last executing test programs: 38.36066178s ago: executing program 3 (id=1065): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x10, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x11, 0xa4, {0xa4, 0x23, "959bdf970d549494dc183eafc254605a6ad18e259ab79ff31f7e9ce0871dbc55130c0434629f36213246e1b5e715e0acaa07ec640e893008dc8ec554d400bf4efd0ab5cc0468de108c732e20ca996a8ae7208b8358286b5071c6a0a03de5ca37aa3b1a83561ba26e1ba9b7d69cde92ab29ba6a028aa5810684f0a688a39b6000ed75678195b417439ed90ff367f17f57ebec270a1b1b879ca9173f6d96e9409170d6"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000140)={0x0, 0x22, 0x19, {[@global=@item_012={0x2, 0x1, 0x7, "cc33"}, @global=@item_4={0x3, 0x1, 0xa, "9d3239e6"}, @local=@item_4={0x3, 0x2, 0x8, "bc1d33ba"}, @local=@item_012={0x1, 0x2, 0x3, '\''}, @main=@item_4={0x3, 0x0, 0x9, "dbbc229d"}, @local=@item_4={0x3, 0x2, 0x3, "ef303d8b"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x793, 0x8, 0x1, {0x22, 0xf27}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40, 0xc, 0x79, "088a5a7a9a67e5b09bd1abaacb268dc1da7242e7a71379439db8bb76182191d169d26db20030042136fef9f17af340af0e2dbb452be14d8b4ae6c588b3019a83367db956379f06b6f9832e15e2a8e3dc53c56b6dde34517ca17ab5b4af8d86e4e490dbcd4c0c9c22316bf6079fe33d2b7538d910791f843c37"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x1, 0xe9, "3128d3836a7c0891dad81c1f0c62f6a5a1fd728b2855b75c0cf92459ea0939e4e89163f7db1048f5d594ab920b2aac570876bd74b21b8ed37a84440a9ebca64e270b00d38bfd90c271813a13fb9b0dc4d604f03ccc512fff7e2f4c93c18a96d0902047244b1e8db7043d17427df1273d9986bc4a2318c2de7c0d030eb20ed827d85d88aa2bbaadff2f25c1bb24f4cad11fa34137af8f9a5ed865d3a86208eef90effc451c38a02047be64dfd185a81bc193f4e7de7054fb1e458c8c70a79849b0320e5c55c9508952e604fbc69198b006020ca1153b09a48d7fbd2614bf5fcf1a690ad7ee9164ec4a7"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6c}}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 37.762897993s ago: executing program 3 (id=1073): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f00000001c0)=""/36, &(0x7f0000000000)=0x24) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000003c0)=0xfffffff8) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x300, 0x2, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0xfffffe7fffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000210005022cbd3000fcdbdf2504000000fd538d3f3012b96bd43a8f65417a7b0c0004800800d00001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x24008014) 36.952269248s ago: executing program 3 (id=1075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001a40)={0x9, 0x0, [{0x1, 0x81, &(0x7f0000000500)=""/129}, {0xeeee0000, 0xd4, &(0x7f0000000740)=""/212}, {0xf000, 0x24, &(0x7f00000001c0)=""/36}, {0x3000, 0x62, &(0x7f00000002c0)=""/98}, {0xeeee0000, 0xffe, &(0x7f0000000840)=""/4094}, {0x2000, 0xc5, &(0x7f0000001840)=""/197}, {0x1000, 0x7d, &(0x7f0000000380)=""/125}, {0x3000, 0xe6, &(0x7f0000001940)=""/230}, {0x2, 0x25, &(0x7f0000000240)=""/37}]}) r2 = fsopen(&(0x7f0000000280)='fuse\x00', 0x0) fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000001e005f5b25b77000fcdbdf250a010101000000000000000000000000000004d500003c00e000000100000000000000000000000005000000ff34000010000a002bbd70002dbd7000f87f00000c0015005d07350000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x7, 0x8a, 0x83, 0xf7}, {0x6, 0x9, 0x81, 0x3}]}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140000002200010100003dfd0931749889d71280"], 0x14}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, 0xffffffffffffffff, 0x7aa7000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1, 0x80006, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 36.883302429s ago: executing program 1 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28592bc1}]}, @NFTA_CHAIN_USERDATA={0x18, 0xc, "b17e028fa491334c4bb513011ee38ae95a0f3a3a"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0xc1d2b74f8ee80d1a, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x48000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r5, 0x600, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40845) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20050801}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg0\x00'}) r8 = creat(&(0x7f0000000780)='./file0\x00', 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r8) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000980)={@empty, @broadcast, 0x0}, &(0x7f00000009c0)=0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r12, 0x100, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r13) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000d00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x58, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) 36.771841692s ago: executing program 1 (id=1077): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="200000005e00010000000000000000000c000000010000001600008004000180"], 0x20}], 0x1}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2) 36.771491981s ago: executing program 1 (id=1078): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00#\a'], 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 35.24778033s ago: executing program 2 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000080)={0x2314, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22da, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x28}, @initial, @broadcast, @device_a, {0x4, 0x6}, "", @value={0x8, 0x0, 0x0, 0x0, 0x3c}, @value=@ver_80211n={0x0, 0xbc, 0x1, 0x3, 0x0, 0x2}}, @a_msdu=[{@device_b, @device_b, 0x78, "f672c484553bdf4749c5917306be884a671daa374f9428a8f1d40944175a647e33450d4f803c4e33e077e947d86a8728619b3b0aacc953d1ec94690b80dc9836c86bf481204c015de9cbf69557911d2296deb2b698834d4c700e48ed484e371f9026701018d868d5767d9aef5dce962b0db386bc6a45a4a9"}, {@broadcast, @device_a, 0x4c, "ca8b04a18f9ad0173a9ce8158ba8a6a0b784c7a4339088204312a439bd106a9c7aee0d6f5fa9e396f3efe4bc970d071d6fa34b55b3aed36404652d9dfb8059cc9c2bd3d0fb7dc05c52aa1873"}, {@device_a, @device_b, 0x1000, "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"}, {@device_b, @device_b, 0x1000, "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"}, {@device_a, @device_b, 0x31, "1a84a58c269a199e6d560923ba69c66be58334f40ee6bec3628fe9e6becf1b2a35e36d3ac6e16ae5d170b0994864f10e7a"}, {@broadcast, @device_b, 0x5c, "5f28dbef6ad47de79655fdb9e36d5831eb147505383fede83c402b176a4938c54e82470690ad635455b49fed55e0f71207a0b5752c0ce6877d43cb3da2cc847415449788fe53c1fc2d96821f0b604e528ea05fa1d7262dd37219d436"}, {@device_a, @device_b, 0x1a, "794d02ba36d040aa626ecfc057fc2411fe7cc5d2d52bae9ea299"}, {@device_b, @device_a, 0xcf, "88ce57bb0a93e110b7332634012aa451c51d7cb1ccf7e234c3036c18143c809cd30fc208e59d95e3d8264c6eee542b46bea82fba52fe11bda123e0e09895b49cdb7a91dbdd21934ed6b9a842812c95dff855f967491855b58692d024271a51bc475923e57aa92bec2099103be5daddb31aa2ee446ae76fd038a46df05ebf1a9d797ea2eb3a9f99a7a11511e44253186c3b981833a89baf6e25187db811abe485fddc7659b0aa3ff48b04f42c609b84e79a9cb46423836bdbbd05a5fc5ab4a9deba23e0718f314cffaa89b5f793f8c9"}]}}]}, 0x2314}, 0x1, 0x0, 0x0, 0x24000084}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000002a40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002480)={0x57c, 0x1a, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@nested={0x32d, 0x2d, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @u32=0x4}, @generic="374e44c9b9abb534d62f8d39eb2f47b22c45b30fae2289f1877d128f74f5f633984cf733c0612eea5c4a983db7370b20177ae3afb9cef95e516fd9b0948f93ce596017f30c6a29abd830da", @nested={0x4, 0x14f}, @generic="2f22068884fd16b53e3cfa096b4c64c4ce9ff56dcd094534ed8696b1ea24a004bad5aabf274a83a5dfb059db8c653314b1c11cc3255bb3a22710ea9508f5432a11fb41086e51e784fe18801d2115104c5d5016b66b743ac3f47786f6dd0d2e92a2b6abf11d58bdbd96503c7eb2b911c6be72d5329e217f9217f6b7e9fc953fc29ccdcc7df77b088092ae13da5dbc4761a4453785e7a54d67", @generic="1072fc6e03c69c5167c090e18a13a43ec59b7aab84418b9373f8d97bf1a042db764dd914b7c823ed870bc2430822d5a3fdf8429ac9ff3f2454ed4b2c0096108976e7c1ba8172b28e737f6443fdf58ddba5ef926e8d54b48d48aa35bc9dcafe63dda2ce18c88e99fa6568ed621143517be66ba97480da833b73c31d16495edaeb682f84ca1dd57a847b6ba97f9fe498c58b3cee18cd65555a9259c4ffe8c9631c3599910a2f6e666afa7e493c2432595ce94092aa3a", @typed={0x94, 0x26, 0x0, 0x0, @binary="e6f65e5dc5ee108becbb226574c25aa29becd218a5312640f06886c4794d5c12cbe58da1a01edea1931b4fa11725b0e3dbfe60d7b8a94e37e398025b0e2cbc1397786dfa6159300a3a23165e4feecceacaee24f76e8eab2f247791c0164d75f3695c027705a2f50f2b9ed45e91d11375d55ac976939b38d14a5e3aec7b2c1e26e5b45c3260ac25a30dd3d272be8178d2"}, @generic="9101924aa5d7502e0405e5a5f481ef", @generic="84016783aa191179fea60279c9421795331520f17304d8f32787104f7831a65c6a0e7c1f3b1a528cce635a8db28f9b8224634e9e66bfe98d5df17dfae5ed60b32516dbd5cd46e072c1e50f3655dabaa452ee067224f14ddc2ada5dc49249e0d5b1f3710f3d71325054b59654cb92f856c0da41b8175ee7fba756c27dd7cd7baae6d018e0a005b28f267da6a965c57a9144bb2b3a36201af30eedfaa1df27fb36bce1b082792f42cd60f4c883b0ccce6bce2e9b9d552cfbfa7d6da4d0e88ce769ecbac8cd3ec90786b927cfd7aaa4c375a143948c488e665337712895f38a174152dc"]}, @generic="888afa94b74851720b9b738783307de6d638b7a4a460a0738ca5eee39deca9af8a273087f5e7970fd3244442faf7f32630c6caef01d5055b9d56eac3ef6c4772bd26c634a4667dd25c001e059622db0d0d4116e90032f3df7f1af029435651571bb1a50b42", @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x105, 0x61, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @u32=0x1a3e933c}, @generic="a5720744534cffc90cac1c0f31927b92af3335163996bdbe95e310a3e30eb6b57614882377b2c52ecdf7be849e22af6ad115b66865c029c3bf528e72c158bb26f0940f60b0cf97e74f864a010fccd8d1737f411b9bdbd36b46c96ff688455690f1e4acb1f87142519848e03f41c2fad955381b7a83ec7fddf5845cede8528c9622fac2754f1b48d4fb3025335090c4ea1e66053112df120c8d9f362aebf6c3ada883d5140d6dc880f93c5d8a39a64fb9d84266f00d922d271a5827e0c90a8ba62f73dc870ef54e28607eb6f89234852925f14158485b37fd103394c9d672a71eb873bf58c5e912a03dc9484db253fb32d687b38631", @nested={0x4, 0x61}]}, @generic="60c8b7e2aa6bb961da4443d9c72de1aaf14606910a70e4b7916e85017bf6ac58a2cecb38ea5e8861a4bce838797053dd9f8b918a086573d4a2dce052279bb514df5a131d216a17199568a9ab6d47ab76edaacd5e177db9b2a8ea541f47ce2a025012f02e3570198911bb2b1bccccec802f4b3928073a777edb89d8b14bbd504c74a6783529bb5321ba31bf4fef714998b679cb19b21ab97d7fb3eba5ce3898993adb6549daee6098064234cb637b61a439a88f2fe8a27bf92cc626093ed8721ab721ae"]}, 0x57c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000002a80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b00), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000002c40)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0x90, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x321}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}]}, 0x90}}, 0x40880) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448f8, &(0x7f0000002c80)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002cc0)) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c5}, 0x4008040) syz_open_dev$loop(&(0x7f0000002e00), 0x5a, 0x2000) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f00000040c0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000004080)={&(0x7f0000002e80)={0x11d8, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_TESTDATA={0x9e, 0x45, "a5cb8be95ebdc0e55c31a6dfb1132339ff8dbf304367dbcc1fc56e1fe356550e9a0ce1bbfbae66ab34f5dbb59adb4ae2319a75451e3cd56aac5b16d03280ccebaa57acb606bab3b055ecfe77aa900ae92a78de26152c5ede77cbf78871a6574ce37903f770cb9d8fc1034392d0b7512c24dca4ca37ec733aa64edfd8463fb1750c2ad5231b9b8bddc84c15a445b1597fbece8ef19dc262f6cdb3"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xd6, 0x45, "c0583e11b748802fb669e1186c1c0dc33f20608e7cb039dbfe911f4a76f6629828179c7762e122838c85a5a63ac66aeeb1e7a21c7ded8c50941438de9625c0cf73335913df76188b35561fda7849d8926446a5d53c24353990b2a8bc4de0102c81126bdcef7ccd3ba168e1618ff95c77ac4298200dab9708525f100bb7cd716091f840ff34da9f0ca5f2e9d17db417a4c93e09eec75f33f49fac3a83a7b4ae6c137500854082c40eef0c15eecbf285740e73f2fe3c1035073d28111e5a7c05683501e352c4d10719f8923fd9545bc67582c6"}, @NL80211_ATTR_TESTDATA={0x33, 0x45, "5f6b65c3d9bc80fd0b3259dfbf67932a11fe67dc66022e42b03949aaae0a1091e40aa5577713671943cf985588f5cc"}, @NL80211_ATTR_TESTDATA={0x7, 0x45, "653dfe"}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004140), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000004180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000041c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004280)={'ip6_vti0\x00', &(0x7f0000004200)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5d, 0x80000001, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7800, 0x10, 0x6, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004380)={'gretap0\x00', &(0x7f00000042c0)={'gre0\x00', 0x0, 0x20, 0x7800, 0x5, 0x4, {{0x25, 0x4, 0x2, 0x38, 0x94, 0x67, 0x0, 0x8, 0x0, 0x0, @multicast1, @loopback, {[@noop, @rr={0x7, 0x27, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @rand_addr=0x64010100, @remote, @multicast1, @local, @rand_addr=0x64010101, @private=0xa010100]}, @lsrr={0x83, 0x23, 0x22, [@private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @remote, @multicast1, @empty]}, @ssrr={0x89, 0xb, 0x10, [@dev={0xac, 0x14, 0x14, 0x25}, @multicast2]}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x8e, [@local, @broadcast, @rand_addr=0x64010100, @remote, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x31}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000056c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005680)={&(0x7f00000043c0)={0x1290, r5, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x99, 0x3, "11fbae88cfaad2a2a18de963e555beb17a2970f39b801d64cf77e27cdfbc07e751b43e579b0a06a716c39536f5cd687459d3ed737d2ecd2559ac25ba3a477651637738ad1bba6318e01096f346aa0509bc2ba437087ce6b9e36363d7e0d2c91a906d0c708a3c5ef790e41645d94b6e212d6e248882c06e5b1ac11aad4c5e757fdc91f80af16bbd854c833f89e5c568cceb05caa576"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_WOL_MODES={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "805f5a0cfcd0c70aff4658d4ff80f8ab15a356f5026e017721c7b4f65ef41779841f634adbe26cc5cfa108a93421be03415b12fc122bbbb4ccd2ca155c2a89b27afeb304b8c621f46dea5c51ba06db9008fc448da1f959acd8021047fd379e7ffb8651710e8769156c50bbfbfe85f45444d987f1d89f07dc0b2ca7d5ab2f0f60e36732539d2ec8ccc8a4c626f2ec49bc5bd4c362c0079d3afae510cfea43d8a92686"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x516}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfe}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}]}, @ETHTOOL_A_WOL_SOPASS={0x74, 0x3, "317d57d45c099a7a9aadc1646da13cd8b311d727c93cbce8198fe6fcad40b889f1d8132c57f92fd6f47847dbfb5c817676c964883bdcc6a37e9790be64bfe21ed5bd0c6a593cf71ae3963f50075fc8e3a1ad330bd7752b228a6fed6edd7cba4add34920c372c72f1db48b1337b464e3c"}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1290}}, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000005800)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005740)={0x48, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000005880)={0x1, &(0x7f0000005840)=[{0x5, 0x1, 0x0, 0x7}]}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000005980)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000059c0), 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r10, &(0x7f0000005ac0)={&(0x7f0000005a00)={0x10, 0x0, 0x0, 0x1848039}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a40)={0x2c, 0xa, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xcd}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) io_setup(0x80000000, &(0x7f0000005b00)) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000005b80), r9) sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f0000005c80)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005c40)={&(0x7f0000005bc0)={0x64, r11, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/loop#\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '{(\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}]}, 0x64}, 0x1, 0x0, 0x0, 0x200408d1}, 0x200080c) read$FUSE(r10, &(0x7f0000005cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregset(0x4204, r12, 0x203, &(0x7f0000007e00)={&(0x7f0000007d00)=""/228, 0xe4}) 35.066352174s ago: executing program 2 (id=1094): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (rerun: 32) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 35.065324434s ago: executing program 1 (id=1096): r0 = socket$inet6(0x2d, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x24, 0xb0, 0x9e, 0x20, 0x54d5, 0x953f, 0x8282, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd, 0x7, 0x2, 0x8, 0x2, 0x0, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xfefb, 0x0, &(0x7f0000000340)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x3d}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0xa, 0x0, 0x20}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x0, 0x3d}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}}, @acquire], 0x0, 0x0, 0x0}) splice(r0, &(0x7f0000000000)=0x8000000005, r1, &(0x7f0000000040)=0x2, 0x1c000, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2}, {r1, 0x4}, {0xffffffffffffffff, 0x2}, {r0, 0x71026cb5d261214d}], 0x4, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3]}, 0x8) 34.993546746s ago: executing program 0 (id=1097): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) (async) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x5, 0x7f, 0x6e8d, 0x5, 0x1, 0x3, "90fee19856"}}, 0x11d) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000002080)={0xe, {0x8, 0x51}}, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 34.853706148s ago: executing program 0 (id=1098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) linkat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x400) (async) close_range(r0, 0xffffffffffffffff, 0x0) 34.283811699s ago: executing program 0 (id=1099): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000000140)={0x14}, 0x14) flock(r2, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 34.282942499s ago: executing program 0 (id=1100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0x40000) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r3, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 33.993558945s ago: executing program 2 (id=1101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000140001000000000000000000ac1414aa000000000000000000000000ff020000000000000000000000000001000300"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080029f8"], 0x68}}, 0x20006804) close(r0) 31.701448359s ago: executing program 3 (id=1102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = dup(r3) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4048014}, 0x810) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth0_to_batadv\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}}) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0xf, 0x0) 30.652757279s ago: executing program 0 (id=1103): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_setup(0x8, &(0x7f0000000000)) eventfd2(0x0, 0x80001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a000000021000100000000ff00000000fc02ac000000000000000000000000006401010a000000000000000000000000fffe00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b16b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa3c0400000200000002000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0xfdef) syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') 30.11176596s ago: executing program 1 (id=1104): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000bf000/0x2000)=nil) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r3, 0xffffb000) 29.430334043s ago: executing program 2 (id=1105): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x521482, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getgroups(0x2, &(0x7f0000000140)=[0xee00, 0xee00]) chown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, r8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) prctl$PR_CAPBSET_DROP(0x18, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x2, 0x2, 0x1) readv(r11, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/125, 0x7d}], 0x1) connect$inet(r11, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r11, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x7010, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) 26.141132196s ago: executing program 3 (id=1106): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0xff}, {0x0, 0x4, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0x5, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0x4, 0xc, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x10, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x3fc}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/222) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 24.733725733s ago: executing program 1 (id=1107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20000000000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x1, 0x0, 0x5, 0xe, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x3, 0xea, 0x8, 0xfffffffffffff9], 0x8000000, 0x2c4d40}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r4, 0x5423, &(0x7f0000007000)) (async) ioctl$TIOCMGET(r4, 0x5423, &(0x7f0000007000)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000240)=0x6, 0x4) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000000)) (async) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) preadv2(r2, &(0x7f0000000500)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000200)=""/5, 0x5}], 0x5, 0x83b, 0x100, 0x19) syz_usb_connect(0x0, 0x82, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010002db7d8710c71b2300a4b2010203010902700002010700000904dc0300f04f43a8052406000105240000800d240f01090000000200ff0f0506241a00040605240103041524120100a317a88b7e392a09044c0d00ffffff0505240600000524"], 0x0) (async) syz_usb_connect(0x0, 0x82, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010002db7d8710c71b2300a4b2010203010902700002010700000904dc0300f04f43a8052406000105240000800d240f01090000000200ff0f0506241a00040605240103041524120100a317a88b7e392a09044c0d00ffffff0505240600000524"], 0x0) getsockname$tipc(r7, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) (async) getsockname$tipc(r7, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) 24.603049075s ago: executing program 2 (id=1108): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioprio_set$uid(0x3, r1, 0x4007) sendfile(r0, r0, 0x0, 0x7ffff000) 22.139887203s ago: executing program 0 (id=1109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) write(r3, &(0x7f00000001c0)="ca17d306a8a2906f", 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bdc0b6dd1221729d530092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) sendmmsg$inet6(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x50}}], 0x2, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/221, 0xdd, 0x1, 0x15}, @fda={0x66646185, 0x8, 0x2, 0x26}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x7b, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764"}) 20.321069878s ago: executing program 3 (id=1110): prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000140)) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r7, 0x5}, 0xc) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0}) 17.888378445s ago: executing program 2 (id=1111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1800, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0xffffffff, 0x210000, 0xffffffff, 0x3}, 0x1c) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x18, 0x106, &(0x7f0000000240)="d704ec"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40046721, &(0x7f00000000c0)) connect$inet(r6, 0x0, 0x0) close_range(r0, r5, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f00000000c0)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0x0, 0x4, 0x0, 0x5, 0x1, 0xfe, 0xf5, 0xea, 0x7, 0x2, 0xc, 0x0, 0x470d267c, 0x5, 0x5, 0x7, 0x5, 0x4, '\x00', 0x8, 0x401}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r7, 0xf0bf}], 0x1, 0x0, 0x0, 0x0) 8.368379478s ago: executing program 32 (id=1107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20000000000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x1, 0x0, 0x5, 0xe, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x3, 0xea, 0x8, 0xfffffffffffff9], 0x8000000, 0x2c4d40}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r4, 0x5423, &(0x7f0000007000)) (async) ioctl$TIOCMGET(r4, 0x5423, &(0x7f0000007000)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000240)=0x6, 0x4) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000000)) (async) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) preadv2(r2, &(0x7f0000000500)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000200)=""/5, 0x5}], 0x5, 0x83b, 0x100, 0x19) syz_usb_connect(0x0, 0x82, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010002db7d8710c71b2300a4b2010203010902700002010700000904dc0300f04f43a8052406000105240000800d240f01090000000200ff0f0506241a00040605240103041524120100a317a88b7e392a09044c0d00ffffff0505240600000524"], 0x0) (async) syz_usb_connect(0x0, 0x82, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010002db7d8710c71b2300a4b2010203010902700002010700000904dc0300f04f43a8052406000105240000800d240f01090000000200ff0f0506241a00040605240103041524120100a317a88b7e392a09044c0d00ffffff0505240600000524"], 0x0) getsockname$tipc(r7, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) (async) getsockname$tipc(r7, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) 1.388344403s ago: executing program 33 (id=1109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) write(r3, &(0x7f00000001c0)="ca17d306a8a2906f", 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bdc0b6dd1221729d530092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) sendmmsg$inet6(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x50}}], 0x2, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/221, 0xdd, 0x1, 0x15}, @fda={0x66646185, 0x8, 0x2, 0x26}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x7b, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764"}) 252.355465ms ago: executing program 34 (id=1111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1800, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0xffffffff, 0x210000, 0xffffffff, 0x3}, 0x1c) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x18, 0x106, &(0x7f0000000240)="d704ec"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40046721, &(0x7f00000000c0)) connect$inet(r6, 0x0, 0x0) close_range(r0, r5, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f00000000c0)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0x0, 0x4, 0x0, 0x5, 0x1, 0xfe, 0xf5, 0xea, 0x7, 0x2, 0xc, 0x0, 0x470d267c, 0x5, 0x5, 0x7, 0x5, 0x4, '\x00', 0x8, 0x401}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r7, 0xf0bf}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 35 (id=1110): prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000140)) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r7, 0x5}, 0xc) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ T1602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.930661][ T1630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.450'. [ 56.957016][ T645] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 56.970750][ T645] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 56.980970][ T645] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 56.992703][ T645] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 57.733931][ T1663] netlink: 80 bytes leftover after parsing attributes in process `syz.0.460'. [ 57.832095][ T645] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.972197][ T645] usb 2-1: device descriptor read/64, error -71 [ 58.222386][ T645] usb 2-1: device descriptor read/64, error -71 [ 58.261429][ T1686] netlink: 188 bytes leftover after parsing attributes in process `syz.0.468'. [ 58.462309][ T645] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.504461][ T1679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 58.571351][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 58.588309][ T36] audit: type=1400 audit(1758610969.163:7606): avc: denied { create } for pid=1677 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 58.622640][ T645] usb 2-1: device descriptor read/64, error -71 [ 58.739775][ T1701] No source specified [ 58.882303][ T645] usb 2-1: device descriptor read/64, error -71 [ 58.992234][ T645] usb usb2-port1: attempt power cycle [ 59.270652][ T1704] usb 3-1: USB disconnect, device number 9 [ 59.332124][ T645] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.353236][ T645] usb 2-1: device descriptor read/8, error -71 [ 59.354554][ T36] audit: type=1400 audit(1758610969.953:7607): avc: denied { setattr } for pid=1716 comm="syz.2.479" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.465104][ T1727] x_tables: duplicate underflow at hook 1 [ 59.502079][ T645] usb 2-1: device descriptor read/8, error -71 [ 59.752101][ T700] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 59.762113][ T645] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 59.783196][ T645] usb 2-1: device descriptor read/8, error -71 [ 59.902184][ T700] usb 3-1: Using ep0 maxpacket: 8 [ 59.908642][ T700] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 59.916923][ T700] usb 3-1: config 0 has no interface number 0 [ 59.925110][ T700] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 59.925564][ T645] usb 2-1: device descriptor read/8, error -71 [ 59.937329][ T700] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 59.937369][ T700] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 59.937397][ T700] usb 3-1: config 0 interface 200 has no altsetting 0 [ 59.939357][ T700] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 59.983713][ T700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.991744][ T700] usb 3-1: Product: syz [ 59.996031][ T700] usb 3-1: Manufacturer: syz [ 60.000672][ T700] usb 3-1: SerialNumber: syz [ 60.008766][ T700] usb 3-1: config 0 descriptor?? [ 60.014441][ T1729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.052309][ T645] usb usb2-port1: unable to enumerate USB device [ 60.137590][ T36] audit: type=1400 audit(1758610970.733:7608): avc: denied { mount } for pid=1757 comm="syz.3.496" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 60.160282][ T36] audit: type=1400 audit(1758610970.753:7609): avc: denied { watch watch_reads } for pid=1757 comm="syz.3.496" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 60.225783][ T700] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input7 [ 60.241442][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 60.242772][ T36] audit: type=1400 audit(1758610970.833:7610): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=486 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.248929][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 60.279282][ T700] usb 3-1: USB disconnect, device number 10 [ 60.280888][ C1] usb 3-1: hanwang_irq - usb_submit_urb failed with result -19 [ 60.294082][ T1762] syz.3.498 uses obsolete (PF_INET,SOCK_PACKET) [ 60.333942][ T1764] netlink: 80 bytes leftover after parsing attributes in process `syz.3.499'. [ 60.413477][ T1769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 60.729068][ T1784] netlink: 44 bytes leftover after parsing attributes in process `syz.3.506'. [ 60.738571][ T1784] netlink: 59 bytes leftover after parsing attributes in process `syz.3.506'. [ 60.747754][ T1784] netlink: 59 bytes leftover after parsing attributes in process `syz.3.506'. [ 60.835133][ T1790] netlink: 80 bytes leftover after parsing attributes in process `syz.2.509'. [ 60.844876][ T1792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 60.860308][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1792 comm=syz.3.510 [ 60.862124][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 60.883957][ T1792] overlayfs: failed to clone upperpath [ 60.988931][ T1798] rust_binder: Fixups oob 165 172 361 173 [ 60.988959][ T1798] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 60.995016][ T1798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.003482][ T1798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 61.012974][ T9] usb 2-1: device descriptor read/64, error -71 [ 61.262112][ T9] usb 2-1: device descriptor read/64, error -71 [ 61.512182][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 61.629128][ T1824] FAT-fs (rnullb0): bogus number of reserved sectors [ 61.636233][ T1824] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 61.643889][ T9] usb 2-1: device descriptor read/64, error -71 [ 61.684867][ T1827] kvm: kvm [1826]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 61.694664][ T1827] kvm: kvm [1826]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 61.882277][ T9] usb 2-1: device descriptor read/64, error -71 [ 61.952139][ T539] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 61.992267][ T9] usb usb2-port1: attempt power cycle [ 62.013754][ T1838] 9pnet_fd: Insufficient options for proto=fd [ 62.103366][ T539] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 62.113657][ T539] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 62.123807][ T539] usb 3-1: config 1 interface 0 has no altsetting 0 [ 62.132233][ T539] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 62.141502][ T539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.149784][ T539] usb 3-1: Product: syz [ 62.154111][ T539] usb 3-1: Manufacturer: syz [ 62.158739][ T539] usb 3-1: SerialNumber: syz [ 62.164838][ T1827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.172406][ T1827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.332123][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 62.353248][ T9] usb 2-1: device descriptor read/8, error -71 [ 62.483326][ T9] usb 2-1: device descriptor read/8, error -71 [ 62.651778][ T36] audit: type=1326 audit(1758610973.243:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1850 comm="syz.3.531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f379578eec9 code=0x0 [ 62.732119][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 62.753939][ T9] usb 2-1: device descriptor read/8, error -71 [ 62.892470][ T9] usb 2-1: device descriptor read/8, error -71 [ 62.952429][ T1884] overlay: Unknown parameter '/' [ 62.992345][ T1886] __nla_validate_parse: 2 callbacks suppressed [ 62.992366][ T1886] netlink: 80 bytes leftover after parsing attributes in process `syz.3.542'. [ 63.002269][ T9] usb usb2-port1: unable to enumerate USB device [ 63.216529][ T539] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:e7:67:8d:62:8c [ 63.232328][ T539] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 63.241282][ T539] usb 3-1: USB disconnect, device number 11 [ 63.261938][ T36] audit: type=1400 audit(1758610973.853:7612): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 63.599183][ T1964] /dev/loop3: Can't lookup blockdev [ 63.606628][ T36] audit: type=1400 audit(1758610974.203:7613): avc: denied { create } for pid=1963 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.632211][ T36] audit: type=1400 audit(1758610974.203:7614): avc: denied { sys_admin } for pid=1963 comm="syz.3.550" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 63.653894][ T36] audit: type=1400 audit(1758610974.223:7615): avc: denied { associate } for pid=1965 comm="syz.3.550" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 63.826983][ T1967] netlink: 80 bytes leftover after parsing attributes in process `syz.2.551'. [ 63.924262][ T1969] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.957378][ T36] audit: type=1400 audit(1758610974.553:7616): avc: denied { load_policy } for pid=1973 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.957422][ T1974] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 63.987234][ T1974] SELinux: failed to load policy [ 64.155626][ T1983] rust_binder: inc_ref_done called when no active inc_refs [ 64.184738][ T1985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=1985 comm=syz.2.558 [ 64.195356][ T36] audit: type=1400 audit(1758610974.793:7617): avc: denied { mount } for pid=1986 comm="syz.3.559" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.257478][ T1995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=1995 comm=syz.2.558 [ 64.265088][ T1994] netlink: 80 bytes leftover after parsing attributes in process `syz.3.561'. [ 64.465996][ T2008] rust_binder: Error in use_page_slow: ESRCH [ 64.466028][ T2008] rust_binder: use_range failure ESRCH [ 64.473205][ T2008] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 64.480452][ T2008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 64.490446][ T2008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 64.521638][ T36] audit: type=1400 audit(1758610975.113:7618): avc: denied { map } for pid=2013 comm="syz.1.566" path="socket:[11283]" dev="sockfs" ino=11283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.565096][ T2016] SELinux: security policydb version 18 (MLS) not backwards compatible [ 64.573759][ T2016] SELinux: failed to load policy [ 64.590838][ T2018] __vm_enough_memory: pid: 2018, comm: syz.1.568, bytes: 18014402804453376 not enough memory for the allocation [ 64.705887][ T2026] netlink: 80 bytes leftover after parsing attributes in process `syz.1.570'. [ 64.792205][ T539] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 64.895466][ T2032] rust_binder: Write failure EFAULT in pid:215 [ 64.908293][ T2034] rust_binder: 218: no such ref 3 [ 64.919728][ T2034] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 64.928209][ T2035] rust_binder: 218: no such ref 3 [ 64.933413][ T539] usb 3-1: device descriptor read/64, error -71 [ 64.939960][ T2035] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 64.947990][ T2034] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 64.955398][ T2034] rust_binder: Write failure EFAULT in pid:218 [ 64.955419][ T2035] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 64.969105][ T2035] rust_binder: Write failure EFAULT in pid:218 [ 65.010860][ T36] audit: type=1400 audit(1758610975.603:7619): avc: denied { map } for pid=2043 comm="syz.0.577" path="socket:[11333]" dev="sockfs" ino=11333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 65.041760][ T36] audit: type=1400 audit(1758610975.613:7620): avc: denied { listen } for pid=2044 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.069937][ T2052] overlay: Unknown parameter '/' [ 65.098965][ T2054] netlink: 80 bytes leftover after parsing attributes in process `syz.3.579'. [ 65.160169][ T36] audit: type=1400 audit(1758610975.753:7621): avc: denied { write } for pid=2059 comm="syz.1.583" name="unix" dev="proc" ino=4026532533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.160665][ T2060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:232 [ 65.183065][ T2060] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.192366][ T2060] rust_binder: Read failure Err(EFAULT) in pid:232 [ 65.202146][ T539] usb 3-1: device descriptor read/64, error -71 [ 65.229450][ T36] audit: type=1400 audit(1758610975.823:7622): avc: denied { append } for pid=2061 comm="syz.1.584" name="pfkey" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.462163][ T539] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 65.527654][ T2069] veth1: entered allmulticast mode [ 65.592224][ T539] usb 3-1: device descriptor read/64, error -71 [ 65.684548][ T2078] netlink: 80 bytes leftover after parsing attributes in process `syz.3.591'. [ 65.708566][ T2080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 65.717995][ T2080] bridge_slave_1: left allmulticast mode [ 65.724016][ T2080] bridge_slave_1: left promiscuous mode [ 65.729895][ T2080] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.738406][ T2080] bridge_slave_0: left allmulticast mode [ 65.744326][ T2080] bridge_slave_0: left promiscuous mode [ 65.750212][ T2080] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.862174][ T539] usb 3-1: device descriptor read/64, error -71 [ 65.888952][ T2084] fuse: Bad value for 'group_id' [ 65.894071][ T2084] fuse: Bad value for 'group_id' [ 65.972211][ T539] usb usb3-port1: attempt power cycle [ 66.312169][ T539] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 66.333328][ T539] usb 3-1: device descriptor read/8, error -71 [ 66.360779][ T2068] veth1: left allmulticast mode [ 66.430408][ T2101] exFAT-fs (rnullb0): invalid boot record signature [ 66.437673][ T2101] exFAT-fs (rnullb0): failed to read boot sector [ 66.445321][ T2101] exFAT-fs (rnullb0): failed to recognize exfat type [ 66.463703][ T539] usb 3-1: device descriptor read/8, error -71 [ 66.502885][ T2103] netlink: 80 bytes leftover after parsing attributes in process `syz.1.600'. [ 66.617659][ T2121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.641217][ T2124] mmap: syz.1.606 (2124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.722260][ T539] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 66.743329][ T539] usb 3-1: device descriptor read/8, error -71 [ 66.829608][ T2131] can0: slcan on ptm0. [ 66.844285][ T2131] Unsupported ieee802154 address type: 0 [ 66.850906][ T2131] netlink: 44 bytes leftover after parsing attributes in process `syz.1.609'. [ 66.876545][ T539] usb 3-1: device descriptor read/8, error -71 [ 66.992242][ T539] usb usb3-port1: unable to enumerate USB device [ 67.133697][ T2134] can0 (unregistered): slcan off ptm0. [ 67.248802][ T2177] netlink: 80 bytes leftover after parsing attributes in process `syz.0.613'. [ 67.510065][ T2197] netlink: 'syz.1.617': attribute type 27 has an invalid length. [ 67.690861][ T2209] netlink: 'syz.2.621': attribute type 16 has an invalid length. [ 67.700619][ T2209] netlink: 'syz.2.621': attribute type 25 has an invalid length. [ 67.709634][ T2209] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 67.709669][ T2209] rust_binder: Error while translating object. [ 67.721115][ T2209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.728252][ T2209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 67.808484][ T2217] netlink: 'syz.0.624': attribute type 5 has an invalid length. [ 67.892182][ T539] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 68.053920][ T539] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.072911][ T539] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.093403][ T539] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.112090][ T539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.120320][ T539] usb 2-1: SerialNumber: syz [ 68.334459][ T539] usb 2-1: 0:2 : does not exist [ 68.345946][ T539] usb 2-1: USB disconnect, device number 25 [ 68.421519][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.612126][ T36] kauditd_printk_skb: 4495 callbacks suppressed [ 68.612145][ T36] audit: type=1326 audit(1758610979.213:12118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.655232][ T36] audit: type=1326 audit(1758610979.243:12119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.678532][ T36] audit: type=1326 audit(1758610979.243:12120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.702595][ T36] audit: type=1326 audit(1758610979.243:12121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.726333][ T36] audit: type=1326 audit(1758610979.243:12122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.751691][ T36] audit: type=1326 audit(1758610979.243:12123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.775209][ T36] audit: type=1326 audit(1758610979.243:12124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.799387][ T36] audit: type=1326 audit(1758610979.243:12125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.823040][ T36] audit: type=1326 audit(1758610979.243:12126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.852512][ T36] audit: type=1326 audit(1758610979.243:12127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2236 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x50000 [ 68.999052][ T2248] __nla_validate_parse: 3 callbacks suppressed [ 68.999070][ T2248] netlink: 80 bytes leftover after parsing attributes in process `syz.2.634'. [ 69.116114][ T2263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 69.516138][ T2291] netlink: 80 bytes leftover after parsing attributes in process `syz.2.649'. [ 69.562088][ T645] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 69.714463][ T645] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 69.724036][ T645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.737654][ T645] usb 2-1: Product: syz [ 69.741880][ T645] usb 2-1: Manufacturer: syz [ 69.753140][ T645] usb 2-1: SerialNumber: syz [ 69.942172][ T1704] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 69.973241][ T645] usb 2-1: USB disconnect, device number 26 [ 70.118199][ T1704] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 70.132459][ T1704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.142175][ T1704] usb 3-1: Product: syz [ 70.146463][ T1704] usb 3-1: Manufacturer: syz [ 70.156278][ T1704] usb 3-1: SerialNumber: syz [ 70.169279][ T1704] r8152-cfgselector 3-1: Unknown version 0x0000 [ 70.180606][ T1704] r8152-cfgselector 3-1: config 0 descriptor?? [ 70.303581][ T2302] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 70.594855][ T2295] bridge0: port 3(veth0_macvtap) entered blocking state [ 70.604118][ T2295] bridge0: port 3(veth0_macvtap) entered disabled state [ 70.611474][ T2295] veth0_macvtap: entered allmulticast mode [ 70.622670][ T2295] veth0_macvtap: entered promiscuous mode [ 70.629251][ T2295] bridge0: port 3(veth0_macvtap) entered blocking state [ 70.636476][ T2295] bridge0: port 3(veth0_macvtap) entered forwarding state [ 70.667832][ T1704] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 70.785051][ T2314] tmpfs: Unknown parameter 'usrquota' [ 70.822965][ T2316] tmpfs: Unknown parameter 'usrquota' [ 70.972575][ T2323] netlink: 80 bytes leftover after parsing attributes in process `syz.3.658'. [ 71.078561][ T2339] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.078584][ T2339] rust_binder: Read failure Err(EFAULT) in pid:308 [ 71.121359][ T2346] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.665'. [ 71.155706][ T2349] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.665'. [ 71.218429][ T2354] netlink: 80 bytes leftover after parsing attributes in process `syz.2.668'. [ 71.267657][ T2358] rust_binder: Read failure Err(EAGAIN) in pid:315 [ 71.283042][ T2361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.289925][ T2361] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 71.333812][ T2363] can0: slcan on ptm0. [ 71.348091][ T2363] netlink: 'syz.1.673': attribute type 27 has an invalid length. [ 71.386273][ T2363] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.393551][ T2363] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.536591][ T2363] can0 (unregistered): slcan off ptm0. [ 71.604213][ T2396] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 71.664184][ T2404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.678'. [ 71.923436][ T2410] netlink: 80 bytes leftover after parsing attributes in process `syz.0.680'. [ 71.968208][ T2426] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 71.968941][ T2426] @0Ù: renamed from bond_slave_1 [ 72.110499][ T2437] usb usb4: usbfs: interface 0 claimed by hub while 'syz.2.690' sets config #7 [ 72.297171][ T2444] netlink: 80 bytes leftover after parsing attributes in process `syz.0.692'. [ 72.544150][ T2463] overlayfs: failed to clone upperpath [ 72.552395][ T2463] overlay: ./bus is not a directory [ 72.619820][ T2480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 72.861127][ T2491] can0: slcan on ptm0. [ 73.216273][ T2528] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 73.216300][ T2528] rust_binder: Error while translating object. [ 73.228959][ T2528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.238108][ T2528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 73.250283][ T2531] overlayfs: failed to clone lowerpath [ 73.314299][ T2542] bridge0: port 4(veth0_to_bridge) entered blocking state [ 73.321487][ T2542] bridge0: port 4(veth0_to_bridge) entered disabled state [ 73.332989][ T2542] veth0_to_bridge: entered allmulticast mode [ 73.339703][ T2542] veth0_to_bridge: entered promiscuous mode [ 73.346035][ T2542] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.358896][ T2542] bridge0: port 4(veth0_to_bridge) entered blocking state [ 73.366119][ T2542] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 73.396624][ T2551] overlayfs: failed to clone upperpath [ 73.564389][ T2488] can0 (unregistered): slcan off ptm0. [ 73.584923][ T2570] binder: Unknown parameter 'fscontext?}' [ 73.594540][ T2570] binder: Unknown parameter 'fscontext?}' [ 73.628912][ T2578] netlink: 'syz.1.726': attribute type 15 has an invalid length. [ 73.638984][ T2578] tipc: Started in network mode [ 73.645905][ T2578] tipc: Node identity 6ef3aeb62404, cluster identity 4711 [ 73.653755][ T2578] tipc: Enabled bearer , priority 10 [ 73.722074][ T539] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 73.872116][ T539] usb 3-1: Using ep0 maxpacket: 16 [ 73.878929][ T539] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.890205][ T539] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 73.901166][ T539] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 73.920337][ T539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.929074][ T539] usb 3-1: Product: syz [ 73.933862][ T539] usb 3-1: Manufacturer: syz [ 73.938772][ T539] usb 3-1: SerialNumber: syz [ 73.944361][ T539] usb 3-1: config 0 descriptor?? [ 74.041198][ T36] kauditd_printk_skb: 16638 callbacks suppressed [ 74.041218][ T36] audit: type=1400 audit(1758610984.633:28766): avc: denied { nlmsg_write } for pid=2621 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.068503][ T36] audit: type=1400 audit(1758610984.643:28767): avc: denied { audit_write } for pid=2621 comm="syz.3.737" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.090343][ T36] audit: type=1107 audit(1758610984.643:28768): pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 74.408691][ T539] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 74.419573][ T539] asix 3-1:0.0: probe with driver asix failed with error -71 [ 74.429679][ T539] usb 3-1: USB disconnect, device number 17 [ 74.537798][ T36] audit: type=1400 audit(1758610985.133:28769): avc: denied { ioctl } for pid=2627 comm="syz.1.739" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.572719][ T2630] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.601986][ T2635] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 74.602072][ T36] audit: type=1400 audit(1758610985.193:28770): avc: denied { mounton } for pid=2634 comm="syz.1.742" path="/130/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.620083][ T2633] __nla_validate_parse: 4 callbacks suppressed [ 74.620110][ T2633] netlink: 80 bytes leftover after parsing attributes in process `syz.3.741'. [ 74.653575][ T1704] tipc: Node number set to 1257746102 [ 74.679045][ T36] audit: type=1400 audit(1758610985.263:28771): avc: denied { setattr } for pid=2634 comm="syz.1.742" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.720396][ T2647] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 74.732181][ T2647] overlayfs: missing 'lowerdir' [ 74.779273][ T2652] FAT-fs (rnullb0): bogus number of reserved sectors [ 74.792209][ T2652] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 74.838727][ T36] audit: type=1400 audit(1758610985.433:28772): avc: denied { watch } for pid=2657 comm="syz.1.750" path="/133/file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.864154][ T2658] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 74.875571][ T2658] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 74.886515][ T2658] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 74.894885][ T2658] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 74.931365][ T2664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.753'. [ 74.932185][ T2662] netlink: 80 bytes leftover after parsing attributes in process `syz.3.752'. [ 74.940867][ T2664] rust_binder: Error while translating object. [ 74.952621][ T2664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.959129][ T2664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 74.961314][ T2666] SELinux: policydb string length 1836477231 does not match expected length 8 [ 74.995504][ T2666] SELinux: failed to load policy [ 75.002285][ T2666] rust_binder: validate_parent_fixup: new_min_offset=61, sg_entry.length=0 [ 75.002312][ T2666] rust_binder: Error while translating object. [ 75.011271][ T2666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.019906][ T2666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 75.068665][ T67] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 75.106253][ T67] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.132212][ T2675] fido_id[2675]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.252649][ T2691] netlink: 80 bytes leftover after parsing attributes in process `syz.3.764'. [ 75.265197][ T2698] __vm_enough_memory: pid: 2698, comm: syz.2.767, bytes: 18014402804453376 not enough memory for the allocation [ 75.813997][ T36] audit: type=1400 audit(1758610986.413:28773): avc: denied { accept } for pid=2723 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.838097][ T36] audit: type=1400 audit(1758610986.433:28774): avc: denied { read } for pid=2723 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.885743][ T2726] netlink: 80 bytes leftover after parsing attributes in process `syz.2.776'. [ 75.928667][ T2731] rust_binder: Write failure EFAULT in pid:391 [ 76.044437][ T2754] netlink: 80 bytes leftover after parsing attributes in process `syz.3.786'. [ 76.145500][ T2762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.789'. [ 76.157295][ T2762] netlink: 43 bytes leftover after parsing attributes in process `syz.3.789'. [ 76.166897][ T2762] netlink: 'syz.3.789': attribute type 6 has an invalid length. [ 76.174913][ T2762] netlink: 'syz.3.789': attribute type 5 has an invalid length. [ 76.182901][ T2762] netlink: 43 bytes leftover after parsing attributes in process `syz.3.789'. [ 76.276401][ T36] audit: type=1400 audit(1758610986.873:28775): avc: denied { module_load } for pid=2778 comm="syz.1.794" path="/bus" dev="ramfs" ino=13990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 76.276762][ T2779] Invalid ELF header magic: != ELF [ 76.542083][ T67] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 76.563649][ T2786] rust_binder: 403: no such ref 0 [ 76.568764][ T2786] rust_binder: 403: no such ref 1 [ 76.574154][ T2786] rust_binder: 403: no such ref 3 [ 76.608956][ T2790] netlink: 'syz.2.799': attribute type 19 has an invalid length. [ 76.692426][ T1904] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.692522][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 76.705680][ T67] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 76.721110][ T67] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.731701][ T67] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.741056][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.749159][ T67] usb 2-1: Product: syz [ 76.753711][ T67] usb 2-1: Manufacturer: syz [ 76.758620][ T67] usb 2-1: SerialNumber: syz [ 76.933993][ T2815] netlink: 'syz.0.809': attribute type 11 has an invalid length. [ 76.967060][ T67] usb 2-1: 0:2 : does not exist [ 76.975024][ T67] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 76.990379][ T67] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 77.000806][ T67] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 77.011742][ T67] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 77.031115][ T67] usb 2-1: USB disconnect, device number 27 [ 77.489601][ T2865] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 77.797756][ T2889] veth1: entered allmulticast mode [ 78.386736][ T2895] rust_binder: Error while translating object. [ 78.386787][ T2895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 78.393287][ T2895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:407 [ 78.415582][ T2897] TCP: TCP_TX_DELAY enabled [ 78.630228][ T2888] veth1: left allmulticast mode [ 78.722155][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.722179][ T1198] Bluetooth: hci0: command 0x1003 tx timeout [ 78.735197][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.548475][ T2928] netlink: 80 bytes leftover after parsing attributes in process `syz.0.850'. [ 79.582125][ T645] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 79.691127][ T2795] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 79.732076][ T645] usb 2-1: Using ep0 maxpacket: 8 [ 79.738740][ T645] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.747420][ T645] usb 2-1: config 4 has an invalid interface number: 62 but max is 0 [ 79.755573][ T645] usb 2-1: config 4 has no interface number 0 [ 79.761824][ T645] usb 2-1: config 4 interface 62 has no altsetting 0 [ 79.770162][ T645] usb 2-1: New USB device found, idVendor=0499, idProduct=1013, bcdDevice=52.67 [ 79.779653][ T645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.788081][ T645] usb 2-1: Product: syz [ 79.792526][ T645] usb 2-1: Manufacturer: syz [ 79.797223][ T645] usb 2-1: SerialNumber: syz [ 79.805728][ T2932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=2932 comm=syz.2.852 [ 79.823171][ T2932] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 79.843740][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 79.843760][ T36] audit: type=1107 audit(1758610990.443:28784): pid=2936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 80.008375][ T2924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.017427][ T2924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.043103][ T645] snd-usb-audio 2-1:4.62: probe with driver snd-usb-audio failed with error -2 [ 80.054180][ T645] usb 2-1: USB disconnect, device number 28 [ 80.055981][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.62/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.124248][ T2947] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 80.442988][ T2960] netlink: 80 bytes leftover after parsing attributes in process `syz.0.859'. [ 80.597905][ T2974] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 80.643489][ T36] audit: type=1326 audit(1758610991.243:28785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.650418][ T2978] netlink: 80 bytes leftover after parsing attributes in process `syz.1.868'. [ 80.692067][ T36] audit: type=1326 audit(1758610991.243:28786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.722536][ T36] audit: type=1326 audit(1758610991.263:28787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.748629][ T36] audit: type=1326 audit(1758610991.263:28788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.772921][ T36] audit: type=1326 audit(1758610991.273:28789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.796899][ T36] audit: type=1326 audit(1758610991.273:28790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.820427][ T36] audit: type=1326 audit(1758610991.273:28791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.845072][ T36] audit: type=1326 audit(1758610991.273:28792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.869382][ T36] audit: type=1326 audit(1758610991.273:28793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771558eec9 code=0x7ffc0000 [ 80.910438][ T2991] netlink: 'syz.1.873': attribute type 4 has an invalid length. [ 80.922238][ T2991] can0: slcan on ptm0. [ 81.053929][ T2991] can0 (unregistered): slcan off ptm0. [ 81.086627][ T3011] rust_binder: 3011 RLIMIT_NICE not set [ 81.086843][ T3011] rust_binder: Read failure Err(EFAULT) in pid:432 [ 81.118555][ T3016] binder: Unknown parameter 'se' [ 81.135821][ T3019] rust_binder: 434: no such ref 0 [ 81.148110][ T3019] rust_binder: 434: no such ref 0 [ 81.153537][ T3019] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 81.160745][ T3019] rust_binder: 434: no such ref 64 [ 81.166297][ T3019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:434 [ 81.191109][ T3030] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 81.220086][ T3033] netlink: 188 bytes leftover after parsing attributes in process `syz.2.881'. [ 81.240799][ T3034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 81.240799][ T3039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 81.240834][ T3034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:438 [ 81.262217][ T3039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:438 [ 81.298180][ T3045] rust_binder: inc_ref_done called when no active inc_refs [ 81.334241][ T3050] netlink: 80 bytes leftover after parsing attributes in process `syz.1.882'. [ 81.365371][ T3047] rust_binder: Write failure EFAULT in pid:444 [ 81.407193][ T3061] overlayfs: missing 'lowerdir' [ 81.456086][ T3071] netlink: 'syz.1.891': attribute type 13 has an invalid length. [ 81.568210][ T3091] netlink: 80 bytes leftover after parsing attributes in process `syz.3.899'. [ 81.722543][ T3086] rust_binder: Error while translating object. [ 81.722599][ T3086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 81.742803][ T3086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:454 [ 81.868145][ T3118] netlink: 80 bytes leftover after parsing attributes in process `syz.1.908'. [ 82.182095][ T645] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 82.333791][ T645] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.344247][ T645] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.354247][ T645] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.363753][ T645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.371804][ T645] usb 2-1: SerialNumber: syz [ 82.580347][ T645] usb 2-1: 0:2 : does not exist [ 82.587621][ T645] usb 2-1: USB disconnect, device number 29 [ 82.597272][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.812833][ T3132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 82.812859][ T3132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:457 [ 82.888211][ T3135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 82.908633][ T3135] rust_binder: 3134 RLIMIT_NICE not set [ 82.908961][ T3134] rust_binder: Error while translating object. [ 82.914689][ T3134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 82.921003][ T3134] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 82.930455][ T3134] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:459 [ 83.011696][ T3139] netlink: 80 bytes leftover after parsing attributes in process `syz.2.917'. [ 83.129343][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.129376][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.137110][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.144355][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.149946][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.156726][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.163841][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.169981][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.177453][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.190626][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.190658][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.204803][ T3152] rust_binder: Error while translating object. [ 83.204831][ T3152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.211252][ T3152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 83.220857][ T3147] rust_binder: Error in use_page_slow: ESRCH [ 83.220881][ T3147] rust_binder: use_range failure ESRCH [ 83.243330][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.243366][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.250177][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.251712][ T3147] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 83.272305][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.272339][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.273269][ T3147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 83.285531][ T3147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:471 [ 83.295542][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.307109][ T3159] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 83.312001][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.313808][ T3159] rust_binder: Error while translating object. [ 83.335619][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.335652][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.338142][ T3159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.342562][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.350333][ T3159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 83.365795][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.374966][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.392084][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.392116][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.401971][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.407773][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.414583][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.420893][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.429878][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.434327][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.441244][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.448399][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.454963][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.462308][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.470189][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.475369][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.482111][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.489874][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.495042][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.501712][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.509681][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.514959][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.521812][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.528243][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.535064][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.541554][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.561730][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.561810][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.569229][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.576885][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.584185][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.591453][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.598399][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.607674][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.615802][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.622485][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.629067][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.636158][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.642767][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.649272][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.655774][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.662307][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.668754][ T3148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.728729][ T3168] netlink: 80 bytes leftover after parsing attributes in process `syz.1.926'. [ 83.794614][ T3176] netlink: 'syz.0.930': attribute type 16 has an invalid length. [ 83.802484][ T3176] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.930'. [ 83.956282][ T3185] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 83.956465][ T3185] rust_binder: Read failure Err(EAGAIN) in pid:483 [ 84.069959][ T3187] binder: Unknown parameter 'defcontext01777777777777777777777' [ 84.100026][ T3190] input: syz1 as /devices/virtual/input/input9 [ 84.108584][ T3190] rust_binder: Error while translating object. [ 84.108635][ T3190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 84.115041][ T3190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:490 [ 84.184366][ T3192] rust_binder: Write failure EFAULT in pid:492 [ 84.252406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.271031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.283823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.296371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.308943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.321317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.333779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.346110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.358483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.597955][ T3214] fuse: Bad value for 'rootmode' [ 84.610724][ T3215] fuse: Bad value for 'rootmode' [ 85.052763][ T3222] rust_binder: Write failure EFAULT in pid:504 [ 85.132147][ C0] net_ratelimit: 6020 callbacks suppressed [ 85.132176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.157163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.169539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.181846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.194246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.206487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.218703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.231102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.243410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.255623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.342329][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 85.342348][ T36] audit: type=1400 audit(1758610995.933:28815): avc: denied { accept } for pid=3223 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.664058][ T3237] Unsupported ieee802154 address type: 0 [ 85.720982][ T1959] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.174433][ T3247] __nla_validate_parse: 1 callbacks suppressed [ 86.174457][ T3247] netlink: 80 bytes leftover after parsing attributes in process `syz.2.953'. [ 86.330376][ T36] audit: type=1400 audit(1758610996.923:28816): avc: denied { create } for pid=3248 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.397469][ T3253] 9pnet_fd: Insufficient options for proto=fd [ 86.477629][ T3259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 86.504198][ T3262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 86.583080][ T36] audit: type=1400 audit(1758610997.183:28817): avc: denied { getopt } for pid=3257 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.784931][ T3272] netlink: 80 bytes leftover after parsing attributes in process `syz.0.962'. [ 86.843297][ T3274] tmpfs: Unknown parameter '18446744073709551615' [ 86.852088][ T645] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 87.023281][ T645] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 87.032602][ T645] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 87.051433][ T645] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 87.073774][ T645] usb 3-1: config 220 has no interface number 2 [ 87.087693][ T645] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 87.115997][ T645] usb 3-1: config 220 interface 0 has no altsetting 0 [ 87.139235][ T645] usb 3-1: config 220 interface 76 has no altsetting 0 [ 87.154086][ T3278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'. [ 87.163565][ T645] usb 3-1: config 220 interface 1 has no altsetting 0 [ 87.182892][ T645] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 87.197320][ T645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.217213][ T645] usb 3-1: Product: syz [ 87.224805][ T645] usb 3-1: Manufacturer: syz [ 87.232846][ T645] usb 3-1: SerialNumber: syz [ 87.450210][ T3259] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 87.460579][ T3259] rust_binder: 490: no such ref 64 [ 87.473839][ T3259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:490 [ 87.482502][ T645] usb 3-1: selecting invalid altsetting 0 [ 87.515737][ T645] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 87.529451][ T645] usb 3-1: No valid video chain found. [ 87.549423][ T645] usb 3-1: USB disconnect, device number 18 [ 87.766759][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.775966][ T1198] Bluetooth: hci0: command 0x1003 tx timeout [ 87.795773][ T1904] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.812068][ T1904] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.846610][ T3304] netlink: 80 bytes leftover after parsing attributes in process `syz.0.972'. [ 87.920574][ T36] audit: type=1400 audit(1758610998.513:28818): avc: denied { write } for pid=3307 comm="syz.0.974" name="file2" dev="tmpfs" ino=1716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.134068][ T3316] tipc: Enabling of bearer rejected, failed to enable media [ 88.152828][ T1958] Bluetooth: hci1: Frame reassembly failed (-84) [ 88.354911][ T3325] netlink: 80 bytes leftover after parsing attributes in process `syz.3.981'. [ 88.601639][ T3237] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 88.609766][ T3312] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 88.618073][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.724566][ T3344] netlink: 80 bytes leftover after parsing attributes in process `syz.1.990'. [ 88.802625][ T36] audit: type=1400 audit(1758610999.403:28819): avc: denied { append } for pid=3345 comm="syz.1.991" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.003398][ T36] audit: type=1400 audit(1758610999.603:28820): avc: denied { execute } for pid=3352 comm="syz.1.993" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.190617][ T3360] netlink: 'syz.0.996': attribute type 27 has an invalid length. [ 89.253784][ T3368] veth1: entered allmulticast mode [ 89.282517][ T552] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 89.432097][ T552] usb 2-1: Using ep0 maxpacket: 16 [ 89.439953][ T552] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 89.449523][ T552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 89.457876][ T552] usb 2-1: SerialNumber: syz [ 89.467593][ T552] usb 2-1: config 0 descriptor?? [ 89.475738][ T552] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 89.485654][ T552] usb 2-1: Detected FT232A [ 89.494433][ T552] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 89.679983][ T552] usb 2-1: USB disconnect, device number 30 [ 89.692466][ T552] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 89.710415][ T552] ftdi_sio 2-1:0.0: device disconnected [ 89.795231][ T3371] netlink: 80 bytes leftover after parsing attributes in process `syz.0.999'. [ 90.018952][ T3382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3382 comm=syz.0.1003 [ 90.086070][ T3367] veth1: left allmulticast mode [ 90.142147][ C0] net_ratelimit: 26977 callbacks suppressed [ 90.142165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.160605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.173168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.185406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.198198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.210570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.223486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.235804][ T1198] Bluetooth: hci1: command 0x1003 tx timeout [ 90.235855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.254869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.258277][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 90.267137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.332811][ T3403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496 [ 90.338390][ T3401] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1008'. [ 90.401269][ T36] audit: type=1400 audit(1758611000.993:28821): avc: denied { create } for pid=3406 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.861089][ T36] audit: type=1326 audit(1758611001.453:28822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.1016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f379578eec9 code=0x0 [ 91.684853][ T3462] overlayfs: failed to clone upperpath [ 91.720481][ T3466] netlink: 'syz.0.1032': attribute type 8 has an invalid length. [ 91.732427][ T645] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 91.750572][ T3462] __nla_validate_parse: 1 callbacks suppressed [ 91.750597][ T3462] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1030'. [ 91.865482][ T3468] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1033'. [ 91.960476][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 91.977069][ T645] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.995075][ T645] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 92.025944][ T645] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.035598][ T645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.056261][ T645] usb 3-1: Product: syz [ 92.069826][ T645] usb 3-1: Manufacturer: syz [ 92.076844][ T645] usb 3-1: SerialNumber: syz [ 92.296305][ T645] usb 3-1: 0:2 : does not exist [ 92.320132][ T645] usb 3-1: cannot find UAC_HEADER [ 92.345257][ T645] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 92.366081][ T645] usb 3-1: USB disconnect, device number 19 [ 93.044522][ T3503] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1045'. [ 93.150887][ T3517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1050'. [ 93.205976][ T3520] netlink: 'syz.2.1052': attribute type 2 has an invalid length. [ 93.256793][ T36] audit: type=1400 audit(1758611003.853:28823): avc: denied { mount } for pid=3518 comm="syz.0.1051" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.332801][ T36] audit: type=1400 audit(1758611003.933:28824): avc: denied { getopt } for pid=3526 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.542079][ T645] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 93.550188][ T3545] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1060'. [ 93.615287][ T3554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1064'. [ 93.627674][ T36] audit: type=1400 audit(1758611004.223:28825): avc: denied { accept } for pid=3553 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.703387][ T3557] rust_binder: Error while translating object. [ 93.703423][ T3557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.709968][ T3557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:542 [ 93.719568][ T645] usb 3-1: device descriptor read/64, error -71 [ 93.912858][ T3568] fuse: blksize only supported for fuseblk [ 93.918879][ T36] audit: type=1400 audit(1758611004.513:28826): avc: denied { mounton } for pid=3567 comm="syz.1.1069" path="/194/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 93.972623][ T645] usb 3-1: device descriptor read/64, error -71 [ 94.022770][ T36] audit: type=1400 audit(1758611004.623:28827): avc: denied { connect } for pid=3567 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.044662][ T3576] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 94.232069][ T645] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 94.343703][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 94.382080][ T645] usb 3-1: device descriptor read/64, error -71 [ 94.622082][ T645] usb 3-1: device descriptor read/64, error -71 [ 94.747079][ T645] usb usb3-port1: attempt power cycle [ 94.893457][ T3589] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1074'. [ 95.024956][ T36] audit: type=1326 audit(1758611005.623:28828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.3.1075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f379578eec9 code=0x0 [ 95.102286][ T645] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 95.123110][ T645] usb 3-1: device descriptor read/8, error -71 [ 95.152292][ C0] net_ratelimit: 15335 callbacks suppressed [ 95.152320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 95.170944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.183807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.196353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 95.209219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.221560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.234166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 95.246577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.258897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.271858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 95.273660][ T645] usb 3-1: device descriptor read/8, error -71 [ 95.402128][ T552] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 95.542111][ T645] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 95.562088][ T552] usb 2-1: Using ep0 maxpacket: 32 [ 95.569163][ T552] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.577676][ T645] usb 3-1: device descriptor read/8, error -71 [ 95.584572][ T552] usb 2-1: config 0 has no interface number 0 [ 95.590825][ T552] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.602468][ T552] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.612840][ T552] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 95.627047][ T552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.639275][ T552] usb 2-1: config 0 descriptor?? [ 95.713253][ T645] usb 3-1: device descriptor read/8, error -71 [ 95.743376][ T3607] 9pnet: Could not find request transport: fÇBdno=0x0000000000000003 [ 95.822537][ T645] usb usb3-port1: unable to enumerate USB device [ 95.831782][ T3612] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1084'. [ 96.258491][ T552] uclogic 0003:28BD:0094.0007: failed retrieving string descriptor #100: -71 [ 96.270277][ T552] uclogic 0003:28BD:0094.0007: failed retrieving pen parameters: -71 [ 96.278759][ T552] uclogic 0003:28BD:0094.0007: pen probing failed: -71 [ 96.286080][ T552] uclogic 0003:28BD:0094.0007: failed probing parameters: -71 [ 96.295588][ T552] uclogic 0003:28BD:0094.0007: probe with driver uclogic failed with error -71 [ 96.315975][ T552] usb 2-1: USB disconnect, device number 31 [ 96.409378][ T3618] 9pnet_fd: Insufficient options for proto=fd [ 96.420745][ T3618] tmpfs: Unsupported parameter 'mpol' [ 96.538931][ T36] audit: type=1400 audit(1758611007.133:28829): avc: denied { ioctl } for pid=3619 comm="syz.2.1088" path="socket:[18501]" dev="sockfs" ino=18501 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.571836][ T3622] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 96.588051][ T3622] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 96.818857][ T3633] __nla_validate_parse: 1 callbacks suppressed [ 96.818880][ T3633] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1093'. [ 96.880695][ T36] audit: type=1400 audit(1758611007.473:28830): avc: denied { create } for pid=3636 comm="syz.1.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.927422][ T3637] rust_binder: Write failure EFAULT in pid:540 [ 97.152092][ T552] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 97.312080][ T552] usb 2-1: Using ep0 maxpacket: 32 [ 97.318974][ T552] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 97.327655][ T552] usb 2-1: config 0 has no interface number 0 [ 97.334433][ T552] usb 2-1: config 0 interface 13 has no altsetting 0 [ 97.343435][ T552] usb 2-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82 [ 97.352872][ T552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.361183][ T552] usb 2-1: Product: syz [ 97.366323][ T552] usb 2-1: Manufacturer: syz [ 97.371189][ T552] usb 2-1: SerialNumber: syz [ 97.382341][ T552] usb 2-1: config 0 descriptor?? [ 97.390640][ T552] usb-storage 2-1:0.13: USB Mass Storage device detected [ 97.590318][ T3639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:561 [ 97.646954][ T3652] tipc: Enabling of bearer rejected, failed to enable media [ 97.807331][ T36] audit: type=1326 audit(1758611008.383:28831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3635 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7810b8eec9 code=0x7fc00000 [ 100.010798][ T339] usb 2-1: USB disconnect, device number 32 [ 100.162078][ C1] net_ratelimit: 38043 callbacks suppressed [ 100.162103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.162153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.168341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.180913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 100.192593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.204753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.216919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.228956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.241059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.253679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 100.834200][ T3658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 105.172086][ C0] net_ratelimit: 56105 callbacks suppressed [ 105.172110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 105.172202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.178509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.190363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.202456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.214519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.226745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 105.238409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.250737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.262603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.830663][ T3666] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1103'. [ 110.182118][ C1] net_ratelimit: 53445 callbacks suppressed [ 110.182143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.200291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.212817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.225338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.237842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.249997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.262347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.274513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.287181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.299592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.402033][ C1] sched: DL replenish lagged too much [ 115.192103][ C1] net_ratelimit: 54938 callbacks suppressed [ 115.192126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.192461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 115.198366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.210759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.222664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.234845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.246800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.259434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 115.271183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.283692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.202199][ C1] net_ratelimit: 57911 callbacks suppressed [ 120.202354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.202788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 120.208632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.221652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.233400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.245436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.257421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.269830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 120.281634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.293797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.945353][ T1704] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 125.212034][ C1] net_ratelimit: 54712 callbacks suppressed [ 125.212058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.212065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 125.212452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.218392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.230472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.242441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.254735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 125.266611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.278939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.290987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.222051][ C1] net_ratelimit: 57430 callbacks suppressed [ 130.222076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.222103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.228188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.240463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 130.252183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.264395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.276277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.288785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.300582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.313067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 130.752189][ T1704] usb 2-1: device descriptor read/64, error -110 [ 135.232023][ C1] net_ratelimit: 64799 callbacks suppressed [ 135.232047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.232127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.238096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.250168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.262113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.274351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 135.286422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.298505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.310378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.322349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.023398][ T1704] usb 2-1: device descriptor read/64, error -32 [ 140.242045][ C1] net_ratelimit: 81433 callbacks suppressed [ 140.242069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.242243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 140.248311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.260566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.273009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.285641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.297613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.310489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 140.322419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.334534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.344477][ T1704] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 145.252025][ C1] net_ratelimit: 83455 callbacks suppressed [ 145.252049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.252337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.258203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.270460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.282455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.294508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.306630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.319171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.331224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.343707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 146.002558][ T1704] usb 2-1: device descriptor read/64, error -32 [ 146.122237][ T3690] vcan0: entered allmulticast mode [ 146.294941][ T1704] usb 2-1: device descriptor read/64, error -32 [ 149.543654][ T1704] usb usb2-port1: attempt power cycle [ 149.947729][ T1704] raw-gadget.0 gadget.1: failed to queue disconnect event [ 150.262033][ C1] net_ratelimit: 82577 callbacks suppressed [ 150.262056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.262150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.268364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.281098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 150.292469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.304874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.316835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.328854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.340705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.352679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.315622][ T1704] raw-gadget.0 gadget.1: failed to queue reset event [ 151.415954][ T1704] raw-gadget.0 gadget.1: failed to queue resume event [ 152.911126][ T1704] raw-gadget.0 gadget.1: failed to queue reset event [ 154.585555][ T1704] raw-gadget.0 gadget.1: failed to queue resume event [ 154.815579][ T1704] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 155.272047][ C1] net_ratelimit: 79838 callbacks suppressed [ 155.272070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.272490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 155.282143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.290377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.302339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.314587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.326660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.338651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.351223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.363106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.388904][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 155.427317][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 155.436372][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 155.452307][ T1704] usb 2-1: device descriptor read/8, error -32 [ 155.598556][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 155.608928][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 155.637189][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 155.875281][ T1704] usb 2-1: device descriptor read/8, error -32 [ 158.113215][ T1704] raw-gadget.0 gadget.1: failed to queue suspend event [ 158.595420][ T1704] raw-gadget.0 gadget.1: failed to queue reset event [ 158.710803][ T1704] raw-gadget.0 gadget.1: failed to queue resume event [ 159.422994][ T1704] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 160.282020][ C0] net_ratelimit: 79321 callbacks suppressed [ 160.282045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 160.282065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.288109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.300112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.312269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.324558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.336866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.349074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.361729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 160.373005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.937288][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 160.980359][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 161.014256][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 162.403951][ T1704] usb 2-1: device descriptor read/8, error -32 [ 162.987753][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 163.302104][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 163.587496][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 163.595072][ T1704] usb 2-1: device descriptor read/8, error -32 [ 163.867183][ T1704] raw-gadget.0 gadget.1: failed to queue suspend event [ 164.073950][ T1704] usb usb2-port1: unable to enumerate USB device [ 165.292045][ C1] net_ratelimit: 79137 callbacks suppressed [ 165.292069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.292115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.298282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.310362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.322465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.334576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.346853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.359393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 165.370855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.383090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.302030][ C0] net_ratelimit: 82312 callbacks suppressed [ 170.302053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.302112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.308372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.320864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.333005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.345104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.357655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 170.369231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.381482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.393466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.312042][ C1] net_ratelimit: 82136 callbacks suppressed [ 175.312068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.312139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.318384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.332068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 175.342510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.354840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.366621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.378671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 175.390589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.403122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.066018][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.116552][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.143020][ T3694] bridge_slave_0: entered allmulticast mode [ 179.175564][ T3694] bridge_slave_0: entered promiscuous mode [ 179.292277][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.299371][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.322964][ T3694] bridge_slave_1: entered allmulticast mode [ 179.353683][ T3694] bridge_slave_1: entered promiscuous mode [ 180.322043][ C1] net_ratelimit: 83194 callbacks suppressed [ 180.322067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.322091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.328147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.340546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.352442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.364994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 180.376621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.388640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.400861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.413074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 180.673851][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.681134][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.713690][ T3695] bridge_slave_0: entered allmulticast mode [ 180.743820][ T3695] bridge_slave_0: entered promiscuous mode [ 180.843557][ T3696] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.850652][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.893427][ T3696] bridge_slave_0: entered allmulticast mode [ 180.992579][ T3696] bridge_slave_0: entered promiscuous mode [ 181.097838][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.122296][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.129438][ T3697] bridge_slave_0: entered allmulticast mode [ 181.193812][ T3697] bridge_slave_0: entered promiscuous mode [ 181.302333][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.309863][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.544828][ T3695] bridge_slave_1: entered allmulticast mode [ 181.593619][ T3695] bridge_slave_1: entered promiscuous mode [ 181.802379][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.810875][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.842979][ T3696] bridge_slave_1: entered allmulticast mode [ 181.863867][ T3696] bridge_slave_1: entered promiscuous mode [ 182.102863][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.110026][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.133448][ T3697] bridge_slave_1: entered allmulticast mode [ 182.162536][ T3697] bridge_slave_1: entered promiscuous mode [ 185.332049][ C1] net_ratelimit: 80928 callbacks suppressed [ 185.332074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.333654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.338194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.351024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 185.362762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.374833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.386763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.399133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 185.411465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.423875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.342039][ C1] net_ratelimit: 82513 callbacks suppressed [ 190.342063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.342108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.348151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.360151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 190.372128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.384287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.396332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.408201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.420475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.432464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.352221][ C1] net_ratelimit: 80754 callbacks suppressed [ 195.352245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.352566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 195.358445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.370995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.383041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.395393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 195.407236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.419315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.431801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.443727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.362046][ C0] net_ratelimit: 77952 callbacks suppressed [ 200.362070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 200.362124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.368121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.380233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.392535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.405211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.417235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.429383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.442188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 200.453904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.372039][ C1] net_ratelimit: 80053 callbacks suppressed [ 205.372062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.372626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 205.378137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.390291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.402380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.414525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 205.426494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.438529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.451143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.463136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.382007][ C0] net_ratelimit: 80879 callbacks suppressed [ 210.382031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 210.382031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.382137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.388214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.400274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.412267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 210.424347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.436209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.448197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.460160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.392019][ C1] net_ratelimit: 83913 callbacks suppressed [ 215.392043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.392078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.398202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.410435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.422423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.435108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 215.446512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.458546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.470595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.482683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 220.402014][ C1] net_ratelimit: 83625 callbacks suppressed [ 220.402039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.402621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 220.408468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.420639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.432902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.444787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 220.456782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.468766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.481129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.493044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.411992][ C1] net_ratelimit: 82274 callbacks suppressed [ 225.412017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.412049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.418091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.430144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.442089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.454717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 225.466318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.478533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.490612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.502984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 230.422026][ C1] net_ratelimit: 82073 callbacks suppressed [ 230.422050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.422591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 230.428170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.440294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.452226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.464146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 230.476080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.487927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.500260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.512412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.432025][ C1] net_ratelimit: 79539 callbacks suppressed [ 235.432050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.432558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 235.438198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.450441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.462543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.474585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 235.486435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.498509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.510639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.522991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.442000][ C1] net_ratelimit: 81420 callbacks suppressed [ 240.442024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.442115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 240.448166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.460371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.472428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.484416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.496789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.508952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.520767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.533436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 240.922478][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.929575][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.952244][ T3716] bridge_slave_0: entered allmulticast mode [ 240.983648][ T3716] bridge_slave_0: entered promiscuous mode [ 242.923901][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.931357][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.952949][ T3716] bridge_slave_1: entered allmulticast mode [ 243.052367][ T3716] bridge_slave_1: entered promiscuous mode [ 245.452014][ C1] net_ratelimit: 85381 callbacks suppressed [ 245.452039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.452146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 245.458106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.470294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.482233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.494276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 245.506349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.518272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.530255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.542127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.953783][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.960885][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.013479][ T3717] bridge_slave_0: entered allmulticast mode [ 247.032724][ T3717] bridge_slave_0: entered promiscuous mode [ 247.562251][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.569438][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.593346][ T3717] bridge_slave_1: entered allmulticast mode [ 247.622742][ T3717] bridge_slave_1: entered promiscuous mode [ 249.242067][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.249249][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.273057][ T3711] bridge_slave_0: entered allmulticast mode [ 249.303735][ T3711] bridge_slave_0: entered promiscuous mode [ 249.415120][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.443613][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.450765][ T3711] bridge_slave_1: entered allmulticast mode [ 249.492286][ T3711] bridge_slave_1: entered promiscuous mode [ 249.963676][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.970866][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.002727][ T3715] bridge_slave_0: entered allmulticast mode [ 250.035102][ T3715] bridge_slave_0: entered promiscuous mode [ 250.462004][ C1] net_ratelimit: 81421 callbacks suppressed [ 250.462026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.462086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.468209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.480155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.492203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.504417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.516452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.528920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 250.540849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.552914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.782743][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.789936][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.683619][ T3715] bridge_slave_1: entered allmulticast mode [ 252.882577][ T3715] bridge_slave_1: entered promiscuous mode [ 255.472047][ C1] net_ratelimit: 79609 callbacks suppressed [ 255.472071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.472240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 255.478164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.490242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.502206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.514744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 255.526751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.539539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.552029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.563859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.481970][ C0] net_ratelimit: 84466 callbacks suppressed [ 260.481995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.482021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.488131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.500170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.512406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.524298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.536988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.548793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.561047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.573038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.491990][ C1] net_ratelimit: 83014 callbacks suppressed [ 265.492013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.492314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.498113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.510800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.522922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.535015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 265.546997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.559139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.571414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.583711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 270.502003][ C1] net_ratelimit: 74001 callbacks suppressed [ 270.502028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.502032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.503169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.508261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.520240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.532484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.544458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 270.556633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.569107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.580807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.812898][ T37] INFO: task kworker/u8:5:1904 blocked for more than 122 seconds. [ 271.820961][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 272.004005][ T36] audit: type=1400 audit(1758611182.583:28832): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2972]" dev="pipefs" ino=2972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 272.182796][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.191537][ T37] task:kworker/u8:5 state:D stack:0 pid:1904 tgid:1904 ppid:2 flags:0x00004000 [ 272.546370][ T37] Workqueue: netns cleanup_net [ 272.551383][ T37] Call Trace: [ 272.554740][ T37] [ 272.557711][ T37] __schedule+0x1322/0x1df0 [ 272.562314][ T37] ? __sched_text_start+0x10/0x10 [ 272.567381][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 272.572303][ T37] ? kthread_data+0x54/0xc0 [ 272.577205][ T37] ? wq_worker_sleeping+0x69/0x260 [ 272.582395][ T37] ? __kasan_check_write+0x18/0x20 [ 272.587665][ T37] schedule+0xc6/0x240 [ 272.591813][ T37] schedule_timeout+0xb2/0x3a0 [ 272.596733][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 272.602196][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 272.608362][ T37] ? __smp_call_single_queue+0xd8/0x390 [ 272.613996][ T37] ? generic_exec_single+0x201/0x500 [ 272.619479][ T37] wait_for_common+0x359/0x630 [ 272.630779][ T37] ? wait_for_completion+0x40/0x40 [ 272.636061][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 272.641666][ T37] wait_for_completion+0x1c/0x40 [ 272.646697][ T37] rcu_barrier+0x415/0x530 [ 272.651244][ T37] netdev_run_todo+0x10e/0xcb0 [ 272.656105][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 272.661689][ T37] ? mutex_is_locked+0x1b/0x50 [ 272.666551][ T37] ? nexthop_net_exit_batch_rtnl+0x22d/0x290 [ 272.672612][ T37] ? br_net_exit_batch_rtnl+0x157/0x1a0 [ 272.678454][ T37] rtnl_unlock+0x12/0x20 [ 272.682780][ T37] cleanup_net+0x632/0xc70 [ 272.687234][ T37] ? __cfi_cleanup_net+0x10/0x10 [ 272.692241][ T37] ? kick_pool+0xb9/0x550 [ 272.696705][ T37] process_scheduled_works+0x7d5/0x1020 [ 272.702421][ T37] worker_thread+0xc58/0x1250 [ 272.707228][ T37] kthread+0x2c7/0x370 [ 272.711335][ T37] ? __cfi_worker_thread+0x10/0x10 [ 272.716619][ T37] ? __cfi_kthread+0x10/0x10 [ 272.721331][ T37] ret_from_fork+0x67/0xa0 [ 272.725866][ T37] ? __cfi_kthread+0x10/0x10 [ 272.730484][ T37] ret_from_fork_asm+0x1a/0x30 [ 272.735416][ T37] [ 274.073865][ T37] INFO: task syz.1.1107:3680 blocked for more than 124 seconds. [ 274.081837][ T37] Not tainted syzkaller #0 [ 275.512019][ C1] net_ratelimit: 77636 callbacks suppressed [ 275.512042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.512069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.518482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.530505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.542437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.554494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 275.566816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.578831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.590863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.603289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 278.840474][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.682385][ T37] task:syz.1.1107 state:D stack:0 pid:3680 tgid:3678 ppid:292 flags:0x00004006 [ 279.757509][ T37] Call Trace: [ 279.760864][ T37] [ 279.834176][ T37] __schedule+0x1322/0x1df0 [ 279.844885][ T37] ? __sched_text_start+0x10/0x10 [ 279.849990][ T37] ? __kasan_check_write+0x18/0x20 [ 279.855549][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 279.860801][ T37] ? __kasan_check_write+0x18/0x20 [ 279.865979][ T37] ? trace_contention_begin+0xc0/0xc0 [ 279.871428][ T37] schedule+0xc6/0x240 [ 279.875628][ T37] schedule_preempt_disabled+0x14/0x30 [ 279.881117][ T37] __mutex_lock+0x81e/0x1b50 [ 279.885865][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 279.892760][ T37] ? __kasan_check_write+0x18/0x20 [ 279.898252][ T37] ? __kasan_check_write+0x18/0x20 [ 279.903517][ T37] ? wake_up_q+0x10f/0x1c0 [ 279.907968][ T37] ? __mutex_unlock_slowpath+0x48a/0x740 [ 279.913681][ T37] ? mutex_unlock+0x240/0x240 [ 279.918385][ T37] __mutex_lock_slowpath+0xe/0x20 [ 279.923449][ T37] mutex_lock+0x102/0x1c0 [ 279.927803][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 279.932859][ T37] rcu_barrier+0x4d/0x530 [ 279.937201][ T37] ? __kasan_slab_free+0x6a/0x80 [ 279.942166][ T37] netdev_run_todo+0x10e/0xcb0 [ 279.947023][ T37] ? kvfree+0x39/0x50 [ 279.951025][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 279.956443][ T37] rtnl_unlock+0x12/0x20 [ 279.960792][ T37] tun_chr_close+0xc5/0x150 [ 279.965322][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 279.970445][ T37] __fput+0x1fe/0xa00 [ 279.974452][ T37] ? call_rcu+0x14/0x20 [ 279.978873][ T37] ____fput+0x20/0x30 [ 279.982888][ T37] task_work_run+0x1e3/0x250 [ 279.987491][ T37] ? __cfi_task_work_run+0x10/0x10 [ 279.992719][ T37] ? free_nsproxy+0x223/0x290 [ 279.997417][ T37] do_exit+0x9bc/0x2630 [ 280.001588][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 280.007424][ T37] ? __cfi_do_exit+0x10/0x10 [ 280.012039][ T37] ? raw_ioctl+0x15ee/0x3600 [ 280.016685][ T37] ? __kasan_check_write+0x18/0x20 [ 280.021817][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 280.026983][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 280.032555][ T37] do_group_exit+0x22a/0x300 [ 280.037156][ T37] ? __kasan_check_write+0x18/0x20 [ 280.042296][ T37] get_signal+0x139d/0x14f0 [ 280.046847][ T37] arch_do_signal_or_restart+0x96/0x720 [ 280.052872][ T37] ? __fget_files+0x2c5/0x340 [ 280.057564][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 280.063761][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 280.068629][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 280.074212][ T37] do_syscall_64+0x64/0xf0 [ 280.078640][ T37] ? clear_bhb_loop+0x50/0xa0 [ 280.083357][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 280.089361][ T37] RIP: 0033:0x7f7be7d8eacb [ 280.093810][ T37] RSP: 002b:00007f7be8beaf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.102366][ T37] RAX: 0000000000000000 RBX: 000000000000000a RCX: 00007f7be7d8eacb [ 280.110356][ T37] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a [ 280.118382][ T37] RBP: 00007f7be8bebfe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 280.126403][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.135167][ T37] R13: 00007f7be8beafb0 R14: 0000200000000b80 R15: 00007f7be8110320 [ 280.143285][ T37] [ 280.216902][ T37] NMI backtrace for cpu 1 [ 280.216932][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461 [ 280.216967][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.216981][ T37] Call Trace: [ 280.216989][ T37] [ 280.216998][ T37] __dump_stack+0x21/0x30 [ 280.217035][ T37] dump_stack_lvl+0x10c/0x190 [ 280.217065][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 280.217099][ T37] dump_stack+0x19/0x20 [ 280.217128][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 280.217153][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 280.217182][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 280.217207][ T37] ? sched_show_task+0x379/0x560 [ 280.217237][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 280.217263][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.217293][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.217323][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 280.217349][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 280.217378][ T37] watchdog+0xd8f/0xed0 [ 280.217418][ T37] ? __cfi_watchdog+0x10/0x10 [ 280.217448][ T37] ? __kasan_check_read+0x15/0x20 [ 280.217481][ T37] ? __kthread_parkme+0x138/0x180 [ 280.217502][ T37] ? schedule+0xc6/0x240 [ 280.217530][ T37] kthread+0x2c7/0x370 [ 280.217553][ T37] ? __cfi_watchdog+0x10/0x10 [ 280.217583][ T37] ? __cfi_kthread+0x10/0x10 [ 280.217606][ T37] ret_from_fork+0x67/0xa0 [ 280.217645][ T37] ? __cfi_kthread+0x10/0x10 [ 280.217668][ T37] ret_from_fork_asm+0x1a/0x30 [ 280.217705][ T37] [ 280.217714][ T37] Sending NMI from CPU 1 to CPUs 0: [ 280.419003][ C0] NMI backtrace for cpu 0 [ 280.419020][ C0] CPU: 0 UID: 0 PID: 339 Comm: kworker/0:2 Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461 [ 280.419043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.419055][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 280.419085][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5/0x70 [ 280.419111][ C0] Code: e8 50 3a 52 00 5b 5d e9 c9 11 09 04 cc cc cc cc cc cc cc cc cc b8 07 39 a2 7a 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 48 8b 45 08 65 48 8b 0c 25 80 eb 04 00 65 8b 15 bc 01 7f [ 280.419126][ C0] RSP: 0018:ffffc900000077b0 EFLAGS: 00000246 [ 280.419140][ C0] RAX: ffffffff836205ce RBX: 0000000000000000 RCX: ffff88810c755f00 [ 280.419153][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.419164][ C0] RBP: ffffc90000007950 R08: ffff88810c755f00 R09: 0000000000000002 [ 280.419176][ C0] R10: 0000000000000000 R11: ffffffff836202a0 R12: ffff88813eacca80 [ 280.419189][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88810c7b8000 [ 280.419202][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 280.419216][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.419228][ C0] CR2: 000055dc58160b98 CR3: 000000011ff54000 CR4: 00000000003526b0 [ 280.419245][ C0] Call Trace: [ 280.419250][ C0] [ 280.419259][ C0] ? macsec_handle_frame+0x41e/0x2ce0 [ 280.419285][ C0] ? __cfi_macsec_handle_frame+0x10/0x10 [ 280.419308][ C0] ? br_handle_frame+0x5a6/0xba0 [ 280.419330][ C0] ? __cfi_macsec_handle_frame+0x10/0x10 [ 280.419353][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 280.419372][ C0] ? ip6_mc_input+0x4f3/0x670 [ 280.419389][ C0] ? ip6_mc_input+0x4f3/0x670 [ 280.419404][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 280.419420][ C0] ? qdisc_run_end+0x120/0x120 [ 280.419437][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 280.419459][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 280.419475][ C0] ? ipv6_rcv+0xed/0x220 [ 280.419489][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 280.419504][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 280.419518][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 280.419539][ C0] process_backlog+0x3e5/0xae0 [ 280.419561][ C0] __napi_poll+0xd3/0x610 [ 280.419580][ C0] net_rx_action+0x584/0xce0 [ 280.419600][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 280.419619][ C0] ? sched_clock+0x44/0x60 [ 280.419640][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 280.419663][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 280.419683][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 280.419705][ C0] handle_softirqs+0x1ab/0x630 [ 280.419732][ C0] __do_softirq+0xf/0x16 [ 280.419752][ C0] do_softirq+0xa6/0x100 [ 280.419775][ C0] [ 280.419781][ C0] [ 280.419787][ C0] ? __cfi_do_softirq+0x10/0x10 [ 280.419811][ C0] ? _raw_spin_lock_bh+0x90/0x120 [ 280.419829][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 280.419847][ C0] ? __kasan_check_write+0x18/0x20 [ 280.419872][ C0] ? wg_peer_put+0xde/0x110 [ 280.419891][ C0] __local_bh_enable_ip+0x74/0x80 [ 280.419916][ C0] _raw_spin_unlock_bh+0x54/0x60 [ 280.419934][ C0] wg_packet_encrypt_worker+0x1441/0x14f0 [ 280.419961][ C0] ? __cfi_wg_packet_encrypt_worker+0x10/0x10 [ 280.419997][ C0] ? __schedule+0x132a/0x1df0 [ 280.420018][ C0] ? kick_pool+0xb9/0x550 [ 280.420036][ C0] process_scheduled_works+0x7d5/0x1020 [ 280.420065][ C0] worker_thread+0xc58/0x1250 [ 280.420084][ C0] kthread+0x2c7/0x370 [ 280.420101][ C0] ? __cfi_worker_thread+0x10/0x10 [ 280.420116][ C0] ? __cfi_kthread+0x10/0x10 [ 280.420132][ C0] ret_from_fork+0x67/0xa0 [ 280.420154][ C0] ? __cfi_kthread+0x10/0x10 [ 280.420171][ C0] ret_from_fork_asm+0x1a/0x30 [ 280.420199][ C0] [ 280.522660][ C0] net_ratelimit: 74438 callbacks suppressed [ 280.522687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.528135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.537299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.544658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.552851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 280.556242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.559185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.565024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.570980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:28:df:09:09:10, vlan:0) [ 280.575742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)