last executing test programs: 2m34.895881202s ago: executing program 0 (id=1469): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) memfd_create(&(0x7f0000000000)='/dev/net/tun\x00', 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000017c0)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb000d6d0000000fc011fffc010000000000"], 0xffa) pread64(r1, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 2m34.815580863s ago: executing program 0 (id=1470): mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000100), 0x20c000, &(0x7f0000000040)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030322c73746174733d676c6f62616c2c73746174733d8223f8413e0690aa5c7a54b04d9f7e59b3d0613317aa6c865b00465e30d752592d161af762631145283dc40a7c0b20f7722405fd5dc9b97ce3905c6b17cd58009c2c00000000000000000000af462bf23d39b0949806690a1d81c9e3d650caa68fb0bdcff0af33b65dbd2a3f618a7e3932412d8c080ea29c5ed64acb94f0cc2f21299a4a59cc8f"]) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x1060003, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x8000000000}}, {@timeout={'timeout', 0x3d, 0x8000000000000000}}, {@sq={'sq', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x120}}, {@sq={'sq', 0x3d, 0x8}}, {@common=@access_client}, {@sq={'sq', 0x3d, 0xfc0}}, {@rq={'rq', 0x3d, 0xfffffffffffffff9}}, {@sq={'sq', 0x3d, 0x238336d0}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '{'}}, {@uid_lt={'uid<', r0}}, {@hash}]}}) 2m34.814581513s ago: executing program 0 (id=1471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) close(r2) read$FUSE(r1, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket$inet_udp(0x2, 0x2, 0x0) read$eventfd(r3, &(0x7f0000000180), 0x8) bind$inet(r7, &(0x7f0000000040)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmmsg$inet(r7, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee22965", 0x12}], 0x1}}], 0x2, 0xc044) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000300), 0x5b0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_STATX(r8, &(0x7f0000000280)={0x130, 0x0, r4, {0x8, 0x0, 0x0, '\x00', {0x2000, 0x8, 0x7ffffffffffffffd, 0xa, r5, r6, 0x2000, '\x00', 0x0, 0x3, 0x4, 0x0, {0x6, 0x8}, {0x5, 0x8a}, {0xa, 0x8}, {0x6, 0x5}, 0x0, 0x300000, 0x5c2a, 0x44f}}}, 0x130) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x78}, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0x80, 0x9e92}, @timestamp], 0x6) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80070002000300000000000000040037"], 0x34}], 0x1}, 0x0) r9 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000140)={0x20, 0x7, 0x39, "01e831a6fe8620a6d8e31b0714ca90a41884c95ac676779ca236070a30becb9a6a4319c7ad6fab08219caf33e8fef57156986eabff9139897d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) 2m33.008920395s ago: executing program 2 (id=1510): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000140)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) (async) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) 2m32.951710455s ago: executing program 2 (id=1511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') exit(0xffff) read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x20, 0x0, 0x4, {0xa0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000340)={{0x1, 0xf000, 0xb, 0xad, 0x3, 0x4, 0x7f, 0x8, 0x0, 0x2b, 0x9}, {0x6000, 0xf000, 0xf, 0x0, 0x8, 0x3, 0x7f, 0x1, 0x4, 0xf0, 0x3}, {0x2, 0x100000, 0x8, 0x5, 0x1, 0x2, 0x9, 0xe, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0x1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0xf6, 0x5, 0x86, 0x6, 0x7f, 0x6, 0x0, 0xf2, 0x43}, {0x3000, 0x6000, 0xb, 0x7c, 0xb1, 0x8, 0x7f, 0xab, 0x80, 0xc, 0x4, 0x3d}, {0xd000, 0x100002, 0xa, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0xffff1000, 0x3000, 0x5, 0x5, 0x5, 0x7, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeef0000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2004, 0xc, 0x0, 0x80a0000, [0x4, 0x800, 0x7, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0xb7}}, 0x400) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x801) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') exit(0xfffffffffffffff7) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.516805605s ago: executing program 0 (id=1521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) lseek(r3, 0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x8}}, 0x0, 0x0, 0x19, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) 2m28.835105573s ago: executing program 2 (id=1525): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000003c0)="04", 0x1, 0x11, 0x0, 0x1a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0x1f8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0xe8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000080)={"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"}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000540)={"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"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x8400097e) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r11, &(0x7f0000000240)='./file0\x00', 0x4000cdd) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x8, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m27.75156875s ago: executing program 0 (id=1526): getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0, 0x0}, &(0x7f0000002200)=0xc) statx(0xffffffffffffffff, &(0x7f0000002240)='./file0\x00', 0x800, 0x10, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() getresgid(&(0x7f0000002380)=0x0, &(0x7f00000023c0), &(0x7f0000002400)) fstat(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lstat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x100, 0x2, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002780)={{}, {0x1, 0x1}, [{0x2, 0x4, 0xee01}, {0x2, 0x1, r0}, {0x2, 0x1, r1}, {0x2, 0x6, r2}], {0x4, 0x7}, [{0x8, 0x0, r3}, {0x8, 0x6, r4}, {0x8, 0x7, 0xee01}, {0x8, 0x0, r5}, {0x8, 0x1, r6}, {0x8, 0x2, r7}, {0x8, 0x1, r8}, {0x8, 0x4, r9}, {0x8, 0x6, r10}, {0x8, 0x5, r11}], {0x10, 0x1}, {0x20, 0x4}}, 0x94, 0x1) r12 = geteuid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000002840)={0xa0, 0x19, 0x1, {0x8, {0x4, 0x1, 0x8}, 0x0, r12, r5, 0x100, 0x6, 0x2, 0xfffffffffffffff7, 0x5, 0x22a3, 0x401, 0x8, 0x6, 0x1, 0x3, 0x9, 0xa58, 0x8001, 0xfff}}, 0xa0) r13 = open$dir(&(0x7f0000002900)='./file0\x00', 0xd0141, 0x80) mkdirat(r13, &(0x7f0000002940)='./file0\x00', 0x49) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002980)={0x3, 'macvtap0\x00', {0x7}, 0x4}) mount$9p_unix(&(0x7f00000029c0)='./file1\x00', &(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40), 0x8000, &(0x7f0000002a80)={'trans=unix,', {[{@nodevmap}, {@version_u}, {@privport}, {@noxattr}, {@cachetag={'cachetag', 0x3d, 'system.posix_acl_access\x00'}}, {@fscache}, {@version_9p2000}, {}, {@directio}, {@msize}], [{@dont_measure}, {@measure}, {@obj_user={'obj_user', 0x3d, ']'}}, {@appraise}]}}) timer_settime(0x0, 0x1, &(0x7f0000002b80)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000002bc0)) pipe2$watch_queue(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$tipc(r14, &(0x7f0000002c40)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4, 0x1}}, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002cc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r15, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, r16, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) r17 = openat$cgroup_freezer_state(r14, &(0x7f0000002dc0), 0x2, 0x0) quotactl_fd$Q_SETINFO(r17, 0x8000000040000502, 0xee01, &(0x7f0000002e00)={0x45, 0xb, 0x1, 0x2}) setsockopt$WPAN_WANTACK(r14, 0x0, 0x0, &(0x7f0000002e40), 0x4) writev(r14, &(0x7f0000002f00)=[{&(0x7f0000002e80)="97b7306ace192101ca5be6d36045aef640900bcf0e0c61950adb26e7751e634415553914c40dc26312384121aa3e3853073c914d197a9eb6147c11c2856be237a3573283921c43c56349e14e3f2c4f63494747bc6576", 0x56}], 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000002f80)={0x23, 0x3, 0x0, {0x3, 0x2, 0x0, '-,'}}, 0x23) 2m26.795753077s ago: executing program 3 (id=1527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2002, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m25.392793637s ago: executing program 2 (id=1528): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000740)) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000740)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) flock(0xffffffffffffffff, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) (async) readv(r6, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000240)) 2m24.185282415s ago: executing program 3 (id=1530): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x10001, 0xb}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil) r2 = syz_open_pts(r1, 0x2) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) syz_usb_connect(0x3, 0x378, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x7f, 0xf4, 0xfb, 0x40, 0xdba, 0x3000, 0x1565, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x366, 0x1, 0xe3, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x1f, 0x8, 0xd, 0x13, 0x83, 0xc7, 0x3, [], [{{0x9, 0x5, 0x7, 0xc, 0x0, 0xa6, 0xa, 0xaa, [@generic={0xa2, 0x23, "3798ef7257ce129b944f9e0c2fa651ceeb9817cafd1951f71fede012a32a75c1db5ab622bf25b1f2bfcda4870d086e8c99f0865e6578512dea2f866151e885d820bd97d9ef39e22754ac3812c25d8fca3324a0c1036d5fff4fd33620e2b6df6e9c083588385c6ae19fb44213a7b7713f56385a1383ff23acec14235597951413a89c937bae38e0dd6bb62f6275137f5ee118c2e12af69d81d89fbddd7e02e732"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xff}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x6, 0x0, 0xf}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x40, 0x0, 0xd6, [@generic={0x5a, 0x3, "5ccb88365d6030eb8347b994f4d5337d06d486bf4719fa1602b104a4761a89bc2e2f56cbd5d9aaefc8931be06ca430956061657bd9de37cf7700090cf8d2357e02a862c27aa1d9b669af8840ae5765c2f327aa2d9788cf5e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x2, 0x29, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x244}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x4, 0x8, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0x13, 0x8, [@generic={0xa0, 0xa, "ad4ab50fe1aaf5450621d3f82c6f1dcdf897d0db3746562e808a4b83208a2ccc9e0473ff0d117a856b2504610eda13a88b093dca0171c58678225acd17e410bedc7c967524d6d98b994be52d9f0132587e1756343762166a99849621606e6c8fcaeb324d5637c93c6df35c6f5bc718204f16255fe7c133eaa1882313c158f13ee81393a3ce1404221a7100d0f90d6d9c1911be3b7b24ac0203de2a88e6f3"}, @generic={0x60, 0xf, "326d9ec03b40c559eb8aebf86ac805a82d48a7e6e40b500f2be5987bb0f7c21b7aea685f829b02228f1225da9eca1c9cf1a6ef8eeb9ff410a9f1b47fd0bdedeb833bb15a964efca9e719e89e01fd3325449ccc4e02eee5bb219cf4b2666b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x5, 0x9d}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x81, 0x2, 0xb}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x2, 0x5, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x7}]}}, {{0x9, 0x5, 0x80, 0x2, 0x6a9a474bf9447874, 0x7, 0xc, 0x2, [@generic={0xa4, 0x3, "8a951db960b3ceb646d756ed6ffa99043539bbec8cf54995e7dca018d73ff9041cb18c8849d9d3b17d8654d428572e996a1c63011283d7c090eb26b264d9a5dd03664356b5a44aaf0d6553a9613408eeb5b2ffb24719775fb089b0927f67f3b19de661c66517d3b2c78479c369b6e0a4400b874b77aebab444d512ddbc8e01c5cb110388846aa23428a0ffec5604b85dd5c20e0503b89bdb0fe0df29df71fb209490"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x6, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8d, 0x4}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x6, 0x6, 0x9, 0x8, 0x7}, 0x42, &(0x7f0000000740)={0x5, 0xf, 0x42, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0xa, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "fa52bb5d0def759bdc7ca1c582a86e46"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0x1, 0xfffd, 0xae}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "07ded15879637244c0c9cbf941160f96"}]}, 0x4, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x15}}, {0x24, &(0x7f0000000840)=@string={0x24, 0x3, "b80754278f20abdcb046ec53b506bddcf7a304b6ce01537cac77e15fe0dbb62cecc1"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x446}}]}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000010c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000000cc0)={0x388, 0x14, 0x2, 0x70bd25, 0x25dfdbfb, {0xb, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "fd75e346d6e4c871688fea11090f0d56f96ff9610e907936259ee321e998a4ea2dc59de4c2eef14eb78d0ec5905dc061792d95b9a8e400f04fbb46afa2796f3c9e57b731d740a3f076f375c665c0db5a1d22a9a3f11ad5f2986b45290a5f5f85af54c79236bea8132b7aa64a7dfb4df4f7435f65b4ba3f2dce23d46512fe5f1ee349efd558"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "8c174dfa85ba6f65e91d2be36dad6d82694271d9ef19109827faa619e13e689d005beffce0435467006d9aced19f7bc8e476b95a2c5d351940a54e578033bf569a42a7ad007baffe01a6"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "4668aa46dc703dfa6a5f2e8a4d2a4ee6b904121f62283d2a401997798c5ddfa159ab2e16e35222c75618a2ca0b8459da8c8c74a23ee19e6d7ecaff7697cbdd86f8e13e8c99f1c5a53b92d259d92bec0f9795c0e96c7d42036b7083ffdab8e7cdbcd584b17f2df4121f2e525e3b2218c1abff69103a28bf45f767488345ca7339a20852c37d052625366cd30f1cbbf2123dd2a1d2c815a5a119a708d3709f479dbde1b64dd2b1f76e3095e4b81536909bbc46ec10e6503e64bb8db4c95c092ff7a0cafc9dd58e2276d50c2e4647d4051f686555dd6cece04d14bafe3cc64519047661fd0479708b5bfc292192a0"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "a7cda730d5884352f9ba1fe3265da875ac16a888d686e15d0440a564d8e73ef8e27bbe6b4cdf89a415d0d433bda2de9519f48076a486f09122f5a047f46d0728cab01614850d7f23c62247686d352eb8a53ab9064550c1216a01b4fa28f22a7145b3bed211"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "85d0110510fa00e7626efe782e05a9a7e83120e1312bb2d5d01ab173b65f7642dec381bc49ee0eaf0c051bdc30b9ecd4b48543b116a8bcecfe8734c7e60934bb9f13fcd5778bff8db289630798578afdae0d2d1ba218c600"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "07d07d3f3d36b528ae3d08703cfb31a540507ef65d60a557baf837c667f0e120dfb21a2f29c8c5db8cc0b47284d263116741ec648272aef1fbbccff10fb7694e61c343ef9d58fb838a1697062e009b26343e69703eaba3fb67850e71f3b2c4cab1ae28ce1b5817e7fc8b56934686a285533972331892db755d48e8771220bf62c270692c6a27625428e52f542b5cd7a4fae29e02b0dddcb921eab808ec769597e243a141909c704eb6f1b93d70fe022344383f3fd5232572233e11a28796f1bb63894941dc4ff8157dd49c2732543dc1e4d01d6b"}]}, 0x388}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000001140)={0x14, 0x11, 0x2, {0x4, 0x1, 0x2}}, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000001180)=0x4) 2m23.614172609s ago: executing program 0 (id=1531): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x822c00, 0x40, 0xe}, 0x18) (async) r5 = signalfd4(r1, &(0x7f0000000100)={[0xa]}, 0x8, 0x800) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r6, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4, 0x43, 0x3, r5}) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$UHID_CREATE2(r7, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESDEC=r3, @ANYRES16]) 2m22.285380428s ago: executing program 2 (id=1532): mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jffs2\x00', 0x204000, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x200000) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x200000) r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_usb_connect$uac1(0x2, 0xa8, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0xd0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xbb5, 0x9}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0x9, 0x7, "fd5e21f96f79"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0xa5}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x2, 0xa, "11d46c63"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x7, 0x4, '\a'}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x0, "d98abbb2"}, @output_terminal={0xffffffffffffff04, 0x24, 0x3, 0x6, 0x307, 0x6, 0x5, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x8, 0x7f, {0x7, 0x25, 0x1, 0x3, 0x5, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb, 0x35, 0x10, {0x7, 0x25, 0x1, 0x0, 0x4d, 0x2}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x2, 0xa8, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0xd0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xbb5, 0x9}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0x9, 0x7, "fd5e21f96f79"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0xa5}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x2, 0xa, "11d46c63"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x7, 0x4, '\a'}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x0, "d98abbb2"}, @output_terminal={0xffffffffffffff04, 0x24, 0x3, 0x6, 0x307, 0x6, 0x5, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x8, 0x7f, {0x7, 0x25, 0x1, 0x3, 0x5, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb, 0x35, 0x10, {0x7, 0x25, 0x1, 0x0, 0x4d, 0x2}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0xffffff12) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) (async) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x20000, 0x1, 0xd5, 0x9, 0xa, "4c5f7c1e40ba3f26182fe6a0614fd175827a49", 0xe, 0x2edd}) 2m20.664941908s ago: executing program 3 (id=1534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2m19.809127434s ago: executing program 2 (id=1535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000100), 0x4000) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) getgroups(0x5, &(0x7f0000000000)=[0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0x0]) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x9207}, @void, @eth={@random="cf162176f29f", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x2d, 0x3, 0x0, 0x0, "87e443a298cc04808af44ff8a959113b412d926ff60f80f57fa6be5e643f3bc8687127842f5f2f90c2117fcb82cee7baaef7e1c170175a2377ee95a750e15eda"}}}}}, 0x62) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'veth0_to_batadv\x00', &(0x7f00000003c0)=@ethtool_dump={0x40, 0x9, 0x9f}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r6, &(0x7f00000001c0)=""/62, 0x40000, 0x14100, 0x0, 0x0) close_range(r5, r6, 0x0) 2m18.847675881s ago: executing program 3 (id=1536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000017200)) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x1c}], 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) mlock(&(0x7f0000679000/0x4000)=nil, 0x4000) 2m17.673349688s ago: executing program 3 (id=1537): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000000)='./file0\x00', 0x8) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x8) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000100)="0b3fe07b901c263f321b2aa05a1aba78d8a3c0d7c480068028ec806f0c38340d1866e95b986759ac202a183527dc0810c538da9f3429d948ce446d6a0a5d88a5c8a9cae0d15a41a61f5da10753ea913f44a16dae561c1a1a7f373739194443441b9e65e100a046bbb9dd946d22c6b68443a3e3d7e763ae1bf4f09809ea599d2cfabb2ea2b21a980031ff755b21d24057ad6e33018fa8f8cf134da0a07c7948ff9474dba9233d7cf023a3fed21ea3639817d637581e226184c95fc735f1bd8e", 0xbf}, {&(0x7f00000001c0)="74577322f94ff3fe0f46472a2f89818fbc3a13c9392497d8f1ed8b642eda0ffada747bffa618d2a808d91e5bb214630e1032c00d78545cf92ee6b3077858bd815cdd5f8154242e74b895e7ae2382bfd116b929752038a2ffc919f6b6cf697275d87faa8889c6bf75412bdabb310a21e9621faea11a5c6827ead37a90ad351eb7ce8bf8695353a7a88036a438d205ee94cb676608f91559d5f4e46553ccb895431d36ff926ee941a0b4cf1a87dbe3458701995f77b8af99298b7858fb3cc5c042f375cb6d3c2359d83fbc7ef7c76d8601fbb58ca0dc588032f36e2c9c3e9c25eaec546a", 0xe3}, {&(0x7f00000002c0)="d57b5ab49754ce9bed2c6d2719d03dc0d751da0edd187b08ef53040dacb84198cb366ee23b4f01efdef818a207c0daf4b74116dd7dc31dd2f188c9c45af2f869e0d3390c9034e697d6198ecd5969990a36361ee1526529d57ab86638f7494b261a915712d32cfb71380ee26fc08aa0a3b5a59934bad09968445f65b04be5775c1ac70081e050ea425799283010054d57fa08cf3a4f1f3ea18f290569c9d535970a07923813aeca9085cbe3fd6049e8af34dc130e366cf8dd45ce105c848c482b3084754efe1fcba45b561be2b6051397d6c110c1084f95f4492ee29900b824d9d9b25fb354600b01fe9ae2289fa4b50a67c743", 0xf3}, {&(0x7f0000000080)="9c8f1651e1cc", 0x6}], 0x4, 0x7, 0xca36) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 2m13.192119669s ago: executing program 3 (id=1539): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000240)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x1, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m7.881203145s ago: executing program 32 (id=1531): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x822c00, 0x40, 0xe}, 0x18) (async) r5 = signalfd4(r1, &(0x7f0000000100)={[0xa]}, 0x8, 0x800) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r6, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4, 0x43, 0x3, r5}) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$UHID_CREATE2(r7, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESDEC=r3, @ANYRES16]) 2m3.060027518s ago: executing program 33 (id=1535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000100), 0x4000) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) getgroups(0x5, &(0x7f0000000000)=[0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0x0]) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x9207}, @void, @eth={@random="cf162176f29f", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x2d, 0x3, 0x0, 0x0, "87e443a298cc04808af44ff8a959113b412d926ff60f80f57fa6be5e643f3bc8687127842f5f2f90c2117fcb82cee7baaef7e1c170175a2377ee95a750e15eda"}}}}}, 0x62) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'veth0_to_batadv\x00', &(0x7f00000003c0)=@ethtool_dump={0x40, 0x9, 0x9f}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r6, &(0x7f00000001c0)=""/62, 0x40000, 0x14100, 0x0, 0x0) close_range(r5, r6, 0x0) 1m56.461894372s ago: executing program 34 (id=1539): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000240)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x1, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m1.457082154s ago: executing program 1 (id=1553): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0x10000) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000180)={0x3, 0x2, 0x7, 0xfffffffa, 0x1, 0x4}) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xc0300, 0x18) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000140)) 58.373342055s ago: executing program 1 (id=1554): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(r2, &(0x7f00000004c0)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) futex(&(0x7f0000000040)=0x2, 0x84, 0x2, 0x0, 0x0, 0x22) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r3, 0xffffb000) 55.263071446s ago: executing program 1 (id=1555): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) r1 = syz_io_uring_setup(0x280808d2, &(0x7f00000000c0)={0x0, 0xf1fd, 0x3010, 0x3}, &(0x7f0000000040), &(0x7f0000000080)) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) poll(&(0x7f0000000000)=[{r1, 0xd010}], 0x1, 0x9) r6 = inotify_init1(0x80800) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0xc0000484) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x12100, 0x0) preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00002a6000/0x400000)=nil) fadvise64(r0, 0x81, 0xc, 0x2) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f00000001c0), 0x8) io_setup(0x8, &(0x7f0000000000)=0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r9, 0x1, &(0x7f0000005280)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0xfffe, r10, 0x0, 0x0, 0x81, 0x0, 0x2}]) openat(r7, &(0x7f0000000140)='./file0\x00', 0x420000, 0x140) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 44.422795949s ago: executing program 1 (id=1556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x70}}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r4 = epoll_create(0x6) epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 34.670316265s ago: executing program 1 (id=1557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ffffffe000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0x10000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) r4 = fcntl$dupfd(r3, 0x406, r0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3b79], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12]}, 0x45c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000001240)={0x49834e15, 0x4f0, 0x9, 0x1, 0x81}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r7 = dup(r5) write$uinput_user_dev(r7, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x80000001, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x4, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0xb, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x3, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x7, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) read$FUSE(r7, &(0x7f0000000d40)={0x2020}, 0x2020) setns(r4, 0x40000000) close_range(r0, 0xffffffffffffffff, 0x0) 17.918933589s ago: executing program 1 (id=1558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000040)="f5c89e1e63da9c25fcb8e6ea56eaee8b7524980ba0d36551d39ff698071afdd60bb683ab413d4d82ee691b3d8136e2285b7c9e9f10450b1e88a6", 0x3a) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x5, @loopback, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000004dc0)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x10000, 0x82) r3 = openat(r2, &(0x7f000000c380)='./file0\x00', 0x480101, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x7709, 0x0) 0s ago: executing program 35 (id=1558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000040)="f5c89e1e63da9c25fcb8e6ea56eaee8b7524980ba0d36551d39ff698071afdd60bb683ab413d4d82ee691b3d8136e2285b7c9e9f10450b1e88a6", 0x3a) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x5, @loopback, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000004dc0)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x10000, 0x82) r3 = openat(r2, &(0x7f000000c380)='./file0\x00', 0x480101, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x7709, 0x0) kernel console output (not intermixed with test programs): config 6 has an invalid interface number: 22 but max is 1 [ 108.863338][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 108.868414][ T711] usb 3-1: config 6 has no interface number 0 [ 108.874600][ T711] usb 3-1: config 6 has no interface number 1 [ 108.880763][ T711] usb 3-1: config 6 interface 218 altsetting 88 endpoint 0x9 has invalid wMaxPacketSize 0 [ 108.891117][ T711] usb 3-1: config 6 interface 218 altsetting 88 has an invalid descriptor for endpoint zero, skipping [ 108.902591][ T711] usb 3-1: config 6 interface 218 altsetting 88 bulk endpoint 0x7 has invalid maxpacket 64 [ 108.912864][ T711] usb 3-1: config 6 interface 218 altsetting 88 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 108.924008][ T711] usb 3-1: config 6 interface 218 altsetting 88 has a duplicate endpoint with address 0x1, skipping [ 108.935416][ T9] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.945377][ T9] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.958366][ T711] usb 3-1: config 6 interface 218 altsetting 88 bulk endpoint 0x6 has invalid maxpacket 8 [ 108.968335][ T711] usb 3-1: config 6 interface 218 has no altsetting 0 [ 108.975177][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.981873][ T711] usb 3-1: config 6 interface 22 has no altsetting 0 [ 108.988633][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 108.997730][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.006820][ T9] usb 1-1: config 0 descriptor?? [ 109.012302][ T711] usb 3-1: New USB device found, idVendor=0403, idProduct=fad0, bcdDevice= 1.42 [ 109.022343][ T711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.030414][ T711] usb 3-1: Product: syz [ 109.034636][ T711] usb 3-1: Manufacturer: syz [ 109.039291][ T711] usb 3-1: SerialNumber: syz [ 109.045225][ T2696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.052494][ T2696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.260271][ T2697] rust_binder: Read failure Err(EAGAIN) in pid:465 [ 109.260271][ T2696] rust_binder: Read failure Err(EAGAIN) in pid:465 [ 109.269356][ T711] ftdi_sio 3-1:6.218: FTDI USB Serial Device converter detected [ 109.284189][ T711] usb 3-1: Detected SIO [ 109.288407][ T711] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 109.296525][ T711] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.306942][ T711] ftdi_sio 3-1:6.22: FTDI USB Serial Device converter detected [ 109.315200][ T711] usb 3-1: Detected SIO [ 109.319979][ T711] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 109.329553][ T711] usb 3-1: USB disconnect, device number 35 [ 109.340891][ T711] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.350665][ T711] ftdi_sio 3-1:6.218: device disconnected [ 109.357375][ T711] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 109.367139][ T711] ftdi_sio 3-1:6.22: device disconnected [ 109.413142][ T36] audit: type=1400 audit(1761857674.668:521): avc: denied { bind } for pid=2698 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.435535][ T9] wacom 0003:056A:0030.0007: hidraw0: USB HID v0.00 Device [HID 056a:0030] on usb-dummy_hcd.0-1/input0 [ 109.683727][ T2699] rust_binder: Error in use_page_slow: ESRCH [ 109.683755][ T2699] rust_binder: use_range failure ESRCH [ 109.689764][ T2699] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 109.695354][ T2699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 109.703476][ T2699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:550 [ 110.140625][ T711] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 110.300616][ T711] usb 3-1: Using ep0 maxpacket: 16 [ 110.306893][ T711] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 110.315249][ T711] usb 3-1: config 0 has no interface number 0 [ 110.321384][ T711] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 110.331256][ T711] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.341294][ T711] usb 3-1: config 0 interface 41 has no altsetting 0 [ 110.349443][ T711] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 110.358577][ T711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.366723][ T711] usb 3-1: Product: syz [ 110.370930][ T711] usb 3-1: Manufacturer: syz [ 110.375540][ T711] usb 3-1: SerialNumber: syz [ 110.380968][ T711] usb 3-1: config 0 descriptor?? [ 110.386415][ T2712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.393724][ T2712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.606102][ T2711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.613387][ T2711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.022074][ T711] Error reading MAC address [ 111.027185][ T2711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.034475][ T2711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.382128][ T2730] netlink: 'syz.3.727': attribute type 19 has an invalid length. [ 111.473440][ T36] audit: type=1400 audit(1761857676.728:522): avc: denied { accept } for pid=2735 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 111.489674][ T9] usb 1-1: USB disconnect, device number 36 [ 111.971239][ T36] audit: type=1400 audit(1761857677.228:523): avc: denied { setopt } for pid=2761 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.767488][ T36] audit: type=1400 audit(1761857678.018:524): avc: denied { append } for pid=2787 comm="syz.1.749" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.806914][ T711] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 112.817533][ T711] usb 3-1: USB disconnect, device number 36 [ 112.971475][ T2794] 9pnet_fd: Insufficient options for proto=fd [ 113.272455][ T36] audit: type=1400 audit(1761857678.528:525): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.280350][ T2809] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 113.540677][ T711] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 113.670666][ T711] usb 1-1: device descriptor read/64, error -71 [ 113.910657][ T711] usb 1-1: device descriptor read/64, error -71 [ 114.150623][ T711] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 114.280630][ T711] usb 1-1: device descriptor read/64, error -71 [ 114.520635][ T711] usb 1-1: device descriptor read/64, error -71 [ 114.630706][ T711] usb usb1-port1: attempt power cycle [ 114.970611][ T711] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 114.991894][ T711] usb 1-1: device descriptor read/8, error -71 [ 115.121821][ T711] usb 1-1: device descriptor read/8, error -71 [ 115.360648][ T711] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 115.381726][ T711] usb 1-1: device descriptor read/8, error -71 [ 115.468379][ T2818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.760'. [ 115.521706][ T711] usb 1-1: device descriptor read/8, error -71 [ 115.630707][ T711] usb usb1-port1: unable to enumerate USB device [ 115.986270][ T2833] sock: sock_timestamping_bind_phc: sock not bind to device [ 115.994304][ T36] audit: type=1400 audit(1761857681.248:526): avc: denied { create } for pid=2831 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.229370][ T2836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.335275][ T2855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.338283][ T36] audit: type=1400 audit(1761857681.588:527): avc: granted { setsecparam } for pid=2853 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 116.343795][ T2855] rust_binder: Error in use_page_slow: ESRCH [ 116.362292][ T2855] rust_binder: use_range failure ESRCH [ 116.368513][ T2855] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 116.374322][ T2855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 116.382449][ T2855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:574 [ 116.422921][ T2865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 116.554090][ T2871] rust_binder: Write failure EFAULT in pid:582 [ 116.568615][ T2875] fuse: Unknown parameter '000000000000000000040x0000000000000000' [ 116.605891][ T36] audit: type=1400 audit(1761857681.858:528): avc: denied { create } for pid=2879 comm="syz.0.779" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.859043][ T36] audit: type=1326 audit(1761857682.108:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2881 comm="syz.2.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735e98efc9 code=0x0 [ 116.890634][ T447] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 117.041857][ T447] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.052149][ T447] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.063066][ T447] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.072214][ T447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.080218][ T447] usb 1-1: Product: syz [ 117.084415][ T447] usb 1-1: Manufacturer: syz [ 117.089114][ T447] usb 1-1: SerialNumber: syz [ 117.299573][ T447] usb 1-1: USB disconnect, device number 41 [ 117.306876][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.050653][ T447] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 118.201705][ T447] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.212513][ T447] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 118.224040][ T447] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 118.235057][ T447] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.249399][ T447] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 118.258494][ T447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.266527][ T447] usb 1-1: Product: syz [ 118.270736][ T447] usb 1-1: Manufacturer: syz [ 118.275344][ T447] usb 1-1: SerialNumber: syz [ 118.280538][ T447] usb 1-1: config 0 descriptor?? [ 118.285821][ T2891] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.294027][ T447] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 118.551652][ T2891] rust_binder: 594: no such ref 3 [ 118.556916][ T2891] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 118.567007][ T2891] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 118.575900][ T2891] rust_binder: Write failure EFAULT in pid:594 [ 118.584865][ T36] audit: type=1326 audit(1761857683.838:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.3.787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dabd8efc9 code=0x0 [ 119.517512][ T36] audit: type=1400 audit(1761857684.768:531): avc: denied { load_policy } for pid=2910 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 119.853341][ T2942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 119.853378][ T2942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:564 [ 119.911067][ T36] audit: type=1400 audit(1761857685.168:532): avc: denied { create } for pid=2943 comm="syz.1.800" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.955237][ T36] audit: type=1400 audit(1761857685.198:533): avc: denied { write } for pid=2943 comm="syz.1.800" name="file2" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.978007][ T36] audit: type=1400 audit(1761857685.198:534): avc: denied { open } for pid=2943 comm="syz.1.800" path="/178/file2" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.002315][ T36] audit: type=1400 audit(1761857685.228:535): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.240614][ T447] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 120.391669][ T447] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.403279][ T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.414206][ T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.424062][ T447] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.436968][ T447] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.446048][ T447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.455032][ T447] usb 3-1: config 0 descriptor?? [ 120.821753][ T331] usb 1-1: USB disconnect, device number 42 [ 120.839831][ T2954] rust_binder: Write failure EFAULT in pid:599 [ 120.863125][ T447] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 120.878484][ T447] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 120.999334][ T2961] binder: Bad value for 'defcontext' [ 121.038597][ T2963] /dev/rnullb0: Can't open blockdev [ 121.172463][ T2971] /dev/rnullb0: Can't open blockdev [ 121.400588][ T447] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 121.551709][ T447] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 121.562789][ T447] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 121.576631][ T447] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.585760][ T447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.593840][ T447] usb 2-1: SerialNumber: syz [ 121.601899][ T447] cdc_acm 2-1:1.0: invalid descriptor buffer length [ 121.609161][ T447] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 121.617063][ T447] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 121.623670][ T447] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 122.389324][ T3004] tipc: Failed to remove unknown binding: 66,1,1/0:2427417522/2427417524 [ 122.398262][ T3004] tipc: Failed to remove unknown binding: 66,1,1/0:2427417522/2427417524 [ 122.406829][ T3004] tipc: Failed to remove unknown binding: 66,1,1/0:2427417522/2427417524 [ 122.693172][ T3028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.694000][ T3028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 122.860654][ T1426] Bluetooth: hci0: command 0x1003 tx timeout [ 122.860672][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.988817][ T36] audit: type=1400 audit(1761857688.238:536): avc: denied { map } for pid=3035 comm="syz.3.831" path="socket:[23897]" dev="sockfs" ino=23897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.200623][ T711] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 123.351021][ T711] usb 3-1: device firmware changed [ 123.356321][ T447] usb 3-1: USB disconnect, device number 37 [ 123.396868][ T36] audit: type=1400 audit(1761857688.648:537): avc: denied { nlmsg_tty_audit } for pid=3063 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 123.397968][ T3064] No source specified [ 123.423735][ T3064] overlay: Unknown parameter '/' [ 123.490605][ T447] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 123.642365][ T447] usb 3-1: config 247 has an invalid interface number: 81 but max is 0 [ 123.650701][ T447] usb 3-1: config 247 has an invalid interface descriptor of length 5, skipping [ 123.659851][ T447] usb 3-1: config 247 has no interface number 0 [ 123.666174][ T447] usb 3-1: config 247 interface 81 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.679340][ T447] usb 3-1: config 247 interface 81 has no altsetting 0 [ 123.686398][ T66] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 123.695995][ T447] usb 3-1: string descriptor 0 read error: -22 [ 123.702280][ T447] usb 3-1: Dual-Role OTG device on HNP port [ 123.708387][ T447] usb 3-1: New USB device found, idVendor=054c, idProduct=0169, bcdDevice=ab.2a [ 123.708721][ T3070] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 123.717464][ T447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.840603][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 123.846767][ T66] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 123.854941][ T66] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.865057][ T66] usb 1-1: config 0 has no interface number 0 [ 123.872578][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 123.881658][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.889636][ T66] usb 1-1: Product: syz [ 123.893817][ T66] usb 1-1: Manufacturer: syz [ 123.898419][ T66] usb 1-1: SerialNumber: syz [ 123.903805][ T66] usb 1-1: config 0 descriptor?? [ 123.939421][ T711] usb 3-1: USB disconnect, device number 38 [ 124.111401][ T66] usb 1-1: USB disconnect, device number 43 [ 124.228564][ T711] usb 2-1: USB disconnect, device number 36 [ 124.259898][ T3075] rust_binder: Failed to allocate buffer. len:5176, is_oneway:false [ 124.269422][ T36] audit: type=1400 audit(1761857689.518:538): avc: denied { create } for pid=3077 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.303650][ T3085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'. [ 124.313356][ T3085] 9pnet_fd: Insufficient options for proto=fd [ 124.335041][ T3088] /dev/rnullb0: Can't open blockdev [ 124.355196][ T3090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'. [ 124.470510][ T3103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.470961][ T3103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:517 [ 124.477954][ T3103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 124.493320][ T3103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:517 [ 124.606141][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.616235][ T3133] rust_binder: Error while translating object. [ 124.623389][ T3133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.629716][ T3133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:528 [ 124.680964][ T3143] rust_binder: Error in use_page_slow: ESRCH [ 124.680992][ T3143] rust_binder: use_range failure ESRCH [ 124.698783][ T3143] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 124.706048][ T3140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.869'. [ 124.714589][ T3143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.722990][ T3143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:615 [ 124.827718][ T36] audit: type=1400 audit(1761857690.078:539): avc: denied { remount } for pid=3161 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.858196][ T3163] rust_binder: Error while translating object. [ 124.858237][ T3163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 124.870655][ T3163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:624 [ 124.888076][ T3163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.904788][ T3170] rust_binder: Error while translating object. [ 124.916047][ T3170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 124.922668][ T3170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:624 [ 124.990621][ T711] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 125.060595][ T66] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 125.160603][ T711] usb 3-1: Using ep0 maxpacket: 8 [ 125.166660][ T711] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 125.174770][ T711] usb 3-1: config 0 has no interface number 0 [ 125.182429][ T711] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 125.191518][ T711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.199509][ T711] usb 3-1: Product: syz [ 125.203693][ T711] usb 3-1: Manufacturer: syz [ 125.208286][ T711] usb 3-1: SerialNumber: syz [ 125.213664][ T711] usb 3-1: config 0 descriptor?? [ 125.220598][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 125.226936][ T66] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 125.235290][ T66] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.245400][ T66] usb 1-1: config 0 has no interface number 0 [ 125.251536][ T66] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 125.263207][ T66] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 125.274542][ T66] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 125.285414][ T66] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 125.295247][ T66] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 125.308331][ T66] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 125.317390][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.326169][ T66] usb 1-1: config 0 descriptor?? [ 125.333516][ T3147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 125.361945][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.419403][ T3140] binder: Unknown parameter 'fscontext?}' [ 125.426275][ T3140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.869'. [ 125.449973][ T711] usb 3-1: USB disconnect, device number 39 [ 125.459480][ T3182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.473927][ T36] audit: type=1400 audit(1761857690.728:540): avc: denied { listen } for pid=3183 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.544080][ T66] usb 1-1: USB disconnect, device number 44 [ 125.726097][ T3190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.777943][ T3191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 125.790772][ T711] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 125.951840][ T711] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 125.962760][ T711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.973774][ T711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 125.984922][ T711] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 125.998999][ T711] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.008120][ T711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.016152][ T711] usb 3-1: SerialNumber: syz [ 126.021806][ T3186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.090382][ T3193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=3193 comm=syz.0.885 [ 126.103474][ T3193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.104076][ T3193] rust_binder: Error in use_page_slow: ESRCH [ 126.110617][ T3193] rust_binder: use_range failure ESRCH [ 126.116726][ T3193] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 126.122316][ T3193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.130331][ T3193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:611 [ 126.156593][ T1110] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.232061][ T3186] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.236693][ T3186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 126.243376][ T3186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:540 [ 126.303412][ T711] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 126.319952][ T711] usb 3-1: USB disconnect, device number 40 [ 126.760609][ T66] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 126.911816][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.922792][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.932547][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.945550][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.954603][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.963275][ T66] usb 2-1: config 0 descriptor?? [ 127.190777][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 127.194159][ T36] audit: type=1400 audit(1761857692.448:541): avc: granted { setsecparam } for pid=3208 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 127.197319][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.226672][ T36] audit: type=1400 audit(1761857692.478:542): avc: granted { setsecparam } for pid=3208 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 127.229623][ T66] usb 2-1: USB disconnect, device number 37 [ 127.246179][ T36] audit: type=1400 audit(1761857692.478:543): avc: granted { setsecparam } for pid=3208 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 127.381722][ T3219] 9pnet_fd: Insufficient options for proto=fd [ 127.388447][ T3219] devpts: called with bogus options [ 128.060608][ T447] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 128.211649][ T447] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.221837][ T1426] Bluetooth: hci0: command 0x1003 tx timeout [ 128.227873][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.227874][ T447] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.229390][ T447] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.251920][ T447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.259901][ T447] usb 2-1: SerialNumber: syz [ 128.467871][ T447] usb 2-1: 0:2 : does not exist [ 128.474479][ T447] usb 2-1: unit 255 not found! [ 128.482903][ T447] usb 2-1: USB disconnect, device number 38 [ 128.524653][ T3262] futex_wake_op: syz.3.908 tries to shift op by -1; fix this program [ 128.532778][ T3263] futex_wake_op: syz.3.908 tries to shift op by -1; fix this program [ 128.751938][ T3268] bpf: Bad value for 'gid' [ 128.868119][ T3272] netlink: 'syz.0.912': attribute type 4 has an invalid length. [ 128.875829][ T3272] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.912'. [ 128.885613][ T3272] binder: Unknown parameter 'w.¦c„wæV' [ 128.963360][ T36] audit: type=1400 audit(1761857694.218:544): avc: denied { ioctl } for pid=3275 comm="syz.0.914" path="socket:[25319]" dev="sockfs" ino=25319 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.999565][ T3280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.999993][ T3281] rust_binder: Error in use_page_slow: ESRCH [ 129.006548][ T3281] rust_binder: use_range failure ESRCH [ 129.012651][ T3281] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 129.018342][ T3281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.026450][ T3281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:629 [ 129.043667][ T36] audit: type=1326 audit(1761857694.288:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3282 comm="syz.1.916" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d0018efc9 code=0x0 [ 129.110471][ T3291] netlink: 96 bytes leftover after parsing attributes in process `syz.3.918'. [ 129.156162][ T36] audit: type=1400 audit(1761857694.408:546): avc: denied { read } for pid=3297 comm="syz.3.920" name="file0" dev="tmpfs" ino=1741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.340631][ T447] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 129.490651][ T711] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 129.492111][ T447] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.506279][ T447] usb 1-1: not running at top speed; connect to a high speed hub [ 129.514837][ T447] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 129.523054][ T447] usb 1-1: config 1 has no interface number 0 [ 129.529131][ T447] usb 1-1: config 1 interface 138 has no altsetting 0 [ 129.537435][ T447] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 129.546621][ T447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.554651][ T447] usb 1-1: Product: syz [ 129.558822][ T447] usb 1-1: Manufacturer: syz [ 129.563459][ T447] usb 1-1: SerialNumber: syz [ 129.650635][ T711] usb 2-1: Using ep0 maxpacket: 32 [ 129.657099][ T711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.668033][ T711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.677820][ T711] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 129.686892][ T711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.695645][ T711] usb 2-1: config 0 descriptor?? [ 129.771346][ T3288] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 129.779776][ T3288] rust_binder: Write failure EINVAL in pid:633 [ 129.789025][ T447] usb 1-1: USB disconnect, device number 45 [ 129.808038][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.958904][ T3318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.959255][ T3318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.979528][ T3321] tipc: Enabling of bearer rejected, failed to enable media [ 129.994453][ T3322] tipc: Enabling of bearer rejected, failed to enable media [ 130.039893][ T3326] netlink: 96 bytes leftover after parsing attributes in process `syz.3.930'. [ 130.103063][ T711] apple 0003:05AC:0264.0009: unknown main item tag 0x0 [ 130.110047][ T711] apple 0003:05AC:0264.0009: unknown main item tag 0x0 [ 130.117950][ T711] apple 0003:05AC:0264.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0264] on usb-dummy_hcd.1-1/input0 [ 130.240644][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 130.307409][ T3306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.316067][ T3306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.324360][ T3306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.332894][ T3306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.362065][ T331] usb 2-1: USB disconnect, device number 39 [ 130.370973][ T9] usb 3-1: device descriptor read/64, error -71 [ 130.540628][ T711] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 130.570797][ T36] audit: type=1400 audit(1761857695.828:547): avc: denied { bpf } for pid=3333 comm="syz.3.933" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.603136][ T36] audit: type=1400 audit(1761857695.858:548): avc: denied { mounton } for pid=3335 comm="syz.3.934" path="/329/file0" dev="tmpfs" ino=1791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 130.610626][ T9] usb 3-1: device descriptor read/64, error -71 [ 130.711635][ T711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.722579][ T711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.732362][ T711] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.745355][ T711] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.754571][ T711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.763177][ T711] usb 1-1: config 0 descriptor?? [ 130.880618][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 130.927874][ T3346] binder: Unknown parameter 'contextÌðÔð[7’' [ 130.970299][ T711] usbhid 1-1:0.0: can't add hid device: -32 [ 130.976325][ T711] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 131.020611][ T9] usb 3-1: device descriptor read/64, error -71 [ 131.180728][ T66] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 131.260651][ T9] usb 3-1: device descriptor read/64, error -71 [ 131.319951][ T3355] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 131.334062][ T447] usb 1-1: USB disconnect, device number 46 [ 131.347332][ T66] usb 2-1: config 227 has an invalid interface number: 31 but max is 0 [ 131.351237][ T3358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.356988][ T3358] rust_binder: Error in use_page_slow: ESRCH [ 131.358166][ T66] usb 2-1: config 227 has no interface number 0 [ 131.363668][ T3358] rust_binder: use_range failure ESRCH [ 131.369835][ T66] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0 [ 131.375926][ T9] usb usb3-port1: attempt power cycle [ 131.381730][ T66] usb 2-1: config 227 interface 31 altsetting 8 bulk endpoint 0xF has invalid maxpacket 1024 [ 131.391221][ T3358] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 131.391242][ T3358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 131.391265][ T3358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:640 [ 131.412703][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.415766][ T66] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 131.433904][ T66] usb 2-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 131.451309][ T66] usb 2-1: config 227 interface 31 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1023 [ 131.473638][ T66] usb 2-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 131.473666][ T66] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 131.495523][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.495545][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.503506][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.508531][ T66] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0x3 has an invalid bInterval 129, changing to 7 [ 131.527240][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.527262][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.527456][ T66] usb 2-1: config 227 interface 31 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 131.533796][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.540521][ T66] usb 2-1: config 227 interface 31 has no altsetting 0 [ 131.551087][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.559137][ T66] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=15.65 [ 131.564609][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.570886][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.579935][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.587240][ T66] usb 2-1: Product: Þ¸â”â‚äš°å¬Úµê·ë˜„ǎ籓瞬忡Ⲷ쇬 [ 131.612989][ T66] usb 2-1: Manufacturer:  [ 131.617444][ T66] usb 2-1: SerialNumber: ц [ 131.624431][ T3348] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.631759][ T3348] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.639185][ T3348] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.790620][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 131.811565][ T9] usb 3-1: device descriptor read/8, error -71 [ 131.855020][ T66] usb 2-1: Invalid firmware size=870. [ 131.867706][ T66] usb 2-1: USB disconnect, device number 40 [ 131.945608][ T9] usb 3-1: device descriptor read/8, error -71 [ 131.987048][ T3383] /dev/rnullb0: Can't open blockdev [ 132.159653][ T3393] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.210640][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 132.241764][ T9] usb 3-1: device descriptor read/8, error -71 [ 132.371679][ T9] usb 3-1: device descriptor read/8, error -71 [ 132.480693][ T9] usb usb3-port1: unable to enumerate USB device [ 132.825453][ T36] audit: type=1400 audit(1761857698.078:549): avc: denied { create } for pid=3423 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.400618][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 133.571799][ T9] usb 3-1: config 227 has an invalid interface number: 31 but max is 0 [ 133.580268][ T9] usb 3-1: config 227 has no interface number 0 [ 133.586781][ T9] usb 3-1: config 227 interface 31 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0 [ 133.597039][ T9] usb 3-1: config 227 interface 31 altsetting 8 bulk endpoint 0xF has invalid maxpacket 1024 [ 133.607524][ T9] usb 3-1: config 227 interface 31 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 133.618871][ T9] usb 3-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 133.629939][ T9] usb 3-1: config 227 interface 31 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1023 [ 133.640418][ T9] usb 3-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 133.651481][ T9] usb 3-1: config 227 interface 31 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 133.662712][ T9] usb 3-1: config 227 interface 31 altsetting 8 endpoint 0x3 has an invalid bInterval 129, changing to 7 [ 133.674190][ T9] usb 3-1: config 227 interface 31 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 133.685420][ T9] usb 3-1: config 227 interface 31 has no altsetting 0 [ 133.694155][ T9] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=15.65 [ 133.703475][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.711750][ T9] usb 3-1: Product: Þ¸â”â‚äš°å¬Úµê·ë˜„ǎ籓瞬忡Ⲷ쇬 [ 133.719208][ T9] usb 3-1: Manufacturer:  [ 133.723907][ T9] usb 3-1: SerialNumber: ц [ 133.729791][ T3430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.739542][ T3430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.747010][ T3430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.959613][ T9] usb 3-1: Invalid firmware size=870. [ 133.971887][ T9] usb 3-1: USB disconnect, device number 45 [ 134.100485][ T3450] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 134.415652][ T3485] overlayfs: failed to clone upperpath [ 134.460606][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 134.610579][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 134.616774][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.625528][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.635778][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.645998][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.655069][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.663252][ T9] usb 2-1: Product: syz [ 134.667427][ T9] usb 2-1: Manufacturer: syz [ 134.672039][ T9] usb 2-1: SerialNumber: syz [ 134.720581][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 134.870573][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 134.876688][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.888405][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.897513][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.905564][ T10] usb 3-1: Product: syz [ 134.909750][ T10] usb 3-1: Manufacturer: syz [ 134.914376][ T10] usb 3-1: SerialNumber: syz [ 135.087810][ T9] usb 2-1: 0:2 : does not exist [ 135.121389][ T36] audit: type=1400 audit(1761857700.378:550): avc: denied { append } for pid=3493 comm="syz.2.995" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 135.146891][ T3494] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 135.154596][ T3494] netlink: 'syz.2.995': attribute type 2 has an invalid length. [ 135.163021][ T3494] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 135.170729][ T3494] netlink: 'syz.2.995': attribute type 2 has an invalid length. [ 135.242529][ T66] usb 3-1: USB disconnect, device number 46 [ 135.316158][ T3517] __vm_enough_memory: pid: 3517, comm: syz.0.1002, bytes: 18014402804453376 not enough memory for the allocation [ 135.347752][ T3519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.650599][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 135.810611][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 135.817360][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.826165][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.836581][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.845548][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.860336][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.869648][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.877716][ T10] usb 1-1: Product: syz [ 135.882160][ T10] usb 1-1: Manufacturer: syz [ 135.886806][ T10] usb 1-1: SerialNumber: syz [ 135.918530][ T36] audit: type=1400 audit(1761857701.168:551): avc: denied { accept } for pid=3528 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.246877][ T9] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 137.275345][ T9] usb 2-1: USB disconnect, device number 41 [ 137.313613][ T3568] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1018'. [ 137.740646][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 137.762640][ T36] audit: type=1400 audit(1761857703.018:552): avc: denied { ioctl } for pid=3578 comm="syz.2.1022" path="/195/file2" dev="tmpfs" ino=1051 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.901775][ T9] usb 2-1: config 227 has an invalid interface number: 31 but max is 0 [ 137.906732][ T36] audit: type=1400 audit(1761857703.158:553): avc: denied { sqpoll } for pid=3596 comm="syz.2.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 137.910749][ T9] usb 2-1: config 227 has no interface number 0 [ 137.935557][ T9] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0 [ 137.945505][ T9] usb 2-1: config 227 interface 31 altsetting 8 bulk endpoint 0xF has invalid maxpacket 1024 [ 137.955724][ T9] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 137.966844][ T9] usb 2-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 137.977650][ T9] usb 2-1: config 227 interface 31 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1023 [ 137.987891][ T9] usb 2-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 137.998703][ T9] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 138.009698][ T9] usb 2-1: config 227 interface 31 altsetting 8 endpoint 0x3 has an invalid bInterval 129, changing to 7 [ 138.021061][ T9] usb 2-1: config 227 interface 31 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 138.032045][ T9] usb 2-1: config 227 interface 31 has no altsetting 0 [ 138.040217][ T9] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=15.65 [ 138.049297][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.057343][ T9] usb 2-1: Product: Þ¸â”â‚äš°å¬Úµê·ë˜„ǎ籓瞬忡Ⲷ쇬 [ 138.064725][ T9] usb 2-1: Manufacturer:  [ 138.069170][ T9] usb 2-1: SerialNumber: ц [ 138.075950][ T3575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.083302][ T3575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.090704][ T3575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.303057][ T9] usb 2-1: Invalid firmware size=870. [ 138.316615][ T9] usb 2-1: USB disconnect, device number 42 [ 138.424759][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 138.440950][ T10] cdc_ncm 1-1:1.0: bind() failure [ 138.461142][ T10] usb 1-1: USB disconnect, device number 47 [ 138.510319][ T3610] fuse: Unknown parameter 'group_id00000000000000000000' [ 138.825010][ T36] audit: type=1400 audit(1761857704.078:554): avc: denied { shutdown } for pid=3629 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.847361][ T3630] Unsupported ieee802154 address type: 0 [ 138.849030][ T36] audit: type=1400 audit(1761857704.098:555): avc: denied { bind } for pid=3629 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.900970][ T3637] __vm_enough_memory: pid: 3637, comm: syz.1.1037, bytes: 18014402804453376 not enough memory for the allocation [ 138.943973][ T3640] SELinux: security_context_str_to_sid () failed with errno=-22 [ 138.952432][ T3640] SELinux: security_context_str_to_sid () failed with errno=-22 [ 138.972269][ T3645] fuse: Unknown parameter 'group_id00000000000000000000' [ 138.994270][ T3647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.012571][ T36] audit: type=1326 audit(1761857704.268:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.2.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735e98efc9 code=0x0 [ 139.716404][ T3670] netlink: 'syz.3.1048': attribute type 16 has an invalid length. [ 139.724304][ T3670] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1048'. [ 139.751837][ T3672] fuse: Bad value for 'user_id' [ 139.756787][ T3672] fuse: Bad value for 'user_id' [ 139.872746][ T36] audit: type=1400 audit(1761857705.128:557): avc: denied { bind } for pid=3679 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.930607][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 140.005698][ T36] audit: type=1400 audit(1761857705.258:558): avc: denied { create } for pid=3689 comm="syz.2.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.080600][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 140.086775][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.096943][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.105892][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.120225][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.129412][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.137446][ T10] usb 1-1: Product: syz [ 140.141659][ T10] usb 1-1: Manufacturer: syz [ 140.146292][ T10] usb 1-1: SerialNumber: syz [ 140.154026][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 140.159254][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 140.166078][ T10] cdc_ncm 1-1:1.0: bind() failure [ 140.356988][ T447] usb 1-1: USB disconnect, device number 48 [ 140.873947][ T3695] binder: Unknown parameter 'ma' [ 140.923192][ T3699] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 140.934377][ T36] audit: type=1400 audit(1761857706.188:559): avc: denied { relabelto } for pid=3698 comm="syz.0.1061" name="228" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 140.963398][ T36] audit: type=1400 audit(1761857706.218:560): avc: denied { associate } for pid=3698 comm="syz.0.1061" name="228" dev="tmpfs" ino=1236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 141.000061][ T36] audit: type=1400 audit(1761857706.248:561): avc: denied { write } for pid=289 comm="syz-executor" name="228" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 141.024084][ T3704] fuse: Bad value for 'user_id' [ 141.027088][ T36] audit: type=1400 audit(1761857706.248:562): avc: denied { remove_name } for pid=289 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 141.040626][ T3704] fuse: Bad value for 'user_id' [ 141.059037][ T36] audit: type=1400 audit(1761857706.248:563): avc: denied { rmdir } for pid=289 comm="syz-executor" name="228" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 141.131282][ T3706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:722 [ 141.429436][ T3724] fuse: Bad value for 'fd' [ 141.839695][ T3750] fuse: Bad value for 'fd' [ 141.890631][ T10] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 141.980604][ T1426] Bluetooth: hci0: command 0x1003 tx timeout [ 141.980615][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.041852][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.052931][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 142.063791][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.070419][ T10] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 142.079521][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.088164][ T10] usb 1-1: config 0 descriptor?? [ 142.093432][ T3739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.303616][ T10] usb 1-1: string descriptor 0 read error: -71 [ 142.311942][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 142.317931][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 142.326787][ T10] usb 1-1: USB disconnect, device number 49 [ 142.394476][ T36] audit: type=1400 audit(1761857707.648:564): avc: denied { write } for pid=3756 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.532400][ T3765] fuse: Bad value for 'fd' [ 142.537318][ T3765] 9pnet_fd: Insufficient options for proto=fd [ 142.600722][ T3774] fuse: Bad value for 'fd' [ 142.623393][ T3776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 142.633000][ T3776] netlink: 'syz.1.1090': attribute type 5 has an invalid length. [ 142.689399][ T3783] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1093'. [ 142.698775][ T3783] gretap0: entered promiscuous mode [ 142.844318][ T3789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.844683][ T3789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.851258][ T3789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 142.868250][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.897507][ T3794] rust_binder: 761: no such ref 1 [ 142.902747][ T3794] rust_binder: 761: no such ref 3 [ 142.978035][ T3798] fuse: Bad value for 'fd' [ 143.083562][ T36] audit: type=1326 audit(1761857708.338:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.2.1106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735e98efc9 code=0x0 [ 143.185279][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 143.234550][ T3826] fuse: Bad value for 'fd' [ 143.270917][ T3834] 9pnet_fd: Insufficient options for proto=fd [ 143.397323][ T3855] fuse: Bad value for 'fd' [ 143.933676][ T3881] fuse: Invalid rootmode [ 143.999363][ T3899] tipc: Can't bind to reserved service type 0 [ 144.067593][ T3912] fuse: Invalid rootmode [ 144.116868][ T36] audit: type=1400 audit(1761857709.368:566): avc: denied { mount } for pid=3898 comm="syz.0.1133" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 144.118680][ T3911] rust_binder: 769: no such ref 1 [ 144.140398][ T36] audit: type=1400 audit(1761857709.368:567): avc: denied { mounton } for pid=3898 comm="syz.0.1133" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 144.174242][ T3911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:769 [ 144.888304][ T36] audit: type=1400 audit(1761857710.138:568): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 144.951687][ T3931] netlink: 'syz.2.1144': attribute type 16 has an invalid length. [ 144.959639][ T3931] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1144'. [ 144.969506][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=3931 comm=syz.2.1144 [ 145.170633][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 145.330581][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 145.336762][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.347849][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.357620][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.364262][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 145.373307][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.381955][ T10] usb 1-1: config 0 descriptor?? [ 145.948511][ T3939] fuse: Invalid rootmode [ 145.963932][ T36] audit: type=1326 audit(1761857711.218:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d0018efc9 code=0x0 [ 146.092587][ T3944] rust_binder: Write failure EFAULT in pid:774 [ 146.116484][ T36] audit: type=1400 audit(1761857711.368:570): avc: denied { watch } for pid=3940 comm="syz.1.1147" path="/" dev="ramfs" ino=27518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 147.160832][ T36] audit: type=1400 audit(1761857712.418:571): avc: denied { map } for pid=3972 comm="syz.3.1156" path="socket:[27649]" dev="sockfs" ino=27649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.184231][ T36] audit: type=1400 audit(1761857712.418:572): avc: denied { accept } for pid=3972 comm="syz.3.1156" path="socket:[27649]" dev="sockfs" ino=27649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.912994][ T31] usb 1-1: USB disconnect, device number 50 [ 148.181442][ T4001] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.280992][ T36] audit: type=1400 audit(1761857713.538:573): avc: denied { map } for pid=4011 comm="syz.1.1169" path="socket:[27756]" dev="sockfs" ino=27756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 148.521932][ T36] audit: type=1400 audit(1761857713.778:574): avc: denied { name_bind } for pid=4050 comm="syz.1.1180" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 148.836690][ T36] audit: type=1326 audit(1761857714.088:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.1193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d0018efc9 code=0x0 [ 148.882112][ T4088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.961297][ T4099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1196'. [ 149.106834][ T4112] incfs: Error accessing: ./file0/file0. [ 149.112635][ T4112] incfs: mount failed -20 [ 149.423522][ T4126] No source specified [ 149.428759][ T4126] overlayfs: failed to clone lowerpath [ 151.077937][ T4188] overlayfs: failed to clone upperpath [ 151.625167][ T36] audit: type=1400 audit(1761857716.878:576): avc: denied { accept } for pid=4216 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.657976][ T36] audit: type=1400 audit(1761857716.908:577): avc: denied { create } for pid=4218 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 152.334055][ T4232] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1240'. [ 152.344294][ T36] audit: type=1400 audit(1761857717.598:578): avc: denied { map } for pid=4231 comm="syz.1.1240" path="/294" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.375569][ T36] audit: type=1400 audit(1761857717.598:579): avc: denied { execute } for pid=4231 comm="syz.1.1240" path="/294" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.408175][ T4236] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 152.426392][ T4236] rust_binder: Write failure EINVAL in pid:811 [ 152.471056][ T4241] input: syz1 as /devices/virtual/input/input20 [ 152.870595][ T66] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 153.056171][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.071769][ T66] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 153.081233][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.090037][ T66] usb 1-1: config 0 descriptor?? [ 153.144164][ T4265] fuse: Unknown parameter 'user_id00000000000000000000' [ 153.590983][ T66] wacom 0003:056A:00D0.000B: unknown main item tag 0x0 [ 153.598466][ T66] wacom 0003:056A:00D0.000B: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 153.626823][ T66] wacom 0003:056A:00D0.000B: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 153.653924][ T66] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.000B/input/input21 [ 153.800619][ T36] audit: type=1400 audit(1761857719.048:580): avc: denied { nlmsg_read } for pid=4243 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 154.824272][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 155.366131][ T4322] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 155.616406][ T447] usb 1-1: USB disconnect, device number 51 [ 155.960808][ T447] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 155.981281][ T4359] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 156.113849][ T4386] fuse: Unknown parameter '0x0000000000000004' [ 156.121820][ T447] usb 1-1: config 227 has an invalid interface number: 31 but max is 0 [ 156.130321][ T447] usb 1-1: config 227 has no interface number 0 [ 156.137209][ T447] usb 1-1: config 227 interface 31 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0 [ 156.139833][ T4388] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 156.147539][ T447] usb 1-1: config 227 interface 31 altsetting 8 bulk endpoint 0xF has invalid maxpacket 1024 [ 156.157098][ T4388] futex_wake_op: syz.1.1293 tries to shift op by 144; fix this program [ 156.166189][ T447] usb 1-1: config 227 interface 31 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 156.182449][ T4388] incfs: Options parsing error. -22 [ 156.185500][ T447] usb 1-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 156.191384][ T4388] incfs: mount failed -22 [ 156.201500][ T447] usb 1-1: config 227 interface 31 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1023 [ 156.222321][ T447] usb 1-1: config 227 interface 31 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 156.233328][ T447] usb 1-1: config 227 interface 31 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 156.250731][ T447] usb 1-1: config 227 interface 31 altsetting 8 endpoint 0x3 has an invalid bInterval 129, changing to 7 [ 156.262226][ T447] usb 1-1: config 227 interface 31 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 156.280717][ T447] usb 1-1: config 227 interface 31 has no altsetting 0 [ 156.292138][ T447] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=15.65 [ 156.301679][ T447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.309768][ T447] usb 1-1: Product: Þ¸â”â‚äš°å¬Úµê·ë˜„ǎ籓瞬忡Ⲷ쇬 [ 156.330578][ T447] usb 1-1: Manufacturer:  [ 156.335092][ T447] usb 1-1: SerialNumber: ц [ 156.342011][ T4332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.349491][ T4332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.356848][ T4332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.413066][ T4410] fuse: Unknown parameter '0x0000000000000004' [ 156.463124][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 156.475467][ T4415] 9pnet_fd: Insufficient options for proto=fd [ 156.569228][ T447] usb 1-1: Invalid firmware size=870. [ 156.596293][ T447] usb 1-1: USB disconnect, device number 52 [ 156.667176][ T4428] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 156.692414][ T4432] fuse: Unknown parameter '0x0000000000000004' [ 157.100160][ T4446] /dev/rnullb0: Can't open blockdev [ 157.119480][ T4449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.120176][ T4449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:825 [ 157.127214][ T4449] rust_binder: Error in use_page_slow: ESRCH [ 157.136383][ T4449] rust_binder: use_range failure ESRCH [ 157.142570][ T4449] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 157.148044][ T4449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 157.156085][ T4449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:825 [ 157.179996][ T4451] __vm_enough_memory: pid: 4451, comm: syz.0.1318, bytes: 18014402804453376 not enough memory for the allocation [ 157.219333][ T4453] fuse: Unknown parameter '0x0000000000000004' [ 157.238673][ T36] audit: type=1326 audit(1761857722.488:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.1320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f002b98efc9 code=0x0 [ 157.341101][ T4457] rust_binder: Write failure EFAULT in pid:831 [ 157.808423][ T4481] syz.1.1326 uses obsolete (PF_INET,SOCK_PACKET) [ 157.829526][ T4483] overlayfs: missing 'workdir' [ 157.845251][ T36] audit: type=1400 audit(1761857723.098:582): avc: denied { create } for pid=4480 comm="syz.1.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 158.114283][ T4510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4510 comm=syz.2.1336 [ 158.955084][ T36] audit: type=1400 audit(1761857724.208:583): avc: denied { shutdown } for pid=4554 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.986948][ T4562] rust_binder: Write failure EFAULT in pid:839 [ 158.994887][ T4560] raw_sendmsg: syz.2.1356 forgot to set AF_INET. Fix it! [ 159.065143][ T4573] tipc: Cannot configure node identity twice [ 159.080642][ T4574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.081091][ T4574] rust_binder: Write failure EFAULT in pid:841 [ 159.087786][ T4574] rust_binder: Error in use_page_slow: ESRCH [ 159.094022][ T4574] rust_binder: use_range failure ESRCH [ 159.100086][ T4574] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 159.105647][ T4574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 159.113653][ T4574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:841 [ 159.138989][ T4583] bridge0: port 3(syz_tun) entered blocking state [ 159.154559][ T4583] bridge0: port 3(syz_tun) entered disabled state [ 159.161284][ T4583] syz_tun: entered allmulticast mode [ 159.167160][ T4583] syz_tun: entered promiscuous mode [ 159.172533][ T4583] bridge0: port 3(syz_tun) entered blocking state [ 159.178970][ T4583] bridge0: port 3(syz_tun) entered forwarding state [ 159.250210][ T4586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4586 comm=syz.1.1368 [ 159.548958][ T4596] @0Ù: renamed from bond_slave_1 [ 159.865254][ T4601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.865579][ T4601] rust_binder: Error in use_page_slow: ESRCH [ 159.872199][ T4601] rust_binder: use_range failure ESRCH [ 159.878329][ T4601] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 159.884004][ T4601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 159.892258][ T4601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:844 [ 160.016398][ T4610] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.071221][ T36] audit: type=1400 audit(1761857725.328:584): avc: denied { create } for pid=4615 comm="syz.1.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.360623][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 160.520575][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 160.526722][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.537793][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.544456][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 160.553876][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.562480][ T10] usb 1-1: config 0 descriptor?? [ 160.680487][ T4640] 9pnet_fd: Insufficient options for proto=fd [ 160.970024][ T10] uclogic 0003:5543:0004.000C: unknown main item tag 0x0 [ 160.977167][ T10] uclogic 0003:5543:0004.000C: item fetching failed at offset 4/7 [ 160.985207][ T10] uclogic 0003:5543:0004.000C: parse failed [ 160.991181][ T10] uclogic 0003:5543:0004.000C: probe with driver uclogic failed with error -22 [ 161.172047][ T9] usb 1-1: USB disconnect, device number 53 [ 161.472881][ T4656] 9pnet_fd: Insufficient options for proto=fd [ 161.767910][ T4669] binder: Unknown parameter 'Ð' [ 161.785539][ T4674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.882437][ T4679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.889143][ T4679] rust_binder: 880: no such ref 1 [ 161.900674][ T4679] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 161.900690][ T4679] rust_binder: Read failure Err(EFAULT) in pid:880 [ 161.941357][ T4682] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 161.955981][ T4682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:883 [ 161.985262][ T4686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.994700][ T4686] rust_binder: Write failure EFAULT in pid:887 [ 162.026301][ T4693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 162.052510][ T4698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.052659][ T4698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 162.053016][ T4699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 162.059187][ T4698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:899 [ 162.068717][ T4699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:899 [ 162.123856][ T4707] rust_binder: Write failure EFAULT in pid:904 [ 162.126988][ T4708] rust_binder: Write failure EFAULT in pid:904 [ 162.134798][ T4706] 9pnet_fd: Insufficient options for proto=fd [ 162.156464][ T4710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.159814][ T4710] rust_binder: Error in use_page_slow: ESRCH [ 162.166334][ T4710] rust_binder: use_range failure ESRCH [ 162.172510][ T4710] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 162.177996][ T4710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 162.186294][ T4710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:907 [ 162.204832][ T4721] ip6gretap0: mtu less than device minimum [ 162.326666][ T4736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 162.650601][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 162.802794][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.810513][ T9] usb 1-1: no configurations [ 162.815152][ T9] usb 1-1: can't read configurations, error -22 [ 162.969110][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 163.337637][ T4773] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1434'. [ 163.673896][ T36] audit: type=1400 audit(1761857728.928:585): avc: denied { lock } for pid=4795 comm="syz.0.1442" path="socket:[30076]" dev="sockfs" ino=30076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 164.060752][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 164.092992][ T4823] overlayfs: failed to clone upperpath [ 164.221659][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.233295][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.243089][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.256027][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.265075][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.273832][ T9] usb 1-1: config 0 descriptor?? [ 164.650675][ T4839] cgroup: noprefix used incorrectly [ 164.681094][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.689230][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.696987][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.704669][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.712203][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.719741][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.727414][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.735010][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.742551][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.750042][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.757653][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.765251][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.772763][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.780251][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.787720][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 164.795334][ T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 164.805110][ T9] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 165.208455][ T4854] netlink: 'syz.1.1464': attribute type 4 has an invalid length. [ 165.216258][ T4854] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1464'. [ 165.235162][ T4858] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.367118][ T36] audit: type=1400 audit(1761857730.618:586): avc: denied { accept } for pid=4861 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 165.450247][ T9] usb 1-1: USB disconnect, device number 56 [ 165.468863][ T36] audit: type=1400 audit(1761857730.718:587): avc: denied { read } for pid=4866 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.543677][ T4871] binder: Bad value for 'stats' [ 165.615756][ T4875] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1471'. [ 165.625516][ T4875] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1471'. [ 165.634555][ T4875] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 165.890589][ T9] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 166.041716][ T9] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 166.050002][ T9] usb 1-1: config 0 has no interface number 0 [ 166.056131][ T9] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 166.067288][ T9] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 166.080713][ T9] usb 1-1: config 0 interface 255 has no altsetting 0 [ 166.087504][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 166.096548][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.105312][ T9] usb 1-1: config 0 descriptor?? [ 166.153104][ T36] audit: type=1400 audit(1761857731.408:588): avc: denied { getopt } for pid=4878 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.186614][ T36] audit: type=1400 audit(1761857731.438:589): avc: denied { accept } for pid=4882 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.234773][ T4893] overlayfs: failed to clone lowerpath [ 166.304162][ T4895] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 166.323760][ T9] usb 1-1: string descriptor 0 read error: -32 [ 166.340603][ T9] asix 1-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 166.364235][ T9] asix 1-1:0.255: probe with driver asix failed with error -32 [ 166.392501][ T4909] netlink: 'syz.1.1483': attribute type 20 has an invalid length. [ 166.440563][ T36] audit: type=1400 audit(1761857731.688:590): avc: denied { bind } for pid=4918 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.951448][ T36] audit: type=1400 audit(1761857732.208:591): avc: denied { getopt } for pid=4932 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.183656][ T4970] bridge0: port 3(veth0_to_bridge) entered blocking state [ 167.200589][ T4970] bridge0: port 3(veth0_to_bridge) entered disabled state [ 167.207833][ T4970] veth0_to_bridge: entered allmulticast mode [ 167.218378][ T4970] veth0_to_bridge: entered promiscuous mode [ 167.227624][ T4970] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.243324][ T4970] bridge0: port 3(veth0_to_bridge) entered blocking state [ 167.250496][ T4970] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 167.304989][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 167.327579][ T4980] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1506'. [ 167.355274][ T4984] devpts: called with bogus options [ 167.395048][ T4994] overlayfs: failed to clone upperpath [ 168.037096][ T5015] incfs: Options parsing error. -22 [ 168.042393][ T5015] incfs: mount failed -22 [ 168.058106][ T5017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1516'. [ 168.067129][ T5017] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1516'. [ 168.076520][ T5017] netlink: 'syz.3.1516': attribute type 5 has an invalid length. [ 168.084557][ T5017] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1516'. [ 168.221311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.233353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.245527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.257545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.269652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.281664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.293728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.305802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.317877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.329897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.703599][ T447] usb 1-1: USB disconnect, device number 57 [ 172.841109][ T36] audit: type=1400 audit(1761857737.958:592): avc: denied { read write } for pid=5043 comm="syz.3.1524" name="file1" dev="tmpfs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.203134][ T5046] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1523'. [ 173.230546][ C0] net_ratelimit: 54433 callbacks suppressed [ 173.230565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.248543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.260607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.272671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.284858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.296940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.309054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.321146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.333166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.345242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.850621][ T36] audit: type=1400 audit(1761857737.958:593): avc: denied { open } for pid=5043 comm="syz.3.1524" path="/505/file1" dev="tmpfs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.240573][ C0] net_ratelimit: 51931 callbacks suppressed [ 178.240595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.258589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.270670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.282709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.294783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.306868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.318958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.331094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.343261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.355294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.105638][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 181.297739][ T5076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 181.855316][ T5081] netlink: 'syz.2.1535': attribute type 27 has an invalid length. [ 183.250631][ C0] net_ratelimit: 53765 callbacks suppressed [ 183.250655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.268990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.281053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.293287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.305394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.317496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.329546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.341660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.353715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.365808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.372257][ T5089] overlayfs: failed to clone lowerpath [ 188.260647][ C0] net_ratelimit: 56356 callbacks suppressed [ 188.260668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.278828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.290886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.303066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.315129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.327212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.339285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.351377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.363448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.375536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.737334][ C1] sched: DL replenish lagged too much [ 193.270580][ C0] net_ratelimit: 57677 callbacks suppressed [ 193.270620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.288590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.300719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.312736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.324845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.336866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.348960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.361007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.373099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.385184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.280618][ C0] net_ratelimit: 55983 callbacks suppressed [ 198.280640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.298741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.310883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.322973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.334998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.347160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.359188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.371248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.383360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.395431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.373459][ T36] audit: type=1400 audit(1761857767.388:594): avc: denied { mounton } for pid=5107 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 203.290602][ C0] net_ratelimit: 54132 callbacks suppressed [ 203.290625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.308676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.320698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.332762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.344770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.356855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.368881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.380980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.393265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.405383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.300552][ C0] net_ratelimit: 54400 callbacks suppressed [ 208.300576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.318605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.330693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.342696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.354720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.366763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.378809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.390916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.403022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.415108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.310742][ C0] net_ratelimit: 48934 callbacks suppressed [ 213.310766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.328807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.340952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.353044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.370636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 213.382812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 213.394934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.407002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.419073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.431131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 218.320596][ C0] net_ratelimit: 46933 callbacks suppressed [ 218.320617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.338765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.350818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.362853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 218.374930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.387127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.399262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.411375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.423451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.435612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 223.330613][ C0] net_ratelimit: 47420 callbacks suppressed [ 223.330636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 223.348662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 223.360833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.372853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.384871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.396924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 223.409033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.421288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.433390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.445483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.340638][ C0] net_ratelimit: 43463 callbacks suppressed [ 228.340661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 228.358789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.370819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.382857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.394904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 228.406993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.419380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.431494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.443589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.455670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.350545][ C0] net_ratelimit: 41000 callbacks suppressed [ 233.350569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.368543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.380613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 233.392725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.405004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.417142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.429278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.441381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.453441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 233.465562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 238.360616][ C0] net_ratelimit: 45340 callbacks suppressed [ 238.360645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 238.378653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 238.390715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.402707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.414698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.426771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 238.438848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.451047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.463165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.475237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.370581][ C0] net_ratelimit: 44721 callbacks suppressed [ 243.370603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 243.388650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.400911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.413035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.425137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.437210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.449242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 243.461343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 243.473431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.485450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.380612][ C0] net_ratelimit: 45400 callbacks suppressed [ 248.380633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.398658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.410753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.422821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.434856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 248.446955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 248.459039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.471041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.483042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.495080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 253.390570][ C0] net_ratelimit: 43956 callbacks suppressed [ 253.390594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.408795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.420944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.433184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.445278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.457308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 253.469415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 253.481504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.493622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.505643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.400561][ C0] net_ratelimit: 45708 callbacks suppressed [ 258.400584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.418625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.430701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.442726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 258.454843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 258.467020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.479151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.491198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.503241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 258.515424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.410543][ C0] net_ratelimit: 45166 callbacks suppressed [ 263.410566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.428596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.440746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.452801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.464811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 263.476897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 263.488968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.500985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.512996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.525018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 268.420568][ C0] net_ratelimit: 41639 callbacks suppressed [ 268.420591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.438547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 268.450659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 268.462720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.474730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.486734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.498761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 268.510831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.523044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.535228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.430585][ C0] net_ratelimit: 53510 callbacks suppressed [ 273.430609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 273.431179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 273.436725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.449490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 273.460714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.473323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 273.484570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.497127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 273.508443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 273.520979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 278.440535][ C0] net_ratelimit: 54255 callbacks suppressed [ 278.440558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 278.440674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 278.446558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.459232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 278.470876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.483063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 278.494409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.507027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 278.518386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.531078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 283.450537][ C0] net_ratelimit: 49774 callbacks suppressed [ 283.450561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.451253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 283.456632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 283.469351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 283.480606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 283.493286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 283.504529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.517115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 283.528462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.541053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 288.460564][ C1] net_ratelimit: 54074 callbacks suppressed [ 288.460589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 288.460592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.460696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.467309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 288.478661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.491419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 288.502640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.515286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 288.526618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 288.539339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 293.470663][ C0] net_ratelimit: 49654 callbacks suppressed [ 293.470688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.470859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 293.476769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.489448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 293.500767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.513509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 293.524804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.537523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 293.548853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 293.561577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 298.480540][ C0] net_ratelimit: 50069 callbacks suppressed [ 298.480563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 298.481136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 298.486586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.499297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 298.510607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.523172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 298.534486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.546995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 298.558336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.570936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 303.490716][ C0] net_ratelimit: 53312 callbacks suppressed [ 303.490738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.491141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 303.496774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.509493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 303.520756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.533474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 303.544737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.557523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 303.568772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 303.581356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 308.500495][ C1] net_ratelimit: 54203 callbacks suppressed [ 308.500518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 308.500800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.507268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 308.518580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.531297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 308.542526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.555202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 308.566464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.579163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 308.590447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 313.510684][ C0] net_ratelimit: 53586 callbacks suppressed [ 313.510706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.511003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 313.516719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.529751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 313.550057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.553547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 313.564580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.577478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 313.588560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.601484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 318.520504][ C0] net_ratelimit: 54563 callbacks suppressed [ 318.520528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.520863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 318.526551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.539731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 318.550832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.563729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 318.574867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 318.587570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 318.598690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 318.611543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 323.530540][ C0] net_ratelimit: 62476 callbacks suppressed [ 323.530565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 323.530602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 323.536560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 323.549215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 323.560516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.573095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 323.584472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.596950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 323.608339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.620876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 328.540525][ C0] net_ratelimit: 77164 callbacks suppressed [ 328.540549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.540882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 328.546548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.559177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 328.570572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.583153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 328.594463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.607220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 328.618537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 328.631070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 332.065351][ T37] INFO: task syz.3.373:1590 blocked for more than 122 seconds. [ 332.074745][ T37] Not tainted syzkaller #0 [ 332.079700][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.764611][ T37] NMI backtrace for cpu 1 [ 332.764632][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 332.764661][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.764683][ T37] Call Trace: [ 332.764692][ T37] [ 332.764701][ T37] __dump_stack+0x21/0x30 [ 332.764738][ T37] dump_stack_lvl+0x10c/0x190 [ 332.764767][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 332.764799][ T37] dump_stack+0x19/0x20 [ 332.764827][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 332.764856][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 332.764885][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 332.764912][ T37] ? sched_show_task+0x80/0x560 [ 332.764940][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 332.764966][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 332.764995][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 332.765024][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 332.765053][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 332.765081][ T37] watchdog+0xd8f/0xed0 [ 332.765113][ T37] ? __cfi_watchdog+0x10/0x10 [ 332.765142][ T37] ? __kasan_check_read+0x15/0x20 [ 332.765174][ T37] ? __kthread_parkme+0x138/0x180 [ 332.765195][ T37] ? schedule+0xc6/0x240 [ 332.765225][ T37] kthread+0x2ca/0x370 [ 332.765248][ T37] ? __cfi_watchdog+0x10/0x10 [ 332.765284][ T37] ? __cfi_kthread+0x10/0x10 [ 332.765306][ T37] ret_from_fork+0x67/0xa0 [ 332.765334][ T37] ? __cfi_kthread+0x10/0x10 [ 332.765356][ T37] ret_from_fork_asm+0x1a/0x30 [ 332.765388][ T37] [ 332.765397][ T37] Sending NMI from CPU 1 to CPUs 0: [ 332.976292][ C0] NMI backtrace for cpu 0 [ 332.976306][ C0] CPU: 0 UID: 0 PID: 17 Comm: ksoftirqd/0 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 332.976325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.976335][ C0] RIP: 0010:ip6_rcv_core+0x1b2/0x1300 [ 332.976358][ C0] Code: 00 00 8b 43 70 65 49 01 46 10 4c 8d a3 f4 00 00 00 4c 89 e7 be 04 00 00 00 e8 3a b9 f9 fc 4c 89 e0 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 13 0d 00 00 45 8b 34 24 bf 01 00 00 00 44 89 f6 e8 05 [ 332.976371][ C0] RSP: 0018:ffffc900001172e8 EFLAGS: 00000a03 [ 332.976385][ C0] RAX: 0000000000000000 RBX: ffff8881219f0640 RCX: ffffffff84e2b5c6 [ 332.976396][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881219f0734 [ 332.976407][ C0] RBP: ffffc90000117390 R08: ffff8881219f0737 R09: 1ffff1102433e0e6 [ 332.976418][ C0] R10: dffffc0000000000 R11: ffffed102433e0e7 R12: ffff8881219f0734 [ 332.976430][ C0] R13: ffff888129894958 R14: 0000607e08e0f568 R15: dffffc0000000000 [ 332.976441][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 332.976454][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.976464][ C0] CR2: 00007ffcca8e9c18 CR3: 000000015eeec000 CR4: 00000000003526b0 [ 332.976478][ C0] Call Trace: [ 332.976483][ C0] [ 332.976491][ C0] ? qdisc_run_end+0x120/0x120 [ 332.976512][ C0] ipv6_rcv+0xce/0x220 [ 332.976528][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 332.976543][ C0] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 332.976563][ C0] ? __copy_skb_header+0x453/0x5e0 [ 332.976583][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 332.976604][ C0] netif_receive_skb+0x147/0x7b0 [ 332.976623][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 332.976642][ C0] ? br_flood+0x67e/0x730 [ 332.976661][ C0] br_pass_frame_up+0x126/0x1c0 [ 332.976682][ C0] br_handle_frame_finish+0x12d9/0x1720 [ 332.976704][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 332.976727][ C0] br_handle_frame+0x5a6/0xba0 [ 332.976748][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 332.976769][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 332.976787][ C0] ? ip6_mc_input+0x4f3/0x670 [ 332.976804][ C0] ? ip6_mc_input+0x4f3/0x670 [ 332.976820][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 332.976836][ C0] ? qdisc_run_end+0x120/0x120 [ 332.976854][ C0] ? ip6_rcv_finish+0x360/0x3e0 [ 332.976869][ C0] ? ipv6_rcv+0xed/0x220 [ 332.976884][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 332.976899][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 332.976915][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 332.976934][ C0] ? update_curr+0x4e4/0xaa0 [ 332.976947][ C0] ? __cfi_resched_curr+0x10/0x10 [ 332.976968][ C0] process_backlog+0x3e5/0xae0 [ 332.976988][ C0] ? __cfi___switch_to+0x10/0x10 [ 332.977008][ C0] ? __kasan_check_write+0x18/0x20 [ 332.977030][ C0] ? dequeue_pushable_task+0x1b9/0x2e0 [ 332.977050][ C0] __napi_poll+0xd3/0x610 [ 332.977068][ C0] net_rx_action+0x584/0xce0 [ 332.977088][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 332.977107][ C0] ? sched_clock_cpu+0x75/0x400 [ 332.977127][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 332.977143][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 332.977163][ C0] handle_softirqs+0x1ab/0x630 [ 332.977177][ C0] run_ksoftirqd+0x20/0x30 [ 332.977192][ C0] smpboot_thread_fn+0x493/0x8c0 [ 332.977214][ C0] kthread+0x2ca/0x370 [ 332.977228][ C0] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 332.977254][ C0] ? __cfi_kthread+0x10/0x10 [ 332.977268][ C0] ret_from_fork+0x67/0xa0 [ 332.977288][ C0] ? __cfi_kthread+0x10/0x10 [ 332.977303][ C0] ret_from_fork_asm+0x1a/0x30 [ 332.977325][ C0] [ 333.550635][ C1] net_ratelimit: 70955 callbacks suppressed [ 333.550656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 333.550685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.557218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 333.568660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.581096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 333.592518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.605104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 333.616473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.629102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 333.640382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.560662][ C0] net_ratelimit: 74643 callbacks suppressed [ 338.560685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.560767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 338.566674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.579292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 338.590644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.603047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 338.614547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.627121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) [ 338.638514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.651172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:77:d3:48:02:a9, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 340.736210][ T36] audit: type=1400 audit(1761857905.728:595): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2584]" dev="pipefs" ino=2584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1