last executing test programs: 2m47.291639753s ago: executing program 2 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000240)={&(0x7f00000005c0)="5cf302955799519ed7b66d0acb2d3fb04ad6624c3bca01dbf1507d587764806026c2011545ac84e44a440913319962b785bd533719d09b2ff3b8282e93746e0193891007f93fb864ea9261a5c1a6da62608cf13e1f87feb85b6516576d87b4d755ab5451e4f5b1075e8d2781bca41bbf63273c4a06c15b52db62b0935631eb81e9ad5eafc5f88bf96769715054e640a6f4dac0cff6ec65c043dae443d2b236e339157bcff1a5b31971704d0a5514", 0xae}, 0x1, 0x0, 0x0, 0x40000}, 0x20008080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1b) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_setup(0x9d, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000180)={0x63}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000003c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) mkdir(&(0x7f0000000040)='./file0\x00', 0x79) mount$incfs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0xffffc, 0x0, 0x0, 0x2, 0x7}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x3, 0x0, 0xffffffffffffff37, 0x0, 0x20000000028}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m47.291427823s ago: executing program 2 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) (async) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7, 0x2b9}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x14}, [@generic="b79faac541"]}, 0x1c}}, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc9d13126d", 0x6) 2m47.244286724s ago: executing program 2 (id=116): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/193, 0x4}) (async) r1 = socket(0x6, 0xa, 0xb7c) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@remote, @multicast1}, &(0x7f0000000180)=0x8) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) (async) r2 = dup(r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x44000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000380)={{r4, r5/1000+10000}}, &(0x7f00000003c0)) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000400)=0x4db, 0x4) (async) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000480)={{r7, r8+10000000}, {0x0, 0x3938700}}, &(0x7f00000004c0)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x69}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x444}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xb}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000640)={0x1, 'veth0_to_bond\x00', {}, 0x6e5a}) (async) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000680)="aeeaa9032695e9ebf0dcfcb2d9bb8e04d0ad7bf94f41e0bca131e6395e0ea7508115ee4496c43775e70970c70d3940c54301eb511ae964c43ed51a8c30d1e5c8894fce43a45a879e573842c3bdb503fe45cac4272b9aa6eacc20338a3fd6a024a6ba0f227541316ef4c787a701fe340c64c5e4cd69c5fcde6e7b23f4ed70cdfdcc0e2fb943b622c5727d9018d89967e10fafdaafcf114113b00788fad2", 0x9d}], 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000780)={{0x2, 0x4e20, @multicast1}, {0x1, @local}, 0x40, {0x2, 0x4e22, @broadcast}, 'veth1\x00'}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000800), &(0x7f0000000840)=0x4) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r10, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) accept4$inet(r2, &(0x7f00000009c0)={0x2, 0x0, @local}, &(0x7f0000000a00)=0x10, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002a80)={0x50, 0x0, r11, {0x7, 0x2b, 0x1, 0x21080001, 0x5, 0xfff, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1000}}, 0x50) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002b00), 0x468802, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002bc0)={'syztnl0\x00', &(0x7f0000002b40)={'gre0\x00', 0x0, 0x80, 0x7, 0x6, 0x0, {{0xf, 0x4, 0x0, 0x2, 0x3c, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x14, 0x21, 0x0, 0x3, [0x3, 0xfffffc01, 0x8, 0x3709]}, @end, @ssrr={0x89, 0xb, 0x94, [@multicast2, @empty]}, @generic={0x82, 0x6, "b5951225"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000002d00)={'tunl0\x00', &(0x7f0000002c00)={'erspan0\x00', r13, 0x7, 0x1, 0x0, 0xfffff787, {{0x36, 0x4, 0x3, 0x1, 0xd8, 0x65, 0x0, 0x70, 0xb2942abbceaa4497, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0x44, 0x88, 0x3, 0x5, [{@remote, 0x4}, {@empty}, {@loopback, 0x7}, {@broadcast, 0x81}, {@private=0xa010100, 0xe7}, {@loopback, 0xc}, {@multicast2, 0x3}, {@rand_addr=0x64010101, 0x5}]}, @ssrr={0x89, 0xb, 0x8, [@broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x1, 0xa, "27e58ce3ebb79118"}, {0x6, 0x2}]}, @cipso={0x86, 0x40, 0x1, [{0x6, 0x11, "0806cf4c8457995dcf50eb85328a87"}, {0x0, 0xf, "55782b06aa5f77a3268f909547"}, {0x7, 0x7, "076da1a305"}, {0x7, 0x2}, {0x2, 0x11, "b5564e2c24f7c50736a5f6c65b709a"}]}, @lsrr={0x83, 0xb, 0x85, [@loopback, @private=0xa010101]}, @end, @timestamp={0x44, 0x10, 0xcd, 0x0, 0xe, [0x44a576c4, 0x2, 0x0]}, @ra={0x94, 0x4, 0x1}]}}}}}) 2m47.216819134s ago: executing program 2 (id=118): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) unshare(0x62040200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/ip6_tables_names\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) pread64(r3, &(0x7f0000001200)=""/4097, 0x1001, 0xd37) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000000000000000000003000600002000000200000000000020000000000000000002000100000004d3000005fd000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x10010, &(0x7f00000001c0)={[{@xino_auto}, {@xino_off}], [{@obj_user={'obj_user', 0x3d, '/dev/rnullb0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@audit}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x64, 0x66, 0x37, 0x38, 0x31, 0x34], 0x2d, [0x32, 0x66, 0x63, 0x37], 0x2d, [0x62, 0x34, 0x36, 0x31], 0x2d, [0x34, 0x62, 0x65, 0x66], 0x2d, [0x36, 0x65, 0x34, 0x63, 0x33, 0x62, 0x36, 0x36]}}}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000000180)='wi', 0x2}, {&(0x7f0000000100)="0a62a8ea", 0x4}], 0x2, 0x1) bind$bt_sco(r7, &(0x7f0000000140)={0x1f, @none}, 0x8) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 2m47.164308074s ago: executing program 2 (id=119): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000480)=""/85, 0x55}], 0x9}, 0x1009}], 0x3, 0x40012160, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0]) clock_gettime(0x6, &(0x7f0000000140)) 2m46.937813195s ago: executing program 2 (id=120): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x0, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) 2m46.930614046s ago: executing program 32 (id=120): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x0, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) 34.984719855s ago: executing program 3 (id=2256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80661, 0x22) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) setxattr$incfs_size(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f00000003c0), &(0x7f0000000500)=0x401, 0x8, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r4, 0x40044591, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x7ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x1002, 0x12) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x1c02, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0xa4, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000200)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x2800) ioctl$BLKRRPART(r9, 0x125f, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) dup(r12) 34.722091197s ago: executing program 4 (id=2260): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x0, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6, @in=@dev}}, {{@in=@dev}}}, &(0x7f0000000480)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000480)=0xe8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x8000000000000001, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x1, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) close_range(r4, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f00000004c0)=[0xee00, 0xee01]) r10 = getuid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x4020, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xaf7}}, {@default_permissions}, {@default_permissions}], [{@subj_user={'subj_user', 0x3d, './binderfs/binder1\x00'}}, {@fowner_lt={'fowner<', r10}}, {@smackfsfloor={'smackfsfloor', 0x3d, './binderfs/binder1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x32}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x63, 0x31, 0x63, 0x33, 0x35, 0x65], 0x2d, [0x37, 0x62, 0x64, 0x37], 0x2d, [0x34, 0x38, 0x64], 0x2d, [0x31, 0x37, 0x38, 0x61], 0x2d, [0x65, 0x63, 0x5f, 0x37, 0x30, 0x39, 0x33, 0x62]}}}]}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffffffffffffff00, 0x7]}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffffffffffffff00, 0x7]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0x0, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}}}], 0x0, 0x0, 0x0}) 34.663003047s ago: executing program 3 (id=2261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) (rerun: 64) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) (async, rerun: 32) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x2000) (rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_DEBUGREGS(r11, 0x4080aea2, 0x0) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1, 0xfffffffd, 0x0) (async, rerun: 64) read$FUSE(r13, &(0x7f00000083c0)={0x2020}, 0x2020) (async, rerun: 64) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x6, {0x8, 0xe, 0x4, 0x78f, 0x6, 0x5}}) exit(0xfffffffffffffff7) (async) close_range(r0, 0xffffffffffffffff, 0x0) 34.429712519s ago: executing program 4 (id=2264): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)={[{}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ptrace$setregs(0xf, r0, 0x76d7, &(0x7f0000000440)="93b8c03030f4f438fdd3ba0425645578e122263bb229f42bca109893d9ab3d58f0353d65d9432a42b8925155a3b972323d75a22c230a767fd779ec6986a06884ab086a4317e4edd0392e2fd67439575d3bcc") r1 = syz_open_procfs(r0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) 34.426129159s ago: executing program 3 (id=2265): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x8725, 0x12) (async) write$cgroup_int(r1, &(0x7f0000000040)=0x8725, 0x12) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1001}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 34.314796089s ago: executing program 3 (id=2266): openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x7, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) (async) r3 = userfaultfd(0x80001) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) (async) r6 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) (async) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) (async) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ptrace(0x10, r6) (async) waitid(0x1, r6, 0x0, 0x4, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x500}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x5}) 34.314419349s ago: executing program 4 (id=2267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x93b, 0x80000000, {0x77359400}, {r3, r4/1000+10000}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x38, 0x0, 0x0, 0x0, "dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c3a17049dc942090000000000000018195704fd22e15c26b0555e6a957c3f2dc86a355f4806c9e4f761"}}, 0x80}}, 0x4004) r5 = gettid() syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff", @ANYRESOCT=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r5, 0x0, &(0x7f0000000000)={0x27, 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) readv(r6, &(0x7f0000001740)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000580)=""/4085, 0xff5}, {&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000001580)=""/209, 0xd1}, {&(0x7f0000001680)=""/158, 0x9e}], 0x9) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close_range(r0, 0xffffffffffffffff, 0x0) 34.270760809s ago: executing program 3 (id=2270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x7) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8094) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000002c0)=0x1) keyctl$join(0x1, &(0x7f0000000ec0)={'syz', 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="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", 0xfc, r4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x7) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8094) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000002c0)=0x1) (async) keyctl$join(0x1, &(0x7f0000000ec0)={'syz', 0x1}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (async) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="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", 0xfc, r4) (async) 34.26426128s ago: executing program 3 (id=2271): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x8000, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r5) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x1, 0x0, 0x7, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000280)=0xc) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 33.743345462s ago: executing program 4 (id=2274): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = getpid() ioprio_set$pid(0x3, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='virtiofs\x00', 0x200000, 0x0) 33.646259923s ago: executing program 4 (id=2276): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be5406d04230848390102030109025200010000000009044000000e0400070003"], 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x1fe, 0x7ffc, 0x3) 33.457758024s ago: executing program 0 (id=2278): mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='iso9660\x00', 0x200000, 0x0) 33.435339594s ago: executing program 0 (id=2279): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fe6000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) syz_io_uring_setup(0x7271, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) (async, rerun: 32) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e22, 0x4, @loopback, 0x200}, 0x1c, 0x0}}], 0x2, 0x4001c00) (rerun: 64) r2 = dup(r0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000580)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec0460f1c460041ae", 0x42}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x5, 0x7}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$HIDIOCSFEATURE(r5, 0x4004480d, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000001040)) (rerun: 32) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x13420, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r2, @ANYRES32=r3, @ANYRES64=r0, @ANYBLOB="2c766572305e57f9302e752c0000000000000000000008edc6fa8e211a896f8d555be996f02b0890cf4fe0030e46b7d30a80ca61f45cca4ada329572ee61913ea934a1587a0bff8e3b25fa24ae70238403fbc1eb99eeca1ff1a4a97b7d9925c19a6dc10e341d35fd562b52a2320684909552"]) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 33.373601955s ago: executing program 0 (id=2280): unshare(0x22020600) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=T']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 33.371685285s ago: executing program 1 (id=2281): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0]) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x8380, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, 0x0) 33.286804335s ago: executing program 1 (id=2282): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000180), 0x0) (async) io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000180), 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) mincore(&(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000540)=""/4096) inotify_init() (async) r0 = inotify_init() r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) r4 = socket$key(0xf, 0x3, 0x2) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x1800000, r4}, 0x15) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x48) write$cgroup_int(r5, &(0x7f00000001c0)=0x9, 0x12) lsetxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@random={'system.', '$\x00'}, &(0x7f0000000280)='binder\x00', 0x7, 0x1) (async) lsetxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@random={'system.', '$\x00'}, &(0x7f0000000280)='binder\x00', 0x7, 0x1) socket$packet(0x11, 0x2, 0x300) unshare(0x24020400) (async) unshare(0x24020400) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) (async) setreuid(0x0, r7) cachestat(r6, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d7669727375626ab6de5f726f6c653d2e2f62696e6465726673002c7375626aad747970653dea2c6e6f6d616e64"]) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d7669727375626ab6de5f726f6c653d2e2f62696e6465726673002c7375626aad747970653dea2c6e6f6d616e64"]) 33.274330755s ago: executing program 1 (id=2283): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async, rerun: 32) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000005b582d"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4824, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x7}}]}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000340)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r4}], 0x3c, 0x0, 0x0}) (async, rerun: 32) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000280)="60532096ef34b6bcb13d140c73b48a588bbcefc0ce749d3e41edc576ee2b8d239873a4c01423f456e0bebce5bd981946a1c50ae3b30e0ab03092abb77a56fbdc4f437b63f82d17312b59e8edc523ba360b17c89f42e6a89d04910d32aa2e5234ec5b74122b825ef15f35789bd92e5a33e3c5f8869ca8083ab32bf17a68096a04c4a184ae105d151712cd0d5d46417157e28c759d014943db46d199de377398e1af84024927893aa4555a7229f09691c512") (rerun: 32) 33.094599257s ago: executing program 1 (id=2284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) recvfrom(r1, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffcd6) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 33.045659967s ago: executing program 4 (id=2285): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000099000040"]) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9) (async) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r10, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) (async) sendmmsg$inet6(r10, &(0x7f0000004280)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x24000010) syz_clone(0x1204600, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 33.045180057s ago: executing program 1 (id=2286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x80}}, 0x0) shutdown(r1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x5, 0x2}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x1012, r5, 0xd6416000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0x8001, 0x3, 0x6, 0x1, 0x8, 0x27}]}) read(r5, 0x0, 0x0) 32.50478108s ago: executing program 0 (id=2287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getpeername(r1, 0x0, &(0x7f00000001c0)) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x2, 0xa3020000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @flat=@binder={0x73622a85, 0x1101, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000004c0)=[@acquire], 0x0, 0x0, 0x0}) 32.41149379s ago: executing program 0 (id=2288): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7, 0x805, 0x74a, 0x84000001, 0x400007, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff7ffe, 0xdd5, 0xffffffff, 0xfffffffe, 0x400, 0x2, 0x3, 0x8, 0x6, 0xa2, 0x3, 0xa953, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x10, 0x8, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0xb8f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a8, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x4, 0xaf97, 0x7, 0xfffffffd, 0x3ff, 0x5, 0x9dc, 0x0, 0x8, 0x80, 0x80000003, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x6, 0x8, 0xffffffff, 0x1, 0x11, 0x9, 0xf, 0x4, 0x9, 0x5, 0x9, 0x80, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x200000b, 0xffffffff, 0xb, 0x140000, 0xa, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fdf, 0x180, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7], "3cfee10fc1de602ad9a82685aabde0440abcf2132b1644388bebe5bfeb8c03be1f1468ee8c17222f6120a6722b861ee7be9a45926ea05c5cb0b39ce3ea2c2700f4467d301b846697cec5ebac60821980326b919e4880d1a53ed018fd22ca21d1da0d0dfc26db96dc6b290b362b00b4afcc93fc89ab264204626c6b7f59af652242cfef909dbe170350ba7507ab3a8d97156e612236a692b1"}}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) (async) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000004000/0x3000)=nil}) syz_usb_connect$cdc_ecm(0x2, 0xae, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109029c00010100000309040000ff02020000052406000005240000000d240f010000000000000000000424130505240102084f2413007aeac8211de4d020faa7945d2822e6bd9bb95b2c046d8fdfe12efdc42dc9eb0fe3e032ab9928663bbd8acea479451394e8ee41cc562ae3c7726d3e90948928ca9f855f873f93aca482a1c2090581030002050306090582020004000000090503020800000000"], 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1980022, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x11) mknodat$loop(r4, 0x0, 0x40, 0x1) (async) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, &(0x7f0000000140)='./file0\x00') syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r5 = socket(0x200000000000011, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) sendto$packet(r7, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e6b", 0x2b, 0x24040881, &(0x7f00000001c0)={0x11, 0x3, r6, 0x1, 0x9, 0x6, @multicast}, 0x14) 28.935968651s ago: executing program 0 (id=2289): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000004300e7ef7f000000000000e100a197", 0x13, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) dup(r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000200)) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) syz_open_pts(r6, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19.564913026s ago: executing program 1 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000840)=[{}], 0x1, 0x7) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r1, 0xffffa000) 16.089012506s ago: executing program 33 (id=2285): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000099000040"]) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9) (async) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r10, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) (async) sendmmsg$inet6(r10, &(0x7f0000004280)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x24000010) syz_clone(0x1204600, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 12.833705085s ago: executing program 34 (id=2289): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000004300e7ef7f000000000000e100a197", 0x13, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) dup(r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000200)) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) syz_open_pts(r6, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 35 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000840)=[{}], 0x1, 0x7) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r1, 0xffffa000) kernel console output (not intermixed with test programs): :xfrm0>, priority 10 [ 88.908371][ T36] audit: type=1400 audit(2000000059.252:384): avc: denied { append } for pid=3656 comm="syz.0.1109" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.931578][ T3655] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1108'. [ 88.965100][ T36] audit: type=1400 audit(2000000059.312:385): avc: denied { create } for pid=3662 comm="syz.1.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.026824][ T3678] veth0_to_batadv: entered allmulticast mode [ 89.033248][ T3678] veth0_to_batadv: left allmulticast mode [ 89.087511][ T3688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1122'. [ 89.102836][ T3688] devpts: called with bogus options [ 89.228972][ T413] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 89.378949][ T413] usb 1-1: Using ep0 maxpacket: 32 [ 89.385481][ T413] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.397013][ T413] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.406129][ T413] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.414536][ T413] usb 1-1: Product: syz [ 89.418713][ T413] usb 1-1: Manufacturer: syz [ 89.423345][ T413] usb 1-1: SerialNumber: syz [ 89.429107][ T413] usb 1-1: config 0 descriptor?? [ 89.434368][ T3671] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.442135][ T413] hub 1-1:0.0: bad descriptor, ignoring hub [ 89.448155][ T413] hub 1-1:0.0: probe with driver hub failed with error -5 [ 89.898940][ T9] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 89.998938][ T413] tipc: Node number set to 2310267514 [ 90.050405][ T3671] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.368999][ T9] usb 1-1: USB disconnect, device number 33 [ 91.104683][ T3776] 9pnet_fd: Insufficient options for proto=fd [ 91.636664][ T3782] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 91.645121][ T3782] rust_binder: Write failure EINVAL in pid:309 [ 91.716534][ T3799] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1156'. [ 92.089863][ T3804] tmpfs: Unknown parameter '\ràblù' [ 92.530550][ T3815] __vm_enough_memory: pid: 3815, comm: syz.0.1164, bytes: 18014402804453376 not enough memory for the allocation [ 92.811688][ T3850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1174'. [ 92.878939][ T413] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 93.029991][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.040967][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.050773][ T413] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.063702][ T413] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.072867][ T413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.081509][ T413] usb 1-1: config 0 descriptor?? [ 93.327494][ T3860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=3860 comm=syz.4.1179 [ 93.370704][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 93.370723][ T36] audit: type=1400 audit(2000000063.728:388): avc: denied { name_bind } for pid=3865 comm="syz.4.1182" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 93.488149][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 93.495887][ T413] usbhid 1-1:0.0: can't add hid device: -71 [ 93.501987][ T413] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.519638][ T413] usb 1-1: USB disconnect, device number 34 [ 93.597842][ T36] audit: type=1400 audit(2000000063.948:389): avc: denied { map } for pid=3907 comm="syz.1.1194" path="socket:[14914]" dev="sockfs" ino=14914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.076832][ T3913] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1196'. [ 94.214691][ T3927] GUP no longer grows the stack in syz.0.1201 (3927): 200000004000-20000000a000 (200000002000) [ 94.225181][ T3927] CPU: 1 UID: 0 PID: 3927 Comm: syz.0.1201 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 94.225223][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.225245][ T3927] Call Trace: [ 94.225254][ T3927] [ 94.225266][ T3927] __dump_stack+0x21/0x30 [ 94.225301][ T3927] dump_stack_lvl+0x10c/0x190 [ 94.225329][ T3927] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.225351][ T3927] ? find_vma+0xcd/0x110 [ 94.225367][ T3927] ? vma_is_secretmem+0x11/0x50 [ 94.225390][ T3927] dump_stack+0x19/0x20 [ 94.225415][ T3927] __get_user_pages+0x1e34/0x22d0 [ 94.225440][ T3927] ? populate_vma_page_range+0x230/0x230 [ 94.225462][ T3927] get_user_pages_remote+0x392/0xbe0 [ 94.225482][ T3927] ? __cfi_mtree_load+0x10/0x10 [ 94.225499][ T3927] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 94.225516][ T3927] ? __cfi_get_user_pages_remote+0x10/0x10 [ 94.225538][ T3927] __access_remote_vm+0x1e2/0x640 [ 94.225558][ T3927] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 94.225581][ T3927] ? access_remote_vm+0x60/0x60 [ 94.225600][ T3927] ? _raw_spin_lock+0x8c/0x120 [ 94.225621][ T3927] ? __cfi__raw_spin_lock+0x10/0x10 [ 94.225643][ T3927] access_remote_vm+0x39/0x60 [ 94.225661][ T3927] proc_pid_cmdline_read+0x4bb/0xbf0 [ 94.225683][ T3927] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 94.225704][ T3927] ? bpf_lsm_file_permission+0xd/0x20 [ 94.225727][ T3927] vfs_readv+0x62b/0xa50 [ 94.225745][ T3927] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 94.225766][ T3927] ? do_readv+0x2d0/0x2d0 [ 94.225789][ T3927] __x64_sys_preadv+0x197/0x2a0 [ 94.225806][ T3927] ? __cfi___x64_sys_preadv+0x10/0x10 [ 94.225823][ T3927] ? switch_fpu_return+0x12/0x20 [ 94.225842][ T3927] x64_sys_call+0x1ee9/0x2ee0 [ 94.225866][ T3927] do_syscall_64+0x58/0xf0 [ 94.225886][ T3927] ? clear_bhb_loop+0x50/0xa0 [ 94.225904][ T3927] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.225921][ T3927] RIP: 0033:0x7f51cc18efc9 [ 94.225938][ T3927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.225952][ T3927] RSP: 002b:00007f51ccfb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 94.225970][ T3927] RAX: ffffffffffffffda RBX: 00007f51cc3e5fa0 RCX: 00007f51cc18efc9 [ 94.225982][ T3927] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 94.225993][ T3927] RBP: 00007f51cc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.226003][ T3927] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 94.226013][ T3927] R13: 00007f51cc3e6038 R14: 00007f51cc3e5fa0 R15: 00007fffe99c28a8 [ 94.226027][ T3927] [ 94.494242][ T36] audit: type=1400 audit(2000000064.848:390): avc: denied { write } for pid=3926 comm="syz.0.1201" name="file2" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.606653][ T3946] incfs: Options parsing error. -22 [ 94.618964][ T3946] incfs: mount failed -22 [ 94.753187][ T36] audit: type=1400 audit(2000000065.108:391): avc: denied { lock } for pid=3943 comm="syz.4.1208" path="socket:[14319]" dev="sockfs" ino=14319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.779113][ T36] audit: type=1400 audit(2000000065.108:392): avc: denied { bpf } for pid=3943 comm="syz.4.1208" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.117153][ T3976] exFAT-fs (rnullb0): invalid boot record signature [ 95.117544][ T3977] /dev/rnullb0: Can't lookup blockdev [ 95.123830][ T3976] exFAT-fs (rnullb0): failed to read boot sector [ 95.123844][ T3976] exFAT-fs (rnullb0): failed to recognize exfat type [ 95.295520][ T3992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.386233][ T4085] SELinux: truncated policydb string identifier [ 96.390818][ T36] audit: type=1400 audit(2000000066.738:393): avc: denied { load_policy } for pid=4084 comm="syz.0.1253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.393052][ T4085] SELinux: failed to load policy [ 96.424500][ T4085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.424985][ T4085] SELinux: truncated policydb string identifier [ 96.425107][ T4087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.431827][ T4085] SELinux: failed to load policy [ 96.523636][ T36] audit: type=1400 audit(2000000066.878:394): avc: denied { relabelfrom } for pid=4088 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.524503][ T4091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394 [ 96.543637][ T36] audit: type=1400 audit(2000000066.878:395): avc: denied { relabelto } for pid=4088 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.633697][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 96.825663][ T4131] /dev/rnullb0: Can't lookup blockdev [ 96.967467][ T4156] /dev/rnullb0: Can't lookup blockdev [ 97.018932][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 97.168951][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 97.175580][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.184296][ T9] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.197176][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 97.205620][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.40 [ 97.214868][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.223007][ T9] usb 1-1: Product: syz [ 97.227192][ T9] usb 1-1: Manufacturer: syz [ 97.231829][ T9] usb 1-1: SerialNumber: syz [ 97.414306][ T36] audit: type=1400 audit(2000000067.768:396): avc: denied { setattr } for pid=4163 comm="syz.1.1278" path="/" dev="configfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.455609][ T9] usbhid 1-1:1.0: can't add hid device: -22 [ 97.465082][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 97.475248][ T9] usb 1-1: USB disconnect, device number 35 [ 97.625889][ T36] audit: type=1326 audit(2000000067.978:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.032959][ T4189] /dev/sr0: Can't lookup blockdev [ 98.090161][ T4191] binder: Bad value for 'stats' [ 98.145440][ T4196] netlink: 'syz.0.1288': attribute type 12 has an invalid length. [ 98.200982][ T4201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=4201 comm=syz.4.1291 [ 98.238906][ T4201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4201 comm=syz.4.1291 [ 98.269685][ T4201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=4201 comm=syz.4.1291 [ 98.292692][ T4201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4201 comm=syz.4.1291 [ 98.315330][ T4201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=4201 comm=syz.4.1291 [ 98.382658][ T36] kauditd_printk_skb: 6224 callbacks suppressed [ 98.382676][ T36] audit: type=1326 audit(2000000068.728:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.418104][ T36] audit: type=1326 audit(2000000068.768:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.441941][ T36] audit: type=1326 audit(2000000068.768:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.473680][ T36] audit: type=1326 audit(2000000068.768:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.501141][ T36] audit: type=1326 audit(2000000068.768:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.525230][ T36] audit: type=1326 audit(2000000068.768:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.550742][ T36] audit: type=1326 audit(2000000068.768:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.574255][ T36] audit: type=1326 audit(2000000068.768:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.601187][ T36] audit: type=1326 audit(2000000068.768:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.624864][ T36] audit: type=1326 audit(2000000068.768:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb338efc9 code=0x50000 [ 98.793030][ T4239] fuse: Unknown parameter 'r{úDPŽ`Í Eeñ(QÌõë°Ô42N»s@ŒÜ¹øïcom¨Ù´ [‹{BUOÚÍ' [ 98.809443][ T4239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1304'. [ 99.141788][ T4260] 9pnet_fd: Insufficient options for proto=fd [ 99.273807][ T4280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.289517][ T4280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.508929][ T413] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 99.648908][ T413] usb 1-1: device descriptor read/64, error -71 [ 99.772153][ T4294] netlink: 'syz.1.1321': attribute type 6 has an invalid length. [ 99.794360][ T4294] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 99.808936][ T4294] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1321'. [ 99.888906][ T413] usb 1-1: device descriptor read/64, error -71 [ 100.128912][ T413] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 100.203281][ T4330] overlayfs: failed to clone upperpath [ 100.278907][ T413] usb 1-1: device descriptor read/64, error -71 [ 100.518908][ T413] usb 1-1: device descriptor read/64, error -71 [ 100.629013][ T413] usb usb1-port1: attempt power cycle [ 100.968932][ T413] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 100.994098][ T413] usb 1-1: device descriptor read/8, error -71 [ 101.130190][ T413] usb 1-1: device descriptor read/8, error -71 [ 101.194568][ T4392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=4392 comm=syz.3.1358 [ 101.253626][ T4402] fuse: Bad value for 'fd' [ 101.368986][ T413] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 101.390002][ T413] usb 1-1: device descriptor read/8, error -71 [ 101.511278][ T4412] x_tables: duplicate underflow at hook 1 [ 101.527927][ T413] usb 1-1: device descriptor read/8, error -71 [ 101.639006][ T413] usb usb1-port1: unable to enumerate USB device [ 102.292295][ T4464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1382'. [ 102.302409][ T4464] FAT-fs (rnullb0): bogus number of reserved sectors [ 102.309516][ T4464] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 102.570572][ T4503] batadv_slave_1: entered promiscuous mode [ 102.578435][ T4502] batadv_slave_1: left promiscuous mode [ 103.059467][ T4512] vcan0: entered allmulticast mode [ 103.064856][ T4512] vcan0: left allmulticast mode [ 103.106293][ T4517] netlink: 'syz.0.1401': attribute type 2 has an invalid length. [ 103.115743][ T4517] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1401'. [ 103.135931][ T4522] /dev/rnullb0: Can't lookup blockdev [ 103.398925][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 103.550087][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.561140][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.570910][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.583822][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.592967][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.601601][ T31] usb 1-1: config 0 descriptor?? [ 103.808800][ T4578] overlayfs: failed to clone lowerpath [ 103.810357][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 103.820519][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 103.830336][ T31] usb 1-1: USB disconnect, device number 40 [ 104.232588][ T36] kauditd_printk_skb: 18306 callbacks suppressed [ 104.232607][ T36] audit: type=1326 audit(2000000074.588:24938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.1423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38f5d8efc9 code=0x0 [ 104.335405][ T4586] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 104.460458][ T36] audit: type=1400 audit(2000000074.818:24939): avc: denied { getopt } for pid=4603 comm="syz.3.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.465364][ T4604] tmpfs: Invalid uid '0x00000000ffffffff' [ 104.486816][ T4605] tmpfs: Invalid uid '0x00000000ffffffff' [ 104.564651][ T4621] rust_binder: 449: no such ref 3 [ 104.569923][ T4621] rust_binder: 449: no such ref 1 [ 104.575033][ T4621] rust_binder: Write failure EFAULT in pid:449 [ 105.248937][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 105.388957][ T31] usb 1-1: device descriptor read/64, error -71 [ 105.628920][ T31] usb 1-1: device descriptor read/64, error -71 [ 105.712511][ T4653] overlayfs: failed to clone lowerpath [ 105.715660][ T4652] overlayfs: failed to clone lowerpath [ 105.724351][ T36] audit: type=1400 audit(2000000076.078:24940): avc: denied { create } for pid=4651 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 105.775590][ T4659] /dev/rnullb0: Can't lookup blockdev [ 105.868955][ T31] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 105.998926][ T31] usb 1-1: device descriptor read/64, error -71 [ 106.238921][ T31] usb 1-1: device descriptor read/64, error -71 [ 106.348998][ T31] usb usb1-port1: attempt power cycle [ 106.416975][ T4692] fuse: Bad value for 'fd' [ 106.698935][ T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 106.731875][ T31] usb 1-1: device descriptor read/8, error -71 [ 106.859900][ T31] usb 1-1: device descriptor read/8, error -71 [ 107.098914][ T31] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 107.139945][ T31] usb 1-1: device descriptor read/8, error -71 [ 107.202285][ T36] audit: type=1326 audit(2000000077.558:24941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.3.1474" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bb338efc9 code=0x0 [ 107.269971][ T31] usb 1-1: device descriptor read/8, error -71 [ 107.379052][ T31] usb usb1-port1: unable to enumerate USB device [ 107.813443][ T4738] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 108.168591][ T4746] overlayfs: failed to clone upperpath [ 108.387886][ T4762] netlink: 'syz.4.1489': attribute type 27 has an invalid length. [ 108.899010][ T31] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 109.028918][ T31] usb 1-1: device descriptor read/64, error -71 [ 109.189058][ T36] audit: type=1326 audit(2000000079.548:24942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.4.1495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38f5d8efc9 code=0x0 [ 109.222987][ T4778] tipc: Enabling of bearer rejected, already enabled [ 109.230835][ T4778] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 109.268969][ T31] usb 1-1: device descriptor read/64, error -71 [ 109.508969][ T31] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 109.638913][ T31] usb 1-1: device descriptor read/64, error -71 [ 109.878922][ T31] usb 1-1: device descriptor read/64, error -71 [ 109.989030][ T31] usb usb1-port1: attempt power cycle [ 110.328927][ T31] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 110.349949][ T31] usb 1-1: device descriptor read/8, error -71 [ 110.480651][ T31] usb 1-1: device descriptor read/8, error -71 [ 110.718930][ T31] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 110.739972][ T31] usb 1-1: device descriptor read/8, error -71 [ 110.870050][ T31] usb 1-1: device descriptor read/8, error -71 [ 110.979034][ T31] usb usb1-port1: unable to enumerate USB device [ 111.088500][ T4873] fuse: Bad value for 'group_id' [ 111.093576][ T4873] fuse: Bad value for 'group_id' [ 111.929145][ T4899] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 111.929174][ T4899] rust_binder: Error while translating object. [ 111.947290][ T4899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.963828][ T4899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468 [ 112.005346][ T36] audit: type=1400 audit(2000000082.358:24943): avc: denied { create } for pid=4911 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.039925][ T4912] FAT-fs (rnullb0): bogus number of reserved sectors [ 112.057680][ T4912] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 112.070381][ T36] audit: type=1400 audit(2000000082.428:24944): avc: denied { map } for pid=4913 comm="syz.1.1534" path="socket:[17560]" dev="sockfs" ino=17560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 112.202615][ T4929] usb usb1: usbfs: process 4929 (syz.0.1536) did not claim interface 0 before use [ 112.221075][ T4929] FAT-fs (rnullb0): bogus number of reserved sectors [ 112.228294][ T4929] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 112.255053][ T4935] sit0: entered promiscuous mode [ 112.273694][ T4935] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 112.294568][ T4935] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1542'. [ 112.316548][ T4936] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 112.334755][ T4936] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1542'. [ 112.379191][ T36] audit: type=1400 audit(2000000082.738:24945): avc: denied { bind } for pid=4941 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.113488][ T4961] rust_binder: Write failure EINVAL in pid:478 [ 113.131237][ T4964] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 113.147693][ T4967] /dev/rnullb0: Can't lookup blockdev [ 113.163878][ T4971] netlink: 'syz.0.1553': attribute type 4 has an invalid length. [ 113.182409][ T4971] netlink: 'syz.0.1553': attribute type 4 has an invalid length. [ 113.465961][ T4993] No source specified [ 113.499445][ T4996] overlay: filesystem on ./bus is read-only [ 113.502546][ T36] audit: type=1400 audit(2000000083.858:24946): avc: denied { mounton } for pid=4995 comm="syz.0.1562" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 113.624204][ T5007] input: syz1 as /devices/virtual/input/input12 [ 113.640970][ T5007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1565'. [ 113.650741][ T5007] rust_binder: Write failure EFAULT in pid:504 [ 113.673085][ T36] audit: type=1400 audit(2000000084.028:24947): avc: denied { bind } for pid=5011 comm="syz.0.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.825421][ T5036] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5036 comm=syz.0.1572 [ 114.327721][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 114.337641][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 114.624128][ T36] audit: type=1400 audit(2000000084.978:24948): avc: denied { mounton } for pid=5052 comm="syz.0.1581" path="/proc/514/cgroup" dev="proc" ino=17223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 114.690808][ T5059] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1583'. [ 114.921752][ T5075] kvm: MWAIT instruction emulated as NOP! [ 114.969035][ T5075] rust_binder: Write failure EFAULT in pid:517 [ 115.075866][ T5097] rust_binder: Write failure EFAULT in pid:522 [ 115.165786][ T5109] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 115.172028][ T5109] rust_binder: Error while translating object. [ 115.180849][ T5109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.187035][ T5109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:528 [ 115.197256][ T5109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.222501][ T5114] 9pnet: Could not find request transport: rdma [ 115.588915][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 115.621794][ T5124] overlayfs: failed to clone upperpath [ 115.627750][ T5124] overlayfs: failed to clone upperpath [ 115.662011][ T36] audit: type=1400 audit(2000000086.018:24949): avc: denied { create } for pid=5129 comm="syz.4.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.832599][ T5155] 9pnet_fd: p9_fd_create_tcp (5155): problem connecting socket to 127.0.0.1 [ 115.873489][ T5161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5161 comm=syz.3.1618 [ 116.391003][ T5165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4627 sclass=netlink_route_socket pid=5165 comm=syz.4.1621 [ 116.433727][ T5170] 9pnet_fd: Insufficient options for proto=fd [ 116.475117][ T5177] netlink: 'syz.1.1625': attribute type 4 has an invalid length. [ 116.589138][ T36] audit: type=1400 audit(2000000086.948:24950): avc: denied { watch watch_reads } for pid=5192 comm="syz.4.1631" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 116.668432][ T5195] 9pnet_fd: Insufficient options for proto=fd [ 116.748544][ T5209] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1635'. [ 116.757829][ T5209] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1635'. [ 116.767074][ T5209] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1635'. [ 116.776273][ T5209] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1635'. [ 116.959783][ T5354] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5354 comm=syz.3.1639 [ 117.083621][ T5370] tipc: Enabling of bearer rejected, already enabled [ 117.092147][ T5370] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 118.233711][ T36] audit: type=1400 audit(2000000088.588:24951): avc: denied { accept } for pid=5442 comm="syz.3.1670" path="socket:[18351]" dev="sockfs" ino=18351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.414730][ T5458] x_tables: unsorted entry at hook 1 [ 118.467736][ T5467] batadv_slave_0: mtu less than device minimum [ 118.651341][ T5472] rust_binder: 553: no such ref 3 [ 118.656564][ T5472] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 118.663912][ T5472] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 118.671325][ T5472] rust_binder: Write failure EFAULT in pid:553 [ 118.926857][ T36] audit: type=1400 audit(2000000089.278:24952): avc: denied { mount } for pid=5475 comm="syz.0.1682" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 118.927397][ T5476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 118.972685][ T5476] overlayfs: failed to look up (tracing) for ino (-66) [ 118.991353][ T36] audit: type=1400 audit(2000000089.348:24953): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 119.182613][ T36] audit: type=1400 audit(2000000089.538:24954): avc: denied { remount } for pid=5511 comm="syz.0.1692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 119.271724][ T36] audit: type=1326 audit(2000000089.628:24955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.1695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f5d8efc9 code=0x0 [ 120.018730][ T36] audit: type=1400 audit(2000000090.368:24956): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.049162][ T5550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.049236][ T5551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.069152][ T5553] overlayfs: overlapping lowerdir path [ 120.147854][ T5565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5565 comm=syz.4.1713 [ 120.151063][ T5564] rust_binder: Write failure EINVAL in pid:577 [ 120.215217][ T5573] rust_binder: Write failure EFAULT in pid:581 [ 120.806524][ T5587] netlink: 'syz.1.1720': attribute type 4 has an invalid length. [ 120.820787][ T5587] __nla_validate_parse: 1 callbacks suppressed [ 120.820850][ T5587] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1720'. [ 121.111898][ T36] audit: type=1400 audit(2000000091.468:24957): avc: denied { write } for pid=5593 comm="syz.0.1723" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.121764][ T5594] netlink: 'syz.0.1723': attribute type 29 has an invalid length. [ 121.134931][ T36] audit: type=1400 audit(2000000091.468:24958): avc: denied { open } for pid=5593 comm="syz.0.1723" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.143755][ T5594] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1723'. [ 121.226130][ T36] audit: type=1400 audit(2000000091.578:24959): avc: denied { write } for pid=5602 comm="syz.0.1726" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.247181][ T36] audit: type=1400 audit(2000000091.578:24960): avc: denied { open } for pid=5602 comm="syz.0.1726" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.303847][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.444507][ T5630] netlink: 'syz.1.1733': attribute type 27 has an invalid length. [ 121.476599][ T5630] 9pnet_fd: Insufficient options for proto=fd [ 121.495374][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 121.504543][ T5632] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1734'. [ 122.052180][ T5651] SELinux: Context system_u:object_r:setrans_exec_t:s0 is not valid (left unmapped). [ 122.121900][ T5655] bridge0: port 3(veth0_to_bridge) entered blocking state [ 122.129167][ T5655] bridge0: port 3(veth0_to_bridge) entered disabled state [ 122.136351][ T5655] veth0_to_bridge: entered allmulticast mode [ 122.142833][ T5655] veth0_to_bridge: entered promiscuous mode [ 122.148814][ T5655] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.161259][ T5655] bridge0: port 3(veth0_to_bridge) entered blocking state [ 122.168402][ T5655] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 122.395475][ T5667] cgroup: fork rejected by pids controller in /syz4 [ 122.934934][ T5716] 9pnet_fd: Insufficient options for proto=fd [ 122.996177][ T5721] cgroup: Name too long [ 123.184911][ T5724] overlayfs: failed to clone upperpath [ 123.368937][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.368965][ T777] Bluetooth: hci0: command 0x1003 tx timeout [ 123.724774][ T5780] fuse: Unknown parameter 'roStmode' [ 123.966084][ T5791] rust_binder: 604: no such ref 2 [ 123.971588][ T5791] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 123.978832][ T5791] rust_binder: Write failure EINVAL in pid:604 [ 124.032174][ T5798] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 124.228618][ T5818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44070 sclass=netlink_route_socket pid=5818 comm=syz.4.1785 [ 124.373097][ T5842] tipc: Can't bind to reserved service type 0 [ 124.457621][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 124.457642][ T36] audit: type=1400 audit(2000000094.808:24964): avc: denied { write } for pid=5841 comm="syz.0.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.154223][ T36] audit: type=1326 audit(2000000095.508:24965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f5d8efc9 code=0x7fc00000 [ 126.067151][ T5888] fuse: Unknown parameter 'f¶d' [ 126.180390][ T5895] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1809'. [ 126.623266][ T5922] sit0: entered promiscuous mode [ 126.630028][ T5922] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 126.637788][ T5922] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1818'. [ 126.678911][ T413] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 126.822334][ T5945] overlayfs: failed to clone upperpath [ 126.830013][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.841225][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.851176][ T413] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 126.860464][ T413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.869430][ T413] usb 1-1: config 0 descriptor?? [ 126.898614][ T36] audit: type=1400 audit(2000000097.248:24966): avc: denied { shutdown } for pid=5951 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.919495][ T36] audit: type=1400 audit(2000000097.278:24967): avc: denied { accept } for pid=5951 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.953980][ T36] audit: type=1400 audit(2000000097.278:24968): avc: denied { getopt } for pid=5951 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.204322][ T5975] cgroup: No subsys list or none specified [ 127.213346][ T5975] /dev/rnullb0: Can't lookup blockdev [ 127.277687][ T413] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 127.285745][ T413] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 127.293033][ T413] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 127.300049][ T413] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 127.306890][ T413] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 127.314036][ T413] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 127.321059][ T413] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 127.332998][ T413] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 127.454880][ T5983] 9pnet_fd: Insufficient options for proto=fd [ 127.476658][ T413] isku 0003:1E7D:319C.0008: couldn't init struct isku_device [ 127.485238][ T413] isku 0003:1E7D:319C.0008: couldn't install keyboard [ 127.494507][ T413] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -71 [ 127.512507][ T413] usb 1-1: USB disconnect, device number 50 [ 127.746535][ T36] audit: type=1400 audit(2000000098.098:24969): avc: denied { map } for pid=6012 comm="syz.3.1853" path="socket:[20314]" dev="sockfs" ino=20314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 127.956834][ T36] audit: type=1400 audit(2000000098.308:24970): avc: denied { create } for pid=6056 comm="syz.1.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.013262][ T6062] /dev/rnullb0: Can't lookup blockdev [ 128.042846][ T6069] binder: Unknown parameter 'contextÌðÚ' [ 128.070239][ T6071] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 128.186227][ T6079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=6079 comm=syz.1.1872 [ 128.388928][ T50] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 128.541751][ T50] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 128.549484][ T50] usb 1-1: can't read configurations, error -71 [ 129.064565][ T341] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.516148][ T6107] 9pnet_fd: Insufficient options for proto=fd [ 129.971593][ T36] audit: type=1400 audit(2000000100.328:24971): avc: denied { map } for pid=6123 comm="syz.1.1888" path="socket:[21629]" dev="sockfs" ino=21629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.409178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.421425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.433539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.445609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.457708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.469770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.481893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.493969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.506100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.518231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.649695][ T6130] netlink: 'syz.3.1892': attribute type 20 has an invalid length. [ 130.659141][ T6130] overlayfs: failed to clone upperpath [ 130.972592][ T36] audit: type=1326 audit(2000000101.328:24972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.004959][ T6167] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1905'. [ 131.041203][ T36] audit: type=1326 audit(2000000101.328:24973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.066186][ T36] audit: type=1326 audit(2000000101.358:24974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.116356][ T36] audit: type=1326 audit(2000000101.358:24975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.138970][ T777] Bluetooth: hci0: command 0x1003 tx timeout [ 131.144022][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.202207][ T36] audit: type=1326 audit(2000000101.358:24976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.250680][ T36] audit: type=1326 audit(2000000101.358:24977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.274409][ T36] audit: type=1326 audit(2000000101.368:24978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.321950][ T36] audit: type=1326 audit(2000000101.368:24979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.345768][ T36] audit: type=1326 audit(2000000101.368:24980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f228838efc9 code=0x7ffc0000 [ 131.767946][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.781077][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.806481][ T6192] bridge_slave_0: entered allmulticast mode [ 131.828514][ T6192] bridge_slave_0: entered promiscuous mode [ 131.859679][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.881043][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.911079][ T6192] bridge_slave_1: entered allmulticast mode [ 131.927385][ T6192] bridge_slave_1: entered promiscuous mode [ 132.285514][ T6201] rust_binder: inc_ref_done called when no active inc_refs [ 132.289497][ T12] bridge_slave_1: left allmulticast mode [ 132.321431][ T12] bridge_slave_1: left promiscuous mode [ 132.327185][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.343112][ T12] bridge_slave_0: left allmulticast mode [ 132.362238][ T12] bridge_slave_0: left promiscuous mode [ 132.383647][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.539590][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.546712][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.554065][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.561136][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.629045][ T413] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 132.636849][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.661143][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.681314][ T6237] tmpfs: Bad value for 'size' [ 132.709777][ T12] tipc: Disabling bearer [ 132.719714][ T12] tipc: Left network mode [ 132.725186][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.732275][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.833478][ T413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.853844][ T413] usb 1-1: not running at top speed; connect to a high speed hub [ 132.879685][ T413] usb 1-1: config index 0 descriptor too short (expected 32769, got 60) [ 132.912391][ T413] usb 1-1: config 1 has too many interfaces: 130, using maximum allowed: 32 [ 132.936182][ T413] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 132.961702][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.968822][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.982042][ T413] usb 1-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 133.024716][ T413] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 130 [ 133.078358][ T413] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 133.098510][ T413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.138052][ T413] usb 1-1: Product: syz [ 133.170890][ T413] usb 1-1: Manufacturer: syz [ 133.175544][ T413] usb 1-1: SerialNumber: syz [ 133.180853][ T6192] veth0_vlan: entered promiscuous mode [ 133.233935][ T6192] veth1_macvtap: entered promiscuous mode [ 133.392750][ T6256] rust_binder: Error while translating object. [ 133.392817][ T6256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.402692][ T6256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 133.919192][ T413] usb 1-1: USB disconnect, device number 53 [ 134.438901][ T413] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.521827][ T6285] rust_binder: Error while translating object. [ 134.521863][ T6285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 134.556111][ T6285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:673 [ 134.609609][ T413] usb 2-1: Using ep0 maxpacket: 8 [ 134.653378][ T413] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 134.669250][ T413] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 134.688765][ T413] usb 2-1: config 0 has no interface number 0 [ 134.695235][ T413] usb 2-1: config 0 interface 194 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.710041][ T413] usb 2-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=b7.96 [ 134.724705][ T413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.738870][ T413] usb 2-1: Product: syz [ 134.743152][ T413] usb 2-1: Manufacturer: syz [ 134.766607][ T413] usb 2-1: SerialNumber: syz [ 134.782492][ T413] usb 2-1: config 0 descriptor?? [ 134.800106][ T413] snd-usb-audio 2-1:0.194: probe with driver snd-usb-audio failed with error -2 [ 134.844786][ T375] udevd[375]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.998372][ T6281] rust_binder: Error while translating object. [ 134.998421][ T6281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.005231][ T6281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 135.020639][ T6281] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1941'. [ 135.041527][ T413] usb 2-1: USB disconnect, device number 2 [ 135.059178][ T331] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 135.229142][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 135.235518][ T331] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.249693][ T331] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.258583][ T331] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.274462][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.284542][ T331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.294951][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.308344][ T331] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.322931][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.332085][ T331] usb 1-1: config 0 descriptor?? [ 135.418866][ C0] net_ratelimit: 71601 callbacks suppressed [ 135.418890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.437120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.449295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.461400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.473489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.485536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.497620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.509792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.521940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.534092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.559275][ T331] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 135.600091][ T331] usb 1-1: USB disconnect, device number 54 [ 135.614376][ T331] usblp0: removed [ 135.729416][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 135.729435][ T36] audit: type=1326 audit(2000000106.088:25073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.1.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab72f8efc9 code=0x0 [ 136.108915][ T331] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 136.230242][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1957'. [ 136.239834][ T6322] /dev/sr0: Can't lookup blockdev [ 136.245019][ T36] audit: type=1400 audit(2000000106.598:25074): avc: denied { mounton } for pid=6321 comm="syz.3.1957" path="/syzcgroup/unified/syz3" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.298908][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 136.305338][ T331] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 136.317284][ T331] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 136.347102][ T331] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 136.372606][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.382614][ T331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.392611][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.405997][ T331] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 136.427191][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.450342][ T331] usb 1-1: config 0 descriptor?? [ 136.635199][ T6338] 9pnet_fd: Insufficient options for proto=fd [ 136.648310][ T6340] cgroup: Name too long [ 136.660256][ T331] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.712083][ T6342] rust_binder: Write failure EFAULT in pid:20 [ 136.712168][ T6343] rust_binder: Write failure EFAULT in pid:20 [ 136.805838][ T6351] SELinux: security_context_str_to_sid () failed with errno=-22 [ 136.912582][ T36] audit: type=1326 audit(2000000107.268:25075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab72f8efc9 code=0x0 [ 137.016466][ T331] usb 1-1: USB disconnect, device number 55 [ 137.026260][ T331] usblp0: removed [ 137.295032][ T6407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.295073][ T6407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.310072][ T6408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:690 [ 137.316662][ T6407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.336340][ T6407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.336369][ T6407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.368420][ T6412] x_tables: duplicate entry at hook 1 [ 137.375099][ T6407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.375126][ T6407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.460952][ T6418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.464073][ T6419] IPv6: syztnl0: Disabled Multicast RS [ 137.611454][ T6425] 9pnet_fd: Insufficient options for proto=fd [ 137.795680][ T36] audit: type=1400 audit(2000000108.144:25076): avc: denied { unmount } for pid=6428 comm="syz.0.1994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.936452][ T6440] rust_binder: Error while translating object. [ 137.936495][ T6440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 137.959176][ T6440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:704 [ 138.466761][ T6462] 9pnet_fd: Insufficient options for proto=fd [ 138.974992][ T6471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.975256][ T36] audit: type=1400 audit(2000000109.288:25077): avc: denied { remount } for pid=6470 comm="syz.0.2008" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.790439][ T6494] rust_binder: Error while translating object. [ 139.790488][ T6494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 139.838245][ T6494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:725 [ 140.513355][ C0] net_ratelimit: 68776 callbacks suppressed [ 140.513378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.516416][ T6509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.522666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.559476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.571604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.583705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.595885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.608031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.620914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.633301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.645423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.802020][ T6513] binder: Bad value for 'defcontext' [ 140.808053][ T413] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 141.007394][ T413] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.047483][ T413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 141.081241][ T413] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 141.113125][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.151835][ T413] usb 2-1: config 0 descriptor?? [ 141.157274][ T6510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.186275][ T413] hub 2-1:0.0: USB hub found [ 141.400091][ T36] audit: type=1400 audit(2000000111.641:25078): avc: denied { write } for pid=6508 comm="syz.1.2021" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 141.519668][ T36] audit: type=1400 audit(2000000111.641:25079): avc: denied { open } for pid=6508 comm="syz.1.2021" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 141.596188][ T36] audit: type=1400 audit(2000000111.641:25080): avc: denied { ioctl } for pid=6508 comm="syz.1.2021" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 141.823843][ T6509] rust_binder: Error in use_page_slow: ESRCH [ 141.823870][ T6509] rust_binder: use_range failure ESRCH [ 141.830177][ T6509] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 141.853214][ T6509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 141.883723][ T6509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49 [ 143.001046][ T413] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 144.021377][ T413] usbhid 2-1:0.0: can't add hid device: -71 [ 144.027516][ T413] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 144.058479][ T36] audit: type=1400 audit(2000000114.238:25081): avc: denied { mounton } for pid=6544 comm="syz.1.2031" path="/16/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 145.070614][ T413] usb 2-1: USB disconnect, device number 3 [ 145.143661][ T6551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.143787][ T6551] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 145.150305][ T36] audit: type=1400 audit(2000000115.276:25082): avc: denied { unmount } for pid=6192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 145.258268][ T6555] fuseblk: Bad value for 'max_read' [ 145.315132][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.348202][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.386828][ T6535] bridge_slave_0: entered allmulticast mode [ 145.421702][ T6535] bridge_slave_0: entered promiscuous mode [ 145.448920][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.456121][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.476763][ T6535] bridge_slave_1: entered allmulticast mode [ 145.491876][ T6535] bridge_slave_1: entered promiscuous mode [ 145.641562][ C0] net_ratelimit: 58629 callbacks suppressed [ 145.641580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.659601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.671661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.683850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.696093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.702824][ T50] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 145.708267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.727972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.740081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.752243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.764753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.870761][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 145.887896][ T50] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.896205][ T50] usb 1-1: config 179 has no interface number 0 [ 145.917012][ T50] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 145.957746][ T50] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 145.990426][ T50] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.017004][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.024154][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.032178][ T50] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 146.051036][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.058145][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.070939][ T50] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.105542][ T50] usb 1-1: config 179 interface 65 has no altsetting 0 [ 146.131879][ T50] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 146.171685][ T6535] veth0_vlan: entered promiscuous mode [ 146.181944][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.230739][ T6535] veth1_macvtap: entered promiscuous mode [ 146.237305][ T50] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13 [ 146.488349][ T6561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.488385][ T6561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:745 [ 146.534663][ T331] usb 1-1: USB disconnect, device number 56 [ 146.591218][ T331] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 146.765888][ T6609] random: crng reseeded on system resumption [ 146.771997][ T36] audit: type=1400 audit(2000000116.895:25083): avc: denied { write } for pid=6601 comm="syz.4.2048" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.817530][ T6611] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 146.817558][ T6611] rust_binder: Error while translating object. [ 146.844883][ T6611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.875475][ T6611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 147.068657][ T6620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 147.090425][ T6620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 147.109027][ T6620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:65 [ 147.223197][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 147.443432][ T6635] __vm_enough_memory: pid: 6635, comm: syz.1.2058, bytes: 18014402804453376 not enough memory for the allocation [ 147.549407][ T331] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 147.709588][ T331] usb 1-1: Using ep0 maxpacket: 8 [ 147.735133][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.760928][ T331] usb 1-1: config 3 has an invalid interface number: 235 but max is 1 [ 147.800462][ T331] usb 1-1: config 3 has an invalid interface association descriptor of length 2, skipping [ 147.835613][ T331] usb 1-1: config 3 has an invalid interface number: 19 but max is 1 [ 147.870872][ T331] usb 1-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 147.900703][ T331] usb 1-1: config 3 has no interface number 0 [ 147.916635][ T331] usb 1-1: config 3 has no interface number 2 [ 147.930435][ T331] usb 1-1: config 3 interface 235 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 16 [ 147.972693][ T331] usb 1-1: config 3 interface 235 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 147.989817][ T331] usb 1-1: too many endpoints for config 3 interface 19 altsetting 144: 251, using maximum allowed: 30 [ 148.001237][ T331] usb 1-1: config 3 interface 19 altsetting 144 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 148.013512][ T331] usb 1-1: config 3 interface 19 altsetting 144 has 2 endpoint descriptors, different from the interface descriptor's value: 251 [ 148.027758][ T331] usb 1-1: config 3 interface 1 has no altsetting 0 [ 148.034434][ T331] usb 1-1: config 3 interface 235 has no altsetting 0 [ 148.042506][ T331] usb 1-1: config 3 interface 19 has no altsetting 0 [ 148.051662][ T331] usb 1-1: language id specifier not provided by device, defaulting to English [ 148.063955][ T331] usb 1-1: New USB device found, idVendor=15ba, idProduct=002a, bcdDevice=2e.ef [ 148.073477][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.086035][ T331] usb 1-1: Product: syz [ 148.090300][ T331] usb 1-1: SerialNumber: syz [ 148.310384][ T331] ftdi_sio 1-1:3.1: FTDI USB Serial Device converter detected [ 148.330910][ T331] ftdi_sio ttyUSB0: unknown device type: 0x2eef [ 148.352127][ T331] usb 1-1: USB disconnect, device number 57 [ 148.367706][ T331] ftdi_sio 1-1:3.1: device disconnected [ 148.856234][ T6672] rust_binder: Write failure EFAULT in pid:754 [ 150.736673][ C0] net_ratelimit: 84312 callbacks suppressed [ 150.736699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.761032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.773206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.785296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.797606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.809727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.821908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.834074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.846177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.858203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.601861][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2081'. [ 152.512652][ T6730] overlayfs: failed to clone upperpath [ 153.217032][ T36] audit: type=1400 audit(2000000123.248:25084): avc: denied { accept } for pid=6769 comm="syz.3.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.276298][ T6798] 9pnet_fd: Insufficient options for proto=fd [ 154.303194][ T36] audit: type=1400 audit(2000000124.326:25085): avc: denied { setopt } for pid=6797 comm="syz.3.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 154.529863][ T6810] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2111'. [ 154.586224][ T36] audit: type=1400 audit(2000000124.593:25086): avc: denied { ioctl } for pid=6806 comm="syz.3.2110" path="socket:[24836]" dev="sockfs" ino=24836 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.886593][ T6814] overlayfs: failed to clone upperpath [ 154.960380][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2114'. [ 155.022357][ T36] audit: type=1400 audit(2000000125.038:25087): avc: denied { nlmsg_read } for pid=6819 comm="syz.4.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.594071][ T331] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 155.652669][ T331] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.772808][ T6836] fuse: Bad value for 'user_id' [ 155.806557][ T6836] fuse: Bad value for 'user_id' [ 155.807890][ C0] net_ratelimit: 76661 callbacks suppressed [ 155.807910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.829456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.841554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.853801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.858399][ T31] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 155.865964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.885510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.897769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.909996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.922110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.934263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.048285][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 156.065281][ T31] usb 1-1: can't read configurations, error -61 [ 156.207186][ T36] audit: type=1400 audit(2000000126.205:25088): avc: denied { execute } for pid=6840 comm="syz.1.2120" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.243424][ T31] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 156.310829][ T6850] SELinux: policydb version -1776694522 does not match my version range 15-33 [ 156.334902][ T6850] SELinux: failed to load policy [ 156.405205][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 156.413544][ T31] usb 1-1: can't read configurations, error -61 [ 156.420200][ T6854] binder: Unknown parameter 'contextÌðÔð[7’' [ 156.433405][ T31] usb usb1-port1: attempt power cycle [ 156.532906][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 156.623282][ T6865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 156.623322][ T6865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:94 [ 156.797728][ T31] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 156.883330][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 156.891091][ T31] usb 1-1: can't read configurations, error -61 [ 157.053656][ T31] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 157.102544][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 157.110360][ T31] usb 1-1: can't read configurations, error -61 [ 157.138498][ T31] usb usb1-port1: unable to enumerate USB device [ 157.239108][ T6884] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 157.287844][ T6884] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 157.346593][ T6884] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.709485][ T6906] overlayfs: failed to clone upperpath [ 157.981042][ T36] audit: type=1400 audit(2000000127.969:25089): avc: denied { accept } for pid=6917 comm="syz.3.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.068234][ T6930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6930 comm=syz.3.2149 [ 158.106165][ T6932] /dev/rnullb0: Can't lookup blockdev [ 158.144676][ T6929] rust_binder: 111: no such ref 0 [ 158.358437][ T36] audit: type=1400 audit(2000000128.335:25090): avc: denied { create } for pid=6948 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.447262][ T6953] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 158.644705][ T6971] rust_binder: 6971 RLIMIT_NICE not set [ 158.645863][ T6971] rust_binder: Write failure EINVAL in pid:773 [ 159.027517][ T36] audit: type=1326 audit(2000000128.990:25091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.3.2166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bb338efc9 code=0x0 [ 159.283161][ T6993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2170'. [ 159.575815][ T6999] netlink: 'syz.4.2172': attribute type 15 has an invalid length. [ 159.589899][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 159.605998][ T6999] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 159.618569][ T6999] netlink: 'syz.4.2172': attribute type 2 has an invalid length. [ 159.897232][ T7025] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.2182'. [ 159.993490][ T7029] /dev/rnullb0: Can't open blockdev [ 160.200100][ T36] audit: type=1400 audit(2000000130.160:25092): avc: denied { read } for pid=7035 comm="syz.0.2186" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.240956][ T36] audit: type=1400 audit(2000000130.180:25093): avc: denied { ioctl } for pid=7035 comm="syz.0.2186" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.479154][ T331] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 160.549765][ T7041] fuse: Bad value for 'fd' [ 160.616043][ T36] audit: type=1400 audit(2000000130.577:25094): avc: denied { setattr } for pid=7044 comm="syz.1.2190" name="CAN_RAW" dev="sockfs" ino=26447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.640255][ T7045] overlayfs: failed to resolve './file1/file0': -2 [ 160.646944][ T331] usb 1-1: device descriptor read/64, error -71 [ 160.784863][ T7057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2195'. [ 160.862018][ C0] net_ratelimit: 70839 callbacks suppressed [ 160.862042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.880150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.892300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.904486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.912417][ T331] usb 1-1: device descriptor read/64, error -71 [ 160.916694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.935030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.947148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.959332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.971461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.983632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.164282][ T331] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 161.305257][ T331] usb 1-1: device descriptor read/64, error -71 [ 161.567127][ T331] usb 1-1: device descriptor read/64, error -71 [ 161.684435][ T331] usb usb1-port1: attempt power cycle [ 162.040479][ T331] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 162.071663][ T331] usb 1-1: device descriptor read/8, error -71 [ 162.220945][ T331] usb 1-1: device descriptor read/8, error -71 [ 162.483398][ T331] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 162.505009][ T331] usb 1-1: device descriptor read/8, error -71 [ 162.645512][ T331] usb 1-1: device descriptor read/8, error -71 [ 162.747485][ T36] audit: type=1400 audit(2000000132.692:25095): avc: denied { read } for pid=7138 comm="syz.4.2220" path="socket:[26699]" dev="sockfs" ino=26699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.771746][ T331] usb usb1-port1: unable to enumerate USB device [ 163.128795][ T7160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7160 comm=syz.3.2227 [ 163.732425][ T7181] /dev/rnullb0: Can't open blockdev [ 164.118497][ T7201] rust_binder: Error while translating object. [ 164.118545][ T7201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.133662][ T36] audit: type=1400 audit(2000000134.063:25096): avc: denied { audit_write } for pid=7204 comm="syz.3.2242" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.175009][ T7201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:827 [ 164.861989][ T7231] /dev/rnullb0: Can't open blockdev [ 165.304150][ T7247] rust_binder: Write failure EINVAL in pid:839 [ 165.543328][ T7258] fuse: Bad value for 'group_id' [ 165.572149][ T7258] fuse: Bad value for 'group_id' [ 165.903907][ C0] net_ratelimit: 59810 callbacks suppressed [ 165.903930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.922170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.934558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 165.946865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.959091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.971189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.983292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.995473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.007654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.020119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 166.224330][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.250381][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.292453][ T7293] bridge_slave_0: entered allmulticast mode [ 166.327705][ T7293] bridge_slave_0: entered promiscuous mode [ 166.365981][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.415201][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.453031][ T7293] bridge_slave_1: entered allmulticast mode [ 166.477405][ T7293] bridge_slave_1: entered promiscuous mode [ 166.600463][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2277'. [ 166.686076][ T7316] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 166.842134][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.849861][ T7293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.857264][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.864410][ T7293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.911574][ T45] bridge_slave_1: left allmulticast mode [ 166.917356][ T45] bridge_slave_1: left promiscuous mode [ 166.923348][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.975926][ T45] bridge_slave_0: left allmulticast mode [ 166.990103][ T45] bridge_slave_0: left promiscuous mode [ 167.008359][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.567461][ T7342] futex_wake_op: syz.0.2287 tries to shift op by 32; fix this program [ 167.883875][ T331] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 168.024537][ T331] usb 1-1: device descriptor read/64, error -71 [ 168.265640][ T331] usb 1-1: device descriptor read/64, error -71 [ 168.506722][ T331] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 168.652508][ T331] usb 1-1: device descriptor read/64, error -71 [ 168.990773][ T331] usb 1-1: device descriptor read/64, error -71 [ 169.112329][ T331] usb usb1-port1: attempt power cycle [ 169.555102][ T331] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 169.696861][ T331] usb 1-1: device descriptor read/8, error -71 [ 169.911746][ T331] usb 1-1: device descriptor read/8, error -71 [ 170.247562][ T331] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 170.356956][ T331] usb 1-1: device descriptor read/8, error -71 [ 170.572321][ T331] usb 1-1: device descriptor read/8, error -71 [ 170.663996][ T36] audit: type=1326 audit(2000000140.561:25097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc18efc9 code=0x7fc00000 [ 170.783180][ T331] usb usb1-port1: unable to enumerate USB device [ 170.936917][ C0] net_ratelimit: 74306 callbacks suppressed [ 170.936941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 170.936980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.943002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.955072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.967183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.979191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.991157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.003006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.015003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.027000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.024100][ T331] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 172.286686][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.311232][ T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.357837][ T331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 172.374246][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.402718][ T331] usb 1-1: SerialNumber: syz [ 172.436743][ T331] usb 1-1: 0:2 : does not exist [ 175.963555][ C1] net_ratelimit: 102102 callbacks suppressed [ 175.963578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.963614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.969728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.981659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.993592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.005503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.017360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.029427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.041437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.053536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 180.044153][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.344369][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.985662][ C1] net_ratelimit: 100843 callbacks suppressed [ 180.985684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.985795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.991838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.003781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.015850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.028707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 181.040414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.052490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.064413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.076296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.867326][ C0] sched: DL replenish lagged too much [ 186.004338][ C1] net_ratelimit: 112318 callbacks suppressed [ 186.004385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.004453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.014352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.022757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 186.034704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.046667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.058719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.070706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.082637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.094545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.020595][ C1] net_ratelimit: 142613 callbacks suppressed [ 191.020621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.020643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.020704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.026736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.038732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.050696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.062753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 191.074406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.086392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.098512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.035137][ C0] net_ratelimit: 146373 callbacks suppressed [ 196.035161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.035190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.041273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.053304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.065321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.077318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.089211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.101122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.113034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.124928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.048446][ C0] net_ratelimit: 142358 callbacks suppressed [ 201.048468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.048483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.048562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.054714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.066611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.078598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.090639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.102739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.114616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.126609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.060831][ C1] net_ratelimit: 143691 callbacks suppressed [ 206.060856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.060906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.066987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.078917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.090926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.102973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.114834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.127125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 206.138917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.150815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.072533][ C0] net_ratelimit: 147317 callbacks suppressed [ 211.072556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.072588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.078801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.090809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.102740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.114732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.126755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.138604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.150550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.162443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.083815][ C1] net_ratelimit: 148098 callbacks suppressed [ 216.083840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.083856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.089985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.101942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.114113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.126274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 216.138004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.150001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.162014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.173977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.094687][ C0] net_ratelimit: 144301 callbacks suppressed [ 221.094716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.094742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.101103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 221.112880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.124873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.136871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.148843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.160977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.172852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.184775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.105363][ C1] net_ratelimit: 142021 callbacks suppressed [ 226.105385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.105553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 226.111509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.123404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.135402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.147476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.159413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.171408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.183400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.195435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.115835][ C1] net_ratelimit: 139608 callbacks suppressed [ 231.115857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.115911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 231.121960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.133976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.146060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.158007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.169940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.181841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.194067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.206058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.126168][ C0] net_ratelimit: 139209 callbacks suppressed [ 236.126193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.126194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.126286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.132326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.144431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.156352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.168365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.180357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.192274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.204363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.136415][ C1] net_ratelimit: 144771 callbacks suppressed [ 241.136439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.136488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.142554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.154485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.166379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.178381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.190251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.202209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.214071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.226135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.146590][ C0] net_ratelimit: 140535 callbacks suppressed [ 246.146615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 246.146634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.152757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.164838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.176795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.188678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.200549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.212585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.224660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.236639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.156714][ C0] net_ratelimit: 140940 callbacks suppressed [ 251.156739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.156762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.162947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.174965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.186936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.198962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.210917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.222948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.234917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.246818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.166809][ C1] net_ratelimit: 145010 callbacks suppressed [ 256.166833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.166837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.166928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.172927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.185031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.196907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.208987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.220886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.232811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.244722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.176863][ C1] net_ratelimit: 140402 callbacks suppressed [ 261.176884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.176938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.183048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.195356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.207371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.219258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.231284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.243172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.255155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.267240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.186946][ C1] net_ratelimit: 146534 callbacks suppressed [ 266.186969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.186993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.193038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.205198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.217145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.229039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.241025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.252985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.264882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.277064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.196932][ C1] net_ratelimit: 146724 callbacks suppressed [ 271.196954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.196992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.203068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.215194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 271.227457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.241626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.253687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.265661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.277518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.289520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.206957][ C1] net_ratelimit: 138473 callbacks suppressed [ 276.206982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.207032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.213120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.225062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.237027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.249186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.261211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.273111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.285111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.297112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.217000][ C1] net_ratelimit: 141668 callbacks suppressed [ 281.217024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.217053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.223247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.235350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.247296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.259396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 281.271266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.283079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.295383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.307447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.226978][ C1] net_ratelimit: 144904 callbacks suppressed [ 286.227000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.227044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.233120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.245021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.257091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.268956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.280837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.292909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.304763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.316662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.237070][ C1] net_ratelimit: 145877 callbacks suppressed [ 291.237094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.237139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.243203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.255300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.267317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.279350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.291246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.303225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.315102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.327090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.247007][ C0] net_ratelimit: 140957 callbacks suppressed [ 296.247031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.247048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.253253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.265239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.277164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.289060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.301137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.312787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.324875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.336761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.257032][ C1] net_ratelimit: 139757 callbacks suppressed [ 301.257055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.257154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 301.263231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.275161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.287140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.299201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.311027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.323045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.335072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.347138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.418967][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.426059][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.707272][ T7369] bridge_slave_0: entered allmulticast mode [ 303.807385][ T7369] bridge_slave_0: entered promiscuous mode [ 304.551477][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.567161][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.574331][ T7369] bridge_slave_1: entered allmulticast mode [ 304.622789][ T7369] bridge_slave_1: entered promiscuous mode [ 306.267015][ C1] net_ratelimit: 142517 callbacks suppressed [ 306.267041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.267050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.267137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.273160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.285273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 306.297091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.309067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.321079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.333345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.345280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.276993][ C0] net_ratelimit: 143182 callbacks suppressed [ 311.277015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.277052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.283242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.295248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.307141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.319174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.331113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 311.342978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.354819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.366846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.287033][ C1] net_ratelimit: 140767 callbacks suppressed [ 316.287058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.287059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.287142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.293346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.305353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.317419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.329394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 316.341237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.353138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.365122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.568376][ T37] INFO: task kworker/u8:2:45 blocked for more than 125 seconds. [ 316.576075][ T37] Not tainted syzkaller #0 [ 316.603268][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.612021][ T37] task:kworker/u8:2 state:D stack:0 pid:45 tgid:45 ppid:2 flags:0x00004000 [ 316.622295][ T37] Workqueue: netns cleanup_net [ 316.627134][ T37] Call Trace: [ 316.630437][ T37] [ 316.633388][ T37] __schedule+0x1322/0x1df0 [ 316.637954][ T37] ? __sched_text_start+0x10/0x10 [ 316.643107][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 316.647886][ T37] ? kthread_data+0x54/0xc0 [ 316.652417][ T37] ? wq_worker_sleeping+0x69/0x260 [ 316.657582][ T37] schedule+0xc6/0x240 [ 316.661686][ T37] schedule_timeout+0xb2/0x3a0 [ 316.666472][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 316.671892][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 316.677492][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 316.682632][ T37] ? generic_exec_single+0x20a/0x500 [ 316.687972][ T37] wait_for_common+0x359/0x630 [ 316.692772][ T37] ? wait_for_completion+0x40/0x40 [ 316.697937][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 316.703603][ T37] wait_for_completion+0x1c/0x40 [ 316.708599][ T37] rcu_barrier+0x415/0x530 [ 316.713041][ T37] netdev_run_todo+0x10e/0xcb0 [ 316.717853][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 316.723184][ T37] ? mutex_is_locked+0x1b/0x50 [ 316.727995][ T37] ? nexthop_net_exit_batch_rtnl+0x22d/0x290 [ 316.733999][ T37] ? br_net_exit_batch_rtnl+0x157/0x1a0 [ 316.739610][ T37] rtnl_unlock+0x12/0x20 [ 316.743887][ T37] cleanup_net+0x632/0xc70 [ 316.748360][ T37] ? __cfi_cleanup_net+0x10/0x10 [ 316.753345][ T37] ? kick_pool+0xb9/0x550 [ 316.757738][ T37] process_scheduled_works+0x7d2/0x1020 [ 316.763329][ T37] worker_thread+0xc58/0x1250 [ 316.768055][ T37] kthread+0x2ca/0x370 [ 316.772152][ T37] ? __cfi_worker_thread+0x10/0x10 [ 316.777326][ T37] ? __cfi_kthread+0x10/0x10 [ 316.781941][ T37] ret_from_fork+0x67/0xa0 [ 316.786387][ T37] ? __cfi_kthread+0x10/0x10 [ 316.791031][ T37] ret_from_fork_asm+0x1a/0x30 [ 316.795836][ T37] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.827966][ T37] INFO: task syz.0.2289:7350 blocked for more than 125 seconds. [ 316.835654][ T37] Not tainted syzkaller #0 [ 316.841100][ T36] audit: type=1400 audit(2000000286.670:25098): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1629]" dev="pipefs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 316.905717][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.914484][ T37] task:syz.0.2289 state:D stack:0 pid:7350 tgid:7349 ppid:289 flags:0x00004006 [ 316.924792][ T37] Call Trace: [ 316.928093][ T37] [ 316.931042][ T37] __schedule+0x1322/0x1df0 [ 316.935574][ T37] ? __sched_text_start+0x10/0x10 [ 316.940625][ T37] ? __kasan_check_write+0x18/0x20 [ 316.945753][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 316.950981][ T37] ? __kasan_check_write+0x18/0x20 [ 316.956112][ T37] ? trace_contention_begin+0xc0/0xc0 [ 316.961507][ T37] schedule+0xc6/0x240 [ 316.965602][ T37] schedule_preempt_disabled+0x14/0x30 [ 316.971107][ T37] __mutex_lock+0x81e/0x1b50 [ 316.975710][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 316.982493][ T37] ? kvm_vm_release+0x47/0x70 [ 316.987197][ T37] ? call_rcu_hurry+0x30/0x30 [ 316.991880][ T37] ? __kasan_check_write+0x18/0x20 [ 316.997027][ T37] ? xas_clear_mark+0x1e8/0x430 [ 317.001897][ T37] __mutex_lock_slowpath+0xe/0x20 [ 317.007021][ T37] mutex_lock+0x102/0x1c0 [ 317.011353][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 317.016213][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 317.022733][ T37] rcu_barrier+0x4d/0x530 [ 317.027081][ T37] ? __kasan_check_write+0x18/0x20 [ 317.032209][ T37] ? kvm_destroy_vcpus+0x1c0/0x250 [ 317.037347][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 317.042736][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 317.047607][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 317.052737][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 317.058398][ T37] ? __kasan_check_write+0x18/0x20 [ 317.063527][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 317.069187][ T37] ? free_pages+0x86/0x90 [ 317.073544][ T37] kvm_put_kvm+0xb04/0x12c0 [ 317.078139][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 317.083262][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 317.088918][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 317.094307][ T37] kvm_vm_release+0x47/0x70 [ 317.098836][ T37] __fput+0x1fb/0xa00 [ 317.102864][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 317.108433][ T37] ____fput+0x20/0x30 [ 317.112426][ T37] task_work_run+0x1e0/0x250 [ 317.117066][ T37] ? __cfi_task_work_run+0x10/0x10 [ 317.122193][ T37] ? __kasan_check_write+0x18/0x20 [ 317.127338][ T37] do_exit+0x9bc/0x2630 [ 317.131534][ T37] ? __kasan_check_write+0x18/0x20 [ 317.136665][ T37] ? __cfi_do_exit+0x10/0x10 [ 317.141278][ T37] ? __kasan_check_write+0x18/0x20 [ 317.146407][ T37] ? put_pid+0xe2/0x120 [ 317.150582][ T37] ? netlink_sendmsg+0x835/0xaf0 [ 317.155538][ T37] ? __kasan_check_write+0x18/0x20 [ 317.160761][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 317.165903][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 317.171496][ T37] do_group_exit+0x22a/0x300 [ 317.176099][ T37] ? __kasan_check_write+0x18/0x20 [ 317.181256][ T37] get_signal+0x139d/0x14f0 [ 317.185805][ T37] arch_do_signal_or_restart+0x96/0x720 [ 317.191427][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 317.197632][ T37] ? __kasan_check_write+0x18/0x20 [ 317.202776][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 317.208355][ T37] do_syscall_64+0x64/0xf0 [ 317.212804][ T37] ? clear_bhb_loop+0x50/0xa0 [ 317.217541][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 317.223475][ T37] RIP: 0033:0x7f51cc18efc9 [ 317.227925][ T37] RSP: 002b:00007f51ccfb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 317.236360][ T37] RAX: 0000000000000013 RBX: 00007f51cc3e5fa0 RCX: 00007f51cc18efc9 [ 317.244401][ T37] RDX: 0000000000000013 RSI: 0000200000000140 RDI: 0000000000000003 [ 317.252400][ T37] RBP: 00007f51cc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 317.260393][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.268382][ T37] R13: 00007f51cc3e6038 R14: 00007f51cc3e5fa0 R15: 00007fffe99c28a8 [ 317.276383][ T37] [ 317.717216][ T37] NMI backtrace for cpu 1 [ 317.717238][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 317.717269][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.717284][ T37] Call Trace: [ 317.717291][ T37] [ 317.717300][ T37] __dump_stack+0x21/0x30 [ 317.717336][ T37] dump_stack_lvl+0x10c/0x190 [ 317.717367][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 317.717400][ T37] dump_stack+0x19/0x20 [ 317.717429][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 317.717458][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 317.717487][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 317.717515][ T37] ? sched_show_task+0x379/0x560 [ 317.717544][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 317.717570][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.717600][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.717630][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 317.717661][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 317.717690][ T37] watchdog+0xd8f/0xed0 [ 317.717723][ T37] ? __cfi_watchdog+0x10/0x10 [ 317.717752][ T37] ? __kasan_check_read+0x15/0x20 [ 317.717786][ T37] ? __kthread_parkme+0x138/0x180 [ 317.717806][ T37] ? schedule+0xc6/0x240 [ 317.717837][ T37] kthread+0x2ca/0x370 [ 317.717860][ T37] ? __cfi_watchdog+0x10/0x10 [ 317.717889][ T37] ? __cfi_kthread+0x10/0x10 [ 317.717912][ T37] ret_from_fork+0x67/0xa0 [ 317.717942][ T37] ? __cfi_kthread+0x10/0x10 [ 317.717965][ T37] ret_from_fork_asm+0x1a/0x30 [ 317.718001][ T37] [ 317.718009][ T37] Sending NMI from CPU 1 to CPUs 0: [ 317.910565][ C0] NMI backtrace for cpu 0 [ 317.910580][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 317.910602][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.910613][ C0] RIP: 0010:memcpy_orig+0x25/0x150 [ 317.910639][ C0] Code: 90 90 90 90 90 66 0f 1f 00 48 89 f8 48 83 fa 20 0f 82 86 00 00 00 40 38 fe 7c 35 48 83 ea 20 48 83 ea 20 4c 8b 06 4c 8b 4e 08 <4c> 8b 56 10 4c 8b 5e 18 48 8d 76 20 4c 89 07 4c 89 4f 08 4c 89 57 [ 317.910654][ C0] RSP: 0018:ffffc90000007550 EFLAGS: 00000206 [ 317.910669][ C0] RAX: ffff888176fc8800 RBX: 0000000000000058 RCX: ffffffff8468d8e3 [ 317.910682][ C0] RDX: 0000000000000018 RSI: ffff888176fa1300 RDI: ffff888176fc8800 [ 317.910694][ C0] RBP: ffffc90000007580 R08: 0000000080000001 R09: 0000000000000000 [ 317.910710][ C0] R10: dffffc0000000000 R11: ffffed102edf910b R12: 0000000000000000 [ 317.910722][ C0] R13: ffffffff8468d8e3 R14: ffff888176fa1300 R15: ffff888176fc8800 [ 317.910735][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 317.910749][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.910760][ C0] CR2: 00007f08385de4c0 CR3: 000000010a37e000 CR4: 00000000003526b0 [ 317.910776][ C0] Call Trace: [ 317.910781][ C0] [ 317.910791][ C0] ? __asan_memcpy+0x5a/0x80 [ 317.910810][ C0] __copy_skb_header+0x453/0x5e0 [ 317.910835][ C0] __skb_clone+0x64/0x7a0 [ 317.910856][ C0] ? skb_clone+0x229/0x460 [ 317.910897][ C0] skb_clone+0x260/0x460 [ 317.910919][ C0] br_flood+0x661/0x730 [ 317.910943][ C0] br_handle_frame_finish+0x12bb/0x1720 [ 317.910969][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 317.910996][ C0] br_handle_frame+0x5a6/0xba0 [ 317.911020][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 317.911043][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 317.911065][ C0] ? dst_release+0xe3/0x240 [ 317.911080][ C0] ? arp_process+0xd81/0x1740 [ 317.911101][ C0] ? qdisc_run_end+0x120/0x120 [ 317.911122][ C0] ? __cfi_arp_process+0x10/0x10 [ 317.911140][ C0] ? NF_HOOK+0x157/0x1b0 [ 317.911156][ C0] ? __cfi_arp_process+0x10/0x10 [ 317.911174][ C0] ? arp_xmit+0x1f0/0x1f0 [ 317.911190][ C0] ? __cfi_arp_process+0x10/0x10 [ 317.911208][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 317.911228][ C0] process_backlog+0x3e5/0xae0 [ 317.911253][ C0] __napi_poll+0xd3/0x610 [ 317.911273][ C0] net_rx_action+0x584/0xce0 [ 317.911297][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 317.911317][ C0] ? sched_clock+0x44/0x60 [ 317.911339][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 317.911367][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 317.911387][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 317.911409][ C0] handle_softirqs+0x1ab/0x630 [ 317.911425][ C0] __do_softirq+0xf/0x16 [ 317.911449][ C0] do_softirq+0xa6/0x100 [ 317.911472][ C0] [ 317.911478][ C0] [ 317.911483][ C0] ? __cfi_do_softirq+0x10/0x10 [ 317.911508][ C0] ? dst_destroy+0x37d/0x460 [ 317.911523][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 317.911538][ C0] __local_bh_enable_ip+0x74/0x80 [ 317.911562][ C0] rcu_do_batch+0x5c6/0xd20 [ 317.911587][ C0] ? rcu_core+0xd20/0xd20 [ 317.911608][ C0] ? __kasan_check_write+0x18/0x20 [ 317.911633][ C0] ? _raw_spin_lock+0x8c/0x120 [ 317.911653][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 317.911677][ C0] ? __kasan_check_read+0x15/0x20 [ 317.911701][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 317.911725][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 317.911751][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 317.911774][ C0] ? __kasan_check_write+0x18/0x20 [ 317.911798][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 317.911820][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 317.911841][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 317.911862][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 317.911879][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 317.911896][ C0] ? __kasan_check_read+0x15/0x20 [ 317.911920][ C0] ? __kthread_parkme+0x138/0x180 [ 317.911935][ C0] ? schedule+0xc6/0x240 [ 317.911958][ C0] kthread+0x2ca/0x370 [ 317.911975][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 317.911999][ C0] ? __cfi_kthread+0x10/0x10 [ 317.912016][ C0] ret_from_fork+0x67/0xa0 [ 317.912037][ C0] ? __cfi_kthread+0x10/0x10 [ 317.912055][ C0] ret_from_fork_asm+0x1a/0x30 [ 317.912081][ C0] [ 321.296995][ C1] net_ratelimit: 112831 callbacks suppressed [ 321.297020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.297041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.303126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.315197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:40:41:55:f6:ff, vlan:0) [ 321.327161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.339036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.351051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.363012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.375110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.387155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.306983][ C0] net_ratelimit: 141568 callbacks suppressed [ 326.307007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.307019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.307120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.313219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.325130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.337083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.349109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.361082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.373011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.385033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)