last executing test programs: 4m59.593771532s ago: executing program 0 (id=431): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x27f, @mcast2, 0xffff}, 0x1c, 0x0}}], 0x1, 0x4400c800) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000000c0)='./file2\x00', 0x81, 0x84) r3 = add_key$fscrypt_v1(&(0x7f0000000300), 0x0, &(0x7f0000000380)={0x0, "764c3cbd4bfcea3ccf39c5d39a1b806b9b7d59625e8a066879fba0a9f3e6a82551ea6a5cfc4e9b07b71db3eeffa3445ddb573a0d465f42672a21fac054d92ba2", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r3, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000100)='\x00') ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c06, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ac, 0x4}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x2}, @enter_looper], 0x84, 0x0, &(0x7f0000000680)="2d1b3d20c0ba29bb62c7bafd0b883bdecd4e7c4490253962d53ff410131869d2e28838fabae049d2498fa4b0b2472d3d992b9af99cbab1ee922264eae6a067c0f22c42361e97a1ec06606f34027fa6d792055a30c58110f81cc191ee683e247ba6f0299f0b140e60b8386a6400f8cf3b39e38d2ad7e5376a690df84ff02b4fb7d0615f6d"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 4m58.781228928s ago: executing program 0 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r1, 0x6e78340ffdda27db, 0x70bd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2008c2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1b) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r1, 0x6e78340ffdda27db, 0x70bd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2008c2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1b) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) 4m58.759227718s ago: executing program 0 (id=439): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x420}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) read$eventfd(r1, &(0x7f0000000080), 0x8) 4m58.738893819s ago: executing program 0 (id=440): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5c, 0x80000) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r5}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') (async) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8d03000) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f0000000000)) (async) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x9, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x800000cb, 0xd, 0x4, 0x6d, 0x2, 0x1002, 0xef, 0x200, 0x7, 0x92, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x800000cb, 0xd, 0x4, 0x6d, 0x2, 0x1002, 0xef, 0x200, 0x7, 0x92, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendto(r0, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) r8 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) close(r1) syz_usb_control_io(r8, 0x0, 0x0) 4m58.029178554s ago: executing program 0 (id=448): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x1012, r0, 0xd6416000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 4m57.886116775s ago: executing program 0 (id=450): socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 4m57.856074705s ago: executing program 32 (id=450): socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 3m13.581234424s ago: executing program 2 (id=2307): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)={0x3, 0x0, 0x7, 0x3, 0x6, 0x10000}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setresgid(0x0, 0xee00, 0x0) r3 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0xff04, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='squashfs\x00', 0x0, &(0x7f0000000100)='./binderfs/binder1\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000502, r7, &(0x7f0000000300)) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) 3m13.511140055s ago: executing program 2 (id=2308): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0xfffffffd, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2043, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x10, 0x9, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2404}, {r4, 0x8}], 0x2, 0x101) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc069610000000000000003"], 0x28) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m13.239696367s ago: executing program 2 (id=2309): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x4f, 0x73, 0x40, 0x10, 0xeb1, 0x7007, 0x209, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x20, 0x8, [{{0x9, 0x4, 0xe2, 0x1, 0x0, 0xff, 0x0, 0xff, 0x8}}]}}]}}, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x24, r5, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x20000000) (async) syz_usb_disconnect(r3) (async) read$char_usb(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000240)={0x73}, 0x8) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xe, 0x0, 0x100000}, 0x20) (async) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) (async) syz_usb_connect$uac1(0x3, 0xd1, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x3, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x5, 0xf, "cf5cab49bc"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7f, "431ce47d166d"}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x9, "a940e5"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x3, 0x3, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x40, 0xd, 0x3, {0x7, 0x25, 0x1, 0x83, 0x4c, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x52, 0xffff, 0x40, "ab4c2a7affa5"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfff, 0x7, 0x9, "59a9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x40, 0xfd, 0x0, 0x3, "85f8"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x2, 0xfe, "196979c2d2"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x87, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x8, 0x8, {0x7, 0x25, 0x1, 0x1, 0xb, 0x8}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x80, 0x6, 0xfd, 0x8, 0xa}, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f4190c6ca6802100701001410040c492af18190c536e44a6db6fed6beea3c03100b14100a0462000000000f053000ff00cf00ff00000000000000000000004a52875d590678769d0a90d4c9967d071e4f3bfd18637302b89bc17519c7f7b838f84a772a0e91d5775b572d3fb6381814d76f"], 0x5, [{0x59, &(0x7f0000000400)=@string={0x59, 0x3, "5c38a9351dfc2d7fcc94bd4a89c306d88cf8d683f7498114ab9ccdab9455abd084f7e3ca523c57ef042216c4cf952ba1a104fb14ff70625458e19c6c33275178363332ce983b600e995fb0eeba208d4b5f8d31b3494d98"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x804}}, {0x12, &(0x7f0000000480)=@string={0x12, 0x3, "b7bf11ebe8870a51b24c63b6046508b2"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100a}}]}) 3m10.205452509s ago: executing program 2 (id=2364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x1a, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000000000000000000000000ac1e00010000000000000000119e9c66c88d4a6a4e2300040a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}}, 0x32) getsockopt(r8, 0x111, 0x4, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 3m10.191924459s ago: executing program 2 (id=2365): symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff}, 0xc0) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2f3, 0x100100) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@posixacl}, {@loose}, {@version_9p2000}, {@cache_fscache}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, 'sysfs\x00'}}]}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000600)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000001d80)=0x3, 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200100, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000380), 0x10000) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x0, 0x7, 0x7, 0x101, r5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m10.09012029s ago: executing program 2 (id=2366): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) 2m54.400886547s ago: executing program 33 (id=2366): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) 2m49.241430746s ago: executing program 1 (id=2757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xffffffffffffffa2, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0xfffffffd}, @decrefs], 0xfffffffffffffe4b, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r5, &(0x7f0000000340)={0x100, 0x0, r6, [{0x2, 0x6, 0x1, 0x8f5, ']'}, {0x4, 0xfff, 0xa, 0x4, '}&:\\{.%-\']'}, {0x5, 0x1, 0x13, 0x200, './binderfs/binder0\x00'}, {0x6, 0xbd, 0xb, 0x9, '/dev/hwrng\x00'}, {0x4, 0x4, 0x13, 0x8000, './binderfs/binder0\x00'}, {0x4, 0x1, 0x1, 0x1, '}'}]}, 0x100) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xb0241, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f00000000c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xffffffffffffffa2, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0xfffffffd}, @decrefs], 0xfffffffffffffe4b, 0x0, 0x0}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r5, &(0x7f0000000340)={0x100, 0x0, r6, [{0x2, 0x6, 0x1, 0x8f5, ']'}, {0x4, 0xfff, 0xa, 0x4, '}&:\\{.%-\']'}, {0x5, 0x1, 0x13, 0x200, './binderfs/binder0\x00'}, {0x6, 0xbd, 0xb, 0x9, '/dev/hwrng\x00'}, {0x4, 0x4, 0x13, 0x8000, './binderfs/binder0\x00'}, {0x4, 0x1, 0x1, 0x1, '}'}]}, 0x100) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xb0241, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f00000000c0)) (async) 2m49.183095616s ago: executing program 1 (id=2760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0xb00}, 0x8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000000508010800000000000000000700000a060002400001000006000240600100002c0004800800074000006cbd0800054000000007328507400001000108000540000007be08000940fffffb0c06000240880900000900010073797a3000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044011) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x44}, 0x20007caa}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000480)=""/58, 0x9ce}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) r7 = syz_create_resource$binfmt(&(0x7f00000002c0)='./cgroup/../file0\x00') execveat$binfmt(r6, r7, &(0x7f00000003c0)={[&(0x7f0000000500)='(-\x00\x00\x00s\x12\x82|\xe3\xb2\x80,\xb7O\xe9f\xaf\xddT:\xf0\xa2o\xc8q\x16\xf2<\x90\xd2L%\n\x9a\xb3\xac\x0f\xe7\xd2\x1a\xfc\xc2\xc3\x0f|\x17\xf2\xf0\xdc\xd3\xb8\xeb\xfa\xf1\x83\xa6\"wu\x14\n\x8a\'-m\xaeX^V\x7f\xd3\xe2\xba\xe1Q\xd4\xf4\x8e\xe9\xde\xc1\xf8xx\x88\x13\x96=\x00\xdeVU\xac\xbaT2\xc4\x05', &(0x7f0000000340)='./binderfs/binder1\x00', &(0x7f0000000380)='cgroup.subtree_control\x00']}, &(0x7f0000000180), 0x800) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r10, 0x5}, 0xc) 2m49.181903866s ago: executing program 1 (id=2761): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000001200)=ANY=[@ANYBLOB="b0000000000000ab284dc9a95095f54e0800000000000600809bb7dba42f"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x11, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/183, 0xb7) 2m49.058997237s ago: executing program 1 (id=2767): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x40048c67) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) ioctl$RTC_ALM_SET(r6, 0x40187014, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0xfffffdfffffffffc, 0xeeee0000, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.998086578s ago: executing program 1 (id=2768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000240)=0x9) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="010000001e00ea39e1dbdd20d7856e2a380b780bd673dbe84aa26b875d7a0000", @ANYRES16=r3, @ANYRES8=r3, @ANYRES8=r2, @ANYRES64, @ANYBLOB="035d50883a1e03d6e303823e5868c473cd568de34d0f64fdba340000e0010000000400008007020000d467aef0f23fe738a9454c26ee6a92588d8af8cfabe33f54bb8ac9b1f8fd0407a9c661b4108d859b14a57d83ec557703ca9c8313a5d8a64360afa97c0e6d6640825bc298fd53d446ed9d178b6502000000000000000000000000004f"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="c0e88824c255544ae55c6b9bf39e666c16bd"]) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000", @ANYRES16=r11, @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) r13 = socket(0x25, 0x80005, 0x400000) sendmmsg$inet6(r12, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) dup2(r13, r12) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)) 2m48.918403668s ago: executing program 1 (id=2769): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wndno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 2m48.824973419s ago: executing program 34 (id=2769): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wndno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 51.536024295s ago: executing program 6 (id=3855): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x678) 51.441816126s ago: executing program 6 (id=3857): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8480, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r3}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = epoll_create1(0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000180)={0x40000000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r8, 0x545c, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0xfd, "43e2322109a3e58f2589aae745c80552a700"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x5c, 0x0, 0x0) r9 = openat$incfs(r7, &(0x7f00000001c0)='.pending_reads\x00', 0xdce60d0ae7c646cd, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000240)=0x5, 0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff01000000000000000000000000000100000000000000000200130001"], 0xc0}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66ed64660f3809fe0f01c3", 0x34}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 49.283534872s ago: executing program 6 (id=3870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x40, 0xf}, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000880)={0x40, 0x19, 0x2, "1af8"}, 0x0, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x80}, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000018c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @string={0x0, 0x3, "614cdf800aa60f581eba8f0b59088911827cede27005ea628a7e82600b1073af20a05823d53ecd68d39aeb418a73afe3c427bfb5b66a7d83b924c50d973a377ab11389778926b7151882bb69730e4377dd942a52f7e6f337e76c38cf776282f2ff0fee83184393fca3af252ddf00668870b6a23178366faff2c536f4fc38bc941160b5b6d8e33efc0b52474843ee49c8929322e0f654bb9d0c899af1352376e2febd53906ff91f7fb155accdb0ec4b11d9d411c3937f6faf78f90d6104e3b6b8951fa6ca510ee0fa6e74ac44ac59b182acbfe7b4d62b021a578f75d805f255d8eee2b5278ad106a6e995f1703fc8f0"}}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c00)={{0x12, 0x1, 0x250, 0x7b, 0xf5, 0x34, 0x20, 0xaf0, 0x7a01, 0xfa1f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0xb7, 0xb0, 0x4, [{{0x9, 0x4, 0xff, 0x7f, 0x0, 0x7b, 0x8a, 0x47, 0xe}}]}}]}}, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x0, 0x3d, &(0x7f0000003140)="d5ca1115f1b68bbff19e1b831cce9268662310134cb82e498bd806cb1ebd0ce522e548f89f9a362a844e64e22596e814e0d997f45d5fd7e3e67d00390d") syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x4867f000) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040030}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4e, &(0x7f0000005a00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x3, 0x10, 0xdf, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, '='}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0xac2964d, 0x4, 0x79, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xf9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0xa, 0x40}}}}}]}}]}}, &(0x7f0000005dc0)={0xa, &(0x7f0000005a80)={0xa, 0x6, 0x250, 0x5, 0x65, 0x8, 0x20, 0x6}, 0xb9, &(0x7f0000005ac0)={0x5, 0xf, 0xb9, 0x2, [@generic={0xb1, 0x10, 0xa, "49ca5f3ec057b35f5a9a28e5c17022481ea0f255fb7298d5f78df4f6fb4c770943e05cdc7916b4c5930e3aad0d889f3d58766d8b603d291419d0515cdeb5e6256812bf4316415f281384cbdf3af6cdfd8027e2bb2bcc7cd108654268d1ca58c337d92f1efd10cc2079258efba54bf6e6ced05d813dd052237509ece70ba819c6d2d9ea7f7d769eaae8ca9ad7732b4f0a5866210382b6bb7a36e6a590194ccedad2287544d4d1a11ee12418ead78e"}, @generic={0x3, 0x10, 0xb}]}, 0x1, [{0x0, 0x0}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x2, 0x5}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000010c0)={'vlan1', 0x32, 0x39}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f2c, 0x4}) read$hiddev(r5, &(0x7f0000000580)=""/207, 0xcf) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5f8e0af0733be127, 0x14}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 48.962133945s ago: executing program 3 (id=3871): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x3, 0x98, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00'], 0x0}, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000100), 0x488c, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16]) 46.78624767s ago: executing program 3 (id=3876): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000f80000000007000000440c05e3e00000010000000900000000"], 0x20}, 0x0) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x40000100000200) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async, rerun: 64) r2 = eventfd(0x6) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000300)=0x9, 0x4) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') getsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000200)=0x4) (async, rerun: 64) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x1000, 0x1000, &(0x7f0000000a80)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 46.033942756s ago: executing program 3 (id=3888): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) mlock(&(0x7f0000476000/0x2000)=nil, 0x2000) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) (async) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000001280)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x979, {0x1, 0x3, 0x0, '\x00', {0x10001, 0x4, 0x200000000003, 0xc558, r4, r5, 0x1000, '\x00', 0x400000210, 0x4000000003, 0x5, 0x9, {0xfffffffffffffffe, 0xd}, {0x8, 0x2}, {0x2, 0xffff9d04}, {0x7}, 0x2d, 0xfffffeff, 0xa, 0x7ff}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3}, 0x50) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) (async, rerun: 32) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f00009a2000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r7, 0x8000000) syz_io_uring_complete(r10) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r9, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64) sendto$inet(r9, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async, rerun: 64) splice(r9, 0x0, r8, 0x0, 0xfeac, 0xa) (async, rerun: 64) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000000200)={0xce, 0x0, r8}) (rerun: 64) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 32) 45.984786417s ago: executing program 6 (id=3891): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200a07000000070f00f4004bdf9c832542aedc0bc3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) 45.682231599s ago: executing program 5 (id=3895): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000008c0)=0x20, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 45.681373188s ago: executing program 5 (id=3896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x20, r3, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000004}, 0x4058080) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0xa35227c2015689a2, 0x0, 0xffff1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f00000003c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/248, 0xf8, 0x2, 0x4}, @fda={0x66646185, 0x2, 0x0, 0x14}, @fda={0x66646185, 0x0, 0x0, 0x26}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 45.658372799s ago: executing program 5 (id=3897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r1, 0x0, 0x1000, 0x100, &(0x7f0000000100)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect$uac1(0x6, 0x7d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000206b1d110140000102030109026b00ff7f00050409040100000102000009040101"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 45.636501299s ago: executing program 3 (id=3898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffffe, 0x80) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x100}, @flat=@weak_binder={0x77622a85, 0xa}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2344c0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffffe, 0x80) (async) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x100}, @flat=@weak_binder={0x77622a85, 0xa}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2344c0, 0x0) (async) 45.55811268s ago: executing program 3 (id=3899): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000008c0)=0x20, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000008c0)=0x20, 0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 45.373746021s ago: executing program 4 (id=3901): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r1, 0x9) syz_clone(0x6002000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="5779377856374493573beed0a34827bac7d25e22ed0b013d42d4b5fab076e88fab32ef74ffa9ed64467297bc9f3b9513d88766203b3245636c86752e53dddbe637726f5215c6e4e2f11fe65353cba52f15344fc61147a4e7da204fff6b6159ef7e222018bd4985864e55b29c3d1338217707dd57176ce4f69b5592a92ae5f0422a086a09248d91f86e79dab686771bf4f065d896d7d3e961ee0553bee8e1e2b06206d34e7c863853ecda68918c350e207816400ef43d926584cfc90d013d6f14f137f08e93c873b99b8fb113cde34cfa38a9") write(r0, &(0x7f0000001400)="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", 0xffb) 45.326005601s ago: executing program 3 (id=3902): modify_ldt$write2(0x11, &(0x7f0000000000)={0x4, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd00, 0x80000000, {0x77359400}, {}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x38, 0x0, 0x0, 0x0, "dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c3a17049dc942090000000000000018195704fd22e15c26b0555e6a957c3f2dc86a355f4806c9e4f761"}}, 0x80}}, 0x40000) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0200000020"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4041) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc41, 0x400000000000009, 0x7ffc, 0x68d7, 0x800000010000, 0x200000004, 0x4002004c2, 0x8000000000000000, 0x656, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000008, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 45.305645711s ago: executing program 4 (id=3903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r2, r2) syz_fuse_handle_req(r4, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0xf7, 0x5d}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = getpgid(0x0) syz_pidfd_open(r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r6) stat(0x0, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="3f80fd61007b6a893c3bfd9c62e7d37d9fa6a426", 0x14}, {&(0x7f0000000200)="80631a7ef991f010ec8c1e9e83557745c60d18214d805c0bd1ef331e0a3b1392905bd4619c3e37388420d3740ac35ce28dc8869709407e415adb9a1a36035d75dd95fbd0f8da8b7b25d5", 0x4a}, {&(0x7f0000000280)="117e730a398bfa444253b2ce2c0d7a2c859cc3bc21376844ba82010d04328d626300b7330d113e1475ee6f612b1a2a37a9ff261c8488ebc7e2584037d49fae52f359dd1d3380be964e39cf01908931ae803f5ffd6f4e6ec0627ab7ebd7506203ac627d", 0x63}, {&(0x7f0000000540)="e8e4a1899476ce8c8adf9553dfe9a57d05ab9c7570943e95811fcbdc507f447656383526324eab6b21ae0d40f46a640b94f3d0aaa3b17f83582e5ce230d641a32fc27f7ebc7b4b079bb7a229981b1daa3c365d40738174cadaacd8856fda97965e150d6c24883577853ce82c8039460b4f777f221be0f5c5fe60fd8e019e82efff9f7b940c23792e98712c3bf637028f3557b7080a866400a7dc5ac2cae2f09909363034f240fcc07a27", 0xaa}, {&(0x7f0000000b00)="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", 0x1000}], 0x5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x280000, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000100)=0x10000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f00000004c0)=[@request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x6, 0x0, &(0x7f0000000380)="65240c31f4f2"}) 45.266797172s ago: executing program 4 (id=3904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x5, r5}], {0x4, 0x4}, [], {0x10, 0x4}}, 0x2c, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)={0x19e4, 0x1d, 0x1, 0x70bd29, 0x25dfdbff, {0x4}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x200}, @nested={0x19c5, 0xf2, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @u32=0xffff0001}, @generic="e6a8108652ff678a094d9f3850d5f3ff1d04b8abf77fb5fd4d7f30eb5e3293821cb84ec3f4ffaedf7a41d6a494d99cf99b5ab6d9479f4743d784bd1b0e3ec490112bfdca9a61a56ce96c218436412f2319612af6fe131aec053667a68c069f76e981541d34b9df99e98db6c4db638afe0bda4136a90ad4a602da8c51280835950ba1d60f12783b01772fb0de0d963f60a395aeda3e05b9c924e77cc3eaf1de72f8", @nested={0x17c4, 0xf9, 0x0, 0x1, [@nested={0x100, 0x0, 0x0, 0x1, [@generic, @nested={0xfa, 0x82, 0x0, 0x1, [@generic="8991c1c3107b1a6a1303ea09d5e2f0c716674b483729", @nested={0x4, 0x41}, @typed={0xc, 0xfd, 0x0, 0x0, @u64=0x3}, @typed={0xd0, 0xdb, 0x0, 0x0, @binary="633f36d71db2d050c6032284d582425866223c69d1a853cc85031cbbb1413ec7e60c5b7bcb3d8a6fc46185687ba3bbad1339442e010da0b779eb3c08b2f2a0274665ef33b7a75afa15d7556bc2896fc4da722b8012823151a1ea91f06f0f13200fb7b84d0338b570f4403c7f06c92f32967ad733c7b4a8ae4f25abefa3efbfae89fc1d0d8435df19fe29f4b53f735cb08fc9cd15fcbed09e8033bd22dff7d8d49800c2280537a2d46c5b006c1da76b1a7ba1a717ae04847c8b8d23cdea160499253743145a9d6d00488a64ba"}]}]}, @nested={0xd2, 0x11b, 0x0, 0x1, [@generic="b7a1266dd2505da76abcbe27d89811138495513479c7b521bc5e76ac87ee6dd3fdeb4d193c171d7559013a58b6fc71424dcd8d0179053b253069f52930448d0ccb44826610a46d935378b5897833375452f3d4ccd2fdb504ddbfa4df7056778c45b3a6a5dcfb33a4a97faf5dcceefc207e73b8aac5f5b18ce429b7c18b20a2358312851886363a6bfa3146685fe9f5aabd62db5d6e79c9b89874437e1036465290de9cea7e9893a40c373ada894a8c4984909b5937999e96b7fc65f292d115c8a4f65f1b6e9e538def532a3c6036"]}, @nested={0x110, 0xf4, 0x0, 0x1, [@nested={0x36, 0x6f, 0x0, 0x1, [@generic="bf95a329b416f393465b65f0c2b8ee395e74d323110f7db2926c0f762197752e6e379abca4d374daf06e196018e80b8679db"]}, @generic="b8e4140de169829c7804937c1681b4921623ed560dc6eb604757fd38e6170dca44903a88cbdf8f5011f51fa5393454feff133454223290cb9d3a74155a2ccb75679f8bed823c46f0701d536bbed98e2d97aaa7d366cb136beaca02ab55e5c00b292f2d33f89b2588fb8bf8d411baabfa1af142df9f54bad9e50c3a5627ac73852f46f5512588a065cd33da4f211318ff2c246f8a8192eb3da1f783cfadbf2ada02cfaf7b7c3c38f6534c71f4017a85d5b66c434149b779906d0f88e57d5e633d5c6fee3a1c720d874ffdd6d1edc7709d9093e0e2"]}, @typed={0x8, 0x11a, 0x0, 0x0, @fd=r3}, @nested={0x1382, 0xad, 0x0, 0x1, [@generic="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", @generic="805d477a42ec4c7e01f6fd6b717a48bec34a8fb24c1448f5fc403b8f8c02076de6e5612016b33fb815ec7ab9f49f2a79580bc9e1f9703d392aea82750eecbd10d8bf175a7538796b527f66d973e1f1ef5772f5ba59ff997945c0d4b95979f9cb825e4d6aac6d62cbaae7c2c560aaab71742be1f27fcbffc83c0b5487d886ddd3773ac467a9c014a5cb0917ac67c01a0bf709647758f9af36bb7e34c90d5d6949504d9dcc6e1409349f566a8e871384861b5d90cba709e08bd86e410d3f6f5e31f110f41f12c7f8d247441405473a7b9e69cb00972986696147998954106b4482a0e241ffcb7980c4425202dd92b1d23214e0", @typed={0x8, 0x5a, 0x0, 0x0, @fd=r3}, @nested={0x100, 0x11a, 0x0, 0x1, [@nested={0x4, 0x128}, @generic="216fc70275525ea98608eba5b8698ded491991c3d83b", @nested={0x4, 0x4c}, @nested={0x4, 0x4f}, @generic="c77e5bcb58bff7bba3a00efd090406611c781154e0ccf6ff7b17ff2173368857c51a5e8ac798345bbbb44d7a673bbf3dbc579a494713c1d9e30e73ba07f79d00bc653175af552a8d731f5b1df482147bc21054d8854023fab9f6a7623e5ec4e2ff52500aec0cc046a197dbc89a9322ea70611f6cd0557577", @typed={0x4, 0xc7}, @typed={0x8, 0x17, 0x0, 0x0, @fd=r1}, @generic="7d4fe9507dc072b9f97bb4d68cd508204ed1b46f6b45b2391f000efff33eba8e7065b84f6ffebfc9d8f9df5dce9c95e130a86dc74c924d67772513c829642492cee9069bc81cee383988a4a85d52883f20dc260d1dcd"]}, @nested={0xc, 0x40, 0x0, 0x1, [@nested={0x4, 0x137}, @nested={0x4, 0x95}]}, @nested={0xde, 0x13e, 0x0, 0x1, [@typed={0x8, 0x10a, 0x0, 0x0, @pid=r4}, @generic="8d337c2839f7b1f6c4c29f1e8abadd7fb1f331e21f76ca51ee85881542e8e958d48947017a5435f145c8dcb219b513f641db841e999b59cc49d66e6b0eb14d053e93447ae5afd00ccadd4581566abc20ad32faf776f722378a3425089bfdef5f684bb8ebe2f060", @nested={0x4, 0x106}, @nested={0x4, 0x27}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x128}, @generic="df90b4f4f7a03f0f91a752aeb2a0b132f464bbbb545268e361a64349a4cc26494093880a9a5cea4f70d0eafc5bf7e8ec6573df04d7a3c8553dd14f9c9e62e64fbdda401653a8f51c21b654d9c05c0f", @nested={0x4, 0x27}]}, @nested={0x95, 0xfb, 0x0, 0x1, [@generic="30013a9c217274d47f9284b48ef4dfff7d5c0fb0187483d8c0abb3fc9d43f310fba9a99ed295a9ae7c44b8e3f6e662d88fa81ef2668ad212bedc2e31b4356a7763dbe4b4f9e394e20bca27c2fec86c7a5381373c4a1953dd9e1f6465dd7627a5cffbb3db2997e7e05eb37bbb580d53ea5f34adf245382ca8bc1660f92510b55de4edfb478cd143f1be6d7b0ab157fd6e0b"]}]}, @nested={0x14e, 0x145, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="0ba5a4cf28551b9fbefd7a58fc5261e259bf09c73001a9efea0b5aeb27a6f4e345bc2612c61406a9497cfc3082e59e0ae9831bf58769882e79ec898573dbbea90ca5296b98da0c3602c495fa32a3cfdc194263355e3d6be4c0d749f9c42db9e52345fe3eba8c4ce2a6aff4b412e284dc0d940f8833af8cdde0725382ccba7a9e7052626dd39375ace5bf9d7728438ef65cfc4bdaef26c237d15fdb4260a146f9298cfbe8a28d78e8320edcf3fb29d942e58f6a5887ef717e2c181c70f5a19b65132d969becd988e3e38b01095bd6cc74f066ec397c7e885413d5a8b15dcc1ec80ff0", @typed={0xc, 0x53, 0x0, 0x0, @u64}, @generic="29dc8f4a27039e1b2e83e2158e70e59d6dec43e93309d4f2e353b6fa580ac5afcc1d91e2f6a3fba1326e27f04534a81889e0", @generic="6ea1743cf62c295d8b014ef005e010f2a28d4b0f139a930289c32a862fbc37e0199e"]}]}, @typed={0x17, 0x87, 0x0, 0x0, @str='./binderfs/binder1\x00'}, @generic="b4e57fb4d6a4998234ee9370be432fa1c07e06b989f5c607ef6345c1a4bac2a3b5e2717a80944c536eb59160", @nested={0x18, 0x17, 0x0, 0x1, [@nested={0x4, 0x100}, @nested={0x4, 0x70}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x3}]}, @generic="cb313071ea053794affb58b4cb6656f1abda11732f35cc26121dd0d43481c011bbfdc5473758e732f11cdde4b2790ac2a6590c18", @nested={0xb7, 0x12, 0x0, 0x1, [@typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0xbe, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x42, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x9c}, @generic="7e9f1cfe052288b36066aa300a876d8a89138e729d34ddebc7da0f068707267e9a14f74e85d833ec2de0224927ab10d666a7bcb0b866b598ac8f7393dc52d88752888a1c75a0a4de0e96b6e3c734ea5f2d467053ae0134a6a80719956850a00d4f5cf9d737f4706d45985900957345", @typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@empty}, @typed={0x4, 0x2b}]}, @generic="d34bfe01b0de5a10e6050604"]}]}, 0x19e4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$MON_IOCQ_URB_LEN(r10, 0x9201) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="00000a65bbbbbbbbbbbb0aaeffffffff88a83000810000000806"], 0x36) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20280}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4008800}, 0x50) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r13, 0x400454d1, &(0x7f0000000180)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109025c0002018010060904000001020d000005240600010524002aab0d240f0105000000ff0f0800a9b2131a0400020905810310007981010904010000fc0c00090000000102020d0000090582020002070023090503020002060909"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.884176764s ago: executing program 5 (id=3905): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) 41.57230339s ago: executing program 6 (id=3906): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8993, &(0x7f0000000440)={'sit0\x00', 0x0}) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 41.028934534s ago: executing program 4 (id=3907): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0xda8d, 0x204101) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000200)={0x7, 0x3}) r2 = userfaultfd(0x801) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x402, 0x10000, @local}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3f80, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3f80, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005a000101000000000000000004000080080002"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005a000101000000000000000004000080080002"], 0x1c}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) fcntl$dupfd(r2, 0x0, r2) (async) r8 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000aa8000/0x3000)=nil, 0x3000}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000140)="3900000011", 0x5}], 0x1) splice(r9, 0x0, r11, 0x0, 0x4, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) fsmount(r5, 0x0, 0x4) (async) fsmount(r5, 0x0, 0x4) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x30) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x30) 38.160888755s ago: executing program 5 (id=3908): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xcc, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}}]}]}, 0xcc}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="107903b309ef6c3b8a09d00165fdf6eb6db13c9029bcc06aa7d9bb063c8d530513d6309a170b0672814af639241aa9f4309dad072fd08391488ddc618477f20116d089900209efe3f4da6a8004519b56dbf31e72e6abbcbaf4984c", 0x5b}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x2, r6}, 0x10) recvmmsg(r4, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2041, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r8}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4d, 0x5, 0x8b, 0xc, 0x5, 0xc6, 0x4, 0x81, 0x5, 0x40, [0xfffffffc, 0x8, 0xffffff5b, 0x7fffffff, 0x60c, 0xf, 0x8b68, 0x38], [0x74a]}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r12}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r12}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) socket$key(0xf, 0x3, 0x2) 37.214303962s ago: executing program 6 (id=3909): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000150001c0"]) (async, rerun: 32) r3 = fsopen(&(0x7f0000000040)='efs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = fsmount(r3, 0x0, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010000), 0x82, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000000680)={0x1, 0x9}) unlink(0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x123081, 0x0) readv(r8, 0x0, 0x0) (async) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000340)) fchownat(r4, &(0x7f0000000380)='./file0\x00', 0x0, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10006, 0x4, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffff5, 0x3, 0x4, 0x8, 0x2}) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_int(r11, 0x107, 0xc, &(0x7f0000000300), 0x4) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x79, 0x1, 0x3, 0x1}, {0x9, 0x5, 0x21, 0x9}, {0x2, 0x10, 0x4, 0x10000}, {0x5, 0x6, 0x9, 0x9}]}) poll(&(0x7f0000000200)=[{r2, 0x2f3}, {r2, 0x20}, {r12, 0x1400}], 0x3, 0x2) 36.496426147s ago: executing program 4 (id=3910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xe, 0x1c}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000140)="df970f") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_secret(0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000280)) write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x1f) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/281], 0x154}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90c0}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fff1df2508000000080005fb080000000400060002587b017b00028008000600050000000800060000020000"], 0x38}}, 0x20004010) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0) 28.233841619s ago: executing program 35 (id=3902): modify_ldt$write2(0x11, &(0x7f0000000000)={0x4, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd00, 0x80000000, {0x77359400}, {}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x38, 0x0, 0x0, 0x0, "dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c3a17049dc942090000000000000018195704fd22e15c26b0555e6a957c3f2dc86a355f4806c9e4f761"}}, 0x80}}, 0x40000) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0200000020"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4041) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc41, 0x400000000000009, 0x7ffc, 0x68d7, 0x800000010000, 0x200000004, 0x4002004c2, 0x8000000000000000, 0x656, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000008, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 25.926029356s ago: executing program 4 (id=3912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async, rerun: 64) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (rerun: 64) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r4, 0xe, {0x2a00, 0x80010000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab75fc179fd1f8a0e91ddaaca7bd6447a4bde00d9683dda1af1ea09de2b7fb4af956000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5523406c7f0000000000000000000000000000000000000900", [0x4, 0x40000000000000]}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000006, 0x50012, r2, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (rerun: 32) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 25.191372502s ago: executing program 5 (id=3913): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x201, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x6080}, 0x4000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe0, 0xa0, 0x90, 0x10, 0x525, 0x1080, 0x5b44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x93, 0x0, 0x2, 0x5c, 0x8a, 0x4f, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) readv(r4, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 17.560157398s ago: executing program 36 (id=3909): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000150001c0"]) (async, rerun: 32) r3 = fsopen(&(0x7f0000000040)='efs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = fsmount(r3, 0x0, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010000), 0x82, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000000680)={0x1, 0x9}) unlink(0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x123081, 0x0) readv(r8, 0x0, 0x0) (async) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000340)) fchownat(r4, &(0x7f0000000380)='./file0\x00', 0x0, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10006, 0x4, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffff5, 0x3, 0x4, 0x8, 0x2}) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_int(r11, 0x107, 0xc, &(0x7f0000000300), 0x4) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x79, 0x1, 0x3, 0x1}, {0x9, 0x5, 0x21, 0x9}, {0x2, 0x10, 0x4, 0x10000}, {0x5, 0x6, 0x9, 0x9}]}) poll(&(0x7f0000000200)=[{r2, 0x2f3}, {r2, 0x20}, {r12, 0x1400}], 0x3, 0x2) 575.667975ms ago: executing program 37 (id=3912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async, rerun: 64) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (rerun: 64) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r4, 0xe, {0x2a00, 0x80010000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab75fc179fd1f8a0e91ddaaca7bd6447a4bde00d9683dda1af1ea09de2b7fb4af956000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5523406c7f0000000000000000000000000000000000000900", [0x4, 0x40000000000000]}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000006, 0x50012, r2, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (rerun: 32) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 38 (id=3913): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x201, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x6080}, 0x4000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe0, 0xa0, 0x90, 0x10, 0x525, 0x1080, 0x5b44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x93, 0x0, 0x2, 0x5c, 0x8a, 0x4f, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) readv(r4, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) kernel console output (not intermixed with test programs): 9 comm="syz.5.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 261.500837][ T36] audit: type=1107 audit(2000000115.344:3769): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 261.542725][T10453] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3181'. [ 261.597541][T10454] 9pnet_virtio: no channels available for device [ 261.669244][ T36] audit: type=1400 audit(2000000115.522:3770): avc: denied { execute } for pid=10452 comm="syz.3.3181" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 261.786753][ T36] audit: type=1400 audit(2000000115.635:3771): avc: denied { listen } for pid=10472 comm="syz.4.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.791210][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 261.972142][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 261.978921][ T10] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.990076][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 261.996826][ T10] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 262.006015][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.015366][ T10] usb 6-1: config 0 descriptor?? [ 262.238597][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.247790][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.263291][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 262.270199][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 262.282600][ T10] usb 6-1: USB disconnect, device number 9 [ 262.546958][T10520] overlayfs: failed to resolve './bus': -2 [ 263.133819][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 263.294826][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.303027][ T10] usb 6-1: config 0 has no interface number 0 [ 263.309314][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.320342][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.330603][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.339688][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.348393][ T10] usb 6-1: config 0 descriptor?? [ 263.420840][ T36] audit: type=1400 audit(2000000117.165:3772): avc: denied { mount } for pid=10547 comm="syz.4.3215" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 263.547240][T10561] /dev/loop0: Can't lookup blockdev [ 263.782487][ T10] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 263.789641][ T10] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 263.796742][ T10] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 263.804008][ T10] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 263.811102][ T10] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 263.818324][ T10] uclogic 0003:256C:006D.0018: No inputs registered, leaving [ 263.826246][ T10] uclogic 0003:256C:006D.0018: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input1 [ 264.164163][ T406] usb 6-1: USB disconnect, device number 10 [ 264.352749][T10585] netlink: 'syz.3.3229': attribute type 25 has an invalid length. [ 264.373394][T10588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3230'. [ 264.422665][T10597] netlink: 'syz.3.3234': attribute type 4 has an invalid length. [ 264.430528][T10597] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3234'. [ 265.297359][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 265.455965][T10640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.457075][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 265.471559][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 265.481131][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 265.488848][ T10] usb 6-1: can't read configurations, error -71 [ 265.524005][T10642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 266.017855][T10648] __vm_enough_memory: pid: 10648, comm: syz.5.3251, bytes: 18014402804453376 not enough memory for the allocation [ 266.503386][ T36] audit: type=1326 audit(2000000120.064:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.6.3260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2a6f8f6c9 code=0x0 [ 266.608079][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 266.767914][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 266.774252][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 266.789230][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 266.808767][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 266.821205][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.841934][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 266.863829][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 266.895811][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 266.905027][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.928089][ T10] usb 6-1: config 0 descriptor?? [ 267.154850][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 267.167041][ T10] usb 6-1: USB disconnect, device number 12 [ 267.174108][ T10] usblp0: removed [ 267.411130][T10683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.412121][T10683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.472828][T10686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 267.479426][T10686] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 267.488723][T10686] rust_binder: Read failure Err(EFAULT) in pid:175 [ 267.497144][T10686] rust_binder: Read failure Err(EAGAIN) in pid:175 [ 267.620542][ T211] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 267.791087][ T211] usb 6-1: Using ep0 maxpacket: 32 [ 267.797780][ T211] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 267.806242][ T211] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 267.814905][ T211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 267.823904][ T211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.833683][ T211] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 267.843328][ T211] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 267.856327][ T211] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 267.865508][ T211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.874425][ T211] usb 6-1: config 0 descriptor?? [ 268.094387][ T211] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 268.682853][ T211] usb 6-1: USB disconnect, device number 13 [ 268.689617][ T211] usblp0: removed [ 269.154292][T10716] VFS: Mount too revealing [ 269.167994][T10716] bpf: Bad value for 'mode' [ 269.243972][T10723] __vm_enough_memory: pid: 10723, comm: syz.5.3278, bytes: 18014402804453376 not enough memory for the allocation [ 269.385429][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.395700][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.634764][ T406] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 269.796003][ T406] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.806297][ T406] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.818936][ T406] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.828080][ T406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.836179][ T406] usb 6-1: Product: syz [ 269.840419][ T406] usb 6-1: Manufacturer: syz [ 269.845039][ T406] usb 6-1: SerialNumber: syz [ 269.851782][ T406] cdc_mbim 6-1:1.0: skipping garbage [ 269.857146][ T406] usb 6-1: selecting invalid altsetting 1 [ 270.294830][ T36] audit: type=1400 audit(2000000123.611:3774): avc: denied { create } for pid=10729 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 270.321356][ T406] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 270.335865][ T406] cdc_mbim 6-1:1.0: bind() failure [ 270.445236][ T10] usb 6-1: USB disconnect, device number 14 [ 271.038885][T10746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10746 comm=syz.3.3288 [ 271.738886][T10781] rust_binder: Error while translating object. [ 271.738946][T10781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 271.745306][T10781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:187 [ 271.824641][T10789] rust_binder: 193: no such ref 3 [ 271.879378][ T36] audit: type=1400 audit(2000000125.103:3775): avc: denied { create } for pid=10788 comm="syz.6.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 272.176431][ T36] audit: type=1400 audit(2000000125.384:3776): avc: denied { write } for pid=10791 comm="syz.5.3304" name="/" dev="configfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.385307][T10808] cgroup: fork rejected by pids controller in /syz4 [ 273.158446][T10854] rust_binder: Write failure EFAULT in pid:270 [ 273.174975][ T36] audit: type=1326 audit(2000000126.323:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.182508][T10859] 9pnet_fd: Insufficient options for proto=fd [ 273.205094][ T36] audit: type=1326 audit(2000000126.323:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.234589][ T36] audit: type=1326 audit(2000000126.323:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.258860][ T36] audit: type=1326 audit(2000000126.323:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.282884][ T36] audit: type=1326 audit(2000000126.323:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.306645][ T36] audit: type=1326 audit(2000000126.323:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.330792][ T36] audit: type=1326 audit(2000000126.323:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.354595][ T36] audit: type=1326 audit(2000000126.323:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.5.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 273.395077][T10861] __vm_enough_memory: pid: 10861, comm: syz.5.3322, bytes: 18014402804453376 not enough memory for the allocation [ 273.897828][T10883] binder: Bad value for 'stats' [ 274.803046][T10893] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 274.803074][T10893] rust_binder: Read failure Err(EFAULT) in pid:291 [ 274.890891][T10903] rust_binder: Write failure EFAULT in pid:300 [ 275.006163][T10901] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3332'. [ 275.944735][T10961] __vm_enough_memory: pid: 10961, comm: syz.6.3356, bytes: 18014402804453376 not enough memory for the allocation [ 275.988404][T10963] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3357'. [ 276.020616][T10965] rust_binder: 314: no such ref 0 [ 276.052503][T10970] binder: Binderfs stats mode cannot be changed during a remount [ 276.212912][T10995] SELinux: ebitmap start bit (8390592) is beyond the end of the bitmap (1472) [ 276.213203][T11001] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3371'. [ 276.223650][T10995] SELinux: failed to load policy [ 276.261122][T11005] tipc: Started in network mode [ 276.266178][T11005] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 276.275491][T11005] tipc: Enabling of bearer rejected, failed to enable media [ 276.374652][T11017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.376357][T11016] tun0: tun_chr_ioctl cmd 1074025675 [ 276.388192][T11016] tun0: persist enabled [ 276.392711][T11016] tun0: tun_chr_ioctl cmd 1074025675 [ 276.398017][T11016] tun0: persist disabled [ 276.402732][T11016] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 276.402757][T11016] rust_binder: Error while translating object. [ 276.415027][T11016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 276.421316][T11016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 276.473279][T11020] loop7: detected capacity change from 0 to 7 [ 276.489351][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.498560][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 276.508865][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.518020][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 276.525986][T11020] loop7: unable to read partition table [ 276.532897][T11020] loop_reread_partitions: partition scan of loop7 (濉檳鼚綜阩號恽P=媒?銄W嫼 滊%醌`涉謤鶇{愆謵^k輮) failed (rc=-5) [ 276.540009][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.555912][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.565181][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 276.573506][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.582821][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 276.590968][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.600329][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 276.608513][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.617754][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 276.626971][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.636265][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 276.755281][T11034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.783972][T11038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.841295][T11051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.851126][T11051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.862286][T11051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:243 [ 276.892250][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3394'. [ 277.006822][T11089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.007227][T11089] syz.6.3402(11089): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 277.027197][T11089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:252 [ 277.311241][T11123] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 277.327764][T11123] rust_binder: Write failure EINVAL in pid:372 [ 277.339483][T11126] rust_binder: 375: no such ref 0 [ 277.350943][T11126] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 277.358006][T11126] rust_binder: 375: no such ref 2 [ 277.448018][T11129] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=11129 comm=syz.5.3418 [ 277.810617][T11136] netlink: 'syz.4.3420': attribute type 4 has an invalid length. [ 277.818480][T11136] netlink: 3649 bytes leftover after parsing attributes in process `syz.4.3420'. [ 277.828501][T11136] overlayfs: failed to clone lowerpath [ 277.834661][T11137] overlayfs: failed to clone lowerpath [ 277.835340][T11136] overlayfs: failed to clone lowerpath [ 278.391331][T11149] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11149 comm=syz.4.3425 [ 278.404265][T11149] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11149 comm=syz.4.3425 [ 278.539057][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 278.539079][ T36] audit: type=1326 audit(2000000131.352:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.569008][ T36] audit: type=1326 audit(2000000131.352:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.592792][ T36] audit: type=1326 audit(2000000131.352:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.616469][ T36] audit: type=1326 audit(2000000131.352:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.640397][ T36] audit: type=1326 audit(2000000131.352:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.663971][ T36] audit: type=1326 audit(2000000131.352:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.687627][ T36] audit: type=1326 audit(2000000131.352:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.711278][ T36] audit: type=1326 audit(2000000131.352:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.734855][ T36] audit: type=1326 audit(2000000131.352:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.758805][ T36] audit: type=1326 audit(2000000131.352:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.4.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43db8f6c9 code=0x7fc00000 [ 278.803117][T11157] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 279.109133][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 279.221526][T11195] 9pnet_fd: Insufficient options for proto=fd [ 279.262682][ T5986] tipc: Subscription rejected, illegal request [ 279.280850][ T10] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 279.303110][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.319153][ T10] usb 6-1: config 0 descriptor?? [ 279.350803][T11210] overlayfs: regular lower layers cannot follow data lower layers [ 279.359365][T11210] overlayfs: failed to resolve '//繯 V昴)趞漫 [ 279.359365][T11210] QG#9*j624>踶齼 [ 279.359365][T11210] 5H75B齛kT舊nI2P茫!G8闶$': -2 [ 279.567404][ T10] usb 6-1: Cannot set MAC address [ 279.572577][ T10] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 279.588216][ T10] usb 6-1: USB disconnect, device number 15 [ 279.726880][T11223] netlink: 'syz.6.3452': attribute type 1 has an invalid length. [ 279.812838][T11232] rust_binder: Write failure EFAULT in pid:272 [ 279.832274][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3454'. [ 279.902052][T11240] loop7: detected capacity change from 0 to 7 [ 279.908904][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.918084][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 279.926579][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.935841][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 279.948328][ T9619] loop7: unable to read partition table [ 279.956706][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 279.965073][T11240] loop7: unable to read partition table [ 279.971004][T11240] loop_reread_partitions: partition scan of loop7 (濉檳鼚綜阩號恽P=媒?銄X嫼 滊%醌`涉謤鶇{愆謵樔4FLQk輮) failed (rc=-5) [ 280.110039][T11245] fuse: Invalid gid '00000000000037777777777' [ 280.117259][T11245] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 280.236801][T11253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 280.263011][T11253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 280.285395][T11253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:403 [ 280.316112][T11268] rust_binder: Error while translating object. [ 280.325399][T11268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 280.331688][T11268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:405 [ 280.361215][T11273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.371480][T11273] rust_binder: Error while translating object. [ 280.379929][T11273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 280.386738][T11273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408 [ 280.494698][T11283] overlayfs: failed to clone upperpath [ 280.496824][T11284] overlayfs: failed to clone upperpath [ 280.505068][T11286] netlink: 'syz.5.3475': attribute type 32 has an invalid length. [ 280.524637][T11284] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3474'. [ 280.524996][T11288] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3474'. [ 280.602702][T11299] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3478'. [ 280.611951][T11299] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3478'. [ 280.621107][T11299] netlink: 'syz.5.3478': attribute type 6 has an invalid length. [ 280.628913][T11299] netlink: 'syz.5.3478': attribute type 5 has an invalid length. [ 280.636808][T11299] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3478'. [ 280.658559][T11302] binder: Unknown parameter 'context甜责[7' [ 280.721102][T11305] tipc: Trying to set illegal importance in message [ 280.974210][ T406] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 280.997476][T11310] overlayfs: missing 'lowerdir' [ 281.134049][ T406] usb 6-1: Using ep0 maxpacket: 32 [ 281.140519][ T406] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 281.149062][ T406] usb 6-1: config 0 has no interface number 0 [ 281.159391][ T406] usb 6-1: config 0 interface 72 has no altsetting 0 [ 281.168938][T11323] netlink: 'syz.3.3488': attribute type 11 has an invalid length. [ 281.170511][ T406] usb 6-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 281.186117][ T406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.194157][ T406] usb 6-1: Product: syz [ 281.198404][ T406] usb 6-1: Manufacturer: syz [ 281.203033][ T406] usb 6-1: SerialNumber: syz [ 281.208288][ T406] usb 6-1: config 0 descriptor?? [ 282.406274][T11339] futex_wake_op: syz.3.3493 tries to shift op by -1; fix this program [ 282.440588][T11343] overlayfs: failed to clone upperpath [ 283.718594][T11394] bridge0: port 3(syz_tun) entered blocking state [ 283.725347][T11394] bridge0: port 3(syz_tun) entered disabled state [ 283.731883][T11394] syz_tun: entered allmulticast mode [ 283.737775][T11394] syz_tun: entered promiscuous mode [ 283.743102][T11394] bridge0: port 3(syz_tun) entered blocking state [ 283.749587][T11394] bridge0: port 3(syz_tun) entered forwarding state [ 283.811429][T11406] 9pnet_fd: Insufficient options for proto=fd [ 283.949492][ T406] usb 6-1: MIDIStreaming interface descriptor not found [ 283.963940][ T406] usb 6-1: USB disconnect, device number 16 [ 283.973066][T11419] batadv_slave_1: entered promiscuous mode [ 283.981177][T11418] batadv_slave_1: left promiscuous mode [ 284.168011][T11428] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3523'. [ 284.177386][T11428] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.379399][T11452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.379439][T11452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 284.719881][T11475] rust_binder: 460: no such ref 3 [ 284.741839][T11475] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 284.752021][T11475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:460 [ 284.778480][T11485] bridge0: port 3(veth1_to_bridge) entered blocking state [ 284.795207][T11485] bridge0: port 3(veth1_to_bridge) entered disabled state [ 284.802602][T11485] veth1_to_bridge: entered allmulticast mode [ 284.809503][T11485] veth1_to_bridge: entered promiscuous mode [ 284.815716][T11485] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.828353][T11485] bridge0: port 3(veth1_to_bridge) entered blocking state [ 284.835514][T11485] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 284.921355][ T36] kauditd_printk_skb: 3376 callbacks suppressed [ 284.921376][ T36] audit: type=1400 audit(2000000137.338:7241): avc: denied { mounton } for pid=11480 comm="syz.6.3540" path="/104/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 285.057126][ T36] audit: type=1326 audit(2000000137.470:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11502 comm="syz.5.3547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x0 [ 285.084252][T11509] tipc: Started in network mode [ 285.089237][T11509] tipc: Node identity 4, cluster identity 4711 [ 285.095489][T11509] tipc: Node number set to 4 [ 285.104350][T11511] overlayfs: failed to clone upperpath [ 285.112948][T11511] rust_binder: Error while translating object. [ 285.112991][T11511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 285.119391][T11511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:476 [ 285.207868][ T36] audit: type=1400 audit(2000000137.611:7243): avc: denied { map } for pid=11517 comm="syz.5.3551" path="socket:[52182]" dev="sockfs" ino=52182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.344934][T11549] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 286.373152][ T36] audit: type=1400 audit(2000000138.699:7244): avc: denied { create } for pid=11552 comm="syz.5.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 286.463866][T11556] rust_binder: Error in use_page_slow: ESRCH [ 286.463902][T11556] rust_binder: use_range failure ESRCH [ 286.470033][T11556] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 286.475654][T11556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 286.483683][T11556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:495 [ 286.522000][T11562] 9pnet_fd: Insufficient options for proto=fd [ 287.457832][T11573] rust_binder: 504: no such ref 3 [ 287.462928][T11573] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 287.470090][T11573] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 287.477230][T11573] rust_binder: Write failure EFAULT in pid:504 [ 287.891782][T11623] netlink: 'syz.5.3584': attribute type 1 has an invalid length. [ 287.937511][T11625] rust_binder: Write failure EINVAL in pid:521 [ 287.950486][ T36] audit: type=1326 audit(2000000140.182:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.6.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a6f8f6c9 code=0x7fc00000 [ 288.043451][T11629] cgroup: fork rejected by pids controller in /syz5 [ 288.250022][ T36] audit: type=1326 audit(2000000140.463:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 288.296697][ T36] audit: type=1326 audit(2000000140.482:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 288.324750][ T36] audit: type=1326 audit(2000000140.482:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 288.348404][ T36] audit: type=1326 audit(2000000140.482:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 288.373643][ T36] audit: type=1326 audit(2000000140.491:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f444a38f6c9 code=0x7ffc0000 [ 288.540877][ T211] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 288.700724][ T211] usb 6-1: Using ep0 maxpacket: 16 [ 288.707503][ T211] usb 6-1: unable to get BOS descriptor or descriptor too short [ 288.716220][ T211] usb 6-1: config 8 has an invalid interface number: 132 but max is 0 [ 288.724472][ T211] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 288.734673][ T211] usb 6-1: config 8 has no interface number 0 [ 288.740776][ T211] usb 6-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.754074][ T211] usb 6-1: config 8 interface 132 has no altsetting 0 [ 288.762603][ T211] usb 6-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 288.771793][ T211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.779838][ T211] usb 6-1: Product: syz [ 288.784045][ T211] usb 6-1: Manufacturer: syz [ 288.788703][ T211] usb 6-1: SerialNumber: syz [ 289.021571][T11674] rust_binder: Write failure EINVAL in pid:558 [ 289.023006][ T211] usb-storage 6-1:8.132: USB Mass Storage device detected [ 289.041620][ T211] usb-storage 6-1:8.132: Quirks match for vid 07cf pid 1001: a [ 289.081465][ T211] usb 6-1: USB disconnect, device number 17 [ 289.583303][T11707] rust_binder: Error while translating object. [ 289.583346][T11707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.589641][T11707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:562 [ 289.712040][T11716] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3608'. [ 289.915395][T11722] tipc: Enabling of bearer rejected, failed to enable media [ 290.693231][T11748] 9pnet_fd: Insufficient options for proto=fd [ 290.701493][T11748] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.800234][ T211] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 290.961213][ T211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.972212][ T211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.981978][ T211] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.995008][ T211] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.004099][ T211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.012767][ T211] usb 6-1: config 0 descriptor?? [ 291.197674][T11750] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3621'. [ 291.282406][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 291.282472][ T36] audit: type=1326 audit(2000000143.316:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.321552][ T36] audit: type=1326 audit(2000000143.316:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.356845][ T36] audit: type=1326 audit(2000000143.316:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.382885][ T36] audit: type=1326 audit(2000000143.316:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.406737][ T36] audit: type=1326 audit(2000000143.316:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.430259][ T36] audit: type=1326 audit(2000000143.316:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.454143][ T36] audit: type=1326 audit(2000000143.316:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.477996][ T36] audit: type=1326 audit(2000000143.316:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.479144][ T211] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 291.502265][ T36] audit: type=1326 audit(2000000143.316:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 291.520338][ T211] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 291.533104][ T36] audit: type=1326 audit(2000000143.316:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69b8f6c9 code=0x7ffc0000 [ 292.000319][ T66] usb 6-1: USB disconnect, device number 18 [ 292.803850][ T66] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 292.964884][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.975892][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.985763][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.998745][ T66] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.007831][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.016382][ T66] usb 6-1: config 0 descriptor?? [ 293.449802][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.457930][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.465495][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.472914][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.480328][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.487773][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.495151][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.502560][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.510025][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.517520][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.524941][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.532450][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.539862][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.547256][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.554666][ T66] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 293.562233][ T66] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 293.571001][ T66] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 293.668069][ T66] usb 6-1: USB disconnect, device number 19 [ 322.840124][T11815] rust_binder: Write failure EFAULT in pid:575 [ 322.842278][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 322.842299][ T36] audit: type=1400 audit(2000000172.920:7371): avc: denied { map } for pid=11813 comm="syz.3.3647" path="socket:[53636]" dev="sockfs" ino=53636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.913713][T11836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:580 [ 322.914208][T11836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 322.915300][T11838] netlink: 'syz.4.3653': attribute type 4 has an invalid length. [ 322.923936][T11836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:580 [ 322.974259][T11838] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3653'. [ 322.993119][T11845] overlayfs: missing 'lowerdir' [ 323.016896][T11838] incfs: Options parsing error. -22 [ 323.029736][T11838] incfs: mount failed -22 [ 323.109210][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 323.194833][T11871] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3664' sets config #0 [ 323.205533][T11871] rust_binder: Error while translating object. [ 323.205608][T11871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 323.212116][T11871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:588 [ 323.857596][T11890] rust_binder: Write failure EFAULT in pid:600 [ 323.884938][T11892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 323.891315][T11892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:602 [ 324.524400][T11910] rust_binder: 614: no such ref 2 [ 324.589284][T11918] overlayfs: failed to clone upperpath [ 324.631922][ T36] audit: type=1326 audit(2000000174.599:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.648835][T11912] netlink: 'syz.5.3680': attribute type 27 has an invalid length. [ 324.655442][ T36] audit: type=1326 audit(2000000174.599:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.687559][ T36] audit: type=1326 audit(2000000174.599:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.687606][T11912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11912 comm=syz.5.3680 [ 324.712395][ T36] audit: type=1326 audit(2000000174.599:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.747746][ T36] audit: type=1326 audit(2000000174.599:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.771918][ T36] audit: type=1326 audit(2000000174.599:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.783517][T11927] rust_binder: inc_ref_done called when no active inc_refs [ 324.795572][ T36] audit: type=1326 audit(2000000174.599:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.826813][ T36] audit: type=1326 audit(2000000174.599:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.850633][ T36] audit: type=1326 audit(2000000174.599:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69b8f6c9 code=0x50000 [ 324.934095][T11928] incfs: Options parsing error. -22 [ 324.939695][T11928] incfs: mount failed -22 [ 325.250845][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3688'. [ 325.799094][ T66] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 325.958791][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 325.966235][ T66] usb 6-1: unable to get BOS descriptor or descriptor too short [ 325.983161][ T66] usb 6-1: config 6 has an invalid interface number: 254 but max is 0 [ 325.994525][ T66] usb 6-1: config 6 has no interface number 0 [ 326.000802][ T66] usb 6-1: config 6 interface 254 has no altsetting 0 [ 326.013918][ T66] usb 6-1: string descriptor 0 read error: -22 [ 326.025770][ T66] usb 6-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=30.2c [ 326.035882][T12006] fuse: Bad value for 'fd' [ 326.036829][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.056116][ T66] usb-storage 6-1:6.254: USB Mass Storage device detected [ 326.071920][ T66] usb-storage 6-1:6.254: Quirks match for vid 054c pid 0069: 1 [ 326.089109][T12014] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 326.097650][T12014] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3715'. [ 326.106851][T12014] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3715'. [ 326.230996][T12027] 换换换: renamed from bond_slave_0 [ 326.280987][ T66] usb 6-1: USB disconnect, device number 20 [ 326.472137][T12053] overlayfs: failed to clone upperpath [ 326.506440][T12056] rust_binder: Write failure EFAULT in pid:333 [ 326.517589][T12058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.527639][T12058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:335 [ 326.545211][T12060] rust_binder: Error while translating object. [ 326.554398][T12060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.561045][T12060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 326.995046][T12083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.065692][T12102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.071653][T12094] overlayfs: failed to clone lowerpath [ 327.084422][T12094] overlayfs: failed to clone lowerpath [ 327.210648][T12117] kvm: pic: non byte read [ 327.215365][T12117] kvm: pic: non byte read [ 327.220169][T12117] kvm: pic: non byte read [ 327.224887][T12117] kvm: pic: non byte read [ 327.229676][T12117] kvm: pic: non byte read [ 327.234382][T12117] kvm: pic: non byte read [ 327.239062][T12117] kvm: pic: non byte read [ 327.243881][T12117] kvm: pic: non byte read [ 327.248935][T12117] kvm: pic: non byte read [ 327.253705][T12117] kvm: pic: non byte read [ 327.389011][T12122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.390601][T12122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=12122 comm=syz.6.3753 [ 327.410526][T12122] tipc: Started in network mode [ 327.415415][T12122] tipc: Node identity 4, cluster identity 4711 [ 327.421660][T12122] tipc: Node number set to 4 [ 327.669126][T12134] netlink: 'syz.4.3757': attribute type 4 has an invalid length. [ 328.067637][T12151] rust_binder: Error while translating object. [ 328.067678][T12151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.073991][T12151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659 [ 328.178507][T12153] /dev/sr0: Can't lookup blockdev [ 328.193281][T12153] netlink: 'syz.5.3766': attribute type 16 has an invalid length. [ 328.202128][T12153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 328.484188][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 328.484210][ T36] audit: type=1400 audit(2000000178.212:7441): avc: denied { relabelfrom } for pid=12173 comm="syz.5.3772" name="NETLINK" dev="sockfs" ino=55664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 328.489572][T12178] devpts: called with bogus options [ 328.756488][T12175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.756635][T12175] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 328.763279][T12175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 328.771226][T12175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:673 [ 329.103192][T12190] incfs: Error accessing: ./cgroup. [ 329.117873][T12190] incfs: mount failed -2 [ 329.523152][ T36] audit: type=1400 audit(2000000179.197:7442): avc: denied { setopt } for pid=12212 comm="syz.5.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 329.565450][T12217] netlink: 'syz.5.3788': attribute type 2 has an invalid length. [ 329.574405][ T36] audit: type=1400 audit(2000000179.244:7443): avc: denied { remount } for pid=12216 comm="syz.5.3788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 329.594929][T12217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.595034][T12217] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 329.601771][T12217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 329.610288][T12217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:687 [ 329.628716][ T36] audit: type=1400 audit(2000000179.291:7444): avc: denied { unmount } for pid=8886 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 330.649148][T12257] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3805'. [ 330.807909][ T2648] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 330.880199][T12267] 9pnet_fd: Insufficient options for proto=fd [ 330.910314][T12271] /dev/sr0: Can't lookup blockdev [ 330.925706][T12273] 8021q: VLANs not supported on lo [ 330.954321][T12275] mmap: syz.3.3812 (12275): VmData 29335552 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 330.975018][ T2648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.986061][ T2648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.996117][ T2648] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.009657][ T2648] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.019237][ T2648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.028509][ T2648] usb 6-1: config 0 descriptor?? [ 331.126026][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3820'. [ 331.464870][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.474879][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.491137][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.498589][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.506462][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.515815][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.523404][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.530862][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.538399][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.545837][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.553531][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.561561][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.576574][T12309] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3822'. [ 331.577651][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.598962][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.600176][T12309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.606548][ T2648] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.630410][ T2648] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 331.646073][ T2648] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 331.671704][ T2648] usb 6-1: USB disconnect, device number 21 [ 331.685105][T12315] fido_id[12315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 331.699707][T12317] overlayfs: failed to clone upperpath [ 331.728697][T12319] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.729797][T12319] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 331.736423][T12319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 331.744533][T12319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:701 [ 331.768823][T12321] rust_binder: Got transaction with invalid offset. [ 331.778363][T12321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.785080][T12321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:703 [ 331.978495][T12325] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3829'. [ 331.997041][T12326] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3829'. [ 332.129461][ T2648] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 332.254094][T12328] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3830'. [ 332.289301][ T2648] usb 6-1: Using ep0 maxpacket: 32 [ 332.295704][ T2648] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 332.304257][ T2648] usb 6-1: config 0 has no interface number 0 [ 332.310550][ T2648] usb 6-1: config 0 interface 72 has no altsetting 0 [ 332.320490][ T2648] usb 6-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 332.330914][ T2648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.336079][T12339] netlink: 'syz.4.3835': attribute type 11 has an invalid length. [ 332.339603][ T2648] usb 6-1: Product: syz [ 332.348631][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.351301][ T2648] usb 6-1: Manufacturer: syz [ 332.362939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.367664][ T2648] usb 6-1: SerialNumber: syz [ 332.379680][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.395938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.399076][ T2648] usb 6-1: config 0 descriptor?? [ 332.408136][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.424675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.436936][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.448707][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.461093][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.674543][T12347] netlink: 'syz.3.3838': attribute type 4 has an invalid length. [ 334.086461][ T36] audit: type=1326 audit(2000000183.476:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12358 comm="syz.4.3843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa43db8f6c9 code=0x0 [ 334.144415][T12359] netlink: 'syz.4.3843': attribute type 4 has an invalid length. [ 334.152446][T12359] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3843'. [ 334.278139][T12363] 9pnet_fd: Insufficient options for proto=fd [ 334.286279][T12363] 9pnet_fd: Insufficient options for proto=fd [ 334.855196][T12379] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 334.872316][T12379] rust_binder: Write failure EINVAL in pid:383 [ 335.092582][ T2648] usb 6-1: MIDIStreaming interface descriptor not found [ 335.206671][ T2648] usb 6-1: USB disconnect, device number 22 [ 335.382220][T12383] tipc: New replicast peer: 255.255.255.255 [ 335.389859][T12383] tipc: Enabled bearer , priority 10 [ 335.491891][T12399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=12399 comm=syz.3.3856 [ 335.519225][T12401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.571725][ T2648] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 335.745027][ T2648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 335.756188][ T2648] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 335.765621][ T2648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.776333][ T2648] usb 6-1: config 0 descriptor?? [ 335.784424][T12385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 336.112855][T12415] batadv_slave_1: entered promiscuous mode [ 336.129677][T12415] batadv_slave_1: left promiscuous mode [ 336.246721][ T2648] hid-generic 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 336.478064][ T2648] usb 6-1: USB disconnect, device number 23 [ 336.920965][T12437] syz.4.3867: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 336.935827][ C0] net_ratelimit: 104586 callbacks suppressed [ 336.935851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.935927][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.944827][T12437] CPU: 1 UID: 0 PID: 12437 Comm: syz.4.3867 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 336.944863][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.944878][T12437] Call Trace: [ 336.944885][T12437] [ 336.944894][T12437] __dump_stack+0x21/0x30 [ 336.944928][T12437] dump_stack_lvl+0x10c/0x190 [ 336.944955][T12437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 336.944982][T12437] dump_stack+0x19/0x20 [ 336.945005][T12437] warn_alloc+0x1bc/0x2a0 [ 336.945033][T12437] ? __cfi_warn_alloc+0x10/0x10 [ 336.945058][T12437] ? kasan_save_track+0x4f/0x80 [ 336.945090][T12437] ? __kasan_kmalloc+0x96/0xb0 [ 336.945112][T12437] ? __kmalloc_cache_noprof+0x24c/0x490 [ 336.945133][T12437] ? do_sock_setsockopt+0x26d/0x400 [ 336.945162][T12437] ? __x64_sys_setsockopt+0x1b8/0x250 [ 336.945190][T12437] ? x64_sys_call+0x2adc/0x2ee0 [ 336.945218][T12437] ? do_syscall_64+0x58/0xf0 [ 336.945244][T12437] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 336.945267][T12437] __vmalloc_node_range_noprof+0x135/0x1420 [ 336.945298][T12437] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 336.945325][T12437] ? kasan_save_alloc_info+0x40/0x50 [ 336.945351][T12437] ? __kasan_kmalloc+0x96/0xb0 [ 336.945372][T12437] ? __kmalloc_cache_noprof+0x24c/0x490 [ 336.945392][T12437] vmalloc_user_noprof+0x77/0x90 [ 336.945418][T12437] ? xskq_create+0xdb/0x2a0 [ 336.945444][T12437] xskq_create+0xdb/0x2a0 [ 336.945471][T12437] xsk_init_queue+0xb6/0x120 [ 336.945503][T12437] xsk_setsockopt+0x43f/0x6f0 [ 336.945529][T12437] ? __cfi_xsk_setsockopt+0x10/0x10 [ 336.945555][T12437] ? do_futex+0x356/0x500 [ 336.945575][T12437] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 336.945599][T12437] ? security_socket_setsockopt+0x33/0xd0 [ 336.945620][T12437] ? __cfi_xsk_setsockopt+0x10/0x10 [ 336.945645][T12437] do_sock_setsockopt+0x26d/0x400 [ 336.945672][T12437] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 336.945700][T12437] __x64_sys_setsockopt+0x1b8/0x250 [ 336.945726][T12437] x64_sys_call+0x2adc/0x2ee0 [ 336.945754][T12437] do_syscall_64+0x58/0xf0 [ 336.945777][T12437] ? clear_bhb_loop+0x50/0xa0 [ 336.945798][T12437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 336.945818][T12437] RIP: 0033:0x7fa43db8f6c9 [ 336.945834][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.945852][T12437] RSP: 002b:00007fa43e9e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 336.945874][T12437] RAX: ffffffffffffffda RBX: 00007fa43dde5fa0 RCX: 00007fa43db8f6c9 [ 336.945889][T12437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 336.945903][T12437] RBP: 00007fa43dc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 336.945917][T12437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.945930][T12437] R13: 00007fa43dde6038 R14: 00007fa43dde5fa0 R15: 00007fffb9dadf58 [ 336.945947][T12437] [ 336.945996][T12437] Mem-Info: [ 336.954045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.968362][T12437] active_anon:47551 inactive_anon:3 isolated_anon:0 [ 336.968362][T12437] active_file:11696 inactive_file:12591 isolated_file:0 [ 336.968362][T12437] unevictable:16391 dirty:6 writeback:0 [ 336.968362][T12437] slab_reclaimable:5515 slab_unreclaimable:78038 [ 336.968362][T12437] mapped:25189 shmem:40875 pagetables:1234 [ 336.968362][T12437] sec_pagetables:0 bounce:0 [ 336.968362][T12437] kernel_misc_reclaimable:0 [ 336.968362][T12437] free:1457872 free_pcp:3433 free_cma:0 [ 336.977665][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.990964][T12437] Node 0 active_anon:190204kB inactive_anon:12kB active_file:46784kB inactive_file:50364kB unevictable:65564kB isolated(anon):0kB isolated(file):0kB mapped:100756kB dirty:24kB writeback:0kB shmem:163500kB shmem_thp:8192kB shmem_pmdmapped:4096kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6680kB pagetables:4936kB sec_pagetables:0kB all_unreclaimable? no [ 336.991233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.994092][T12437] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB [ 336.998462][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.004116][T12437] lowmem_reserve[]: [ 337.008406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.012660][T12437] 0 [ 337.016966][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.036757][T12442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.037418][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.053968][T12437] 3921 [ 337.057847][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.065844][T12437] 3921 [ 337.479779][T12444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 337.551674][T12440] 9pnet_fd: Insufficient options for proto=fd [ 337.559263][T12437] [ 337.561936][T12437] Normal free:2871072kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:190204kB inactive_anon:12kB active_file:46784kB inactive_file:50364kB unevictable:65564kB writepending:124kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:6736kB local_pcp:1232kB free_cma:0kB [ 337.595216][T12437] lowmem_reserve[]: 0 0 0 [ 337.599836][T12437] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 337.615997][T12437] Normal: 271*4kB (UME) 118*8kB (UME) 103*16kB (UME) 252*32kB (UME) 98*64kB (UME) 99*128kB (UME) 19*256kB (UME) 47*512kB (UME) 67*1024kB (UME) 30*2048kB (UM) 655*4096kB (UME) = 2872540kB [ 337.635095][T12437] 81582 total pagecache pages [ 337.640044][T12437] 8 pages in swap cache [ 337.644400][T12437] Free swap = 124360kB [ 337.648881][T12437] Total swap = 124996kB [ 337.653625][T12437] 2097051 pages RAM [ 337.657551][T12437] 0 pages HighMem/MovableOnly [ 337.662742][T12437] 351537 pages reserved [ 337.667092][T12437] 0 pages cma reserved [ 337.689838][T12437] Memory allocations: [ 337.699531][T12437] 0 B 0 init/main.c:1370 func:do_initcalls [ 337.736024][T12437] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 337.753088][T12437] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 337.770695][T12437] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 337.797625][T12437] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 337.811388][T12437] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 337.829000][T12437] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 337.846383][T12437] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 337.863016][T12437] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 337.879508][T12437] 0 B 0 init/initramfs.c:101 func:find_link [ 338.683990][T12464] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3877'. [ 338.770129][T12466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.770283][T12466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.798487][T12466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:714 [ 338.847062][ T9937] bridge0: port 3(syz_tun) entered disabled state [ 338.891679][ T9937] syz_tun (unregistering): left allmulticast mode [ 338.898307][ T9937] syz_tun (unregistering): left promiscuous mode [ 338.904755][ T9937] bridge0: port 3(syz_tun) entered disabled state [ 338.977874][ T5986] bridge_slave_1: left allmulticast mode [ 338.984216][ T5986] bridge_slave_1: left promiscuous mode [ 338.989999][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.001310][ T5986] bridge_slave_0: left allmulticast mode [ 339.007499][ T5986] bridge_slave_0: left promiscuous mode [ 339.013277][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.153664][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.164375][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.171736][T12467] bridge_slave_0: entered allmulticast mode [ 339.178729][T12467] bridge_slave_0: entered promiscuous mode [ 339.185767][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.193290][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.201807][T12467] bridge_slave_1: entered allmulticast mode [ 339.208813][T12467] bridge_slave_1: entered promiscuous mode [ 339.222001][ T5986] veth1_macvtap: left promiscuous mode [ 339.227720][ T5986] veth0_vlan: left promiscuous mode [ 339.489687][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.496839][T12467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.504176][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.511320][T12467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.597157][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.615682][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.668850][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.675973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.687951][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.695057][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.785753][T12467] veth0_vlan: entered promiscuous mode [ 339.800995][T12499] SELinux: Context system_u:object_r:root_t:s0 is not valid (left unmapped). [ 339.813605][ T36] audit: type=1400 audit(2000000188.833:7446): avc: denied { relabelfrom } for pid=12498 comm="syz.5.3885" name="IEEE-802.15.4-RAW" dev="sockfs" ino=56858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 339.876641][T12467] veth1_macvtap: entered promiscuous mode [ 339.884077][T12504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.885924][ T36] audit: type=1400 audit(2000000188.871:7447): avc: denied { relabelto } for pid=12498 comm="syz.5.3885" name="IEEE-802.15.4-RAW" dev="sockfs" ino=56858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=ieee802154_socket permissive=1 trawcon="system_u:object_r:root_t:s0" [ 340.016626][T12505] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 340.016714][T12505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 340.044130][T12505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:730 [ 340.069238][ T36] audit: type=1400 audit(2000000188.955:7448): avc: denied { read } for pid=12503 comm="syz.5.3886" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 340.106251][ T36] audit: type=1400 audit(2000000188.955:7449): avc: denied { open } for pid=12503 comm="syz.5.3886" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 340.588864][T12511] binder: Unknown parameter ' Iif Pkts Bytes Wrong Oifs [ 340.588864][T12511] al' [ 341.229161][T12531] overlayfs: failed to clone lowerpath [ 341.736648][T12558] netlink: 'syz.4.3904': attribute type 27 has an invalid length. [ 341.757926][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.765069][T12558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.275246][ C0] net_ratelimit: 99136 callbacks suppressed [ 342.275271][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.292937][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.304644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.316796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 342.328917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.341082][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.352938][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.365120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.377296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 342.389493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.614528][ C0] net_ratelimit: 90044 callbacks suppressed [ 347.614554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.614633][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.620634][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.632598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 347.644178][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.655701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.667672][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.679342][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.691292][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.703011][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.953861][ C0] net_ratelimit: 86325 callbacks suppressed [ 352.953886][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.953943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.959949][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.971511][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.983490][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.995198][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.006570][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.018240][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 353.029921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 353.042119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.721154][ C1] sched: DL replenish lagged too much [ 358.293165][ C0] net_ratelimit: 73859 callbacks suppressed [ 358.293190][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.293331][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.299304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.310954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 358.322594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 358.334589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.347068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.359188][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.371518][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.383699][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.632530][ C1] net_ratelimit: 78374 callbacks suppressed [ 363.632554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 363.632564][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.632680][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.638579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 363.650621][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.662172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.673706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.685822][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.697506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 363.709590][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.971861][ C0] net_ratelimit: 79703 callbacks suppressed [ 368.971887][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.971909][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.978283][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.990088][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.001828][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.013669][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.024883][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.036516][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.048139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.059764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.311170][ C1] net_ratelimit: 79026 callbacks suppressed [ 374.311195][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.311217][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 374.317629][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.328936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.341054][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.352893][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.364651][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.376223][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.387746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 374.399810][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.650666][ C0] net_ratelimit: 80619 callbacks suppressed [ 379.650690][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.650731][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.656736][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.668287][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.679837][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.691430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.702903][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.714666][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 379.726706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 379.738813][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 384.989904][ C0] net_ratelimit: 78697 callbacks suppressed [ 384.989928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.990178][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.996301][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.008151][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.019811][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.031412][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.043183][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.054962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 385.067348][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.079417][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 390.329367][ C1] net_ratelimit: 89313 callbacks suppressed [ 390.329393][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.329447][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.335416][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.346970][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.358704][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.370335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.381983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 390.393945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 390.405953][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 390.418034][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.668548][ C1] net_ratelimit: 109916 callbacks suppressed [ 395.668577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 395.668621][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.674796][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.686859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.698456][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.710500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 395.722569][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.734200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.746457][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.757882][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.007886][ C0] net_ratelimit: 108045 callbacks suppressed [ 401.007910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.007985][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.014170][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.026022][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.037695][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.049452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.061055][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.072548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 401.084597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.096182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 406.347286][ C1] net_ratelimit: 110686 callbacks suppressed [ 406.347312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.347340][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.353516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 406.365597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.377362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 406.389390][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 406.401374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.413534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.425493][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.437733][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.686592][ C1] net_ratelimit: 113085 callbacks suppressed [ 411.686618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 411.686643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.692721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.704850][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.716680][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.728712][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.740219][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.751751][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.763531][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.774935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.025923][ C0] net_ratelimit: 110391 callbacks suppressed [ 417.025950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.025960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 417.026033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 417.032389][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.044328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.056407][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.068465][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.079997][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.092081][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.103740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.365252][ C0] net_ratelimit: 110061 callbacks suppressed [ 422.365278][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.365323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 422.371382][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.383044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 422.395232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.406944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.419552][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 422.431718][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.443671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.455750][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.704631][ C1] net_ratelimit: 107444 callbacks suppressed [ 427.704664][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.704700][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.711223][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.723414][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.735108][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.746750][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.758532][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.769842][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.781566][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.793116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 433.043951][ C0] net_ratelimit: 108717 callbacks suppressed [ 433.043978][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.044100][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.050258][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.062274][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.074218][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.085805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.097491][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.109181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 433.121380][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.132973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 438.383307][ C1] net_ratelimit: 111102 callbacks suppressed [ 438.383333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 438.383379][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.389421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.401417][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.413160][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.425438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.437154][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.448629][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 438.461084][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.472652][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.722636][ C1] net_ratelimit: 113164 callbacks suppressed [ 443.722662][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.722681][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.722765][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.728939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 443.741149][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.752660][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 443.764213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.776188][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.787808][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 443.799974][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.539019][ T5986] bridge_slave_1: left allmulticast mode [ 446.551121][ T5986] bridge_slave_1: left promiscuous mode [ 446.804018][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.996013][ T5986] bridge_slave_0: left allmulticast mode [ 447.018148][ T5986] bridge_slave_0: left promiscuous mode [ 447.038965][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.062039][ C1] net_ratelimit: 110561 callbacks suppressed [ 449.062064][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.062128][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.068156][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.080274][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.091828][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.103673][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.115545][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.126781][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 449.138767][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.150376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.401346][ C0] net_ratelimit: 107220 callbacks suppressed [ 454.401372][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.401535][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.407508][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.419298][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.430974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.442612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.454206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 454.466186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 454.478361][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.490322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 459.740703][ C0] net_ratelimit: 112116 callbacks suppressed [ 459.740731][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.740755][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 459.746843][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.758468][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.770570][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 459.782118][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 459.794109][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 459.806088][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 459.817619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.829519][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.080070][ C0] net_ratelimit: 115332 callbacks suppressed [ 465.080096][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.080236][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.086329][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.097964][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.109578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 465.121228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.132762][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.144754][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 465.156863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.168402][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 470.419423][ C1] net_ratelimit: 121163 callbacks suppressed [ 470.419450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.419532][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.425574][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 470.437852][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.449548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 470.461489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 470.473252][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.485283][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.497371][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 470.509554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.758759][ C1] net_ratelimit: 120054 callbacks suppressed [ 475.758784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 475.758815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.764975][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.777032][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 475.789019][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 475.801113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.812799][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 475.824495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 475.836802][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.848079][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.098255][ C0] net_ratelimit: 120142 callbacks suppressed [ 481.098280][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.098350][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.104388][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.115967][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.127535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 481.139072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.150620][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.162957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 481.174919][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.186456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 486.437455][ C1] net_ratelimit: 120724 callbacks suppressed [ 486.437484][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.437530][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.443834][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.455146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.466718][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.478355][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.490406][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.501926][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.513654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 486.525628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 491.776816][ C1] net_ratelimit: 118332 callbacks suppressed [ 491.776843][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.776969][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.783033][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.794702][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.806239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.818057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 491.829605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 491.841660][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.853822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 491.865798][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.116203][ C1] net_ratelimit: 116177 callbacks suppressed [ 497.116229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 497.116253][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.122354][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 497.134420][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.145943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.158102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 497.169653][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 497.181788][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 497.193859][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 497.205387][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.455639][ C0] net_ratelimit: 115396 callbacks suppressed [ 502.455664][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.455815][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.461788][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.473488][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.485150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 502.496674][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.508193][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.520263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 502.532417][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.544135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 507.794896][ C0] net_ratelimit: 112797 callbacks suppressed [ 507.794922][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 507.794933][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.795009][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.801014][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.812692][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.824321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.835868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 507.847588][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 507.868936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 507.871680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.134357][ C1] net_ratelimit: 111611 callbacks suppressed [ 513.134383][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.134455][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.140752][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.152312][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.163852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.175416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 513.186962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 513.198952][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.211088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 513.223321][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.473768][ C0] net_ratelimit: 109387 callbacks suppressed [ 518.473794][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.473803][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.473876][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.480047][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.491570][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.503196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 518.514823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 518.526390][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.538393][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 518.550635][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.812981][ C0] net_ratelimit: 104461 callbacks suppressed [ 523.813007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.813095][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.819215][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 523.831356][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.843265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.855398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.867536][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.879270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 523.891416][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.903475][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 529.152379][ C1] net_ratelimit: 108610 callbacks suppressed [ 529.152404][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.152598][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.158509][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 529.170670][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.182173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 529.194130][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 529.205968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.217981][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.230058][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.242334][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.491731][ C1] net_ratelimit: 112356 callbacks suppressed [ 534.491756][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.491889][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.497944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.509555][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.521385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 534.533788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 534.545391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 534.557435][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.569775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.581802][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.831043][ C1] net_ratelimit: 109524 callbacks suppressed [ 539.831071][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.831228][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.837171][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.849351][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.860897][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.872602][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 539.884516][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.896136][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.908116][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.920003][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.170604][ C0] net_ratelimit: 111376 callbacks suppressed [ 545.170632][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.170664][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.176791][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.188344][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.199978][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 545.211626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.223182][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.235150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 545.247134][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.258680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 550.510003][ C0] net_ratelimit: 111089 callbacks suppressed [ 550.510029][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.510091][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.516375][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.527870][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.539429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 550.551072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.562667][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 550.574728][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 550.586694][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.598424][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 555.849152][ C0] net_ratelimit: 109820 callbacks suppressed [ 555.849181][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.849466][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.855449][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.867016][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.878700][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 555.890848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.902335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.914076][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 555.926559][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 555.938647][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 557.121233][ T37] INFO: task syz-executor:12596 blocked for more than 122 seconds. [ 557.236365][ T37] Not tainted syzkaller #0 [ 557.241373][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.825483][ T37] task:syz-executor state:D stack:0 pid:12596 tgid:12596 ppid:1 flags:0x00000004 [ 560.102092][ T37] Call Trace: [ 560.105445][ T37] [ 560.108399][ T37] __schedule+0x1322/0x1df0 [ 560.122927][ T37] ? __sched_text_start+0x10/0x10 [ 560.128100][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 560.168468][ T37] ? __kasan_check_write+0x18/0x20 [ 560.173788][ T37] ? trace_contention_begin+0xc0/0xc0 [ 560.208906][ T37] schedule+0xc6/0x240 [ 560.213080][ T37] schedule_preempt_disabled+0x14/0x30 [ 560.618182][ T37] __mutex_lock+0x81e/0x1b50 [ 560.622943][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 560.629826][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 560.635516][ T37] ? cred_has_capability+0x281/0x380 [ 560.640872][ T37] ? selinux_perf_event_alloc+0x110/0x110 [ 560.646697][ T37] ? stack_trace_save+0x9d/0xe0 [ 560.651779][ T37] __mutex_lock_slowpath+0xe/0x20 [ 560.657069][ T37] mutex_lock+0x102/0x1c0 [ 560.661422][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 560.666330][ T37] ? ns_capable+0x91/0xf0 [ 560.670724][ T37] ? netlink_net_capable+0x129/0x160 [ 560.676316][ T37] rtnetlink_rcv_msg+0x75f/0xa00 [ 560.681421][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 560.686831][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 560.692346][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 560.697770][ T37] ? avc_has_perm+0x144/0x220 [ 560.702588][ T37] netlink_rcv_skb+0x22b/0x4a0 [ 560.707464][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 560.713007][ T37] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 560.718326][ T37] ? netlink_autobind+0x1c0/0x1c0 [ 560.723499][ T37] ? is_vmalloc_addr+0x11/0x40 [ 560.728441][ T37] rtnetlink_rcv+0x20/0x30 [ 560.732994][ T37] netlink_unicast+0x8c0/0xa60 [ 560.737817][ T37] netlink_sendmsg+0x7f0/0xaf0 [ 560.742652][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 560.747980][ T37] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 560.753471][ T37] ? security_socket_sendmsg+0x33/0xd0 [ 560.758984][ T37] __sys_sendto+0x66d/0x6f0 [ 560.763677][ T37] ? __cfi___sys_sendto+0x10/0x10 [ 560.768742][ T37] ? __fput+0x6ea/0xa00 [ 560.773033][ T37] ? __kasan_check_write+0x18/0x20 [ 560.778186][ T37] __x64_sys_sendto+0xe9/0x100 [ 560.783008][ T37] x64_sys_call+0x2c2c/0x2ee0 [ 560.787821][ T37] do_syscall_64+0x58/0xf0 [ 560.792344][ T37] ? clear_bhb_loop+0x50/0xa0 [ 560.797116][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 560.803042][ T37] RIP: 0033:0x7fda60391503 [ 560.807508][ T37] RSP: 002b:00007ffe8afb5368 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 560.816034][ T37] RAX: ffffffffffffffda RBX: 00007fda61114620 RCX: 00007fda60391503 [ 560.824037][ T37] RDX: 000000000000002c RSI: 00007fda61114670 RDI: 0000000000000003 [ 560.832822][ T37] RBP: 0000000000000001 R08: 00007ffe8afb5384 R09: 000000000000000c [ 560.840876][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 560.848895][ T37] R13: 0000000000000000 R14: 00007fda61114670 R15: 0000000000000000 [ 560.857073][ T37] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 561.188524][ C1] net_ratelimit: 106801 callbacks suppressed [ 561.188549][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.188625][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.194832][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 561.206872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 561.218509][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 561.230229][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 561.242465][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.253850][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.265653][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.277188][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.659130][ T37] NMI backtrace for cpu 1 [ 561.659154][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 561.659185][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.659199][ T37] Call Trace: [ 561.659207][ T37] [ 561.659216][ T37] __dump_stack+0x21/0x30 [ 561.659251][ T37] dump_stack_lvl+0x10c/0x190 [ 561.659279][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 561.659309][ T37] dump_stack+0x19/0x20 [ 561.659335][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 561.659438][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 561.659492][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 561.659517][ T37] ? sched_show_task+0x379/0x560 [ 561.659567][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 561.659591][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 561.659637][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 561.659665][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 561.659694][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 561.659722][ T37] watchdog+0xd8f/0xed0 [ 561.659812][ T37] ? __cfi_watchdog+0x10/0x10 [ 561.659840][ T37] ? __kasan_check_read+0x15/0x20 [ 561.659872][ T37] ? __kthread_parkme+0x138/0x180 [ 561.659915][ T37] ? schedule+0xc6/0x240 [ 561.659945][ T37] kthread+0x2ca/0x370 [ 561.659965][ T37] ? __cfi_watchdog+0x10/0x10 [ 561.659992][ T37] ? __cfi_kthread+0x10/0x10 [ 561.660013][ T37] ret_from_fork+0x67/0xa0 [ 561.660042][ T37] ? __cfi_kthread+0x10/0x10 [ 561.660065][ T37] ret_from_fork_asm+0x1a/0x30 [ 561.660098][ T37] [ 561.660107][ T37] Sending NMI from CPU 1 to CPUs 0: [ 561.862764][ C0] NMI backtrace for cpu 0 [ 561.862783][ C0] CPU: 0 UID: 0 PID: 390 Comm: kworker/0:3 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 561.862809][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.862820][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 561.862913][ C0] RIP: 0010:update_stack_state+0x8e/0x4b0 [ 561.862938][ C0] Code: 48 8b 07 48 85 c0 74 08 48 05 a8 00 00 00 eb 21 4c 8d 73 38 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 e2 36 98 00 <49> 8b 06 48 83 c0 10 48 89 45 a0 44 89 f8 83 e0 01 48 f7 d8 4c 89 [ 561.862952][ C0] RSP: 0018:ffffc90000007058 EFLAGS: 00000246 [ 561.862967][ C0] RAX: 1ffff92000000e3c RBX: ffffc900000071a8 RCX: 0000000000007100 [ 561.862980][ C0] RDX: dffffc0000000000 RSI: ffffc9000ba17ed0 RDI: ffffc90000007200 [ 561.862993][ C0] RBP: ffffc90000007118 R08: ffffc90000007270 R09: ffffc90000007268 [ 561.863005][ C0] R10: 0000000000000014 R11: ffffffff817457d0 R12: 0000000000000000 [ 561.863017][ C0] R13: dffffc0000000000 R14: ffffc900000071e0 R15: ffffc9000ba17ed0 [ 561.863030][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 561.863045][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.863057][ C0] CR2: 00007fd4b9de6038 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 561.863074][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 561.863085][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 561.863096][ C0] Call Trace: [ 561.863102][ C0] [ 561.863112][ C0] unwind_next_frame+0x3c2/0x750 [ 561.863131][ C0] ? __kernel_text_address+0x11/0x40 [ 561.863174][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 561.863197][ C0] arch_stack_walk+0x139/0x170 [ 561.863213][ C0] ? worker_thread+0xc58/0x1250 [ 561.863228][ C0] stack_trace_save+0x9d/0xe0 [ 561.863249][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 561.863272][ C0] kasan_save_track+0x3e/0x80 [ 561.863289][ C0] ? kasan_save_track+0x3e/0x80 [ 561.863305][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 561.863326][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 561.863343][ C0] ? kmem_cache_alloc_node_noprof+0x1d6/0x440 [ 561.863380][ C0] ? __alloc_skb+0x10c/0x370 [ 561.863416][ C0] ? fdb_notify+0x78/0x150 [ 561.863476][ C0] ? br_fdb_update+0x4b7/0x680 [ 561.863496][ C0] ? br_handle_frame_finish+0x39c/0x1720 [ 561.863535][ C0] ? br_handle_frame+0x5a6/0xba0 [ 561.863557][ C0] ? __netif_receive_skb_core+0xf4b/0x3940 [ 561.863596][ C0] ? process_backlog+0x3e5/0xae0 [ 561.863617][ C0] ? __napi_poll+0xd3/0x610 [ 561.863636][ C0] ? net_rx_action+0x584/0xce0 [ 561.863657][ C0] ? handle_softirqs+0x1ab/0x630 [ 561.863673][ C0] ? __do_softirq+0xf/0x16 [ 561.863719][ C0] ? do_softirq+0xa6/0x100 [ 561.863741][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 561.863765][ C0] ? _raw_write_unlock_bh+0x33/0x70 [ 561.863786][ C0] ? neigh_periodic_work+0xa73/0xbc0 [ 561.863806][ C0] ? process_scheduled_works+0x7d2/0x1020 [ 561.863853][ C0] ? worker_thread+0xc58/0x1250 [ 561.863872][ C0] ? unwind_next_frame+0x3c2/0x750 [ 561.863892][ C0] kasan_save_alloc_info+0x40/0x50 [ 561.863914][ C0] __kasan_slab_alloc+0x73/0x90 [ 561.863933][ C0] kmem_cache_alloc_node_noprof+0x1d6/0x440 [ 561.863950][ C0] ? __alloc_skb+0x10c/0x370 [ 561.863970][ C0] __alloc_skb+0x10c/0x370 [ 561.863989][ C0] ? br_fdb_find_rcu+0x50/0x50 [ 561.864009][ C0] fdb_notify+0x78/0x150 [ 561.864027][ C0] br_fdb_update+0x4b7/0x680 [ 561.864048][ C0] ? __cfi_br_fdb_update+0x10/0x10 [ 561.864068][ C0] ? ip6_rcv_finish+0x360/0x3e0 [ 561.864113][ C0] ? process_backlog+0x44b/0xae0 [ 561.864133][ C0] ? __napi_poll+0xd3/0x610 [ 561.864152][ C0] ? net_rx_action+0x584/0xce0 [ 561.864173][ C0] ? __do_softirq+0xf/0x16 [ 561.864195][ C0] ? do_softirq+0xa6/0x100 [ 561.864217][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 561.864239][ C0] ? _raw_write_unlock_bh+0x33/0x70 [ 561.864262][ C0] br_handle_frame_finish+0x39c/0x1720 [ 561.864286][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 561.864311][ C0] br_handle_frame+0x5a6/0xba0 [ 561.864334][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 561.864356][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 561.864377][ C0] ? ip6_mc_input+0x4f3/0x670 [ 561.864396][ C0] ? ip6_mc_input+0x4f3/0x670 [ 561.864414][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 561.864433][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 561.864450][ C0] ? qdisc_run_end+0x120/0x120 [ 561.864470][ C0] ? ip6_rcv_finish+0x360/0x3e0 [ 561.864488][ C0] ? ipv6_rcv+0xed/0x220 [ 561.864505][ C0] ? update_irq_load_avg+0xcb/0xe60 [ 561.864559][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 561.864576][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 561.864594][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 561.864614][ C0] ? __kasan_check_read+0x15/0x20 [ 561.864638][ C0] process_backlog+0x3e5/0xae0 [ 561.864660][ C0] ? run_posix_cpu_timers+0x2c5/0x620 [ 561.864708][ C0] __napi_poll+0xd3/0x610 [ 561.864728][ C0] net_rx_action+0x584/0xce0 [ 561.864751][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 561.864771][ C0] ? sched_clock+0x44/0x60 [ 561.864792][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 561.864830][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 561.864857][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 561.864878][ C0] handle_softirqs+0x1ab/0x630 [ 561.864895][ C0] __do_softirq+0xf/0x16 [ 561.864917][ C0] do_softirq+0xa6/0x100 [ 561.864939][ C0] [ 561.864946][ C0] [ 561.864952][ C0] ? __cfi_do_softirq+0x10/0x10 [ 561.864974][ C0] ? _raw_write_lock_bh+0x90/0xf0 [ 561.864995][ C0] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 561.865018][ C0] __local_bh_enable_ip+0x74/0x80 [ 561.865041][ C0] _raw_write_unlock_bh+0x33/0x70 [ 561.865063][ C0] neigh_periodic_work+0xa73/0xbc0 [ 561.865083][ C0] process_scheduled_works+0x7d2/0x1020 [ 561.865109][ C0] worker_thread+0xc58/0x1250 [ 561.865127][ C0] kthread+0x2ca/0x370 [ 561.865144][ C0] ? __cfi_worker_thread+0x10/0x10 [ 561.865160][ C0] ? __cfi_kthread+0x10/0x10 [ 561.865177][ C0] ret_from_fork+0x67/0xa0 [ 561.865198][ C0] ? __cfi_kthread+0x10/0x10 [ 561.865216][ C0] ret_from_fork_asm+0x1a/0x30 [ 561.865241][ C0] [ 562.289956][ T36] audit: type=1400 audit(2000000395.732:7450): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2661]" dev="pipefs" ino=2661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 566.527883][ C0] net_ratelimit: 101934 callbacks suppressed [ 566.527908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.527938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 566.533991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:77:6c:df:f5:68, vlan:0) [ 566.546011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.558252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.570220][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 566.582534][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.594539][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 566.606200][ C0] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.618049][ C1] bridge0: received packet on 30{X功 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)