xa000)=nil, 0x4000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x7e, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0b"}) 51.169520886s ago: executing program 6 (id=5122): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r1, 0x5147f000) ioperm(0x9, 0x7ff, 0x100000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) setuid(0xee00) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffff9, 0x1}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000380)=0x6, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250100000000000000024100000010001369623a746758e9756e6c3000"], 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x8080) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x74) r6 = signalfd4(r3, &(0x7f0000000a00)={[0x40000008001]}, 0x8, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x2020) setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=0x4, 0x8, 0x2) statx(r7, &(0x7f0000000240)='./cgroup\x00', 0x400, 0x200, &(0x7f0000000280)) 48.972722109s ago: executing program 4 (id=5123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff01"], 0x2c}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000a2a000/0x2000)=nil, 0x2000, 0x100000a, 0x110, r0, 0x329f000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r5, r4, 0x0, 0x4) r6 = fcntl$dupfd(r1, 0x0, r1) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f00000000c0)={0x4, 0x0, 0x0}) ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) write(r0, &(0x7f0000000400)="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", 0x1f000) 48.813243832s ago: executing program 7 (id=5124): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x1, 0xffffffc, 0x100000, {{}, {}, {0x4, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x9004) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) unshare(0x2a060400) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000ec0)={0x2020}, 0x2020) 48.730894704s ago: executing program 6 (id=5125): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) tkill(r1, 0x36) (async) tkill(r1, 0x36) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xac, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x0, 0x7}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x7, 0x2, 0x1c}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 45.759148232s ago: executing program 2 (id=5126): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) io_setup(0x1, 0x0) close(0x4) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) listen(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) io_setup(0x1, 0x0) (async) close(0x4) (async) socket$inet(0x2, 0x2, 0x1) (async) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) (async) listen(0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 37.419832543s ago: executing program 4 (id=5127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x105c03, 0x0) readv(r4, &(0x7f0000000480), 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x11, 0x0, &(0x7f0000000040)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000", 0x36, 0x12, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0x12, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x8, 0x9, 0xc55, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000011c0)={0x5c, 0x0, &(0x7f0000003200)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000031c0)={0xfffffffffffffde4, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 37.171397438s ago: executing program 6 (id=5128): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 33.791714884s ago: executing program 2 (id=5129): keyctl$update(0x2, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="5a2c64a9f5417947cdb6401887e362de34c31da962dadfc4b2c60856ac2d2ae2aa6669554ada7d4a0851abce572179ef831624d5bb637bf2d581807346b4a8a63206d95177346177a235b0acbc8de984e5ec012b25be88", 0x57, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r0, 0x63, 0x7e}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e72617720686173683d786362632d6165732d63650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003980c81bc4d9"], &(0x7f00000002c0)="aab4028493c9bca0add62b0be1f38f36cfe216de81ad481ffff527181bd8d9738965d7671224dd8e1fc99ab1c1ba3727faaee72659725ed017d97778828d1d81ac3b7b79e3be06a01f2148dd525a84d3b3f27fec31d2cd5ca0b85393779c367ba2cce3", &(0x7f0000000340)=""/126) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) pselect6(0x40, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 32.509091609s ago: executing program 36 (id=5124): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x1, 0xffffffc, 0x100000, {{}, {}, {0x4, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x9004) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) unshare(0x2a060400) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000ec0)={0x2020}, 0x2020) 28.818632921s ago: executing program 6 (id=5131): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000064010100010000000900003fb9000001e0000002e00000020a010102ac1414aa7f0000017f000001e0000002ac1414aada3205b843d1dd4cc20644e560e187d9043ccd22696d9fe235e1e4c319c981f4cc0e07cfbc7d756d"], 0x34) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x2}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) unshare(0x62040200) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETLINK(r3, 0x400454cc, 0x17) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635000400000f300f300f01cfbaa100b006ee0f4308ba4200b80000ef2ef40f21df640fc7af6fe1660fe84a0d", 0x35}], 0x1, 0x2, &(0x7f0000000200), 0x0) 16.928067052s ago: executing program 37 (id=5127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x105c03, 0x0) readv(r4, &(0x7f0000000480), 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x11, 0x0, &(0x7f0000000040)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000", 0x36, 0x12, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0x12, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x8, 0x9, 0xc55, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000011c0)={0x5c, 0x0, &(0x7f0000003200)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000031c0)={0xfffffffffffffde4, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 8.437676996s ago: executing program 38 (id=5131): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000064010100010000000900003fb9000001e0000002e00000020a010102ac1414aa7f0000017f000001e0000002ac1414aada3205b843d1dd4cc20644e560e187d9043ccd22696d9fe235e1e4c319c981f4cc0e07cfbc7d756d"], 0x34) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x2}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) unshare(0x62040200) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETLINK(r3, 0x400454cc, 0x17) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635000400000f300f300f01cfbaa100b006ee0f4308ba4200b80000ef2ef40f21df640fc7af6fe1660fe84a0d", 0x35}], 0x1, 0x2, &(0x7f0000000200), 0x0) 0s ago: executing program 39 (id=5129): keyctl$update(0x2, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="5a2c64a9f5417947cdb6401887e362de34c31da962dadfc4b2c60856ac2d2ae2aa6669554ada7d4a0851abce572179ef831624d5bb637bf2d581807346b4a8a63206d95177346177a235b0acbc8de984e5ec012b25be88", 0x57, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r0, 0x63, 0x7e}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e72617720686173683d786362632d6165732d63650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003980c81bc4d9"], &(0x7f00000002c0)="aab4028493c9bca0add62b0be1f38f36cfe216de81ad481ffff527181bd8d9738965d7671224dd8e1fc99ab1c1ba3727faaee72659725ed017d97778828d1d81ac3b7b79e3be06a01f2148dd525a84d3b3f27fec31d2cd5ca0b85393779c367ba2cce3", &(0x7f0000000340)=""/126) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) pselect6(0x40, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6158ebe9 code=0x7ffc0000 [ 244.032000][ T36] audit: type=1326 audit(1764300758.021:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.7.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2a6158ebe9 code=0x7ffc0000 [ 244.055832][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.073995][ T31] usb 5-1: USB disconnect, device number 30 [ 244.081338][ T31] usblp0: removed [ 244.688137][T11803] fuseblk: Bad value for 'user_id' [ 244.693403][T11803] fuseblk: Bad value for 'user_id' [ 244.912551][T11819] tipc: Enabling of bearer rejected, failed to enable media [ 244.922740][T11819] overlayfs: failed to clone lowerpath [ 244.957818][ T31] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 245.024355][T11831] overlayfs: failed to clone upperpath [ 245.066011][T11849] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11849 comm=syz.7.3702 [ 245.087782][ T31] usb 5-1: device descriptor read/64, error -71 [ 245.201952][T11876] 9pnet_fd: Insufficient options for proto=fd [ 245.201952][T11875] 9pnet_fd: Insufficient options for proto=fd [ 245.327822][ T31] usb 5-1: device descriptor read/64, error -71 [ 245.541038][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3724'. [ 245.567795][ T31] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 245.697801][ T31] usb 5-1: device descriptor read/64, error -71 [ 245.937850][ T31] usb 5-1: device descriptor read/64, error -71 [ 246.048792][ T31] usb usb5-port1: attempt power cycle [ 246.065651][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3729'. [ 246.387813][ T31] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 246.408879][ T31] usb 5-1: device descriptor read/8, error -71 [ 246.539119][ T31] usb 5-1: device descriptor read/8, error -71 [ 246.571178][T11949] overlayfs: failed to resolve './file1': -2 [ 246.777783][ T31] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 246.798840][ T31] usb 5-1: device descriptor read/8, error -71 [ 246.928849][ T31] usb 5-1: device descriptor read/8, error -71 [ 247.037879][ T31] usb usb5-port1: unable to enumerate USB device [ 247.106290][T11957] fuse: Unknown parameter '18446744073709551615' [ 247.114574][T11957] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3741'. [ 247.123913][T11957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3741'. [ 247.375177][T11965] overlayfs: failed to clone upperpath [ 247.410410][ T36] kauditd_printk_skb: 549 callbacks suppressed [ 247.410428][ T36] audit: type=1326 audit(1764300761.591:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.3746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61f818ebe9 code=0x0 [ 247.875354][T12000] rust_binder: Write failure EINVAL in pid:303 [ 248.279343][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3762'. [ 248.355251][T12028] tmpfs: Bad value for 'size' [ 249.002938][ T36] audit: type=1400 audit(1764300763.181:1268): avc: denied { mount } for pid=12064 comm="syz.4.3780" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 249.287779][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 249.430592][T12088] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.439628][ T31] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 249.448743][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.458018][ T31] usb 5-1: config 0 descriptor?? [ 249.967571][T12113] 9pnet_fd: p9_fd_create_unix (12113): problem connecting socket: ./file0: -111 [ 250.275145][ T31] usb 5-1: Cannot set autoneg [ 250.280338][ T31] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 250.292672][ T31] usb 5-1: USB disconnect, device number 35 [ 250.345794][T12122] overlayfs: failed to resolve './file0': -2 [ 250.543223][T12139] netlink: 'syz.7.3807': attribute type 2 has an invalid length. [ 250.677300][T12147] overlayfs: failed to clone upperpath [ 250.869765][T12151] tipc: Started in network mode [ 250.874674][T12151] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711 [ 250.883907][T12151] tipc: Enabled bearer , priority 10 [ 250.891658][T12151] __vm_enough_memory: pid: 12151, comm: syz.4.3811, bytes: 18014402804453376 not enough memory for the allocation [ 251.137805][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 251.288960][ T31] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.300158][ T31] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.310330][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.316964][ T31] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.326138][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.334890][ T31] usb 5-1: config 0 descriptor?? [ 251.428180][T12167] /dev/loop0: Can't lookup blockdev [ 251.434824][T12167] netlink: 'syz.2.3818': attribute type 13 has an invalid length. [ 251.443524][T12167] erspan0: refused to change device tx_queue_len [ 251.492303][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3823'. [ 251.502584][T12181] fuse: Bad value for 'group_id' [ 251.507663][T12181] fuse: Bad value for 'group_id' [ 251.582088][ T36] audit: type=1326 audit(1764300765.761:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.7.3825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a6158ebe9 code=0x0 [ 251.941584][ T31] usb 5-1: string descriptor 0 read error: -22 [ 251.997808][ T473] tipc: Node number set to 4269801489 [ 252.143601][ T31] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input24 [ 252.156615][ T31] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input25 [ 252.172960][ T31] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input26 [ 252.186864][ T31] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input27 [ 252.200659][ T31] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 253.507462][T12261] netlink: 'syz.7.3853': attribute type 4 has an invalid length. [ 253.550162][T12271] veth1: entered allmulticast mode [ 253.555627][T12270] veth1: left allmulticast mode [ 253.814720][ T45] usb 5-1: USB disconnect, device number 36 [ 254.239383][T12312] overlayfs: cannot append lower layer [ 254.245281][T12312] 9pnet_fd: Insufficient options for proto=fd [ 255.023371][T12338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3879'. [ 255.345891][T12347] overlay: Bad value for 'redirect_dir' [ 255.444041][T12357] /dev/loop0: Can't lookup blockdev [ 255.663920][T12388] 9pnet_fd: Insufficient options for proto=fd [ 256.366805][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3914'. [ 256.375761][T12438] erspan0: default FDB implementation only supports local addresses [ 256.832233][T12463] overlayfs: failed to clone upperpath [ 256.838155][T12464] overlayfs: failed to clone upperpath [ 257.184400][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.191597][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.199166][T12475] bridge_slave_0: entered allmulticast mode [ 257.205893][T12475] bridge_slave_0: entered promiscuous mode [ 257.215538][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.222870][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.230574][T12475] bridge_slave_1: entered allmulticast mode [ 257.237139][T12475] bridge_slave_1: entered promiscuous mode [ 257.319548][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.326615][T12475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.333964][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.341046][T12475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.374649][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.382239][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.401163][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.408275][T10551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.418798][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.425892][T10554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.461439][T12475] veth0_vlan: entered promiscuous mode [ 257.476726][T12475] veth1_macvtap: entered promiscuous mode [ 257.506110][ T36] audit: type=1400 audit(1764300771.681:1270): avc: denied { mounton } for pid=12475 comm="syz-executor" path="/root/syzkaller.tW07EH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 257.536159][ T36] audit: type=1400 audit(1764300771.711:1271): avc: denied { mount } for pid=12475 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 257.867803][ T473] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.997982][ T473] usb 3-1: device descriptor read/64, error -71 [ 258.237836][ T473] usb 3-1: device descriptor read/64, error -71 [ 258.477818][ T473] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 258.607795][ T473] usb 3-1: device descriptor read/64, error -71 [ 258.778378][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3944'. [ 258.788311][T12532] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3944'. [ 258.847813][ T473] usb 3-1: device descriptor read/64, error -71 [ 258.948825][ T36] audit: type=1400 audit(1764300773.131:1272): avc: denied { setattr } for pid=12541 comm="syz.4.3948" path="socket:[54929]" dev="sockfs" ino=54929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.973967][ T473] usb usb3-port1: attempt power cycle [ 259.006419][ T36] audit: type=1400 audit(1764300773.181:1273): avc: denied { nlmsg_read } for pid=12547 comm="syz.4.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 259.138015][T12579] 9pnet_fd: Insufficient options for proto=fd [ 259.149665][T12581] 9pnet_fd: Insufficient options for proto=fd [ 259.327801][ T473] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 259.348924][ T473] usb 3-1: device descriptor read/8, error -71 [ 259.479323][ T473] usb 3-1: device descriptor read/8, error -71 [ 259.482176][T12597] 9pnet_fd: Insufficient options for proto=fd [ 259.492614][T12597] 9pnet_fd: Insufficient options for proto=fd [ 259.510698][T12602] overlayfs: failed to clone upperpath [ 259.540108][T12607] incfs: Can't find or create .index dir in ./file0 [ 259.546981][T12607] incfs: mount failed -17 [ 259.564074][T12609] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3972'. [ 259.727825][ T473] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 259.749049][ T473] usb 3-1: device descriptor read/8, error -71 [ 259.878901][ T473] usb 3-1: device descriptor read/8, error -71 [ 259.987907][ T473] usb usb3-port1: unable to enumerate USB device [ 260.454742][T12646] 9pnet_fd: Insufficient options for proto=fd [ 260.527954][T12668] netlink: 'syz.4.3993': attribute type 4 has an invalid length. [ 260.712063][T12693] overlayfs: failed to clone upperpath [ 261.036765][T12720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12720 comm=syz.7.4009 [ 261.037863][T12719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12719 comm=syz.7.4009 [ 261.049535][ T66] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 261.109832][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4012'. [ 261.119144][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4012'. [ 261.227782][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 261.234435][ T66] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.242210][ T66] usb 3-1: can't read configurations, error -61 [ 261.258388][ T36] audit: type=1326 audit(1764300775.441:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.4.4016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed6498ebe9 code=0x0 [ 261.281588][ T36] audit: type=1326 audit(1764300775.441:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.4.4016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed6498ebe9 code=0x0 [ 261.335013][ T36] audit: type=1400 audit(1764300775.511:1276): avc: denied { bind } for pid=12744 comm="syz.7.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 261.380819][ T66] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 261.537850][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 261.544412][ T66] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.552054][ T66] usb 3-1: can't read configurations, error -61 [ 261.558482][ T66] usb usb3-port1: attempt power cycle [ 261.572596][T12758] fuse: Unknown parameter 'gio¾p_id' [ 261.897796][ T66] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 261.918181][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 261.927220][ T66] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.940165][ T66] usb 3-1: can't read configurations, error -61 [ 262.067784][ T66] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 262.088156][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 262.095034][ T66] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.102878][ T66] usb 3-1: can't read configurations, error -61 [ 262.109314][ T66] usb usb3-port1: unable to enumerate USB device [ 263.238540][T12829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12829 comm=syz.7.4044 [ 263.785133][T12858] tipc: Enabling of bearer rejected, failed to enable media [ 264.550448][T12868] tipc: Enabling of bearer rejected, failed to enable media [ 264.559179][T12869] tipc: Enabling of bearer rejected, failed to enable media [ 264.784562][ T36] audit: type=1326 audit(1764300778.961:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.4072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed6498ebe9 code=0x0 [ 265.418765][T12919] incfs: Options parsing error. -22 [ 265.424150][T12919] incfs: mount failed -22 [ 265.442713][ T36] audit: type=1326 audit(1764300779.621:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.4.4079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed6498ebe9 code=0x0 [ 265.479505][T12926] fuse: Bad value for 'fd' [ 265.597310][T12941] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4079'. [ 265.640952][T12942] rust_binder: Write failure EFAULT in pid:23 [ 265.799627][T12946] netlink: 'syz.2.4085': attribute type 12 has an invalid length. [ 266.107787][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 266.260178][ T31] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 266.269332][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.277567][ T31] usb 3-1: Product: syz [ 266.282373][ T31] usb 3-1: Manufacturer: syz [ 266.287015][ T31] usb 3-1: SerialNumber: syz [ 266.383340][T12970] overlayfs: failed to clone upperpath [ 266.477990][T12985] overlayfs: failed to clone upperpath [ 266.491310][T12988] netlink: 'syz.6.4101': attribute type 46 has an invalid length. [ 266.499424][T12988] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4101'. [ 266.510963][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4101'. [ 266.584995][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4104'. [ 266.742923][T13005] tipc: Enabling of bearer rejected, failed to enable media [ 266.929596][T13023] 8021q: VLANs not supported on sit0 [ 267.163208][T13042] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4119'. [ 267.297111][T13050] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 267.306245][ T36] audit: type=1400 audit(1764300781.481:1279): avc: denied { relabelto } for pid=13049 comm="syz.7.4122" name="fuse" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 267.308817][T13050] fuse: Bad value for 'rootmode' [ 267.332216][ T36] audit: type=1400 audit(1764300781.481:1280): avc: denied { associate } for pid=13049 comm="syz.7.4122" name="fuse" dev="tmpfs" ino=461 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 267.363947][ T36] audit: type=1400 audit(1764300781.481:1281): avc: denied { read write } for pid=13049 comm="syz.7.4122" name="fuse" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 267.390146][ T36] audit: type=1400 audit(1764300781.481:1282): avc: denied { open } for pid=13049 comm="syz.7.4122" path="/dev/fuse" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 268.494038][T13066] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4128'. [ 268.662261][T13094] overlay: Unknown parameter 'smackfstransmute' [ 268.670228][T13095] overlay: Unknown parameter 'smackfstransmute' [ 268.681957][T13095] tc_dump_action: action bad kind [ 268.799422][T13120] 9pnet_fd: Insufficient options for proto=fd [ 268.833042][T13129] netlink: 'syz.7.4151': attribute type 4 has an invalid length. [ 268.942255][ T31] usb 3-1: USB disconnect, device number 17 [ 269.001028][T13143] random: crng reseeded on system resumption [ 269.052187][ T36] audit: type=1400 audit(1764300783.231:1283): avc: denied { ioctl } for pid=13141 comm="syz.2.4154" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 269.340885][T13183] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4169'. [ 269.428423][T13197] fuse: Bad value for 'group_id' [ 269.433540][T13197] fuse: Bad value for 'group_id' [ 269.480774][T13204] netlink: 'syz.6.4176': attribute type 27 has an invalid length. [ 269.544214][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4178'. [ 269.554326][ T36] audit: type=1326 audit(1764300783.731:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6498ebe9 code=0x7ffc0000 [ 269.578098][ T36] audit: type=1326 audit(1764300783.731:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6498ebe9 code=0x7ffc0000 [ 269.601853][ T36] audit: type=1326 audit(1764300783.731:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13207 comm="syz.4.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed6498ebe9 code=0x7ffc0000 [ 269.655388][T13210] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4179'. [ 269.674486][T13210] rust_binder: Error while translating object. [ 269.674526][T13210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.681206][T13210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 269.715939][T13231] erofs: dax options not supported [ 269.730702][T13231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 269.730736][T13231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:58 [ 269.766452][T13242] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 269.776242][T13244] overlayfs: failed to clone upperpath [ 269.783484][T13242] rust_binder: Write failure EINVAL in pid:63 [ 269.907757][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4194'. [ 269.945150][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 269.945170][ T36] audit: type=1400 audit(1764300784.121:1299): avc: denied { ioctl } for pid=13254 comm="syz.2.4192" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 270.163115][T13275] : renamed from bond_slave_0 [ 270.170114][T13275] overlay: Unknown parameter 'subj_user' [ 270.307804][ T66] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 270.458012][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 270.465773][ T66] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 270.475066][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.483176][ T66] usb 3-1: Product: syz [ 270.487427][ T66] usb 3-1: Manufacturer: syz [ 270.496443][ T66] usb 3-1: SerialNumber: syz [ 270.502110][ T66] usb 3-1: config 0 descriptor?? [ 270.508184][ T66] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 270.710891][ T45] usb 3-1: USB disconnect, device number 18 [ 271.135290][T13364] fuse: Bad value for 'fd' [ 271.153078][T13369] 9pnet_fd: Insufficient options for proto=fd [ 271.303416][T13383] fuse: Unknown parameter 'Fd' [ 271.547566][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.547602][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.554378][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.561004][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.567450][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.574711][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.581475][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.588187][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.595000][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.601777][T13412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.609114][T13415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 271.615728][T13415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 271.667649][T13427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 271.699584][T13429] veth1: entered allmulticast mode [ 271.714316][T13428] veth1: left allmulticast mode [ 271.759246][T13433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.931823][ T36] audit: type=1400 audit(1764300787.105:1300): avc: denied { create } for pid=13473 comm="syz.4.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 272.017798][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 272.171620][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.182249][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.192934][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.194732][ T36] audit: type=1326 audit(1764300787.365:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.7.4283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a6158ebe9 code=0x0 [ 272.202449][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.233974][ T45] usb 3-1: SerialNumber: syz [ 272.470835][ T45] usb 3-1: 0:2 : does not exist [ 272.475962][ T45] usb 3-1: unit 5 not found! [ 272.482874][ T45] usb 3-1: USB disconnect, device number 19 [ 272.491118][T12490] udevd[12490]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.761407][T13517] tc_dump_action: action bad kind [ 273.565955][T13528] /dev/loop0: Can't lookup blockdev [ 274.020912][T13550] rust_binder: 107: no such ref 3 [ 274.257833][ T503] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 274.409050][ T503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.420176][ T503] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.429337][ T503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.438119][ T503] usb 3-1: config 0 descriptor?? [ 274.716047][T13560] netlink: 1327 bytes leftover after parsing attributes in process `syz.7.4304'. [ 274.845133][ T503] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 274.855019][ T503] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input29 [ 274.921132][ T503] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 275.252925][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.261700][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.273367][T13550] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 275.282607][T13550] rust_binder: Write failure EINVAL in pid:107 [ 275.283279][ T10] usb 3-1: USB disconnect, device number 20 [ 275.704323][ T36] audit: type=1400 audit(2000000000.250:1302): avc: denied { shutdown } for pid=13638 comm="syz.6.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.737839][ T36] audit: type=1400 audit(2000000000.270:1303): avc: denied { listen } for pid=13638 comm="syz.6.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.797744][T13647] netlink: 'syz.6.4331': attribute type 58 has an invalid length. [ 275.898758][T13647] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 276.082159][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4337'. [ 276.544521][T13668] overlayfs: failed to clone upperpath [ 276.634494][T13676] overlayfs: failed to clone upperpath [ 277.127475][T13706] overlayfs: failed to resolve './file0': -2 [ 277.146906][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4354'. [ 277.224935][T13717] 9pnet_fd: Insufficient options for proto=fd [ 277.680536][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4360'. [ 277.689714][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4360'. [ 277.972101][T13729] sit0: entered promiscuous mode [ 277.978360][T13729] netlink: 'syz.7.4362': attribute type 1 has an invalid length. [ 277.986341][T13729] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4362'. [ 278.018007][T13734] netlink: 'syz.7.4364': attribute type 29 has an invalid length. [ 278.320227][T13760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10611 sclass=netlink_route_socket pid=13760 comm=syz.6.4371 [ 278.659206][ T36] audit: type=1400 audit(2000000003.210:1304): avc: denied { setattr } for pid=13765 comm="syz.7.4374" name="CAN_RAW" dev="sockfs" ino=58193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.863860][T13775] netlink: 165 bytes leftover after parsing attributes in process `syz.6.4378'. [ 278.881069][ T36] audit: type=1400 audit(2000000003.430:1305): avc: denied { setattr } for pid=13777 comm="syz.2.4379" name="" dev="pipefs" ino=58217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 278.905140][ T36] audit: type=1400 audit(2000000003.440:1306): avc: denied { unmount } for pid=12475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 279.019344][T13810] netlink: 'syz.6.4388': attribute type 28 has an invalid length. [ 279.071718][T13822] netlink: 'syz.6.4392': attribute type 4 has an invalid length. [ 279.153938][T13840] netlink: 'syz.6.4400': attribute type 19 has an invalid length. [ 279.162807][T13840] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4400'. [ 279.270231][T13854] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 279.290544][T13860] /dev/loop0: Can't lookup blockdev [ 279.334053][T13864] netlink: 'syz.4.4409': attribute type 6 has an invalid length. [ 279.343668][T13864] netlink: 'syz.4.4409': attribute type 4 has an invalid length. [ 279.351764][T13864] netlink: 'syz.4.4409': attribute type 6 has an invalid length. [ 279.367239][T13864] netlink: 'syz.4.4409': attribute type 13 has an invalid length. [ 279.383970][T13864] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.4409'. [ 279.393572][T13868] >: renamed from veth0_vlan (while UP) [ 279.554075][T13910] netlink: 57 bytes leftover after parsing attributes in process `syz.6.4422'. [ 279.924506][T13946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4436'. [ 280.258425][T13955] tipc: Enabling of bearer rejected, failed to enable media [ 280.847768][ T503] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 280.998968][ T503] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 281.008466][ T503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.017310][ T503] usb 3-1: config 0 descriptor?? [ 281.238446][ T503] usb 3-1: Cannot set autoneg [ 281.244399][ T503] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 281.259606][ T503] usb 3-1: USB disconnect, device number 21 [ 281.490208][T13991] rust_binder: 154: no such ref 0 [ 281.498774][ T503] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 281.517985][ T503] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.809781][T14018] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 282.344178][T14055] wireguard: wg2: Could not create IPv4 socket [ 283.492084][T14114] __vm_enough_memory: pid: 14114, comm: syz.2.4494, bytes: 18014402804453376 not enough memory for the allocation [ 283.521254][T14116] __vm_enough_memory: pid: 14116, comm: syz.2.4495, bytes: 18014402804453376 not enough memory for the allocation [ 283.690481][T14133] 9pnet_fd: Insufficient options for proto=fd [ 283.910865][T14150] validate_nla: 4 callbacks suppressed [ 283.910886][T14150] netlink: 'syz.7.4504': attribute type 1 has an invalid length. [ 284.009118][T14156] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 284.017675][T14156] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4507'. [ 284.027884][T14156] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 284.114877][T14173] tmpfs: Unknown parameter ':;2¨SHDOœkðùæ¹þQ:Û˜MËck?3‚\7o+YÆ;W`å ŠzÿæCÈU\Àêvòä"“Iî]À:sU•¹Br?­I´Sé´Y˜,8' [ 284.253765][T14180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=14180 comm=syz.6.4516 [ 284.278148][T14184] rust_binder: Write failure EFAULT in pid:203 [ 284.533381][T14214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 284.577215][T14226] netlink: 'syz.2.4530': attribute type 1 has an invalid length. [ 284.594280][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4530'. [ 284.823871][T14257] fuse: Bad value for 'user_id' [ 284.828838][T14257] fuse: Bad value for 'user_id' [ 284.876718][T14262] fuse: Bad value for 'user_id' [ 284.893625][T14262] fuse: Bad value for 'user_id' [ 285.020455][T14292] overlayfs: failed to clone upperpath [ 285.103943][ T45] rust_binder: 14293: removing orphan mapping 0:24 [ 285.553494][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4566'. [ 285.714730][T14351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.714953][T14351] rust_binder: Error while translating object. [ 285.714964][T14350] rust_binder: Error while translating object. [ 285.715013][T14350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.739449][T14351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.755482][T14350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 285.766402][T14351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 285.958266][T14371] rust_binder: Error while translating object. [ 285.967593][T14371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 285.974086][T14371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 286.192102][T14398] syzkaller0: entered promiscuous mode [ 286.206846][T14398] syzkaller0: entered allmulticast mode [ 286.877098][T14402] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4588'. [ 286.886599][T14402] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 287.170655][T14435] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4598'. [ 287.200246][T14440] 9pnet_fd: Insufficient options for proto=fd [ 287.747541][T14459] futex_wake_op: syz.4.4608 tries to shift op by 32; fix this program [ 287.913266][ T36] audit: type=1400 audit(2000000012.460:1307): avc: denied { shutdown } for pid=14493 comm="syz.4.4618" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.958210][T14496] rust_binder: Error while translating object. [ 287.958488][T14496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 287.964730][T14496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 287.966517][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4620'. [ 287.994297][T14498] 9pnet_fd: Insufficient options for proto=fd [ 288.044747][ T36] audit: type=1400 audit(2000000012.590:1308): avc: denied { append } for pid=14509 comm="syz.2.4624" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.207963][T14513] 9pnet_fd: Insufficient options for proto=fd [ 288.299239][T14516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14516 comm=syz.2.4626 [ 288.348342][T14537] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 288.482647][T14556] cgroup: Invalid name [ 289.250982][ T473] rust_binder: 14567: removing orphan mapping 0:4232 [ 289.267422][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 289.280094][T14578] overlayfs: conflicting options: userxattr,metacopy=on [ 289.587989][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 289.737801][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 289.744069][ T31] usb 3-1: config index 0 descriptor too short (expected 804, got 36) [ 289.752491][ T31] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 289.760679][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 289.769615][ T31] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.780553][ T31] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.790391][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 289.797015][ T31] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 289.806103][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.814806][ T31] usb 3-1: config 0 descriptor?? [ 290.028300][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 290.035134][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 290.044667][ T31] usb 3-1: USB disconnect, device number 22 [ 290.102611][T14604] netlink: 'syz.2.4652': attribute type 16 has an invalid length. [ 290.110580][T14604] netlink: 'syz.2.4652': attribute type 3 has an invalid length. [ 290.118607][T14604] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.4652'. [ 290.123053][T14607] tipc: Enabling of bearer rejected, failed to enable media [ 290.173817][T14614] x_tables: unsorted underflow at hook 3 [ 290.185229][ T36] audit: type=1400 audit(2000000270.733:1309): avc: denied { setattr } for pid=14617 comm="syz.2.4657" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.287568][ T36] audit: type=1326 audit(2000000270.833:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.2.4660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad8cf8ebe9 code=0x0 [ 290.339891][ T36] audit: type=1400 audit(2000000270.893:1311): avc: denied { setopt } for pid=14627 comm="syz.2.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 290.352390][T14632] can0: slcan on ttyS3. [ 290.398224][T14632] can0 (unregistered): slcan off ttyS3. [ 290.595384][T14667] incfs: Options parsing error. -22 [ 290.600804][T14667] incfs: mount failed -22 [ 290.652963][T14672] overlayfs: failed to clone upperpath [ 290.686801][T14681] __vm_enough_memory: pid: 14681, comm: syz.4.4667, bytes: 21200202403840 not enough memory for the allocation [ 290.747411][T14685] 9pnet_fd: Insufficient options for proto=fd [ 291.347666][T14724] netlink: 'syz.7.4681': attribute type 4 has an invalid length. [ 291.368823][T14724] netlink: 'syz.7.4681': attribute type 4 has an invalid length. [ 291.397385][T14727] overlayfs: failed to clone upperpath [ 291.417471][T14731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14731 comm=syz.4.4684 [ 291.691981][T14746] overlayfs: failed to clone upperpath [ 291.932508][T14766] netlink: 'syz.6.4695': attribute type 4 has an invalid length. [ 291.941069][T14766] 9pnet_fd: p9_fd_create_tcp (14766): problem connecting socket to 127.0.0.1 [ 292.942324][T14831] overlayfs: failed to clone upperpath [ 292.960475][T14833] /dev/loop0: Can't lookup blockdev [ 293.532006][T14849] 9pnet: Could not find request transport: f\PЄœ‰iïdno=0x0000000000000083 [ 293.609919][T14859] overlayfs: failed to clone upperpath [ 293.744826][ T36] audit: type=1400 audit(2000000274.293:1312): avc: denied { create } for pid=14875 comm="syz.4.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 294.050697][T14893] netlink: 'syz.4.4740': attribute type 2 has an invalid length. [ 294.122989][T14907] overlayfs: failed to clone upperpath [ 295.361135][T14965] 2N: renamed from vcan0 (while UP) [ 295.390629][T14965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.450378][T14973] overlayfs: failed to clone upperpath [ 295.483512][T14978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4770'. [ 295.493108][T14978] tipc: Enabling of bearer rejected, failed to enable media [ 295.532714][T14986] netlink: 37 bytes leftover after parsing attributes in process `syz.7.4773'. [ 295.580167][T14988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 295.580226][T14988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:354 [ 295.689668][T15006] overlayfs: failed to resolve './file2': -2 [ 295.809259][T15006] can0: slcan on ttyS3. [ 295.939367][T15005] can0 (unregistered): slcan off ttyS3. [ 296.112473][T15079] fuse: Bad value for 'user_id' [ 296.118097][T15079] fuse: Bad value for 'user_id' [ 296.125494][T15079] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 296.192411][T15095] netlink: 'syz.6.4800': attribute type 4 has an invalid length. [ 296.200510][T15095] netlink: 'syz.6.4800': attribute type 4 has an invalid length. [ 296.245322][T15101] fuse: Bad value for 'fd' [ 296.292999][T15112] 9p: Unknown access argument 00000000000000000000ñjK¸Ó vG3\Y˜€Ž«õ­à‚–zfôúóçsûeý×Ó(ƒâºïJåhíÀgÂnÏfew_@‹ÂD¨¢:H§òëdNd: -22 [ 296.367786][ T473] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 296.519086][ T473] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 296.528245][ T473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.536929][ T473] usb 3-1: config 0 descriptor?? [ 296.563605][ T36] audit: type=1400 audit(2000000277.113:1313): avc: denied { mounton } for pid=15118 comm="syz.4.4808" path="/file0" dev="ramfs" ino=63853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 296.563613][T15119] ./file0: Can't lookup blockdev [ 296.774910][T10551] tipc: Subscription rejected, illegal request [ 296.795658][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4815'. [ 296.832226][T15155] 9pnet: Could not find request transport: xen [ 296.944070][T15081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.952697][T15081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.409012][T15172] overlayfs: failed to clone upperpath [ 297.433012][T15174] tmpfs: Unsupported parameter 'mpol' [ 297.463604][T15180] overlay: Unknown parameter 'smackfshat' [ 297.567592][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4830'. [ 297.577395][T15194] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 297.621530][T15206] overlayfs: missing 'lowerdir' [ 297.820032][T15217] overlayfs: failed to clone upperpath [ 297.868725][ T473] usb 3-1: Cannot set autoneg [ 297.873779][ T473] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 297.887857][ T473] usb 3-1: USB disconnect, device number 23 [ 298.186505][T15229] rust_binder: Error while translating object. [ 298.186569][T15229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 298.205589][T15229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:380 [ 299.647778][ T473] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 299.807761][ T473] usb 3-1: Using ep0 maxpacket: 16 [ 299.814572][ T473] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 299.827849][ T473] usb 3-1: config 1 interface 0 has no altsetting 0 [ 299.836256][ T473] usb 3-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 299.845436][ T473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.853581][ T473] usb 3-1: Product: 툸䫦渽ë¸á›šá¿ éˆ£ã–”ఽ騤郀膘悒믅凡豘梈窾킂땬뎿咈뽪æãŒ—⟒ïžî•¦îº¨ê†‚濮ﱹ眇롹ìŠå°˜á›¥ã«±í¹ë£—挚⢵䤊࿂꜇ꞌ娻暚凔肯ꠣꑻ簗ë áž¨ç› ã™›á§ï¼ºìƒ„성뵨ﺞ [ 299.874605][ T473] usb 3-1: Manufacturer: Е [ 299.879220][ T473] usb 3-1: SerialNumber: à° [ 299.939946][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4866'. [ 300.496191][ T473] usbhid 3-1:1.0: can't add hid device: -71 [ 300.509880][ T473] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 300.521957][ T473] usb 3-1: USB disconnect, device number 24 [ 301.014503][T15437] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 301.135973][T15458] +$<¶: renamed from bridge0 (while UP) [ 301.261454][T15475] __vm_enough_memory: pid: 15475, comm: syz.6.4921, bytes: 21199971385344 not enough memory for the allocation [ 301.318865][T15482] incfs: Options parsing error. -22 [ 301.325560][T15482] incfs: mount failed -22 [ 301.331975][T15484] netlink: 'syz.7.4923': attribute type 27 has an invalid length. [ 301.427754][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 301.577762][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 301.584690][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 21889, setting to 1024 [ 301.596028][ T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 301.606151][ T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 301.617838][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.626995][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.635398][ T45] usb 3-1: Product: syz [ 301.639606][ T45] usb 3-1: Manufacturer:   [ 301.644214][ T45] usb 3-1: SerialNumber: syz [ 301.725438][ T36] audit: type=1400 audit(2000000282.273:1314): avc: denied { accept } for pid=15497 comm="syz.4.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 301.870069][T15503] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4931'. [ 301.893681][T15507] overlayfs: failed to resolve './file0': -2 [ 301.919868][ T45] cdc_ncm 3-1:1.0: bind() failure [ 301.924116][T15513] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 301.925524][T15513] rust_binder: 409: no such ref 3 [ 301.927305][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 301.934042][T15513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:409 [ 301.938968][ T45] cdc_ncm 3-1:1.1: bind() failure [ 301.961876][ T36] audit: type=1326 audit(2000000282.513:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.7.4933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a6158ebe9 code=0x0 [ 301.969982][ T45] usb 3-1: USB disconnect, device number 25 [ 302.186053][T15525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.238637][T15527] cgroup: release_agent respecified [ 302.260034][T15531] erofs: dax options not supported [ 302.299077][T15540] tipc: Enabling of bearer rejected, failed to enable media [ 302.339660][T15544] fuse: Bad value for 'fd' [ 302.400227][T15548] 9pnet_virtio: no channels available for device 127.0.0.1 [ 302.945925][T15597] overlayfs: failed to clone upperpath [ 303.000113][T15611] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 303.008539][T15611] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 303.017629][T15611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 303.054170][T15617] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4969'. [ 303.204894][T15642] tipc: Enabling of bearer rejected, failed to enable media [ 303.290712][T15652] fuse: Bad value for 'fd' [ 303.338226][T15662] incfs: Options parsing error. -22 [ 303.343564][T15662] incfs: mount failed -22 [ 303.933221][T15673] GUP no longer grows the stack in syz.7.4989 (15673): 200000005000-200000008000 (200000004000) [ 303.943834][T15673] CPU: 1 UID: 0 PID: 15673 Comm: syz.7.4989 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 303.943870][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.943889][T15673] Call Trace: [ 303.943896][T15673] [ 303.943905][T15673] __dump_stack+0x21/0x30 [ 303.943931][T15673] dump_stack_lvl+0x10c/0x190 [ 303.943952][T15673] ? __cfi_dump_stack_lvl+0x10/0x10 [ 303.943974][T15673] ? futex_lock_pi_atomic+0xdd/0xc70 [ 303.943994][T15673] dump_stack+0x19/0x20 [ 303.944016][T15673] fixup_user_fault+0x63d/0x6d0 [ 303.944035][T15673] fault_in_user_writeable+0x76/0xe0 [ 303.944050][T15673] futex_lock_pi+0x258/0xa10 [ 303.944067][T15673] ? futex_unqueue+0x136/0x160 [ 303.944083][T15673] ? should_fail+0xf/0x20 [ 303.944097][T15673] ? __cfi_futex_lock_pi+0x10/0x10 [ 303.944115][T15673] ? __cfi_futex_wake_mark+0x10/0x10 [ 303.944134][T15673] ? futex_setup_timer+0xb4/0xd0 [ 303.944149][T15673] ? __cfi_futex_wake_mark+0x10/0x10 [ 303.944169][T15673] ? mas_find+0x358/0x5f0 [ 303.944187][T15673] ? __kasan_check_write+0x18/0x20 [ 303.944211][T15673] do_futex+0x25c/0x500 [ 303.944226][T15673] ? __cfi_do_futex+0x10/0x10 [ 303.944241][T15673] ? __vm_munmap+0x2c7/0x370 [ 303.944255][T15673] __se_sys_futex+0x28f/0x300 [ 303.944272][T15673] ? __x64_sys_futex+0x110/0x110 [ 303.944288][T15673] ? __kasan_check_write+0x18/0x20 [ 303.944310][T15673] __x64_sys_futex+0xe9/0x110 [ 303.944326][T15673] x64_sys_call+0x227f/0x2ee0 [ 303.944348][T15673] do_syscall_64+0x58/0xf0 [ 303.944371][T15673] ? clear_bhb_loop+0x50/0xa0 [ 303.944390][T15673] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 303.944409][T15673] RIP: 0033:0x7f2a6158ebe9 [ 303.944426][T15673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.944441][T15673] RSP: 002b:00007f2a623bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 303.944461][T15673] RAX: ffffffffffffffda RBX: 00007f2a617c5fa0 RCX: 00007f2a6158ebe9 [ 303.944474][T15673] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 303.944485][T15673] RBP: 00007f2a61611e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.944495][T15673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.944505][T15673] R13: 00007f2a617c6038 R14: 00007f2a617c5fa0 R15: 00007ffd6f72f0e8 [ 303.944519][T15673] [ 304.197472][ T36] audit: type=1326 audit(2000000284.743:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15635 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8cf8ebe9 code=0x7fc00000 [ 304.290841][T15702] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4999'. [ 304.378083][ T36] audit: type=1400 audit(2000000284.903:1317): avc: denied { lock } for pid=15708 comm="syz.2.5002" path="socket:[65825]" dev="sockfs" ino=65825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.449681][T15721] tipc: Can't bind to reserved service type 0 [ 304.456627][T15721] overlayfs: missing 'lowerdir' [ 304.616734][T15742] overlayfs: failed to clone upperpath [ 304.853698][T15782] netlink: 'syz.6.5028': attribute type 4 has an invalid length. [ 304.887765][ T473] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 304.901540][T15792] No source specified [ 304.913284][ T36] audit: type=1400 audit(2000000285.463:1318): avc: denied { ioctl } for pid=15756 comm="syz.7.5018" path="/dev/fuse" dev="tmpfs" ino=461 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 305.039263][ T473] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.047345][ T473] usb 3-1: not running at top speed; connect to a high speed hub [ 305.056250][ T473] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 305.068728][ T473] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.078034][ T473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.086051][ T473] usb 3-1: Product: syz [ 305.090248][ T473] usb 3-1: Manufacturer: syz [ 305.094878][ T473] usb 3-1: SerialNumber: syz [ 305.307452][ T473] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 305.320667][ T473] usb 3-1: USB disconnect, device number 26 [ 305.331088][T12490] udevd[12490]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 305.823440][ T36] audit: type=1400 audit(2000000286.373:1319): avc: denied { getattr } for pid=15833 comm="syz.2.5043" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 305.881271][T15841] overlayfs: failed to clone upperpath [ 305.891455][ T36] audit: type=1400 audit(2000000286.443:1320): avc: denied { remount } for pid=15842 comm="syz.2.5046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 306.174286][ T36] audit: type=1400 audit(2000000286.723:1321): avc: denied { create } for pid=15867 comm="syz.2.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 306.447379][T15895] fuse: Unknown parameter 'uid<00000000000000000007' [ 306.515421][T15907] netlink: 'syz.2.5067': attribute type 27 has an invalid length. [ 306.582425][ T45] rust_binder: 15906: removing orphan mapping 0:4232 [ 306.680145][T15920] 9pnet_fd: Insufficient options for proto=fd [ 306.713236][ T36] audit: type=1400 audit(2000000287.263:1322): avc: denied { accept } for pid=15923 comm="syz.4.5074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 307.097923][ T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 307.227789][ T45] usb 3-1: device descriptor read/64, error -71 [ 307.477863][ T45] usb 3-1: device descriptor read/64, error -71 [ 307.717766][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 307.857822][ T45] usb 3-1: device descriptor read/64, error -71 [ 307.919863][T15968] 9pnet_fd: Insufficient options for proto=fd [ 308.097752][ T45] usb 3-1: device descriptor read/64, error -71 [ 308.207894][ T45] usb usb3-port1: attempt power cycle [ 308.261646][T16005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5104'. [ 308.270852][T10559] bridge_slave_1: left allmulticast mode [ 308.276569][T10559] bridge_slave_1: left promiscuous mode [ 308.282310][T10559] +$<¶: port 2(bridge_slave_1) entered disabled state [ 308.295314][T10559] bridge_slave_0: left allmulticast mode [ 308.302825][T10559] bridge_slave_0: left promiscuous mode [ 308.311874][T10559] +$<¶: port 1(bridge_slave_0) entered disabled state [ 308.323619][T16012] fuse: Unknown parameter 'ro®uÚ/ •b0000000' [ 308.399784][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.406867][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.414603][T15982] bridge_slave_0: entered allmulticast mode [ 308.421160][T15982] bridge_slave_0: entered promiscuous mode [ 308.429810][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.436913][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.444221][T15982] bridge_slave_1: entered allmulticast mode [ 308.450595][T15982] bridge_slave_1: entered promiscuous mode [ 308.457328][T10559] veth1_macvtap: left promiscuous mode [ 308.463164][T10559] >: left promiscuous mode [ 308.552222][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.557802][ T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 308.559323][T15982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.574151][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.578899][ T45] usb 3-1: device descriptor read/8, error -71 [ 308.581209][T15982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.599925][T16037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=812 sclass=netlink_route_socket pid=16037 comm=syz.4.5113 [ 308.613079][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.620897][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.629214][T16037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16037 comm=syz.4.5113 [ 308.643955][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.651028][T10554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.658600][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.665640][T10554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.685308][T15982] veth0_vlan: entered promiscuous mode [ 308.696605][T15982] veth1_macvtap: entered promiscuous mode [ 308.710439][ T45] usb 3-1: device descriptor read/8, error -71 [ 308.723694][ T36] audit: type=1400 audit(2000000289.273:1323): avc: denied { mounton } for pid=15982 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 308.829367][T16056] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 308.829389][T16056] rust_binder: Error while translating object. [ 308.838141][T16056] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 308.844362][T16056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 308.868659][T16058] bridge0: port 3(veth0_to_bridge) entered blocking state [ 308.884962][T16058] bridge0: port 3(veth0_to_bridge) entered disabled state [ 308.892448][T16058] veth0_to_bridge: entered allmulticast mode [ 308.899045][T16058] veth0_to_bridge: entered promiscuous mode [ 308.905116][T16058] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.917580][T16058] bridge0: port 3(veth0_to_bridge) entered blocking state [ 308.924771][T16058] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 308.957778][ T45] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 308.978911][ T45] usb 3-1: device descriptor read/8, error -71 [ 309.087849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 309.092572][T16071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 309.100078][T16071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:11 [ 309.100231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 309.110046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.118748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 309.130778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.142724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 309.154721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.166837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 309.178945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.190803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 309.287148][ T45] usb 3-1: device descriptor read/8, error -71 [ 309.415547][ T45] usb usb3-port1: unable to enumerate USB device [ 312.242426][ C1] sched: DL replenish lagged too much [ 314.097747][ C0] net_ratelimit: 72874 callbacks suppressed [ 314.097771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 314.098198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 314.103810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.116336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 314.127864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.140427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 314.151830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.164047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.175958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 314.188156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 319.107770][ C0] net_ratelimit: 83430 callbacks suppressed [ 319.107795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.107871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.113923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 319.126070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 319.137882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.149910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.161936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.173841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.185726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.197875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.950577][T16078] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.542024][T16081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 324.117920][ C0] net_ratelimit: 95537 callbacks suppressed [ 324.117944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 324.117997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.127184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.133237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.145220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.157229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.169077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.181108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.193113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 324.205088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.711645][T16086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.127745][ C0] net_ratelimit: 97802 callbacks suppressed [ 329.127772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 329.128069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.133806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.145858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.157809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.169708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.181573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.193589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.205683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 329.217557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.137716][ C0] net_ratelimit: 134485 callbacks suppressed [ 334.137740][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 334.137770][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 334.137812][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 334.143944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.152764][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 334.161961][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 334.171302][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 334.183268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.192942][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 334.201318][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 339.147702][ C0] net_ratelimit: 148691 callbacks suppressed [ 339.147727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.147747][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 339.153838][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 339.165996][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 339.175129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.183744][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 339.193155][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 339.205232][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 339.214428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.222972][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 344.157727][ C0] net_ratelimit: 146550 callbacks suppressed [ 344.157751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.157824][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 344.163887][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 344.175851][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 344.185203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.194080][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 344.203261][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 344.215103][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 344.224518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.233294][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 349.167727][ C0] net_ratelimit: 147313 callbacks suppressed [ 349.167759][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 349.167775][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 349.168021][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 349.173873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.182448][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 349.191886][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 349.201415][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 349.213154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.222566][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 349.231207][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 354.177734][ C0] net_ratelimit: 147982 callbacks suppressed [ 354.177758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.177857][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 354.183867][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 354.195890][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 354.205208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.214093][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 354.223278][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 354.235119][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 354.244538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.253327][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 359.187725][ C0] net_ratelimit: 148478 callbacks suppressed [ 359.187750][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 359.187816][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 359.193852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.202531][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 359.211934][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 359.224037][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 359.233226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.241769][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 359.251203][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 359.263378][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 364.197712][ C0] net_ratelimit: 145866 callbacks suppressed [ 364.197736][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 364.197849][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 364.203824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.212409][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 364.221852][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 364.234053][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 364.243193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.251828][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 364.261253][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 364.273331][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 369.207705][ C0] net_ratelimit: 151201 callbacks suppressed [ 369.207729][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 369.207860][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 369.213778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.222540][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 369.232001][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 369.244068][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 369.253271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.261836][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 369.271292][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 369.283561][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 374.217687][ C0] net_ratelimit: 146873 callbacks suppressed [ 374.217712][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 374.217890][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 374.223791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.232401][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 374.241889][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 374.254016][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 374.263154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.271797][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 374.281232][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 374.293383][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 379.227688][ C0] net_ratelimit: 154608 callbacks suppressed [ 379.227711][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 379.227789][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 379.233760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.242424][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 379.251852][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 379.263884][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 379.273091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.281653][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 379.291082][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 379.303260][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 384.237696][ C1] net_ratelimit: 153719 callbacks suppressed [ 384.237718][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 384.237726][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 384.237799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.243979][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 384.253326][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 384.261857][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 384.273878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.283533][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 384.292396][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 384.301720][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 389.247700][ C0] net_ratelimit: 153840 callbacks suppressed [ 389.247724][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 389.247739][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 389.248055][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 389.253851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.262427][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 389.271855][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 389.281452][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 389.293143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.302580][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 389.311288][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 394.257711][ C1] net_ratelimit: 151013 callbacks suppressed [ 394.257734][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 394.257764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.263794][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 394.273328][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 394.285499][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 394.294578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.303237][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 394.312672][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 394.324744][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 394.333919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.267692][ C0] net_ratelimit: 180818 callbacks suppressed [ 399.267717][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 399.267781][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 399.273769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.282421][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 399.291836][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 399.303846][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 399.313089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.321668][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 399.331057][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 399.343167][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 404.277677][ C1] net_ratelimit: 194579 callbacks suppressed [ 404.277702][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 404.277733][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 404.283770][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 404.293159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.301987][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 404.311207][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 404.323084][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 404.332489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.341246][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 404.350452][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 409.287719][ C0] net_ratelimit: 203158 callbacks suppressed [ 409.287745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.287804][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 409.293835][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 409.305832][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 409.315203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.324041][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 409.333258][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 409.345154][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 409.354596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.363339][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 414.297676][ C0] net_ratelimit: 200860 callbacks suppressed [ 414.297701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.297720][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 414.303775][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 414.315886][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 414.325087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.333660][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 414.343071][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 414.355225][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 414.364386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.373050][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 419.307672][ C1] net_ratelimit: 205464 callbacks suppressed [ 419.307698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.307696][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 419.307889][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 419.313776][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 419.325758][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 419.335112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.344694][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 419.353106][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 419.362471][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 419.374504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.317662][ C0] net_ratelimit: 206859 callbacks suppressed [ 424.317686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.317718][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 424.323765][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 424.335761][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 424.345223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.354036][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 424.363231][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 424.375197][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 424.384615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.393340][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 429.327673][ C0] net_ratelimit: 204746 callbacks suppressed [ 429.327699][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 429.327800][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 429.333782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.342441][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 429.351854][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 429.363901][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 429.373134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.381692][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 429.391141][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 429.403227][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 434.337677][ C0] net_ratelimit: 204885 callbacks suppressed [ 434.337701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.337787][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 434.343795][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 434.355905][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 434.365160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.373999][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 434.383191][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 434.395104][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 434.404612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.413335][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 439.347688][ C0] net_ratelimit: 203282 callbacks suppressed [ 439.347711][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 439.347756][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 439.353752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.362402][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 439.371811][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 439.383849][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 439.393101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.401658][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 439.411071][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 439.423192][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 444.357685][ C0] net_ratelimit: 207760 callbacks suppressed [ 444.357711][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 444.357724][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 444.357893][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 444.363905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.372628][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 444.382039][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 444.391561][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 444.403782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.413221][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 444.421833][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 449.367684][ C0] net_ratelimit: 207526 callbacks suppressed [ 449.367710][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 449.367756][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 449.373841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.382537][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 449.391981][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 449.404061][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 449.413366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.422031][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 449.431550][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 449.443650][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 454.377652][ C1] net_ratelimit: 202644 callbacks suppressed [ 454.377678][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 454.377696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.383927][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 454.393320][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 454.405396][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 454.417706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.423604][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 454.432801][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 454.444714][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 454.454117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.387673][ C0] net_ratelimit: 208876 callbacks suppressed [ 459.387699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.387734][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 459.393781][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 459.405811][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 459.415541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.424411][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 459.433677][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 459.445596][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 459.455004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.463744][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 462.900413][T10551] bridge_slave_1: left allmulticast mode [ 462.961825][T10551] bridge_slave_1: left promiscuous mode [ 463.039877][T10551] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.279907][T10551] bridge_slave_0: left allmulticast mode [ 463.296094][T10551] bridge_slave_0: left promiscuous mode [ 463.578042][T10551] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.397699][ C0] net_ratelimit: 199328 callbacks suppressed [ 464.397724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.397743][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 464.403848][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 464.416001][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 464.425185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.433820][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 464.443227][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 464.455267][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 464.464569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.473189][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 469.407657][ C0] net_ratelimit: 204921 callbacks suppressed [ 469.407680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.407682][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 469.407728][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 469.413807][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 469.426043][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 469.435178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.444607][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 469.453353][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 469.462897][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 469.474632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.417662][ C0] net_ratelimit: 206404 callbacks suppressed [ 474.417690][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 474.417708][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 474.417751][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 474.423807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.432613][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 474.441837][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 474.451258][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 474.463221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.472855][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 474.481514][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 479.427661][ C0] net_ratelimit: 202033 callbacks suppressed [ 479.427686][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 479.427765][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 479.433819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.442466][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 479.451939][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 479.464154][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 479.473336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.481991][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 479.491505][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 479.503589][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 484.437662][ C0] net_ratelimit: 200619 callbacks suppressed [ 484.437686][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 484.437752][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 484.443750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.452412][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 484.461818][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 484.473825][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 484.483082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.491771][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 484.501185][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 484.513619][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 489.447641][ C0] net_ratelimit: 199417 callbacks suppressed [ 489.447667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.447672][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 489.447716][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 489.453761][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 489.465874][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 489.475084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.484481][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 489.493131][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 489.502696][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 489.514439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.457654][ C1] net_ratelimit: 202551 callbacks suppressed [ 494.457678][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 494.457689][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 494.457720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.463876][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 494.473325][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 494.482051][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 494.493836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.503279][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 494.511907][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 494.521479][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 499.467653][ C0] net_ratelimit: 198573 callbacks suppressed [ 499.467678][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 499.467723][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 499.473986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.482579][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 499.491999][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 499.504120][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 499.513275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.521923][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 499.531323][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 499.543461][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 504.477671][ C0] net_ratelimit: 200755 callbacks suppressed [ 504.477695][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 504.477714][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 504.483745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.492592][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 504.501789][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 504.513672][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 504.523103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.531855][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 504.541059][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 504.553035][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 509.487635][ C1] net_ratelimit: 183114 callbacks suppressed [ 509.487659][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 509.487697][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 509.493862][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 509.503233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.511797][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 509.521221][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 509.533363][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 509.542535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.551253][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 509.560731][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 514.497637][ C1] net_ratelimit: 200413 callbacks suppressed [ 514.497661][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 514.497675][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 514.497743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.503740][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 514.513201][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 514.522033][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 514.533827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.543244][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 514.551855][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 514.561351][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 519.507633][ C0] net_ratelimit: 201846 callbacks suppressed [ 519.507658][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 519.507727][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 519.513767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.522351][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 519.531807][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 519.543954][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 519.553114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.561762][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 519.571250][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 519.583406][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 524.517620][ C0] net_ratelimit: 207179 callbacks suppressed [ 524.517644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.517708][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 524.523778][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 524.535702][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 524.545122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.554120][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 524.563454][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 524.575415][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 524.584775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.593619][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 529.527627][ C0] net_ratelimit: 201024 callbacks suppressed [ 529.527652][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 529.527667][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 529.527889][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 529.533808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.542498][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 529.551965][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 529.561530][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 529.573363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.582798][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 529.591460][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 534.537636][ C0] net_ratelimit: 204044 callbacks suppressed [ 534.537661][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 534.537682][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 534.543794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.552465][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 534.561856][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 534.573911][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 534.583122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.591690][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 534.601167][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 534.613292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 539.547640][ C0] net_ratelimit: 204380 callbacks suppressed [ 539.547665][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 539.547821][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 539.553785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.562371][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 539.571856][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 539.584016][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 539.593459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.602221][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 539.611622][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 539.623707][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 544.557643][ C0] net_ratelimit: 203503 callbacks suppressed [ 544.557669][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 544.557726][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 544.563779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.572359][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 544.581781][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 544.593894][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 544.603094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.611750][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 544.621162][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 544.633266][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 549.567641][ C0] net_ratelimit: 205886 callbacks suppressed [ 549.567666][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 549.567732][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 549.573800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.582423][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 549.591868][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 549.603960][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 549.613176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.621852][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 549.631269][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 549.643344][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 554.577635][ C0] net_ratelimit: 189127 callbacks suppressed [ 554.577659][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 554.577664][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 554.577834][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 554.583784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.592380][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 554.601777][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 554.611373][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 554.623164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.632624][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 554.641242][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 559.587626][ C0] net_ratelimit: 204721 callbacks suppressed [ 559.587650][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 559.587712][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 559.593689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.602341][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 559.611759][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 559.623960][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 559.633180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.641735][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 559.651147][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 559.663281][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 564.597623][ C0] net_ratelimit: 204471 callbacks suppressed [ 564.597649][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 564.597667][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 564.603746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.612491][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 564.621840][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 564.633764][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 564.643114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.651951][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 564.661122][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 564.673009][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 569.607605][ C0] net_ratelimit: 199611 callbacks suppressed [ 569.607631][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 569.607639][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 569.607683][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 569.613717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.622482][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 569.631701][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 569.641077][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 569.653048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.662695][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 569.671267][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 574.617629][ C0] net_ratelimit: 201725 callbacks suppressed [ 574.617654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.617675][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 574.623758][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 574.636017][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 574.645206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.653849][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 574.663261][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 574.675294][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 574.684554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.693217][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 579.627606][ C0] net_ratelimit: 200575 callbacks suppressed [ 579.627631][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 579.627699][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 579.633738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.642326][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 579.651740][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 579.663929][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 579.673074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.681733][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 579.691149][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 579.703195][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 584.637619][ C0] net_ratelimit: 202794 callbacks suppressed [ 584.637643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.637704][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 584.643739][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 584.655791][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 584.665118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.673953][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 584.683162][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 584.695009][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 584.704433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.713164][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 589.647595][ C1] net_ratelimit: 203434 callbacks suppressed [ 589.647621][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 589.647650][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 589.653702][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 589.663183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.671986][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 589.681186][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 589.693179][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 589.702547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.711390][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 589.720568][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 594.657625][ C0] net_ratelimit: 202598 callbacks suppressed [ 594.657649][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 594.657690][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 594.663695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.672360][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 594.681750][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 594.693771][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 594.703019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.711595][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 594.721001][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 594.733155][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 599.667603][ C0] net_ratelimit: 204253 callbacks suppressed [ 599.667629][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 599.667698][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 599.673734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.682313][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 599.691735][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 599.703885][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 599.713207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.721857][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 599.731249][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 599.743274][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 604.461029][ T37] INFO: task kworker/u8:7:10548 blocked for more than 124 seconds. [ 604.531186][ T37] Not tainted syzkaller #0 [ 604.536184][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 604.670220][ T36] audit: type=1400 audit(2000000585.173:1324): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2800]" dev="pipefs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 604.677737][ C1] net_ratelimit: 205007 callbacks suppressed [ 604.677761][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 604.693360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.699316][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 604.708722][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 604.721109][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 604.730315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.738954][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 604.748365][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 604.760354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:22:35:4b:bf:ea, vlan:0) [ 604.769655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.843767][ T37] task:kworker/u8:7 state:D stack:0 pid:10548 tgid:10548 ppid:2 flags:0x00004000 [ 604.982647][ T37] Workqueue: events_unbound linkwatch_event [ 604.988682][ T37] Call Trace: [ 604.991985][ T37] [ 604.994950][ T37] __schedule+0x1322/0x1df0 [ 604.999533][ T37] ? __sched_text_start+0x10/0x10 [ 605.004593][ T37] ? kthread_data+0x54/0xc0 [ 605.009165][ T37] ? wq_worker_sleeping+0x69/0x260 [ 605.014314][ T37] ? trace_contention_begin+0xc0/0xc0 [ 605.019755][ T37] ? calc_wheel_index+0x1a7/0x8e0 [ 605.024812][ T37] schedule+0xc6/0x240 [ 605.028935][ T37] schedule_preempt_disabled+0x14/0x30 [ 605.034427][ T37] __mutex_lock+0x81e/0x1b50 [ 605.039076][ T37] ? sched_clock_noinstr+0xd/0x30 [ 605.044146][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 605.050968][ T37] ? __kasan_check_write+0x18/0x20 [ 605.056124][ T37] ? __switch_to+0xc7b/0x1310 [ 605.060862][ T37] ? _raw_spin_unlock+0x45/0x60 [ 605.065750][ T37] ? finish_task_switch+0x13a/0x780 [ 605.071010][ T37] __mutex_lock_slowpath+0xe/0x20 [ 605.076072][ T37] mutex_lock+0x102/0x1c0 [ 605.080453][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 605.085338][ T37] ? kick_pool+0xb9/0x550 [ 605.089722][ T37] rtnl_lock+0x19/0x20 [ 605.093822][ T37] linkwatch_event+0x12/0x60 [ 605.098510][ T37] process_scheduled_works+0x7d5/0x1020 [ 605.104105][ T37] worker_thread+0xc58/0x1250 [ 605.108838][ T37] kthread+0x2c7/0x370 [ 605.112962][ T37] ? __cfi_worker_thread+0x10/0x10 [ 605.118122][ T37] ? __cfi_kthread+0x10/0x10 [ 605.122740][ T37] ret_from_fork+0x64/0xa0 [ 605.127197][ T37] ? __cfi_kthread+0x10/0x10 [ 605.131839][ T37] ret_from_fork_asm+0x1a/0x30 [ 605.136642][ T37] [ 605.139784][ T37] INFO: task kworker/u8:9:10552 blocked for more than 124 seconds. [ 605.357909][ T37] Not tainted syzkaller #0 [ 605.362905][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.415254][ T37] task:kworker/u8:9 state:D stack:0 pid:10552 tgid:10552 ppid:2 flags:0x00004000 [ 605.480856][ T37] Workqueue: ipv6_addrconf addrconf_verify_work [ 605.487174][ T37] Call Trace: [ 605.490520][ T37] [ 605.493476][ T37] __schedule+0x1322/0x1df0 [ 605.498016][ T37] ? __sched_text_start+0x10/0x10 [ 605.503058][ T37] ? kthread_data+0x54/0xc0 [ 605.507588][ T37] ? wq_worker_sleeping+0x69/0x260 [ 605.512828][ T37] ? trace_contention_begin+0xc0/0xc0 [ 605.518309][ T37] schedule+0xc6/0x240 [ 605.522388][ T37] schedule_preempt_disabled+0x14/0x30 [ 605.527883][ T37] __mutex_lock+0x81e/0x1b50 [ 605.532487][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 605.539274][ T37] ? check_preempt_wakeup_fair+0x886/0xae0 [ 605.545103][ T37] ? ttwu_do_activate+0x630/0x630 [ 605.550146][ T37] ? activate_task+0x320/0x3d0 [ 605.554930][ T37] ? try_to_wake_up+0xdfb/0x1b00 [ 605.559884][ T37] __mutex_lock_slowpath+0xe/0x20 [ 605.564923][ T37] mutex_lock+0x102/0x1c0 [ 605.569270][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 605.574141][ T37] ? wake_up_process+0x14/0x20 [ 605.578951][ T37] rtnl_lock+0x19/0x20 [ 605.583041][ T37] addrconf_verify_work+0x1d/0x50 [ 605.588092][ T37] process_scheduled_works+0x7d5/0x1020 [ 605.593663][ T37] worker_thread+0xc58/0x1250 [ 605.598424][ T37] kthread+0x2c7/0x370 [ 605.602502][ T37] ? __cfi_worker_thread+0x10/0x10 [ 605.607633][ T37] ? __cfi_kthread+0x10/0x10 [ 605.612230][ T37] ret_from_fork+0x64/0xa0 [ 605.616753][ T37] ? __cfi_kthread+0x10/0x10 [ 605.621359][ T37] ret_from_fork_asm+0x1a/0x30 [ 605.626146][ T37] [ 605.666446][ T37] INFO: task syz-executor:16113 blocked for more than 125 seconds. [ 606.160171][ T37] Not tainted syzkaller #0 [ 606.165169][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.192056][ T37] task:syz-executor state:D stack:0 pid:16113 tgid:16113 ppid:1 flags:0x00004004 [ 606.202308][ T37] Call Trace: [ 606.205612][ T37] [ 606.208603][ T37] __schedule+0x1322/0x1df0 [ 606.213140][ T37] ? __sched_text_start+0x10/0x10 [ 606.218284][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 606.223434][ T37] ? __kasan_check_write+0x18/0x20 [ 606.228606][ T37] ? trace_contention_begin+0xc0/0xc0 [ 606.234015][ T37] schedule+0xc6/0x240 [ 606.238130][ T37] schedule_preempt_disabled+0x14/0x30 [ 606.243618][ T37] __mutex_lock+0x81e/0x1b50 [ 606.248270][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 606.255063][ T37] ? locks_free_lock_context+0x46/0x80 [ 606.260579][ T37] ? __destroy_inode+0x359/0x560 [ 606.265561][ T37] ? __cfi_sock_free_inode+0x10/0x10 [ 606.270926][ T37] ? call_rcu+0x14/0x20 [ 606.275114][ T37] ? evict+0x844/0xa90 [ 606.279257][ T37] ? mapping_shrinkable+0x140/0x140 [ 606.284493][ T37] ? _raw_spin_lock+0x8c/0x120 [ 606.289333][ T37] __mutex_lock_slowpath+0xe/0x20 [ 606.294388][ T37] mutex_lock+0x102/0x1c0 [ 606.298776][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 606.303657][ T37] ? sock_release+0x129/0x160 [ 606.308429][ T37] rtnl_lock+0x19/0x20 [ 606.312876][ T37] fib_net_exit_batch+0x24/0xa0 [ 606.317776][ T37] ? __cfi_fib_net_exit_batch+0x10/0x10 [ 606.323355][ T37] setup_net+0x66f/0x990 [ 606.327657][ T37] ? copy_net_ns+0xa30/0xa30 [ 606.332278][ T37] ? down_read_killable+0x79/0xf0 [ 606.337337][ T37] ? __cfi_down_read_killable+0x10/0x10 [ 606.342934][ T37] copy_net_ns+0x513/0xa30 [ 606.347417][ T37] create_new_namespaces+0x3b5/0x720 [ 606.352761][ T37] unshare_nsproxy_namespaces+0x126/0x180 [ 606.358534][ T37] ksys_unshare+0x4fe/0x880 [ 606.363071][ T37] ? __cfi_ksys_unshare+0x10/0x10 [ 606.368164][ T37] ? __kasan_check_write+0x18/0x20 [ 606.373317][ T37] __x64_sys_unshare+0x3c/0x50 [ 606.378147][ T37] x64_sys_call+0x2998/0x2ee0 [ 606.382877][ T37] do_syscall_64+0x58/0xf0 [ 606.387330][ T37] ? clear_bhb_loop+0x50/0xa0 [ 606.392078][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 606.398016][ T37] RIP: 0033:0x7fb2099903e7 [ 606.402455][ T37] RSP: 002b:00007ffeadeb5418 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 606.410936][ T37] RAX: ffffffffffffffda RBX: 00007fb209bc5f40 RCX: 00007fb2099903e7 [ 606.418968][ T37] RDX: 0000000000000005 RSI: 00007ffeadeb52e0 RDI: 0000000040000000 [ 606.426969][ T37] RBP: 00007fb209bc67b8 R08: 00007fb20a6f7d60 R09: 0000000000000000 [ 606.435003][ T37] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 606.443026][ T37] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 606.451050][ T37] [ 606.559710][ T37] NMI backtrace for cpu 0 [ 606.559741][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 606.559772][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.559786][ T37] Call Trace: [ 606.559794][ T37] [ 606.559803][ T37] __dump_stack+0x21/0x30 [ 606.559839][ T37] dump_stack_lvl+0x10c/0x190 [ 606.559867][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 606.559898][ T37] dump_stack+0x19/0x20 [ 606.559925][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 606.559955][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 606.559983][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 606.560014][ T37] ? sched_show_task+0x379/0x560 [ 606.560043][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 606.560068][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 606.560097][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 606.560125][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 606.560158][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 606.560187][ T37] watchdog+0xd8f/0xed0 [ 606.560218][ T37] ? __cfi_watchdog+0x10/0x10 [ 606.560246][ T37] ? __kasan_check_read+0x15/0x20 [ 606.560276][ T37] ? __kthread_parkme+0x138/0x180 [ 606.560304][ T37] ? schedule+0xc6/0x240 [ 606.560326][ T37] kthread+0x2c7/0x370 [ 606.560348][ T37] ? __cfi_watchdog+0x10/0x10 [ 606.560377][ T37] ? __cfi_kthread+0x10/0x10 [ 606.560399][ T37] ret_from_fork+0x64/0xa0 [ 606.560429][ T37] ? __cfi_kthread+0x10/0x10 [ 606.560451][ T37] ret_from_fork_asm+0x1a/0x30 [ 606.560486][ T37] [ 606.560494][ T37] Sending NMI from CPU 0 to CPUs 1: [ 606.760909][ C1] NMI backtrace for cpu 1 [ 606.760925][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 606.760947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.760958][ C1] RIP: 0010:unwind_next_frame+0xa/0x750 [ 606.760985][ C1] Code: 38 c1 7c 96 48 89 df e8 64 fb 97 00 eb 8c 66 90 b8 39 1f 0e d4 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 48 48 89 fb 48 ba 00 00 00 00 00 fc [ 606.761000][ C1] RSP: 0018:ffffc9000022fcd0 EFLAGS: 00000202 [ 606.761016][ C1] RAX: 0000000000000001 RBX: ffffc9000022fda0 RCX: 000000000022fd00 [ 606.761029][ C1] RDX: dffffc0000000000 RSI: ffffffff84e1b594 RDI: ffffc9000022fce8 [ 606.761041][ C1] RBP: ffffc9000022fcd8 R08: ffffc9000022fdb0 R09: ffffc9000022fda8 [ 606.761054][ C1] R10: 000000000000000a R11: ffffffff81744330 R12: ffff888103663900 [ 606.761066][ C1] R13: 0000000000000000 R14: ffffffff81744330 R15: ffffc9000022fce8 [ 606.761078][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 606.761092][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.761104][ C1] CR2: 00007fb7487ae4c0 CR3: 000000010b37c000 CR4: 00000000003526b0 [ 606.761119][ C1] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 606.761130][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 606.761141][ C1] Call Trace: [ 606.761146][ C1] [ 606.761154][ C1] arch_stack_walk+0x139/0x170 [ 606.761171][ C1] ? ip6_rcv_finish+0x344/0x3c0 [ 606.761194][ C1] stack_trace_save+0x9d/0xe0 [ 606.761217][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 606.761243][ C1] ? __cfi_ndisc_hash+0x10/0x10 [ 606.761266][ C1] kasan_save_track+0x3e/0x80 [ 606.761283][ C1] ? kasan_save_track+0x3e/0x80 [ 606.761298][ C1] ? kasan_save_free_info+0x4a/0x60 [ 606.761319][ C1] ? __kasan_slab_free+0x5f/0x80 [ 606.761335][ C1] ? kmem_cache_free+0x1c1/0x510 [ 606.761360][ C1] ? __kfree_skb+0x18f/0x210 [ 606.761374][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 606.761388][ C1] ? icmpv6_rcv+0x10b3/0x1790 [ 606.761412][ C1] ? ip6_protocol_deliver_rcu+0xbbc/0x12d0 [ 606.761433][ C1] ? ip6_input+0x1c2/0x380 [ 606.761453][ C1] ? ip6_mc_input+0x35a/0x670 [ 606.761474][ C1] ? ip6_rcv_finish+0x344/0x3c0 [ 606.761510][ C1] kasan_save_free_info+0x4a/0x60 [ 606.761532][ C1] __kasan_slab_free+0x5f/0x80 [ 606.761548][ C1] kmem_cache_free+0x1c1/0x510 [ 606.761572][ C1] ? __kfree_skb+0x18f/0x210 [ 606.761587][ C1] __kfree_skb+0x18f/0x210 [ 606.761600][ C1] ? icmpv6_rcv+0x10b3/0x1790 [ 606.761623][ C1] sk_skb_reason_drop+0xd8/0x310 [ 606.761638][ C1] icmpv6_rcv+0x10b3/0x1790 [ 606.761662][ C1] ? __cfi_icmpv6_rcv+0x10/0x10 [ 606.761685][ C1] ip6_protocol_deliver_rcu+0xbbc/0x12d0 [ 606.761710][ C1] ip6_input+0x1c2/0x380 [ 606.761731][ C1] ? __cfi_ip6_input+0x10/0x10 [ 606.761752][ C1] ? __cfi_ip6_input_finish+0x10/0x10 [ 606.761773][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 606.761795][ C1] ? ipv6_chk_mcast_addr+0x3be/0x3e0 [ 606.761811][ C1] ip6_mc_input+0x35a/0x670 [ 606.761832][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 606.761853][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 606.761879][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 606.761900][ C1] ip6_rcv_finish+0x344/0x3c0 [ 606.761921][ C1] ipv6_rcv+0xed/0x220 [ 606.761941][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 606.761961][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 606.761987][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 606.762008][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 606.762035][ C1] netif_receive_skb+0x147/0x7b0 [ 606.762061][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 606.762085][ C1] ? br_flood+0x67e/0x730 [ 606.762100][ C1] br_pass_frame_up+0x126/0x1c0 [ 606.762117][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 606.762136][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 606.762155][ C1] br_handle_frame+0x5a6/0xba0 [ 606.762172][ C1] ? __cfi_ip6_input+0x10/0x10 [ 606.762193][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 606.762209][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 606.762234][ C1] ? ipv6_chk_mcast_addr+0x3be/0x3e0 [ 606.762252][ C1] ? ip6_mc_input+0x35a/0x670 [ 606.762273][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 606.762295][ C1] ? qdisc_run_end+0x120/0x120 [ 606.762318][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 606.762339][ C1] ? ip6_rcv_finish+0x344/0x3c0 [ 606.762360][ C1] ? ipv6_rcv+0xed/0x220 [ 606.762379][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 606.762402][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 606.762422][ C1] ? calc_wheel_index+0xd2/0x8e0 [ 606.762440][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 606.762460][ C1] ? timer_update_keys+0xd0/0xd0 [ 606.762476][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 606.762507][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 606.762532][ C1] process_backlog+0x3e5/0xae0 [ 606.762550][ C1] __napi_poll+0xd3/0x610 [ 606.762574][ C1] net_rx_action+0x584/0xce0 [ 606.762591][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 606.762607][ C1] ? timer_expire_remote+0xa0/0xa0 [ 606.762623][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 606.762646][ C1] handle_softirqs+0x1ab/0x630 [ 606.762673][ C1] __do_softirq+0xf/0x16 [ 606.762688][ C1] do_softirq+0xa6/0x100 [ 606.762712][ C1] [ 606.762717][ C1] [ 606.762724][ C1] ? __cfi_do_softirq+0x10/0x10 [ 606.762747][ C1] ? __kasan_slab_free+0x6a/0x80 [ 606.762764][ C1] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 606.762784][ C1] __local_bh_enable_ip+0x74/0x80 [ 606.762808][ C1] rcu_do_batch+0x5c6/0xd20 [ 606.762832][ C1] ? rcu_core+0xd20/0xd20 [ 606.762853][ C1] ? __kasan_check_write+0x18/0x20 [ 606.762877][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 606.762903][ C1] ? __kasan_check_read+0x15/0x20 [ 606.762926][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 606.762949][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 606.762974][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 606.762998][ C1] ? __kasan_check_write+0x18/0x20 [ 606.763020][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 606.763045][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 606.763069][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 606.763094][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 606.763110][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 606.763127][ C1] ? __kasan_check_read+0x15/0x20 [ 606.763149][ C1] ? __kthread_parkme+0x138/0x180 [ 606.763164][ C1] ? schedule+0xc6/0x240 [ 606.763179][ C1] kthread+0x2c7/0x370 [ 606.763195][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 606.763219][ C1] ? __cfi_kthread+0x10/0x10 [ 606.763235][ C1] ret_from_fork+0x64/0xa0 [ 606.763259][ C1] ? __cfi_kthread+0x10/0x10 [ 606.763275][ C1] ret_from_fork_asm+0x1a/0x30 [ 606.763302][ C1] [ 608.658513][T10551] tipc: Left network mode [ 609.687612][ C0] net_ratelimit: 156918 callbacks suppressed [ 609.687637][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 609.687647][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 609.687690][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 609.693678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.702511][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 609.711718][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0! [ 609.721124][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 609.733074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.742580][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::1c on veth1_to_bridge! [ 609.751173][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::c on bridge0!